Privacy policy

Privacy Policy

Kurth Engineering GmbH – ketools.shop
Last updated: September 8, 2026

1. Controller

The entity responsible for processing personal data in connection with this website and our online shop is:

Kurth Engineering GmbH
Rainstrasse 30
2553 Safnern
Switzerland

Company Identification Number: CHE-161.290.359

Website: ketools.shop

Below, Kurth Engineering GmbH is also referred to as “we”, “us” or “Kurth Engineering”, and visitors and customers are referred to as “you”.

2. Scope

This Privacy Policy explains how we process personal data when you:

visit our website ketools.shop;
order products through our online shop;
create or use a customer account;
contact us;
subscribe to our newsletter or other marketing information;
or otherwise use our services.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data in particular in accordance with the Swiss Federal Act on Data Protection (FADP). Where the European Union General Data Protection Regulation (GDPR) applies to a specific processing activity, we additionally take its requirements into account.

3. Personal Data We Process

Depending on how you use our website and services, we may in particular process the following categories of personal data:

Contact data

This includes in particular:

first and last name;
company;
billing and delivery address;
email address;
telephone number.

Order and contract data

This includes in particular:

products ordered;
order number;
time of order;
delivery and billing information;
purchase price;
payment status;
returns, complaints and warranty cases;
previous orders and customer history.

Payment data

When an order is placed, the data required for payment processing is processed by the payment service providers used for the selected payment method.

This may include in particular:

selected payment method;
payment amount;
payment status;
partial information about the payment instrument used;
data used for fraud and risk checks.

Complete credit-card information is generally processed directly by the respective payment service provider and is not stored by us.

Customer account data

If you use a customer account, we may process in particular:

contact data;
customer account ID;
order history;
saved addresses;
account settings and preferences.

Communication data

When you contact us, we process the information you provide, in particular:

name;
email address;
telephone number;
content of your inquiry;
any attachments;
previous correspondence.

Technical and usage data

When you visit our website, technical information may be collected automatically, in particular:

IP address;
date and time of access;
browser used;
operating system;
device type;
pages accessed;
source and referring URL;
language settings;
information about use of our website and online shop.

Cookies and comparable technologies may be used to collect this data.

4. Purposes of Processing

We process personal data in particular for the following purposes:

Processing orders

We use your personal data to:

receive your order;
process payments;
deliver products;
inform you about your order;
prepare invoices and order confirmations;
process returns, complaints and warranty cases.

Customer service

We process personal data to:

answer questions;
provide technical or commercial advice;
process product inquiries;
provide customer service;
resolve problems relating to orders.

Operating and improving the online shop

We may use personal and usage data to:

make our website technically available;
identify errors and malfunctions;
ensure the security of our online shop;
improve usability;
develop our product range and services;
perform statistical analyses.

Security and fraud prevention

Personal data may be processed to:

identify fraudulent orders;
prevent misuse of our online shop;
assess payment risks;
protect our systems and customer accounts;
comply with statutory and official requirements.

Marketing

If you have consented or if permitted by law, we may use your contact details to send you information about:

products;
new products;
offers;
promotions;
or other information from Kurth Engineering.

You can unsubscribe from marketing emails at any time. A corresponding unsubscribe link is included in our marketing emails.

Order confirmations, invoices, shipping information and other communications required for performance of the contract are sent independently of any marketing unsubscribe.

5. Legal Bases Where the GDPR Applies

Where the GDPR applies, we process personal data in particular on the following legal bases:

performance of a contract and pre-contractual measures, in particular for processing orders;
legal obligations, in particular commercial, tax and accounting obligations;
legitimate interests, in particular in the secure and economically efficient operation of our online shop, fraud prevention, customer service and improvement of our services;
consent, in particular for certain marketing or tracking measures.

Consent that has been granted may be withdrawn at any time with effect for the future.

6. Shopify

Our online shop is operated using the Shopify e-commerce platform.

Shopify provides us in particular with the technical infrastructure for:

the online shop;
product management;
the shopping cart;
customer accounts;
orders;
checkout;
parts of payment processing;
security and fraud-prevention functions.

As a result, personal data is transmitted to and processed by Shopify when the online shop is used.

For merchants and customers in Switzerland, data may in particular be processed by Shopify group companies in Ireland, Canada and the United States of America and by service providers used by Shopify.

According to Shopify, measures are taken to safeguard international data transfers in accordance with applicable data protection laws.

Further information about data processing by Shopify can be found in Shopify's privacy information.

7. Payment Service Providers

For payment processing, we use the payment methods and payment service providers offered at checkout.

The personal data required to process payment is transmitted to the selected payment service provider or collected directly by it.

Data may be processed in particular for:

payment processing;
identity verification;
fraud prevention;
risk assessment;
compliance with legal obligations.

The privacy terms of the payment service provider used also apply to the processing of your payment data.

The payment methods available are shown before the order is completed at checkout.

8. Shipping and Logistics

To fulfill your order, we may disclose the necessary personal data to shipping, transport or logistics companies used by us.

