Privacy

Privacy notice 1. Controller and contact The controller for personal data processed in operating Modellwelt is: Peter Rufener Hauptstrasse 24 3806 Bönigen Switzerland Email: site@modellewlt.online This notice covers modellwelt.online and modellwelt.ch. Sellers process the data shared with them for a purchase to perform their own contract and are responsible for their own data protection obligations in doing so. 2. Website visits and browser storage When you access the website, technical information including your IP address, the time, the requested page and browser details is sent to the server infrastructure. These details support delivery of the website, troubleshooting and protection against abuse. A session cookie supports sign-in, form protection and the association of actions during your visit. Sign-in expires after 60 minutes without user activity. Your language choice may be saved in a cookie for up to one year and in your account. A browser local storage entry coordinates session activity across open tabs; it contains no password. Blocking this technical storage may prevent some functions from working. The built-in visitor counter stores daily totals and uses the current session to determine whether its visit has already been counted that day. Its counter file contains no individual IP addresses or visitor profiles and holds at most 35 daily totals. The built-in counter does not use advertising trackers or create personal usage profiles. 3. Accounts and private management We process the account information you provide, including your name, email address, shop name, language, roles, permissions and, where relevant, address and payment information. Passwords are stored as hashes. Necessary tokens, timestamps and security data are processed for email verification, password resets and protection against abusive sign-in attempts. When published terms are accepted during a new registration, we store the accepted text, language, hash and timestamp as evidence of acceptance. This does not attribute past acceptance to existing accounts. Purchase costs, storage locations, internal notes, unpublished stock and missing-item lists support private management. They do not appear in the public catalogue. Authorised administrators can access these data for operation, support, troubleshooting and handling abuse. Administrative actions may be logged. 4. Public listings, collections and images Published shop names, article information, prices, images and collection content are publicly visible. Search engines and other visitors can also access or reuse them. A collection marked as not for sale can be public without appearing in the sales catalogue. Please do not publish other people's personal data without authorisation. Uploaded article images are processed for display, resized and, where applicable, watermarked. A watermark cannot prevent all reuse. Removing content from our website does not automatically remove copies already held by third parties or search engines. 5. Orders, price proposals and shipping To handle a transaction, we process orders, price proposals, article descriptions and condition, agreed prices, postage, the parties' details, delivery addresses, payment and shipping status and, where relevant, tracking numbers. Information needed for fulfilment is made available to the buyer and seller and can be accessed by authorised administrators. Article and address details recorded at purchase remain associated with the transaction even if a profile is later changed. Sellers can set a minimum price. Proposals below this threshold may be declined automatically under that price rule. Proposals at or above the threshold are referred to the seller for a decision. Questions about this processing or requests for a person to review it can be sent to the contact above. Purchase payments are made directly to the seller using a payment method offered by the seller. Modellwelt does not receive card details or banking credentials entered by a buyer with a payment provider. The privacy information of external payment services also applies when you use them. The platform operator's commission statements contain the seller, sales and invoice data required for billing. The built-in text recognition function for a photographed postal receipt runs on the device you are using. The image is uploaded to the platform only when the receipt is saved. Saved receipt images are part of protected shipping management; an entered tracking number is made available to the buyer. 6. Email, missing-item lists and optional push notifications For account verification, password recovery, orders, price proposals, invoices and enabled alerts, we process the recipient address, message content and delivery status. Missing-item lists can be compared with published listings to alert users to matching items. Settings and available unsubscribe options control optional notifications; messages needed for an ongoing transaction remain separate. Push notifications require browser permission. The device subscription, including its push address and keys, and your notification preferences are stored. Depending on your browser, delivery may use services from Google, Mozilla, Apple or Microsoft. Permission can be withdrawn in browser and account settings. Browser services process the technical data needed for delivery. The built-in transmission encrypts the message content; section 8 identifies the possible browser services. 