Privacy Policy
smair GmbH
UID CHE-482.320.625 Switzerland
This Privacy Policy explains how smair GmbH (“smair”, “we”, “us”) collects and processes personal data. We process personal data in accordance with the Swiss Federal Act on Data Protection of 25 September 2020 (revised FADP / revDSG, in force since 1 September 2023) and its Ordinance. Where we offer goods or services to, or monitor the behaviour of, persons in the European Union / EEA, we additionally process personal data in accordance with the EU General Data Protection Regulation (GDPR). Where these two frameworks differ, we apply the standard that offers the higher level of protection.
1. Overview of data protection
General
The following information provides an overview of what happens to your personal data when you visit our website or otherwise interact with us. “Personal data” means any information relating to an identified or identifiable natural person. Further detail is set out in the sections below.
Who is responsible for processing your data?
The controller for the processing of personal data described here is smair GmbH. Our contact details are set out in Section 2 and in the “Imprint / Information Required by Law” section of our website.
How do we collect your data?
We collect data that you provide to us directly — for example when you complete our contact form, place an order, register for an account or correspond with us. In addition, our IT systems automatically record certain technical data when you visit our website (e.g. browser type, operating system, and the time of access).
What do we use your data for?
Part of the data is collected to ensure the error-free and secure provision of the website. Other data is used to perform contracts, respond to enquiries, comply with legal obligations and, where applicable and permitted, to analyse how our website is used.
What rights do you have?
You have the right, at any time and free of charge, to obtain information about your stored personal data, its origin and recipients, and the purpose of the processing. You also have the right to request that your data be corrected, deleted or restricted, to object to processing, and to receive certain data in a portable format. You may contact us at any time using the details in Section 2, and you have the right to lodge a complaint with the competent supervisory authority.
2. General information and mandatory information
Data protection
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this Privacy Policy. Please note that data transmission over the Internet (for example, by email) can have security gaps; complete protection of data against access by third parties is not possible.
Controller
smair GmbH
Lachenstrasse 15A
8500 Frauenfeld
Switzerland
Phone: +41 79 173 23 14
Email: contact@smair.ch
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Legal bases for processing
Under the revised FADP, the processing of personal data by private persons is lawful where it complies with the principles of lawfulness, good faith, proportionality and purpose limitation; where a justification is required, we rely in particular on your consent, the performance of a contract, an overriding private or public interest, or a legal basis. Where the GDPR applies, we process personal data on the following legal bases: your consent (Art. 6(1)(a) GDPR); performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR); compliance with a legal obligation (Art. 6(1)(c) GDPR); and our legitimate interests (Art. 6(1)(f) GDPR). The relevant basis is indicated in the individual sections below.
Storage period
We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as we are required to retain it under mandatory statutory obligations — in particular the ten-year retention obligation for business and accounting records under the Swiss Code of Obligations. Once the purpose ceases and no retention obligation applies, the data is deleted or anonymised.
Transfers of data abroad
As we conduct international business and use service providers located abroad, personal data may be transferred to and processed in countries outside Switzerland and the EU/EEA. Where a country does not provide an adequate level of data protection as recognised by the Swiss Federal Council (or, under the GDPR, by the European Commission), we ensure appropriate safeguards — in particular the Swiss and/or EU Standard Contractual Clauses — or rely on a statutory exception, such as your explicit consent or the performance of a contract. Transfers to recipients in the United States that are certified under the Swiss–U.S. Data Privacy Framework are regarded as providing an adequate level of protection.
Revocation of your consent
Where processing is based on your consent, you may withdraw that consent at any time by sending us an informal notification (e.g. by email). The lawfulness of any processing carried out before the withdrawal remains unaffected.
Right to object
Where the GDPR applies and your data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, including profiling. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where your data is processed for direct marketing, you may object at any time; we will then no longer use the data for that purpose.
Right to lodge a complaint
If you consider that the processing of your personal data infringes data protection law, you may lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern (www.edoeb.admin.ch). Where the GDPR applies, you may also lodge a complaint with a supervisory authority in the EU member state of your residence, place of work or the place of the alleged infringement.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. Where you request the direct transfer of the data to another controller, this will be done only where technically feasible.
Access, rectification, erasure and restriction
Within the scope of the applicable law, you have the right to obtain information about your stored personal data, its origin and recipients and the purpose of the processing, and to have such data corrected, deleted or its processing restricted. You may contact us at any time using the details above.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix in the address bar and the lock icon in your browser. When encryption is active, the data you transmit to us cannot be read by third parties.
