Legal

Privacy policy

Version: 9 November 2026

This privacy policy is a translation of the German version. In the event of any discrepancy, only the German version is binding.

1. What this is about

This privacy policy explains which personal data we process when you visit mixklinik.ch, send us a machine for repair or buy-back, buy a refurbished machine or contact us. It is based on the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, the information in section 14 also applies.

2. Controller

The controller responsible for data processing is:
FEHRMANN (sole proprietorship), owner Kevin Fehrmann, trading as “Mixklinik”
Olgastrasse 10, 8001 Zurich, Switzerland
Email: info@mixklinik.ch

You can reach us at this address for all questions about data protection and to exercise your rights.

3. What data we process

  • Contact and address data: name, street, postcode, town, email address and, optionally, phone number.
  • Order and machine data: model, serial number, condition, accessories, described faults, error codes, comments, selected options, prices, order number and processing status.
  • Photos: images of your machine that you upload when selling it to us.
  • Payment and payout data: for buy-backs, the details needed for the payout (e.g. mobile number for TWINT or IBAN); for purchases, the details of the chosen payment method.
  • Communication data: content and time of your emails and messages to us.
  • Input in the AI consultation: your description of the problem and the conversation history of the current session.
  • Technical data: IP address, date and time of access, page visited, browser and operating system, and the cookies and statistics data described in section 10.

You provide most of the data yourself. Mandatory fields are marked; without this information we cannot carry out the order.

4. What we use the data for

  • Repair orders: price calculation, sending the postage label and packaging, diagnosis, repair, safety test, return shipment, invoice and warranty.
  • Buy-back: calculation and review of the offer, checking the origin of the machine, payout or store credit, return shipment if no agreement is reached.
  • Sale of refurbished machines: handling of order, payment, shipping, returns and warranty.
  • Communication: answering your questions, status updates on your order, queries about additional costs.
  • Operation, security and improvement of the website: displaying pages, protection against abuse and spam (e.g. limiting requests per hour), error analysis and anonymous visitor statistics.
  • Legal obligations and protection of rights: bookkeeping and retention of business records, cooperation with requests from authorities, enforcement or defence of claims.

We do not use your data for third-party advertising, we do not sell it and we do not create personality profiles.

5. AI features: chat assistant “Doc Mixi”, AI consultation and AI photo check

On every page, you can ask our chat assistant “Doc Mixi” questions. On the repair page, you can describe your problem in the AI consultation. When selling a machine, you can optionally have your photos checked by an AI. For this, we transmit your messages (in the chat together with the previous messages of the conversation), your description or the photos and the selected machine model to Anthropic Ireland, Limited, Dublin, Ireland. Anthropic operates the language model “Claude” as our processor and may use sub-processors for this, in particular its parent company Anthropic, PBC in the USA and cloud providers (see section 8).

  • Use is optional. Without AI, you get a simple quick diagnosis that runs only in your browser.
  • We do not store conversations with “Doc Mixi”. The history stays only in your browser and is deleted when you close the browser window.
  • We do not transmit your name, address or email address to the AI. Please do not enter any personal data in the chat or the description, and make sure that no people or personal documents are visible in the photos.
  • Under its terms of business, Anthropic may not use the content to train AI models. The content is only stored for as long as necessary to provide the service and detect abuse; if abuse is suspected, Anthropic may keep it for up to two years.
  • The AI answers questions based on our published information and suggests repair items or condition and accessories. Prices come from our fixed price list, and a human makes the binding decision after checking the machine. No automated individual decision within the meaning of Art. 21 FADP takes place.
  • AI answers may be wrong. They do not replace a check of the machine.

6. Photos for buy-backs

Photos you send with a buy-back request are stored in a protected area of our server that is not publicly accessible. We use them only to assess your machine and to document its condition on arrival. When we sell a refurbished machine, we photograph it ourselves; we do not publish your photos.

7. Recipients of your data

We only pass on personal data where necessary for the purposes stated:

  • Hosting and email: ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany (server, database and mailbox). Notifications about new orders may also be sent via another email provider based in Germany.
  • Shipping: Swiss Post Ltd, Bern, for postage labels, box shipments and parcel tracking (name, address, possibly email address).
  • Payments: the payment service provider through which a payment or payout is made (e.g. TWINT Ltd, Zurich, or a card payment provider) and the banks involved.
  • AI: Anthropic Ireland, Limited, see section 5.
  • Fonts: Google, see section 10.
  • IT service providers who support us in operating, maintaining and developing the website, within the scope of their mandate.
  • Authorities, courts and legal representatives, if we are legally obliged to do so or it is necessary to protect our rights.