7. Discussions, reviews and reports Published contributions and reviews are visible with the public shop or member name, date and any rating. New or edited text is checked automatically using local text rules. Content without an automatic flag appears immediately, subject to existing moderation restrictions. Detected links or potentially problematic expressions are held for manual review. This automatic check does not send the text to an external analysis service. For a report, we store the account or contribution concerned, the reporting member, the reason provided, processing status and moderation decisions. These data protect members and support enforcement of the rules; they are not displayed publicly in the discussion. Administration can hold or remove contributions or restrict accounts. Removing a public contribution does not necessarily immediately erase records needed to document the report and how it was handled. 8. Recipients, technical services and other countries Modellwelt’s database and files are processed on server infrastructure provided by the operator. Authorised personnel and commissioned hosting, maintenance, backup and email providers receive only the access needed for operation, security, support and delivery. Buyers and sellers receive the data necessary for their own transaction. Data may be disclosed to authorities, courts and advisers subject to professional confidentiality where required by law or necessary to clarify or enforce legitimate claims. Email is delivered to the provider chosen by the member. External payment links lead to the service identified by the seller. These providers process the data they receive under their own terms; processing locations and practices also depend on the selected email or payment service. The platform does not send internal purchase costs, storage locations or complete missing-item lists to these payment services. If you enable push notifications, your browser may use Google/Firebase Cloud Messaging, Mozilla Web Push, Apple Push Notification Service or Microsoft Windows Push Notification Services. The technical push address, connection and delivery data and encrypted message content may also be processed in the United States. This feature is optional and can be switched off at any time. The providers explain their processing at https://firebase.google.com/support/privacy, https://www.mozilla.org/privacy/firefox/, https://www.apple.com/legal/privacy/ and https://www.microsoft.com/privacy/privacystatement. Non-public personal data may be disclosed abroad only under the conditions of Swiss data protection law. Relevant grounds are a recognised adequate level of protection, the Swiss-U.S. Data Privacy Framework for appropriately certified US recipients, or necessary contractual safeguards or a statutory exception. You may contact the privacy address above for information about the actual recipients, processing countries and safeguards used in your case. Published content can be accessed by visitors and search engines worldwide. 9. Retention and account deletion Account data and private inventory support account management and are stored while the account is used. Administrative account deletion ends access; the shop, listings, publicly displayed collections, contributions and reviews belonging to the account are no longer publicly displayed on Modellwelt. It does not promise simultaneous physical destruction of every file, commercial record and backup. Completed transactions and existing payment obligations remain valid. Orders, payment and shipping records, invoices, credit notes and the identity and contact data needed for them remain protected for fulfilment, accounting and legitimate evidence purposes. Where the Swiss duty to retain accounting books and supporting records applies, the period is ten years from the end of the relevant financial year. Account deletion does not make these records public; access is limited to entitled parties and administration. Personal data no longer needed are deleted or anonymised once no ongoing transaction, legal obligation, specific outstanding claim or necessary security or abuse record justifies their retention. Reports and administrative logs are retained according to the handling and traceability needs of the case. You can request a further deletion assessment from the privacy contact at any time; a duty to retain data will be explained. The browser language preference lasts up to one year. Email verification links are valid for 24 hours and password reset links for one hour; link expiry is separate from retention of its technical record. The visitor counter holds at most 35 daily totals. The push background process removes completed delivery tasks after 30 days. Email delivery records and security data remain necessary only as justified by delivery, troubleshooting, contract performance or investigating abuse. Backups are not public and are replaced in the regular backup cycle; restoring a backup must respect existing deletion and blocking decisions. 10. Protection and your rights The application uses password hashing, role-based access and form protection, among other measures. The operator manages the actual server environment and its backups. No technical system can guarantee complete protection against every risk. You can contact us to request access to your personal data, correction and, within applicable law, deletion, restriction or a copy of data. Consent may be withdrawn for the future. We may need proportionate proof of identity to assess a request. Legal duties and the legitimate rights of others remain reserved. You may also contact the Swiss Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch. 11. Changes We update this notice when functions or data processing change. Updating it does not replace any new consent that may be required. Version: 21 October 2026