Skip to content
WatchInsightSign in

Draft — demo details, to be replaced before launch.

Privacy notice

What this covers

This privacy notice describes which personal data we process when you visit this website or use Händlerradar as an invited person, why we process it and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023.

Controller

Muster AG, Musterstrasse 1, 8000 Zürich, Switzerland

Please send questions about data protection to datenschutz@example.ch.

Which personal data we process

  • When you visit the website: IP address, time, the address requested and details of your browser, in the server logs of our hosting.
  • For a user account: email address, password (stored only as an irreversible hash), company, job title, role, the markets released to you, language and time zone.
  • When you use it: the time of your last sign-in, a log of every change to access (who changed what and when) and a log whenever WatchInsight opens the report as a particular person sees it.
  • We use no analytics, advertising or social media services. The fonts of this website are served from our own server.

Why we process it

  • to provide the website and the report and to perform the contract with your company,
  • to sign you in, to send invitations and password-reset emails and to manage access,
  • to keep the service secure, detect misuse and fix errors,
  • to be able to trace who granted or changed which access.

We do not sell personal data and do not build profiles for advertising.

Cookies

Without signing in, this website sets no cookies. Once you are signed in, we use only cookies the service needs:

  • sb-…-auth-token: keeps you signed in; lasts until you sign out, at most 400 days.
  • wi_brand: remembers the brand you chose; 1 year.
  • wi_perspective: remembers the view you chose, for WatchInsight staff only; 1 year.

We use no cookies for analytics or advertising.

Processors

We use service providers who process data only on our behalf:

  • Vercel Inc. (USA): hosting of the website and the application; the application runs in Dublin, Ireland.
  • Supabase Inc. (USA): database, sign-in and file storage; data stored in Ireland (region eu-west-1).
  • Google (Google Workspace): sending the invitation and password emails from noreply@watchinsight.ch and receiving the retailers' newsletters.
  • Anthropic PBC (USA): language model for drafts of findings and for recognising watch models in public posts. No data about users is transmitted.

Disclosure abroad

The data is stored in Ireland, in the EU, which Swiss law recognises as providing adequate data protection. Vercel, Supabase, Google and Anthropic are companies based in the USA; where they transfer data to the USA or can access it from there, we rely on: Swiss-U.S. Data Privacy Framework / Standardvertragsklauseln (Demo).

Publicly available content of businesses

Händlerradar analyses what watch retailers publish publicly: posts on their Instagram and Facebook accounts, entries in the ad libraries of Meta and Google, newsletters WatchInsight has subscribed to and articles on the retailers' websites. Public posts and ads are retrieved through the ScrapeCreators service.

We store public comments under these posts with their text. We do not store who wrote them by name, only as a pseudonymous key. Anyone who wishes to object to this processing can write to datenschutz@example.ch.

How long we keep data

  • Account data for as long as access exists, and 3 months after that.
  • Server logs for 30 days.
  • Access logs for 2 years.
  • Daily database backups for 7 days.

Data security

All connections are encrypted. Access exists only by invitation, passwords are stored only as a hash, and the database itself makes sure that each person sees only the data of their own company and markets.

Your rights

You can request information about your personal data, have incorrect data corrected and data deleted, request that your data be handed over or transferred, and object to processing. Write to datenschutz@example.ch; we may ask for proof of your identity.

Supervisory authority

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

For people in the EU

Where the General Data Protection Regulation (GDPR) applies, we process your data to perform the contract (Art. 6(1)(b) GDPR) and on our legitimate interest in a secure service (Art. 6(1)(f) GDPR). You have the rights under Art. 15 to 21 GDPR and may lodge a complaint with the supervisory authority of your country. Our representative in the EU: Muster GmbH, Musterweg 1, 10115 Berlin (Demo).

Changes

We update this privacy notice when our processing changes. The version published here applies.

Last updated

October 3, 2026