Privacy Policy
This privacy policy explains which personal data EAMT GmbH ("we", "us") processes in connection with our activities, including the option to order digital debt enforcement register extracts via our website. We provide information in particular on the purposes, methods and locations of data processing. We also inform about the rights of persons whose data we process.
EAMT GmbH is an authorised digital intermediary for debt enforcement extracts in Switzerland, registered as an eSchKG participant (ID 1417) with the Federal Office of Justice and as a SEDEX participant (Sedex ID 4-800248-6) with the Federal Statistical Office.
Additional privacy policies and other legal documents such as general terms and conditions (GTC) may apply to individual activities.
1. Controller and Contact
Controller responsible for data processing:
EAMT GmbH Sihleggstrasse 23 8832 Wollerau Canton of Schwyz, Switzerland
Email: info@eamt.ch UID: CHE-210.634.957
Authorised representative: The management
For data protection enquiries (information, deletion, rectification), please contact: info@eamt.ch
We indicate where other controllers are responsible for data processing in individual cases.
2. Definitions and Legal Bases
2.1 Definitions
Personal data means any information relating to an identified or identifiable natural person. A data subject is a person whose personal data we process.
Processing includes any handling of personal data, regardless of the means and procedures used, in particular the collection, recording, storage, use, modification, disclosure, archiving, deletion or destruction of personal data.
2.2 Legal bases
We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (DPO).
Personal data is processed on the following legal bases depending on the purpose:
- •Contract performance: processing necessary for the performance of a contract or pre-contractual measures (e.g. ordering a debt enforcement extract)
- •Consent: processing based on your express consent (e.g. newsletter)
- •Legitimate interest: processing to protect our overriding legitimate interests (e.g. fraud prevention, website analysis)
- •Legal obligation: processing to fulfil legal obligations (e.g. retention obligations)
3. Data Processing When Ordering a Debt Enforcement Extract
When ordering a debt enforcement extract via our website, we process the following personal data:
3.1 Data of the ordering person
- •First name and surname
- •Email address
- •Billing address
- •Payment information (processed directly by the payment service provider)
3.2 Data of the person being queried
- •First name and surname
- •Date of birth
- •Residential address (street, postcode, city)
This data is transmitted to the relevant debt enforcement office via the eSchKG system. The debt enforcement office issues the extract and transmits it to us in digitally signed form. We forward the debt enforcement extract by email to the ordering person.
Legal basis: contract performance
3.3 Credit and identity verification
For orders on account, we transmit data to CRIF AG (Switzerland) to verify creditworthiness and identity. CRIF AG processes this data as an independent controller. Further information: www.crif.ch/datenschutz
Legal basis: legitimate interest (fraud prevention)
4. Other Data Processing
4.1 Contact
When you contact us (by email, contact form or otherwise), we process the personal data you provide to handle your enquiry.
4.2 User account
If you create a user account, we store your registration data (name, email address) and your order history to allow you to access your debt enforcement extracts again.
4.3 Job applications
We process personal data of applicants to the extent necessary to assess suitability for employment.
5. Retention Period
We retain personal data only for as long as necessary for the relevant purpose or as required by law:
• Contractual data and orders: 10 years (pursuant to Art. 958f CO)
- •Accounting records and payment data: 10 years (pursuant to Art. 958f CO)
- •Application documents: 3 months after conclusion of the application process, unless consent to longer retention is given
- •Server log files: 90 days
- •Analytics data (Google Analytics): 2 months (data minimization default per Art. 7 nFADP)
Upon expiry of the retention period, personal data is anonymised or deleted.
6. Data Processing by Third Parties
We may have personal data processed by third parties or transmit data to third parties. Such third parties are specialised providers whose services we use. We ensure data protection with such third parties as well.
7. Personal Data Abroad
We generally process personal data in Switzerland. However, we may disclose personal data to other countries, in particular to have it processed there.