Objection to promotional emails
We object to the use of contact details published under our statutory imprint obligation for the purpose of sending promotional or informational material that we have not expressly requested. We reserve the right to take legal action in the event of the unsolicited sending of advertising, for instance by spam email.
3. Data collection on our website
Cookies and consent management
Our website uses cookies and comparable technologies. Cookies are small text files stored on your device by your browser; they cause no damage and contain no viruses. Some cookies are strictly necessary for the operation of the website or to provide functions you have requested; these are used on the basis of our legitimate interest in a technically reliable and optimised website. Cookies that are not strictly necessary — for example for analytics or marketing — are only set with your consent, which you provide via our cookie banner and can withdraw at any time with effect for the future. You can also configure your browser to notify you about the placing of cookies, to accept them only in specific cases, or to delete them automatically when the browser is closed. Disabling cookies may limit the functionality of this website.
Server log files
The provider of this website automatically collects and stores information in server log files, which your browser transmits to us automatically. This information comprises the browser type and version, the operating system used, the referrer URL, the host name of the accessing device, the time of the server request and the IP address. This data is not merged with other data sources. It is processed on the basis of our legitimate interest (and, where the GDPR applies, Art. 6(1)(f) GDPR) in the technically error-free presentation and optimisation of our website; recording these log files is necessary for that purpose.
Contact form, email and telephone
If you contact us via our contact form, by email or by telephone, the details you provide will be stored by us in order to handle your enquiry and any follow-up questions. We do not share this information without your consent. This data is processed on the basis of your consent and/or, where your enquiry relates to a contract or pre-contractual measures, on that basis. The data remains with us until you ask us to delete it, withdraw your consent, or the purpose for storing it no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory provisions — in particular retention periods — remain unaffected.
Registration on this website
You may register on our website to use additional functions. We use the data entered at registration solely for the purpose of the respective service you have registered for. The required information must be provided in full, otherwise we will decline the registration. We process registration data on the basis of your consent, which you may withdraw at any time. The data is stored for as long as you remain registered and is deleted thereafter, subject to mandatory statutory retention obligations.
Processing of customer and contract data
We collect, process and use personal data to the extent necessary to establish, perform or amend our contractual relationships (inventory data), on the basis of the performance of a contract or pre-contractual measures. We process data concerning the use of our website (usage data) only where necessary to enable you to use our services or to invoice for them. Customer data is deleted upon completion of the order or termination of the business relationship, subject to mandatory statutory retention obligations.
4. Plug-ins and tools
Note: the following describes third-party services commonly embedded on websites. Please retain only those services that smair actually uses, and remove the others.
Web hosting
Our website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. Our host processes this data only to provide the hosting service and on the basis of a data processing agreement concluded with us. The processing is based on our legitimate interest in the reliable provision of our website. Provider: Siteground & Odoo.
YouTube (extended data protection mode)
Our website may embed videos from YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in the extended data protection mode, which according to Google means that no information about visitors is stored before they play a video. When you start a video, a connection to YouTube's servers is established, informing YouTube which of our pages you have visited, and YouTube may set cookies on your device. If you are logged into your YouTube account, YouTube can associate your browsing behaviour with your profile; you can prevent this by logging out. The use of YouTube serves the appealing presentation of our online content and is based on our legitimate interest. Further information: Google's privacy policy at policies.google.com/privacy.
Google Fonts
To display fonts uniformly, this website may use web fonts provided by Google. Where fonts are loaded from Google's servers, your browser establishes a connection to those servers, and Google may learn that our website was accessed via your IP address. This is based on our legitimate interest in a uniform presentation of our content. To avoid transferring your data to Google, we recommend and — where indicated — use locally hosted fonts. Further information: developers.google.com/fonts and policies.google.com/privacy.
Google Maps
This website may use the mapping service Google Maps, provided by Google. To enable the map features, your IP address is processed and, as a rule, transmitted to a Google server (which may be located in the United States). We use Google Maps to present our content attractively and to make our locations easy to find, based on our legitimate interest. Further information: policies.google.com/privacy.
Google reCAPTCHA
We may use Google reCAPTCHA to determine whether input on our website (e.g. in a contact form) is made by a human or by an automated program. reCAPTCHA analyses the visitor's behaviour based on various parameters (e.g. IP address, time spent on the site, cursor movements). This analysis runs automatically in the background, and the data is forwarded to Google. The processing is based on our legitimate interest in protecting our website against misuse and spam. Further information: policies.google.com/privacy.
smair GmbH
Version 1.0 – last updated 18-September-2026