1Who is responsible
card-me Sàrl, Rue de la Gravure 12, 1004 Lausanne, Switzerland, is the controller of the personal data processed through card-me.ch.
For any question about this notice, write to bonjour@card-me.ch.
2What we collect
Order data: your name, delivery address, email address, a telephone number where you give one, and the content of the card you configure.
Profile data: everything you choose to publish on your digital profile.
Technical data: our hosting provider records the IP address, browser and time of each request in its server logs.
3Why we process it
To perform the contract: producing your card, delivering it, hosting your profile and answering your support requests.
To comply with the law: Swiss accounting rules oblige us to keep invoices and order records.
On a legitimate interest: keeping the site secure and free of abuse.
4Payment data
Payments are handled by Stripe. Your card number is entered on Stripe's own hosted page and never reaches our servers.
We receive only the result of the transaction and the billing details needed to issue the invoice.
5Who else processes your data
We use a small number of providers who process data on our instructions: Netlify (hosting), MongoDB Atlas (database), Stripe (payments), Swiss Post and DHL Express (delivery).
Some of them process data outside Switzerland and the EU. Where that happens we rely on the European Commission's standard contractual clauses or an equivalent safeguard.
6Your profile is public
A digital profile exists to be shared: anything you put on it can be read by anyone holding the card or the link.
Do not publish data there that you would not want to be public.
7Cookies
card-me.ch sets only the cookies strictly necessary to operate the site and complete a purchase. We run no advertising trackers and no cross-site analytics.
8How long we keep it
Order and invoice data: ten years, as Swiss accounting law requires. Profile data: until you delete your profile or your plan ends. Server logs: a few months.
9Your rights
You may ask for access to your data, for its correction or deletion, for a copy in a portable format, and you may object to a processing based on our legitimate interest. Write to bonjour@card-me.ch — we answer within 30 days.
You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Bern.
10Changes to this notice
We update this notice when our processing changes. The date at the top tells you which version is in force.
A question about this document? Write to bonjour@card-me.ch — we answer within 24 hours.