Privacy Policy

This privacy policy explains which personal data we process when you visit ignite-official.ch, order in the online shop or contact us, for what purposes we do so, to whom we disclose data and what rights you have. It is governed by the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example because you visit our website from the EU or EEA and we analyse how you use it, we also comply with the GDPR.

Last updated: October 2026

1. Controller

Vendtec GmbH
Grabenstrasse 15a
6340 Baar
Switzerland

Email: info@ignite-official.ch
Phone: +41 32 513 73 00

For questions about data protection and to exercise your rights, please contact us at info@ignite-official.ch.

2. Scope

This privacy policy applies to the website ignite-official.ch in all language versions. Additional privacy notices or agreements may apply to the processing of personal data under our contracts, for purchases at our vending machines, in the dashboard (dashboard.vendtec.ch) and for the Piccolo hotel concierge.

3. What data we process

• Technical data when you access the website, such as IP address, date and time, page accessed, referrer URL, browser and operating system (section 4).
• Order and customer data when you order in the online shop, open a customer account or register as a B2B customer, such as name, address, email address, phone number, order content, payment status and age confirmation (section 5).
• Information you provide via a form, by email, by phone or via WhatsApp, such as name, company or venue, email address, phone number, details about your venue or site and the content of your message (sections 6 and 7).
• Usage data from Google Analytics, if we use it, such as pages visited, time on site, device type, approximate location and where the visit came from (section 8).

We do not process sensitive personal data through this website. Please do not send us such data via the forms.

4. Accessing the website, server log files and hosting

When you access our website, your browser automatically sends technical data to our server. This data is stored in server log files: IP address, date and time of access, address accessed (URL) including parameters, HTTP status code, amount of data transferred, referrer URL, and browser and operating system (user agent).

We process this data to deliver the website, ensure its security and stability, analyse errors and prevent misuse. We do not combine it with other data sources. We reserve the right to review it retrospectively if there are concrete indications of unlawful use.

Server log files are deleted after 30 days at the latest, unless they are needed for longer in an individual case to investigate a security incident.

Our website runs on a virtual server in the public cloud of Infomaniak Network SA, Geneva, in data centres in Switzerland. Infomaniak processes the data as our processor.

The connection to our website is encrypted with TLS (HTTPS).

5. Orders in the online shop and customer account

When you order in the online shop, we process your name, billing and delivery address, email address and phone number, the content of your order, the payment status and your confirmation that you are at least 18 years old. You can order as a guest or with a customer account. If you open a customer account, we also process your login details.

We use this data to perform the purchase contract, ship the goods, inform you about your order and keep our accounts. For payment, we pass the necessary details to our payment service provider wallee AG and, depending on the payment method you choose, to TWINT AG or PostFinance AG. For shipping, we pass your name and delivery address and, where needed for delivery and shipment tracking, your email address or phone number to Swiss Post.

If you register as a B2B customer, we also process the details about your company that you provide when registering. We use them to review your registration, activate your B2B account and show you wholesale prices.

We keep orders and accounting records for 10 years (Art. 958f of the Swiss Code of Obligations). Your customer account remains in place until you arrange for its deletion. Data that we are required by law to keep is only deleted once the retention period has expired.

6. Contact forms

Our website has two types of forms:

• Contact form: name, email address, subject (selection) and message.
• Wholesale enquiry: company, contact person, email address, phone number, type of business (selection), message and interest in vapes, spirits or a Vendtec vending machine (selection).

For technical reasons, the form also transmits the language and the page from which you send it. A field that is invisible to people protects against spam. We do not use reCAPTCHA or any other third-party service for this.

Your details are sent to our server over an encrypted connection and from there by email, via the mail server of Infomaniak Network SA in Switzerland, to our mailbox info@ignite-official.ch. Our mailboxes are also hosted by Infomaniak in Switzerland. The server does not store form data in a database.

We use your details to answer your enquiry, assess your venue, send you offers or wholesale terms and stay in touch with you where this relates to your enquiry. We may record enquiries and any resulting business relationships in our CRM system (Zoho, data centres in the EU).

7. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process your details and the content of the communication to handle your request.

Our website contains links to WhatsApp (wa.me). WhatsApp only opens if you click such a link. For Europe and Switzerland, WhatsApp is operated by WhatsApp Ireland Limited, Ireland. Data may be transferred to Meta Platforms, Inc. in the USA. If you write to us via WhatsApp, Meta processes your data under its own terms. If you do not want this, please contact us by email or phone.

8. Google Analytics 4

If we use Google Analytics 4, a web analytics service provided by Google, the following applies. For Switzerland and the EEA, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which works together with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics sets cookies (_ga and _ga_ followed by our property ID, each stored for up to 2 years) and records how visitors use our website: pages viewed, time on site, clicks, device type, browser, screen size, language, approximate location (country, region, city) and the page from which you came to our website. According to Google, Google Analytics 4 does not store IP addresses. They are only used briefly to determine the approximate location and are then discarded. We only receive aggregated reports and cannot identify individual people from them.

