Last updated: 01.07.2026
This Privacy Policy explains how wieczyste.net ("we," "us," or "our") collects, uses, and protects personal data when you use our website and purchase digital goods. We operate in compliance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).
1. Data Controller
Kirchdorf AG, CH-5416, Switzerland
Email: support@wieczyste.net
2. Data We Collect
We collect the minimal data required to process transactions, ensure tax compliance, and deliver digital goods.
- Account & Identity: We collect your email address and account credentials to manage user authentication, secure your account, and provide access to your digital purchases.
- Transaction Data: We collect your purchase history, billing country, and digital ledger credits to fulfill orders and generate invoices. If you are a company, we collect additional data required to generate an invoice, such as your company name, address, and VAT/tax number.
- Tax Compliance: We collect your IP address and country of residence strictly to calculate EU One-Stop Shop (OSS) VAT and perform VAT validation (VIES) for companies.
- Technical Data: We collect standard web server logs, including your IP address, user agent, and timestamps, for security purposes, rate limiting, and system diagnostics.
3. How We Process Your Data
- Self-Hosted Identity Management: Authentication and user sessions are managed entirely on our self-hosted infrastructure. We do not use third-party identity providers (e.g., Google or Facebook login) or share your authentication data with external SaaS platforms.
- Tax Calculation: Your IP address and provided billing address are used dynamically at checkout to determine your location strictly for mandatory VAT calculations and OSS compliance.
- Digital Goods Delivery: Your email and account status are used to grant access to purchased digital credits and views.
4. Data Sharing and Third Parties
We do not sell personal data. Data is shared only with strictly necessary operational partners:
- Stripe (Payment Processing): We share secure payment tokens, billing addresses, and email addresses to process your payments. Full credit card numbers are handled directly by Stripe and never touch our servers.
- Government Authorities (Tax Compliance): We share aggregated or specific transaction records only when legally required to comply with EU OSS and local tax reporting obligations.
5. Data Retention
- Account Data: Retained as long as your account is active to maintain access to your digital purchases.
- Transaction & Tax Data: Retained for a minimum of 10 years to comply with Swiss and EU commercial and tax laws.
- Technical Logs: Rotated and deleted automatically after 180 days.
6. Security
All services, including the application backend, database, and identity management, are self-hosted on bare-metal, fully encrypted infrastructure located in Switzerland. We employ isolated container environments, encrypted databases, and transport layer security (TLS/SSL) for all communications.
7. Your Rights
Under the FADP and GDPR, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate data.
- Erasure (Right to be Forgotten): Request deletion of your account and non-legally mandated data.
- Data Portability: Receive your data in a structured, commonly used format.
To exercise these rights, contact support@wieczyste.net.
8. Cookies
We strictly use functional cookies required for session management, security, and cart functionality. We do not use marketing, tracking, or third-party analytics cookies. No cookie consent banner is required for these strictly necessary technical operations.