We may disclose personal data to all countries whose law ensures adequate data protection as determined by the Swiss Federal Council.
We may disclose personal data to countries whose law does not ensure adequate data protection if appropriate data protection is ensured by other means, for example through standard data protection clauses or other suitable guarantees.
We are happy to provide information about any guarantees upon request.
8. Rights of Data Subjects
8.1 Data protection rights
We grant data subjects all rights under applicable data protection law:
• Information: data subjects may request whether we process personal data about them and, if so, which data.
- •Rectification: data subjects may have inaccurate personal data rectified.
- •Deletion: data subjects may request the deletion of their personal data, subject to statutory retention obligations.
- •Restriction: data subjects may request the restriction of the processing of their data.
- •Objection: data subjects may object to the processing of their data.
- •Data portability: data subjects may request the delivery of their personal data in a common electronic format or the transfer to another controller.
8.2 Right to lodge a complaint
Data subjects have the right to enforce their data protection rights through legal channels or to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch
9. Data Security
We take appropriate technical and organisational measures to ensure data security commensurate with the risk. However, we cannot guarantee absolute data security.
Access to our website is encrypted using transport encryption (SSL/TLS, HTTPS).
Debt enforcement extracts bear a qualified electronic signature (QES) pursuant to the Federal Act on Electronic Signatures (ZertES, SR 943.03) and are delivered by email in encrypted form.
10. Website Usage
10.1 Cookies
We use cookies. We distinguish between technically necessary cookies and analytics/marketing cookies.
Technically necessary cookies are required for the operation of the website and are set without consent. For analytics and marketing cookies, we obtain your consent via our cookie banner.
Cookies can be deactivated or deleted in the browser settings at any time.
10.2 Server log files
We record the following information for each access to our website: date and time, IP address, access status, operating system, browser, page accessed, data volume transferred and referrer.
Server log files are deleted after 90 days.
10.3 Tracking pixels
We may use tracking pixels (web beacons) on our website.
11. Notifications and Communications
11.1 Transactional emails
After ordering a debt enforcement extract, you will receive automated emails (order confirmation, delivery of the extract). These emails are necessary for contract performance.
11.2 Consent and objection
You must generally consent expressly to the use of your email address for advertising purposes. You may object to the receipt of advertising communications at any time.
12. Social Media
We are present on social media platforms. The GTC and privacy policies of the respective platform operators also apply.
13. Third-Party Services
13.1 Digital infrastructure
• Nine Internet Solutions: hosting and managed cloud; provider: Nine Internet Solutions AG (Switzerland). Our hosting is located in Switzerland.
13.2 Payment service providers
• PayPal (including Braintree): PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)
- •PostFinance: PostFinance AG (Switzerland)
- •POWERPAY (purchase on account): MF Group AG (Switzerland)
- •TWINT: TWINT AG (Switzerland)
Payment data is processed directly by the respective payment service providers.
13.3 Advertising
• Google Ads: search engine advertising; provider: Google; Conversion tracking to measure campaign performance.
- •Google Ads Enhanced Conversions: When you complete an order, we additionally transmit hashed (SHA-256) values of your email address, phone number, and address to Google for improved cross-device conversion attribution. The hashing happens exclusively client-side in your browser — plaintext data does not leave your browser. Transmission only occurs with your consent.
- •Facebook Ads: social media advertising; provider: Meta Platforms Ireland Limited (Ireland)
14. Website Extensions
• Google reCAPTCHA: spam protection; provider: Google.
15. Performance and Reach Measurement
• Google Analytics (GA4): performance and reach measurement with pseudonymised IP addresses; provider: Google. Can be deactivated via the browser add-on: https://tools.google.com/dlpage/gaoptout
- •Google Tag Manager: integration and management of analytics services; provider: Google.
16. Final Provisions
We may adapt and supplement this privacy policy at any time. The current version applies from publication on our website.
As of: March 2026