Data Controller
The entity responsible for processing your personal data is:
| Company | Creator Social GmbH |
| Address | Besmerweg 2, 8280 Kreuzlingen, Switzerland |
| VAT / UID | CHE-204.231.516 MWST |
| creatorsocial@gmx.ch |
Data We Collect
Purchase & Contact Data
- Name and email address
- Billing address
- Order history and purchased products
- Payment method details (card data is processed exclusively by our payment provider and is never stored by us)
Technical Data
- IP address and approximate location
- Browser type, operating system, device type
- Pages visited, click paths, and time spent on site
- Referrer URL (the page you visited before arriving at ours)
Communication Data
- Content of emails and support requests you send us
- Newsletter subscription status
Live Session Data
- Voice and image captured during recorded webinars or live trainings (only with your prior consent)
Legal Basis for Processing
Every processing activity is based on one of the following legal grounds:
| Legal Basis | Examples |
|---|---|
| Contract performance Art. 31 revDSG / Art. 6(1)(b) GDPR |
Processing your order, delivering products, providing customer support |
| Legal obligation Art. 31 revDSG / Art. 6(1)(c) GDPR |
Accounting and tax records (10-year Swiss retention requirement) |
| Legitimate interests Art. 31 revDSG / Art. 6(1)(f) GDPR |
Website security, fraud prevention, product improvement, analytics |
| Consent Art. 31 revDSG / Art. 6(1)(a) GDPR |
Email marketing, non-essential cookies, recording of live sessions |
You may withdraw any consent you have given at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.
Purposes of Processing
- Order fulfillment: Receiving orders, processing payments, and delivering digital products.
- Customer communication: Sending order confirmations, support responses, and product-related updates.
- Email marketing: Sending newsletters and offers — only with your explicit consent. You can unsubscribe at any time.
- Website operation: Ensuring security, diagnosing errors, and improving our platform.
- Analytics: Understanding how our site and products are used in order to improve them.
- Legal compliance: Maintaining records for tax and accounting purposes.
Sharing with Third Parties
We do not sell your personal data. We share data only where necessary with the following categories of service providers:
- Payment processors (e.g. Stripe, PayPal): For secure payment handling. These providers receive only the data needed for the transaction and are bound by their own privacy policies.
- Course & hosting platforms (e.g. Kajabi, ThriveCart): For delivery and management of digital products.
- Email marketing providers (e.g. Klaviyo, ActiveCampaign): For sending newsletters and automated emails — only with your consent.
- Analytics tools (e.g. Google Analytics, Plausible): For website usage analysis, where you have consented.
- Authorities: Where we are legally required to do so (e.g. by court order or tax authority).
We have data processing agreements in place with all processors to ensure compliance with revDSG and GDPR.
International Data Transfers
Some of our service providers are located outside Switzerland or the EEA, in particular in the United States. Where such transfers occur, we ensure an adequate level of data protection through:
- EU Standard Contractual Clauses (SCCs) under GDPR
- Adequacy decisions of the Swiss Federal Council or EU Commission
- Other appropriate safeguards under Art. 16 revDSG
You can request information about the specific safeguards applied to any particular service by contacting us.
Data Retention
We retain your data only for as long as necessary for the relevant purpose or as required by law:
| Data Category | Retention Period |
|---|---|
| Purchase records & invoices | 10 years (Swiss OR statutory requirement) |
| Customer account & order history | Duration of business relationship + 3 years |
| Email marketing (consent-based) | Until consent is withdrawn |
| Support communications | 3 years after the matter is resolved |
| Technical logs / analytics data | Maximum 14 months |
| Webinar recordings | Until consent is withdrawn or product is discontinued |
After the applicable period, your data is securely deleted or anonymized.
Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Have inaccurate or incomplete data corrected.
Request deletion of your data, subject to legal retention obligations.
Restrict processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw any consent given (e.g. unsubscribe from our newsletter) at any time.
Lodge a complaint with the relevant supervisory authority.
To exercise your rights, contact us at creatorsocial@gmx.ch. We will respond within 30 days.
Cookies & Tracking
Strictly Necessary Cookies
These cookies are essential for the website to function (e.g. shopping cart, login session). They are set without your consent as they are technically required.
Analytics & Marketing Cookies
These are only set where you have given your consent via our cookie banner. They allow us to analyse website usage and, where applicable, serve personalised content. You can withdraw consent at any time via the cookie settings on our website.
Managing Your Preferences
You can also disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
Changes to This Policy
We may update this Privacy Policy from time to time, for example to reflect changes in our data processing practices or applicable law. The current version is always available on this page. The effective date at the top of this page indicates when the policy was last updated.
For material changes, we will notify you by email if you are a customer or subscriber.
Questions about your data?
We're happy to help. Just reach out.