Privacy
Privacy policy
We process personal data only to the extent necessary for online ordering, payment handling, security, support, quality assurance, and legal obligations.
For the website and advertising measurement described below, Google may receive technical data, including network information such as your IP address. How Google uses data from websites. You can change your choice at any time through “Cookie settings” in the footer.
Data processed
This includes contact and identification details, address data, order status, uploaded documents, the digital signature, payment references, and technical security data such as IP address and timestamps.
Purposes
Your data is used to process and securely provide your debt-register extract. This includes identifying the responsible debt-enforcement office, preparing and processing your request, checking submitted documents for completeness and technical security, confirming payment, securely providing the documents you ordered, and handling support requests where necessary.
Payment references and a transaction status limited to what is necessary are also used to prepare refunds securely, approve them under the four-eyes principle, verify them with the payment provider, and prevent duplicate refunds. Payment-provider references are not displayed in the public or protected order status.
We do not sell order, identity-document or debt-enforcement data, and we do not use it to create credit profiles.
Mandate, authorization and corrections
To evidence your mandate, we retain the confirmed declaration, its language and version, the confirmation time, the signatory’s identity and a technical integrity hash. Your signature is associated with the specific order and confirmed details. The competent office receives the declaration and necessary identity and legitimate-interest evidence through eSchKG, with a clearly labelled translation where needed.
Following a rejection, an authorized team member reviews the response and available evidence. Within the mandate actually given, retained documents may accompany a corrected new inquiry. The original confirmation time and provenance remain traceable; later additions are not represented as a new signature. This confirmation does not authorize marketing. The retention periods below apply; a correction does not justify indefinite retention.
Recipients
Depending on the step, data may be transmitted to the secure processing service, the responsible authority, Datatrans, and the hosting, security, email, and support providers required to complete the order.
Order communications through WhatsApp and other channels
When you submit the order and accept the terms, we record ALLOWED for the normalised mobile number, our partner context, and the CASE_LIFECYCLE purpose together with the policy version, evidence reference, and timestamp. This enables operational information about payment, processing, security, and delivery by email, WhatsApp, SMS, telephone, or postal mail. It does not authorise marketing. For WhatsApp delivery, the phone number and message-related metadata are transmitted to the WhatsApp service; processing abroad may occur subject to applicable data-protection safeguards. STOP ends and START reactivates WhatsApp messages.
Cookies and local storage
Essential cookies and local browser storage are required for security, order progress, payment return and language settings. On this Swiss ordering service, non-personalised Google analytics and ad measurement are active by default unless you object. “Only essential” disables optional cookies and switches to the limited cookieless measurement described below; “Accept all” additionally permits the email hash matching described below. You can change your choice at any time through “Cookie settings” in the footer.
Google Analytics, Google Ads, and Tag Manager
When measurement is permitted, we may also use campaign, ad-group and ad identifiers present in the landing URL, and Google session attributes (campaign source, campaign identifier, visit time and technical browser information). These help match confirmed purchases when a click identifier is unavailable. We do not retain full landing URLs, referrers or form contents for this purpose. These attribution records are valid for at most 72 hours from collection, including across tabs on the same website. Expired local records are deleted on the next access. Refusal clears this local attribution; expired server-side attribution is removed by scheduled cleanup. Campaign hints are not evidence of a Google-confirmed conversion.
Unless you object, non-personalised Google analytics and ad measurement are active on this Swiss ordering service. Google Consent Mode v2 permits analytics and advertising storage and transmission of technical measurement data; ad personalisation remains denied. We record this as automatic measurement permission under our opt-out policy, not as a click on “Accept all”. Google may receive network information such as your IP address. Order access credentials and private URL parameters are not passed to measurement. “Only essential” stops identifier-based measurement and pending identifier-based reports for an order accessible in that browser. It cannot recall signals already transmitted.
We use Google Analytics 4 and Google Ads to measure reach, manage campaigns and improve the order journey. Technical Google click, browser and session identifiers may be associated with an order. After verified payment capture, we report a random transaction identifier, purchase time, CHF amount and technical item identifier, including from our server if you do not return after payment. Automatic order identifiers are removed within 72 hours; technical retries do not extend this period. Customer Match, personalised advertising and purchaser remarketing remain disabled.
Only after you expressly select “Accept all” may we additionally send a normalised SHA-256 hash of the purchaser’s email address to Google for enhanced conversions. Hashing is pseudonymisation, not anonymisation. Without this selection there is no email matching. We never send the affected person’s details, telephone numbers, names, addresses, birthdates, payment credentials, identity documents, signatures or results.
Google may process measurement data outside Switzerland, including in the USA, under the applicable data-protection safeguards. Our recovery queue accepts eligible events for up to 72 hours; completed queue records are deleted after 30 days. You can change your choice through “Cookie settings” in the footer. Withdrawal stops future identifier-based collection and pending identifier-based reporting for an order accessible in that browser; already transmitted events cannot be recalled by the cookie control. Contact support@stn.ch for an order-specific privacy request.
After a new “Only essential” choice under the updated notice, limited Google signals without optional cookies remain active, including confirmed purchases. All four Google consent signals remain denied. This browser path sends a random transaction identifier, amount, currency, technical item identifier and sanitised page details; Google also receives technical network data. No click, browser or session identifiers from this path are retained against the order, and no email hashes or form data are sent. These signals support aggregate measurement and modelling, not guaranteed individual attribution. Earlier refusals remain effective until you make a new choice under the updated notice. Past purchases are not backfilled. Without a return after payment, this browser path cannot report the purchase.
Retention
Incomplete orders and related uploads are retained for no more than 48 hours so that entry can be continued and technically secured. For completed orders, high-risk uploads and private processing state are normally deleted after 30 days, operational event context after 90 days, and the remaining order categories required for fulfilment, secure access, support, evidence, security, and legal-rights handling no later than 365 days.
Payment and accounting records are separated and may be kept longer where applicable law requires it. A documented legal hold may temporarily suspend deletion of the affected category. Data is deleted or anonymised when no purpose, retention duty, or legal hold remains.
Your rights
You may request access, correction, deletion, or restriction where no legal or contractual reason prevents it. Contact: support@stn.ch.