Datenschutz & Privacy Policy
Privacy notice aligned with Swiss nDSG / revDSG and EU GDPR principles — not a legal certification or compliance guarantee
Published transparency document. Service scope, data sources, commercial relationships, and current limitations are described as they operate today.
Document version: 1.0 · Last updated: 2026-08-10
1. Verantwortliche Stelle / Data Controller
Verantwortlich für die Datenverarbeitung auf der Webseite BeforeToBuy.com ist:
PortanX - Catalin Portan
Flurstrasse 24, 3014 Bern
UID:: CHE-373.501.736 | Email:: admin@portanx.com
2. Cookies & Consent
On the first request, we use only the two-letter country code supplied by Vercel to choose the shopping market. A manual market or language choice is stored locally and takes priority. A signed HttpOnly cookie records the Affiliate choice server-side; Affiliate links and optional analytics run only after consent. See our Cookie Policy for details.
4. Affiliate Links & Processors
Outbound merchant links are disabled until you accept affiliate consent. Partner stores may set their own cookies when you visit them.
Sub-processors / recipients:
- Vercel Inc. — Hosting, CDN, and server logs (USA/EU)
- Upstash Redis — Optional rate-limit counters and price-history cache when configured (USA/EU)
- Datadog — Optional browser RUM and performance monitoring with Analytics consent (USA/EU)
- Resend — Contact-form email delivery when configured (USA)
- AWIN / merchant partners — Affiliate tracking on merchant domains with Affiliate consent (Various)
- 2Performant — Affiliate tracking for Rowenta.ro and Scule365.ro outbound links with Affiliate consent (RO/EU)
- AWIN — Affiliate tracking for Seentat UK and other joined AWIN programmes with Affiliate consent (UK/EU)
- Rowenta 2Performant product feed — Product catalog and prices for Rowenta.ro (RO/EU)
- Scule365 2Performant product feed — Product catalog and prices for Scule365.ro (RO/EU)
- Seentat AWIN product feed — Product catalog and prices for Seentat UK (UK/EU)
Processing purposes and legal bases
Swiss nDSG applies to our processing as a Swiss controller. Where the EU GDPR applies to visitors in the EU/EEA, you may also exercise GDPR rights. This notice is a transparency document, not a legal certification.
- Operate the website, select the initial market from Vercel's request country code, and store essential preferences — Overriding interest / essential operation; contract initiation where you contact us
- Optional affiliate outbound linking and partner cookies after you leave — Consent (Affiliate category)
- Optional performance monitoring with Datadog RUM — Consent (Analytics category)
International transfers
Some processors, especially Vercel, Datadog, and Resend when configured, may process data in the United States or other countries. We use them for hosting, optional performance monitoring, and contact-form delivery. Optional features involving those processors require your consent where indicated. Standard contractual and transfer mechanisms used by those providers may apply; please consult each provider for details.
5. Retention
- Contact form submissions: Until the inquiry is resolved plus 12 months (Legitimate interest / contract initiation)
- Server and edge logs (Vercel): Per Vercel policy, typically days to weeks (Security and stability)
- Consent preferences: Up to 180 days or until you clear them (Consent / essential preferences)
- Optional analytics: Per Datadog retention when opted in (Consent (Analytics))
6. Server Logs & Contact Data
Vercel edge logs may temporarily record IP address, browser type, referrer, and timestamps for security and stability. Contact form data (name, email, message) is processed to respond to your inquiry and deleted when no longer needed.
7. Your Rights & DSAR Procedure
Under Swiss nDSG and EU GDPR you may request access, rectification, deletion, restriction, portability, or object to processing of your personal data.
How to submit a Data Subject Access Request (DSAR)
- Email admin@portanx.com or use the contact form with topic "Data Privacy & Legal Request (DSAR)".
- Include your name, contact email, and the right you wish to exercise.
- We may ask for reasonable identity verification before fulfilling the request.
- We respond within 30 days (GDPR Art. 12; nDSG comparable timeframe).
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDOB): edoeb.admin.ch. complaints procedure.
