Privacy policy

This statement sets out which data we process, for what purpose, who receives it and what rights you have. It follows the Swiss Data Protection Act.

Last updated: 5 September 2026

1. Controller

Goldboerse.ch AG, Schifflände 3, 4051 Basel, Switzerland.
Telephone +41 61 262 37 38, info@bidless.ch.

2. Which data we process

When you visit the website

Our host logs the technically necessary details of every request: shortened IP address, time, address requested, browser type and operating system. These logs serve operation and security and are deleted after a short time.

With an account

E-mail address, password in encrypted form, display name and, if given, company. Added to that are your saved pieces, purchases and any credit balance.

With a purchase

Billing and delivery address, the pieces bought, amount and time. Payment data such as card numbers is processed exclusively at our payment provider and never reaches our servers.

With an enquiry

What you write to us, together with your contact details, so that we can answer.

3. Why we process it

To provide the website and run it securely
To perform contracts: purchase, payment, shipping, returns
To keep your account and store your saved pieces
To answer enquiries
To meet legal obligations, such as the retention of business records
To detect and avert misuse

The basis is performance of the contract with you, our legitimate interest in secure operation, legal obligations or, where required, your consent.

4. Cookies

We set no cookies for advertising or analytics and embed no third-party measurement scripts. We use technically necessary cookies for signing in and to remember your choice of language.

Before you sign in, your saved pieces stay solely in your browser. That information reaches our servers only when you sign in and take the list over.

5. Who receives the data

We do not pass personal data to third parties for sale or advertising. For operations we work with carefully chosen providers who process only on our instruction:

Vercel Inc. runs the website. Delivery for Europe goes through data centres in Frankfurt am Main.
Supabase runs the database and the image storage, located in Frankfurt am Main.
The payment provider, which settles the payment and checks the means of payment.
The carrier, which delivers the consignment, with the address details needed for it.

Where data is processed outside Switzerland and the European Economic Area, we ensure adequate protection through the standard contractual clauses or equivalent safeguards.

6. How long we keep it

As long as the purpose requires, and beyond that as long as statutory retention periods prescribe. Business records relating to purchases are kept for ten years. We delete an account at your request, so far as no such period stands in the way.

7. Security

Transmission is encrypted throughout. Access to the database is restricted by row-level rules: you see your own data, not other people’s. Passwords are stored only as a hash, never in plain text.

8. Your rights

You have the right

to request information about the data we process,
to have incorrect data corrected,
to request erasure, so far as no obligation stands in the way,
to object to the processing,
to receive your data in a common format,
to withdraw a consent at any time.

Write to info@bidless.ch for this. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner.

9. Changes

We adapt this statement when the processing changes. The version published here, bearing the date given above, applies.

This translation is provided for understanding. In case of discrepancies, the German version applies.