We contractually oblige processors to process the data only in accordance with our instructions and with appropriate security measures.

8. Disclosure abroad

The website and the mailbox are operated in Germany; Anthropic Ireland is based in Ireland. According to the Federal Council, both countries provide adequate data protection. Individual service providers, in particular Anthropic, PBC and Google, may also process data in the USA or other countries. For the USA, the Federal Council has recognised adequate protection for companies certified under the Swiss-U.S. Data Privacy Framework. Where this does not apply, we rely on the standard contractual clauses of the European Commission, which have been recognised by the Federal Data Protection and Information Commissioner (FDPIC) and form part of our contracts with these providers. We will provide further information on request.

9. Server log files

Each time the website is accessed, our host stores technical information in log files: IP address, date and time, address accessed, amount of data transferred, browser, operating system and referring page. We need them to operate the website securely and reliably and to detect attacks. The log files are deleted automatically after the period set by the host and are not combined with other data.

10. Cookies, visitor statistics and fonts

We only use cookies that are technically necessary for the website, for example for the basket and checkout in the shop and for administrator logins. We do not use analytics or advertising cookies or third-party tracking. You can delete or block cookies in your browser; the shop may then no longer work fully.

For anonymous visitor statistics we use the software Matomo. Matomo runs on our own server, does not use cookies and does not pass any data to third parties. It records the pages viewed, the date, time and length of the visit, the website you came from, device type, operating system, browser, screen size, language setting and approximate country, as well as whether a form was submitted or the chat was used, without their content. Your IP address is shortened by two bytes before it is stored or analysed (e.g. 192.168.xxx.xxx), so we cannot identify you. We only use the statistics to improve our website.

You can object to this at any time. Your objection is stored in a cookie in your browser; if you delete your cookies, you will need to repeat it.

The chat assistant “Doc Mixi” stores the conversation history in your browser's memory (session storage) so that the conversation is kept when you change pages. This data is only transmitted with your next chat message and is deleted when you close the browser window.

To display the fonts, your browser loads font files from Google Fonts (Google Ireland Limited, Dublin, Ireland, or Google LLC, USA) when you open a page. Your IP address is transmitted to Google in the process. Google LLC is certified under the Swiss-U.S. Data Privacy Framework.

11. How long we keep data

  • Accounting records such as invoices, receipts and buy-back records: 10 years, as required by the Code of Obligations (Art. 958f CO).
  • Other order, buy-back and purchase data and the related correspondence: until the end of the warranty and the limitation periods for any claims.
  • Requests that do not lead to an order: up to 12 months after the last communication.
  • Photos of buy-back machines: up to 12 months after completion of the buy-back or after the machine has been returned.
  • Visitor statistics data: raw data for up to 180 days, after that only aggregated figures with no link to individuals.
  • We do not store input in the AI consultation on our server. For storage at Anthropic, see section 5.

After that, we delete or anonymise the data.

12. Data security

The website is encrypted throughout via HTTPS. Uploaded photos are kept in a locked directory, and only authorised persons with a personal login have access to orders. Forms are protected against automated abuse. Nobody can guarantee complete security for transmission over the internet, especially for unencrypted emails.

13. Your rights

Under the FADP, you have in particular the right

  • to ask whether and which personal data about you we process (Art. 25 FADP),
  • to have incorrect data corrected (Art. 32 FADP),
  • to object to processing and to request the deletion of your data, unless a statutory retention obligation or an overriding interest prevents this (Art. 30 and 32 FADP),
  • to request the handover or transfer of the data you have given us in a common electronic format (Art. 28 FADP).

To do so, write to us at info@mixklinik.ch. To make sure we do not disclose data to unauthorised persons, we may ask for proof of identity. We answer requests for information within 30 days. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

14. Additional information for people in the EEA

If you are in the European Economic Area (e.g. in Liechtenstein) and the GDPR applies, the following also applies: we process your data to perform a contract or take pre-contractual steps (Art. 6(1)(b) GDPR), to comply with legal obligations (point c) and on the basis of our legitimate interests (point f) in operating the website securely and in a user-friendly way and in anonymous visitor statistics. You only use the chat assistant, the AI consultation and the AI photo check if you start them yourself; the legal basis is your consent (point a), which you can withdraw at any time for the future by no longer using the feature and, if applicable, asking us to delete your data. You have the rights under Art. 15 to 21 GDPR, including the right to restriction of processing and the right to object to processing based on legitimate interests. You can also lodge a complaint with the data protection authority in your country of residence, in Liechtenstein with the Datenschutzstelle Liechtenstein.

15. Changes

We update this privacy policy when our data processing or the legal situation changes. The version published on this page applies.