Data Controller
Nova Marketing SA - via Livio 26, CH-6830 Chiasso - info@novamarketing.ch
Data Collected
We collect first name, last name, email, phone, country, address and any customer notes provided through checkout.
Purposes
Data is processed to manage the order request, service communications, the optional newsletter subject to consent and tax/accounting obligations.
Legal Basis
Contract performance, legal obligations, consent of the data subject for newsletter purposes.
Data Subject Rights
Access, rectification, erasure, restriction, opposition and portability. To exercise your rights: info@novamarketing.ch.
Data controller
The controller of personal data pursuant to art. 5 lit. j nFADP and art. 4 para. 7 GDPR is:
Nova Marketing SA
Via Livio 26
6830 Chiasso — Ticino, Switzerland
Email: verkauf@novamarketing.ch · info@novamarketing.ch
Phone: +41 (0)91 682 59 82
Data categories and legal bases
The data processed includes:
- Authentication data (email, password hash) — restricted to the admin panel. Legal basis: performance of a contract (art. 31 para. 2 lit. a nFADP / art. 6 para. 1 lit. b GDPR).
- Contact data (name, email, phone, message) submitted via public forms. Legal basis: consent and legitimate interest in responding to requests (art. 31 para. 2 lit. c/d nFADP).
- Newsletter subscriptions Legal basis: explicit consent (art. 31 para. 1 nFADP / art. 6 para. 1 lit. a GDPR). Revocable at any time via the link in each email.
- Google Analytics data: pages viewed, products viewed, searches performed (query text), device type, browser and operating system, screen resolution, referral source (referrer), approximate geographic location (country/city derived from IP, which Google does not store). Cookie-based browsing identifier (_ga). Legal basis: explicit consent (opt-in) via cookie banner.
- Hosting technical logs (IP, user-agent, request path) for infrastructure security. Legal basis: legitimate interest in service security.
- Product images (Google Cloud Storage) Legal basis: performance of the supply contract.
International data transfers
Some of our providers have infrastructure outside Switzerland/EU. In particular:
- Google LLC (hosting) — servers on Google Cloud, region europe-west3 (Frankfurt, Germany, EU): hosting data resides in the European Union. Processing by Google is governed by the Google Cloud Data Processing Addendum and the Standard Contractual Clauses.
- Google LLC (Google Analytics) — data collected via Google Analytics 4 may be transferred to the United States, based on the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses (SCCs). The IP address is not stored; Consent Mode v2 and ad data redaction are enabled.
- Google LLC (reCAPTCHA anti-bot) — tokens are validated via global Google endpoints. The data transmitted is limited to the token and IP address for the duration of the verification only.
Retention period
- Contact data/requests: 24 months from the last exchange.
- Newsletter subscriptions: until consent is withdrawn by the user.
- Orders and administrative data: 10 years (Swiss legal obligations).
- Technical logs: 90 days.
- Google Analytics data: 14 months.
Your rights
At any time you can exercise the rights recognised by arts. 25–32 nFADP and arts. 15–22 GDPR:
- access to your personal data;
- rectification of inaccurate data;
- erasure ('right to be forgotten');
- restriction of processing;
- data portability;
- objection to processing;
- withdrawal of consent (without prejudice to the lawfulness of processing carried out before withdrawal).
To exercise these rights, write to verkauf@novamarketing.ch or to info@novamarketing.ch. You also have the right to contact the Federal Data Protection and Information Commissioner (FDPIC) to lodge a complaint.
Cookies and tracking technologies
For details on the cookies used and to modify your preferences, please consult our Cookie policy.
Last updated: 2026-05-17
