1. Controller
The controller for the processing described here is MachYard AG, Bahnhofstrasse 12, 6300 Zug, Switzerland (CHE-000.000.000). Data-protection contact: legal@machyard.example.
2. Data we process
Depending on how you use the Platform we process:
- account and contact data (name, company, email, phone, address)
- transaction data (offers, bids, invoices, payment status, delivery details)
- machine and inspection data you submit as a seller
- technical data (IP address, device, browser, log data)
- usage and consent data from cookies and similar technologies
3. Purposes and legal bases
We process data to perform the contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax, accounting, sanctions and anti-money-laundering rules (Art. 6(1)(c)), on the basis of our legitimate interests in fraud prevention, security and service improvement (Art. 6(1)(f)), and on the basis of your consent for marketing and non-essential cookies (Art. 6(1)(a)).
4. Recipients
We share data with inspection partners, freight forwarders and customs agents, payment and escrow providers, IT and hosting providers, and with the counterparty of a transaction to the extent required to complete it. Processors act on our instructions under data-processing agreements.
5. International transfers
Where data is transferred outside Switzerland or the EEA, we rely on adequacy decisions or EU Standard Contractual Clauses together with additional safeguards.
6. Retention
We retain transaction and accounting records for 10 years as required by law, account data for the duration of the relationship plus statutory limitation periods, and consent and log data for shorter periods defined in our retention schedule.
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent at any time. Requests can be sent to legal@machyard.example. You may also lodge a complaint with your competent supervisory authority or the Swiss FDPIC.