We use Google Analytics to understand how our website is used, improve its content and measure the effectiveness of our communication. We have disabled Google Signals and the link to Google's advertising services. We do not use Google Analytics for personalised advertising.

Event data in Google Analytics is deleted automatically after 2 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, which Switzerland and the EU recognise as ensuring an adequate level of data protection. Google also relies on standard contractual clauses.

You can prevent this by blocking or deleting cookies in your browser or by installing Google's browser add-on to opt out of Google Analytics: tools.google.com/dlpage/gaoptout. More information is available in the Google Privacy Policy and under safeguarding your data in Google Analytics.

9. Fonts

All fonts (Oswald and Graphik) are loaded from our own server. No data is transmitted to third parties for this.

10. Cookies and local storage

Our website itself only sets cookies that are technically necessary for the online shop and only uses your browser's local storage for the age check.

When you visit our website, we ask you whether you are at least 18 years old. If you confirm, your answer is saved in your browser's local storage (key ignite_age) so that the question does not appear on every visit. This information is not sent to us.

The online shop sets technically necessary cookies for the cart and the session, such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_ (followed by a session ID). If you log in to your customer account, login cookies are added. Without these cookies, the cart, checkout and customer account do not work.

If we use Google Analytics, it also sets cookies (section 8). You can delete or block cookies and local storage in your browser settings at any time.

11. Links to social media and other websites

Our website contains links to Instagram and WhatsApp and to the websites vendtec.ch and bag.admin.ch. These are simple links, not embedded plugins. No data is sent to the respective provider until you click a link. The privacy policy of the respective provider applies to processing on those websites.

12. Recipients and processors

We only disclose personal data where this is necessary for the purposes described, where the law requires it or where you have consented. Recipients are:

• Infomaniak Network SA, Geneva, Switzerland: website hosting, sending and storing emails
• wallee AG, Switzerland: payment processing in the online shop
• TWINT AG, Switzerland, or PostFinance AG, Switzerland: depending on the payment method chosen
• Swiss Post Ltd, Switzerland: shipping of orders
• Google Ireland Limited, Ireland, and Google LLC, USA: web analytics, if we use it
• Zoho Corporation B.V., Netherlands: CRM system, data centres in the EU
• WhatsApp Ireland Limited, Ireland, and Meta Platforms, Inc., USA: only if you contact us via WhatsApp
• Authorities and courts, where we are legally required to disclose data

We do not sell personal data.

13. Disclosure abroad

Personal data may be transferred to countries in the EU and EEA (in particular Ireland and the Netherlands) and to the USA. In the assessment of the Swiss Federal Council, EU and EEA states provide an adequate level of data protection. For the USA, we rely on the recipient's certification under the Swiss-U.S. Data Privacy Framework or, where there is none, on the European Commission's standard contractual clauses as recognised by the Federal Data Protection and Information Commissioner (FDPIC).

14. Retention

• Server log files: up to 30 days (section 4)
• Event data in Google Analytics: 2 months (section 8)
• Orders and accounting records: 10 years (Art. 958f of the Swiss Code of Obligations, section 5)
• Customer account: until you arrange for its deletion (section 5)
• Enquiries via forms, email or WhatsApp: as long as needed to handle your request and any resulting business relationship. If an enquiry does not lead to a contract, we delete it no later than 24 months after the last contact.
• Business correspondence and contract documents: as long as statutory retention obligations apply, usually 10 years (Art. 958f of the Swiss Code of Obligations).

15. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, such as encrypted transmission (HTTPS), access restrictions and hosting in Switzerland. However, transmitting data over the internet is never completely secure.

16. Your rights

Under applicable data protection law, you have in particular the following rights:

• access: to know whether and which personal data we process about you
• rectification of inaccurate personal data
• erasure or destruction of your personal data, unless a retention obligation applies
• objection to certain processing, in particular web analytics
• receipt or transfer of your personal data in a common electronic format
• withdrawal of consent you have given, with effect for the future
• restriction of processing, where the GDPR applies

An email to info@ignite-official.ch is enough to exercise your rights. We may ask for proof of identity where necessary.

You may also contact the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. Where the GDPR applies, you may also contact the supervisory authority in your country of residence or work in the EU or EEA.

17. Legal bases under the GDPR

Where the GDPR applies, we base our processing on the following legal bases:

• steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR): processing orders and customer accounts, answering enquiries and preparing offers
• legitimate interests (Art. 6(1)(f) GDPR): secure operation of the website, server log files, web analytics, communication with prospects and customers
• legal obligation (Art. 6(1)(c) GDPR): statutory retention obligations
• consent (Art. 6(1)(a) GDPR), where we ask for your consent

18. No automated individual decisions

We do not make decisions based solely on automated processing that have legal effects on you or significantly affect you.

19. Changes

We may update this privacy policy at any time. The current version published on this page applies.