As a rule, only the data required for delivery is transmitted, in particular:

name;
delivery address;
telephone number where applicable;
email address where applicable;
shipment information.

The data is used only to the extent necessary to carry out and track the delivery.

9. Cookies and Similar Technologies

Our website uses cookies and comparable technologies.

Cookies are small files that may be stored on your device or associated with your browser.

We distinguish in particular between:

Necessary cookies

These are required for our online shop to function properly.

They are used, for example, for:

the shopping cart;
checkout;
customer accounts;
language settings;
security functions;
session management.

Analytics and functional cookies

These may be used to understand how visitors use our website and to improve functionality and usability.

Marketing and tracking technologies

Where corresponding services are used, cookies, pixels or comparable technologies may be used to measure the effectiveness of advertising or to make advertising more relevant.

Where consent is required, such technologies are used only after you have given your consent.

You can change your selection using the privacy settings or cookie banner provided on our website.

You can also delete or block cookies through your browser settings. This may, however, restrict individual functions of the online shop.

10. Shopify Analytics and Network Services

Shopify provides various functions for analyzing, improving and securing online shops.

Depending on the Shopify functions we activate, technical device, usage, order and interaction data may be processed.

Where non-essential analytics, personalization or advertising functions require consent, we use them in accordance with the privacy settings selected on our website.

11. Disclosure of Personal Data

We do not sell your personal data.

We disclose personal data only where this is necessary for our business activities, required by law or otherwise permitted.

Recipients may include in particular:

Shopify and companies in the Shopify group;
payment service providers;
banks and financial service providers;
shipping and logistics companies;
IT, hosting and cloud service providers;
analytics and security service providers;
communications and email service providers;
accounting, fiduciary or tax advisers;
authorities and courts where a legal obligation exists.

Service providers generally receive only the personal data they require to perform their respective tasks.

12. Disclosure of Personal Data Abroad

When our website and service providers are used, personal data may also be processed outside Switzerland.

In connection with Shopify, this concerns in particular data processing in:

member states of the European Union or European Economic Area, in particular Ireland;
Canada;
the United States of America.

Other countries may be involved where a subcontractor used by us or by one of our service providers operates there.

Where data is transferred to countries without a level of data protection recognized as adequate by the Swiss Federal Council, we provide appropriate safeguards where required. These may include recognized standard contractual clauses and additional safeguards.

Exceptions remain reserved where cross-border data transfer is permitted by law, for example where it is necessary to perform a contract.

13. Retention Period

We retain personal data only for as long as required for the respective processing purpose or for as long as statutory retention obligations apply.

Order, invoice and business data may in particular be retained for ten years due to statutory retention obligations.

Other data is deleted or anonymized as soon as:

the purpose of processing no longer applies;
no statutory retention obligation remains;
and there are no overriding legitimate interests in continued retention.

Technical data and cookies have different storage periods depending on their purpose.

14. Data Security

We take appropriate technical and organizational security measures to protect personal data against:

loss;
unauthorized access;
misuse;
alteration;
unauthorized disclosure.

Our website and the Shopify checkout use encrypted connections.

Despite appropriate security measures, absolute security cannot be guaranteed when information is transmitted or stored over the internet.

15. Your Rights

Depending on the applicable data protection law, you may in particular have the following rights:

information about the personal data we process about you;
correction of inaccurate or incomplete personal data;
deletion of personal data where no legal or other permissible grounds for continued retention exist;
release or transfer of certain personal data where the statutory requirements are met;
withdrawal of consent with effect for the future;
where applicable, restriction of or objection to certain processing activities.

To exercise your rights, you can contact us at:

kurth.engineering@bluewin.ch

We may request appropriate proof of your identity before processing a request.

Statutory restrictions on these rights remain reserved.

16. Rights for Persons in the European Economic Area

Where the GDPR applies, you may additionally have the rights under the GDPR to:

access;
rectification;
erasure;
restriction of processing;
data portability;
object;
withdraw consent.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for you.

17. Data Protection Authority in Switzerland

The competent authority for data protection matters in Switzerland is:

Federal Data Protection and Information Commissioner (FDPIC)
Bern
Switzerland

We recommend contacting us directly first with questions or complaints so that we can review your concern.

18. Links to Third-Party Websites

Our website may contain links to websites or services operated by third parties.

The respective operators are responsible for the processing of personal data on those external websites.

We recommend reviewing the privacy policies of the respective providers.

19. Minors

Our online shop is not specifically directed at children or minors.

We do not knowingly collect personal data from children unless this is necessary for the products and services offered or otherwise permitted by law.

If you believe that personal data of a child has been provided to us without appropriate authorization, you may contact us.

20. Changes to This Privacy Policy

We may amend this Privacy Policy at any time, in particular if:

our data processing activities change;
new services or functions are used;
legal requirements change;
new service providers are used.

The current version published on ketools.shop is authoritative.

For material changes, we may additionally provide notice in an appropriate manner.

21. Contact

For questions about data protection, processing of your personal data or exercising your rights, please contact: