Privacy policy
This policy explains which personal data we process when operating rescuecatalog.com, why, and on what basis. It applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Techfunder World AG
Industriestrasse 9
6302 Zug
Switzerland
E-mail: [email protected] · Phone / WhatsApp: +49 171 1254074
We have not currently appointed a representative in the EU under Art. 27 GDPR. We have not appointed a data protection officer; please send privacy requests to [email protected].
2. Visiting the website
When you open pages, your browser sends technically necessary data (IP address, date and time, address requested, referrer, browser and operating system details). We use it to deliver the website and to protect it against misuse (for example, by limiting sign-in attempts). Where server logs are kept, we delete them after at most 30 days unless they are needed to investigate a security incident. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
We serve fonts and functional page components ourselves. We load Google Analytics only after you consent to optional audience measurement. Google may then process usage data such as abbreviated technical device and interaction data and online identifiers, and may transfer data to the USA. The provider is Google Ireland Limited; details are in Google's privacy policy. The purpose is to measure and improve the website; the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through “Cookie settings”. We use no advertising services.
3. Cookies and local storage
We use technically necessary cookies and storage for sign-in, language and the quote list; these do not require consent (§ 25(2) no. 2 German TDDDG). Optional Google Analytics cookies are set only after your consent. The full list and settings are on the Cookies page.
4. Quote requests by WhatsApp or e-mail
When you send your quote list or a kit list, your device opens WhatsApp or your e-mail program with a prepared message. We only receive what you send (for example name, organisation, country, products, quantities, message) and use it to answer your request and prepare quotes. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract), otherwise Art. 6(1)(f). WhatsApp is operated by WhatsApp Ireland Limited (Meta); WhatsApp's own privacy policy applies to its use, and data may be transferred to the USA. We keep requests as long as needed for the business relationship, and business correspondence as long as the law requires.
5. Account and credits
For an account we process your e-mail address, name, organisation, role (buyer or producer), currency and language, as well as credits bought and used, orders (for samples also the delivery address and phone number), unlocked requests and your alert settings. The purpose is to provide the account and the paid services; the legal basis is Art. 6(1)(b) GDPR. For signing in, we store your private account link only as an irreversible hash. You can download your data and delete your account at any time in the account area; we then remove your details but keep booking and payment records as long as the law requires (in Switzerland usually 10 years, Art. 958f Code of Obligations).
6. Payments through Stripe
You pay for credits through Stripe. You enter payment details directly at Stripe; we receive no card data, only the amount, currency, status and a reference of the payment. For accounts in Switzerland, the contracting party is Stripe Payments Europe, Limited (Ireland). Stripe processes, among other things, your e-mail address, name, billing address, tax ID and payment data, partly as an independent controller (for example for fraud prevention and legal obligations), and may transfer data to other countries including the USA. Details: stripe.com/privacy. Legal basis: Art. 6(1)(b) and (c) GDPR.
7. E-mails from us
We send sign-in links, order confirmations and, if you switch them on in your account, alerts about new aid requests. You can switch alerts off in your account at any time.
8. Business contacts of manufacturers and suppliers
For sourcing, we process business contact data of manufacturers and suppliers (company, names and roles of contact persons, business e-mail addresses and phone numbers, offers, correspondence). This comes from public sources (websites, trade directories) or from the companies themselves. The legal basis is our legitimate interest in sourcing and maintaining supplier relationships (Art. 6(1)(f) GDPR) or Art. 6(1)(b) GDPR. We use Notion (Notion Labs, Inc., USA), Gmail (Google) and a self-hosted WhatsApp connection for this. You can object to this processing at any time.
9. Information about aid requests
The aid requests under "Aid needs" come from public tender platforms. Publicly we show them without buyer names; signed-in users can unlock the buyer, reference number and source with credits. Where the information contains names of contact persons, we process them on the basis of Art. 6(1)(f) GDPR and remove them on request.
10. Recipients and transfers abroad
Data is only received by the service providers named above for their task, by our team (BRNZ), and by authorities where we are legally obliged. The EU Commission has issued an adequacy decision for Switzerland. Transfers to countries without an adequate level of data protection (for example the USA) only take place with appropriate safeguards, such as the recipient's certification under the Data Privacy Framework or standard contractual clauses.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw any consent at any time. Write to [email protected]; downloading and deleting are also available directly in your account. You can lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your place of residence or work.
12. Security and automated decisions
The connection to the website is encrypted (HTTPS), and access to internal data is password-protected. We do not make automated individual decisions or create profiles.
13. Changes
We update this policy when our processing changes. The version published here applies.
Last updated: 18 October 2026