Privacy Policy (Backdoor Shop GmbH)
Version / Status: 23.12.2025
1. Responsible Entity
Responsible for processing your personal data is:
Backdoor Shop GmbH
Dorfstrasse 164
3818 Grindelwald
Switzerland
Email: info@backdoorshop.ch
(or the contact address provided on our website)
2. What is this privacy policy about?
This privacy policy informs you about which personal data we process when you:
- use our rental offer (reservation, booking, rental, return),
- communicate with us (e.g. email, phone),
- use our website or an online form/reservation portal.
Personal data are all details that relate to an identified or identifiable person (e.g. name, contact information).
3. What personal data do we process?
3.1 Data for Reservation/Booking/Rental
Depending on the rental process, we process in particular:
- Contact and master data: First name, last name, address, ZIP code/city, telephone number, email
- Rental and transaction data: Rental period, rental items, categories/products, pick-up and return time, status of booking (e.g. request/reservation/rented/back), notes/comments
- Security and settings data (especially skis/bindings): Age, height (cm), weight (kg), shoe size, skiing ability/level, if applicable additional information necessary for safe delivery/settings
- Signature/Confirmations: e.g. acceptance of rental conditions, signature in the shop or digitally (if used)
- Deposit (if required): e.g. information that a deposit has been paid (type and amount), reference/evidence
3.2 Payment Data
For payments, we process depending on the payment method:
- Payment status and payment references (e.g. transaction ID, date, amount)
- Card data is usually processed directly by the payment service provider for card payments. We typically do not receive complete card information, but only confirmations/references.
3.3 Communication Data
If you contact us, we process:
- Content of your message/request
- Contact details
- Time and any attachments
3.4 Website and Log Data
When using our website/online forms, technical data may be generated, e.g.:
- IP address, date/time, accessed pages
- Browser type, operating system, language settings
- Referrer URL
- This data is partially generated automatically (server logs) and mainly serves to ensure stability, security, and error analysis.
3.5 Cookies and Similar Technologies
We may use cookies/similar technologies:
- Necessary cookies (e.g. for form function, language, session)
- Optional cookies (e.g. statistics/marketing), if we use such and you permit them (depending on cookie banner/settings).
4. For what purposes do we process your personal data?
We process personal data particularly for the following purposes:
- Processing the rental (reservation, contract fulfillment, delivery, return, invoicing)
- Security purposes (e.g. correct binding adjustment, avoidance of misallocation)
- Customer service and communication (answering questions, support, rebookings)
- Accounting and documentation obligations (receipts, invoices, legal retention)
- Prevention of misuse and fraud as well as enforcement/defense of claims (e.g. in case of damages, loss, payment default)
- Operation, security, and optimization of our systems/website (IT security, logs, troubleshooting)
5. To whom do we disclose personal data?
We only disclose personal data when it is necessary for the above-mentioned purposes, e.g. to:
- IT and hosting service providers (operation of website/portal, data storage)
- Payment service providers (processing of payments)
- Communication service providers (e.g. email/support systems), if used
- Trustees/accounting (as required)
- Authorities/Courts (if we are obliged to do so or needed for law enforcement)
These recipients process data partially on our behalf (processors) and are contractually obliged to process personal data only as we allow and to maintain appropriate security measures.
6. Will personal data be transmitted abroad?
Depending on the service providers used, personal data may also be processed outside Switzerland (e.g. in the EU or other countries). If data is disclosed to states without an adequate level of data protection, we ensure suitable protective measures (e.g. contractual guarantees/standard clauses), as required.
7. How long do we retain personal data?
We only retain personal data as long as it is necessary for the purposes, in particular:
- for the duration of the contract processing and any follow-up processing (e.g. complaints),
- within the framework of legal retention obligations (e.g. for booking and payment receipts),
- as long as claims can be made or we need data for law enforcement.
After that, data will be deleted or anonymized, unless there is an obligation or a predominant legitimate interest for further retention.
8. Data Security
We take appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or alteration (e.g. access restrictions, roles/rights, backups, encryption where appropriate).
9. Your Rights
You have the following rights under applicable data protection law:
- Information about whether and which personal data we process about you
- Correction of inaccurate personal data
- Deletion or restriction, as long as there are no legal obligations or overriding interests to the contrary
- Objection to certain processing, as applicable
To exercise your rights, please contact us (contact details see Section 1). We may require suitable proof for identification.
10. Changes to this Privacy Policy
This privacy policy may be provided in several languages. The German version is exclusively authoritative and legally binding. In case of discrepancies, translation errors, or interpretation differences between the German version and a translation, the German version applies.