Last updated: 21 October 2026
Privacy Policy
1. Who we are
This Privacy Policy explains how Tschan Group GmbH (“we”, “us”) processes personal data in connection with the website of Michael Lanz Switzerland and with correspondence initiated through it.
The controller responsible for data processing is:
Tschan Group GmbH
Mettlenstrasse 25
CH-8142 Uitikon-Waldegg
Switzerland
Email: info@michaellanz.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Visiting this website
When you visit this website, our hosting provider automatically records technical information in server log files. This includes your IP address, the date and time of access, the page requested, the referring website, and your browser and operating system.
We use this data solely to deliver the website securely and reliably, to detect and prevent misuse, and to resolve technical faults. It is not combined with other data and is not used to identify you. Log files are kept for no longer than 14 months and are then deleted automatically, unless they must be kept longer to investigate a specific security incident.
Our website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, CH-1227 Les Acacias, Switzerland, which processes this data on our behalf.
Legal basis under the GDPR: our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).
3. No cookies, no tracking
This website does not use cookies. It does not use analytics, tracking or advertising technologies, and it contains no social media plugins. We do not create user profiles.
4. No externally loaded resources
All typefaces, styling and other resources used on this website are hosted on our own server. When you visit this website, your browser does not connect to any third-party content providers.
5. Correspondence
When you contact us by email, we process the information you provide. This typically includes your name, email address, telephone number, company and the content of your message. We use it to respond to your enquiry and, where a relationship develops, to manage that relationship.
Emails are processed through our email provider, Microsoft 365 (Microsoft Corporation), with data stored in Switzerland.
Legal basis under the GDPR: steps taken at your request prior to entering into a contract, or the performance of a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
6. Disclosure to third parties
We do not sell or rent personal data. We disclose personal data only to service providers that process it on our behalf (hosting and email providers), where we are legally obliged to do so, or where necessary to protect our rights.
7. Transfer of data abroad
Some of the service providers named above may process personal data outside Switzerland and the European Economic Area, in particular in the United States. Where data is transferred to a country without an adequate level of data protection, we ensure appropriate safeguards. This is done through the provider’s certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework, or through the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.
8. How long we keep data
We keep personal data only for as long as necessary for the purposes described above, or for as long as required by statutory retention obligations. In Switzerland, business correspondence and accounting records must generally be kept for ten years.
9. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. This includes encrypted transmission of the website (HTTPS).
10. Your rights
Under the applicable data protection law, you have the right to:
- request information about the personal data we hold about you
- have incorrect data corrected
- have your data deleted, or its processing restricted
- object to processing based on our legitimate interests
- receive the data you provided to us in a common electronic format (data portability)
- withdraw any consent you have given, with effect for the future
To exercise these rights, contact us using the details in Section 1. We may ask for proof of identity.
You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). In the EU, it is the supervisory authority of your country of residence.
11. Changes to this policy
We may update this Privacy Policy to reflect changes to our website or to the law. The version published on this website applies.
