This page explains how TBON GmbH ("TBON", "we") handles personal data: on tbon.ch, and when you buy and use our products and services. We keep it simple: we collect only what we need, and we only measure website traffic if you agree.
1 · Who we are
TBON GmbH, Schaffhauserstrasse 126, 8302 Kloten, Switzerland. Data controller. Contact: Email us.
2 · What this site collects
Browsing tbon.ch sets no cookies by default. If you accept analytics (see below) we measure anonymous, aggregated traffic. If you send us the contact or demo form, we receive the data you enter to reply to you — nothing more.
3 · Google Analytics
Only if you click “Accept”, we load Google Analytics 4 (Google Ireland Ltd.) to understand how the site is used — pages viewed, device type, approximate region. Your IP address is anonymised. Google acts as our processor; some data may be processed in the USA under the EU Standard Contractual Clauses. Without your consent, Analytics is never loaded and no cookies are set.
4 · Contact & demo forms
Name, email, company and message you submit are sent to us by email (via Resend) so we can answer. We don’t use them for advertising and don’t share them, beyond the tools needed to deliver the message.
5 · Customers, orders & payments
When you buy a subscription or commission a project, we process the data needed to run the contract: names and business contact details of your team, billing address, company ID, orders, invoices, payment records and our correspondence. Legal basis: the contract and our legal obligations (Swiss FADP; EU GDPR Art. 6(1)(b) and (c)). Accounting records and invoices are kept for 10 years, as Swiss law requires (Art. 958f CO).
Online card payments are handled by Stripe (Stripe Payments Europe Ltd., Ireland, and its affiliates). Card details go directly to Stripe and never reach our servers: we only see the payment status, the amount and the last digits of the card. Stripe also processes data under its own responsibility, for example to prevent fraud and comply with financial regulations: see stripe.com/privacy.
6 · Service providers & transfers abroad
We work with a small number of providers, bound by contract to protect your data: Vercel Inc. (hosting of the website and apps), Supabase Inc. (databases of our software), Resend (system emails), OVHcloud (mailboxes), Google Ireland Ltd. (Analytics, only with your consent) and Stripe (payments). Some of them process data in the USA: these transfers rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework or on standard contractual clauses.
Data that our clients enter into our software (for example the leads collected by ShowroomOS or by a dealer website, or the campaign data in Volta) belongs to the client. For that data the client is the controller, and TBON processes it only on the client’s instructions, under a data processing agreement (FADP Art. 9, GDPR Art. 28).
7 · Legal basis & retention
Analytics runs on your consent (Swiss FADP / EU GDPR Art. 6(1)(a)); handling your enquiry rests on our legitimate interest in replying. Analytics data follows Google’s retention settings; enquiry emails are kept only as long as needed to deal with your request.
8 · Your rights & choices
You can ask to access, correct or delete your data, and withdraw consent at any time. Use the button below to change your cookie choice.
To exercise your rights, write to us using the details in section 1. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with your national supervisory authority.
9 · Changes
We may update this page as the site evolves. The date at the top always reflects the current version.