Privacy Policy

Thömus AG (“Thömus” or “we”) places great importance on the protection of your data and the preservation of your privacy. In this statement, we would like to inform you about the collection and use of individual data about personal or factual circumstances of a specific or identifiable natural person (“personal data”).

This privacy policy, as far as our websites are concerned, applies to the domains,, and subdomains in the format,, and

The provisions of this privacy policy also apply to other digital media and services that we operate in addition to the websites, and it also provides information on how we process personal data in general (i.e., regardless of whether it was originally collected from one of our websites or otherwise).

Changes to this privacy policy take effect from the date of their publication on our website. The processing of personal data collected under a previous privacy policy is carried out in accordance with this privacy policy. We reserve the right to change this privacy policy at any time and to inform customers, partners, and users about the changes in an appropriate manner.

I. Information about the Data Controller

1. Data Controller and Contact Persons

Thömus AG is the data controller responsible for the personal data you send to us.

For questions or messages related to your personal data, we are at your disposal. You can reach us as follows:

  • In writing to Thömus AG, Data Protection, Oberriedgässli 6, 3145 Niederscherli.
  • By email at
  • By phone at 031 848 22 14

II. Information about Data Processing

1. Types and Processing of Personal Data

We process your personal data only within the principles of data processing and when there is a legal basis for data processing. Where it serves the initiation and execution of a contract, there is generally a legal basis for the corresponding data processing. Furthermore, we have an interest in further data processing to continuously improve our offerings, adapt them to your needs, for statistical purposes, and to ensure the security of our offerings. We assume that our interests generally outweigh the data processing.

Cookies used on our website can be found at the end of this privacy policy under the title IV, “Information about the Use of Cookies.”

1.1. Personal Data Collected Directly through Website Usage

During your visit to our website, we collect the following data (“log data”):

  1. IP address and referrer URL (the previously visited website)
  2. Used browser version and browser type
  3. Date & time of the visit or request der Anfrage
  4. Transferred data volume
  5. Notification of whether the retrieval was successful
  6. Operating system and provider
  7. Server log files

The processing of log data is carried out in anonymous form, without any connection to other data that could enable identification of the respective visitor or the creation of a profile. The log data is used solely for statistical analysis for the purpose of website operation, security, and optimization.

  1. As part of an inquiry through the contact form, an email, or through other means from you, we process the following data: name, title, contact details, date of birth, gender, language, bookings and transactions, participation and interest in events, bank data (bank account information), contracts, images, videos
  2. other data that we have collected from you or received as part of permissible processing

On our website, we do not engage in profiling in the sense of automated processing of personal data that involves using this data to evaluate certain personal aspects (e.g., for analyses or predictions regarding work performance, financial situation, health, personal preferences, interests, reliability, behavior, location, or movement) and only exceptionally collect and process particularly sensitive personal data (e.g., religious, political, or philosophical views, health status, etc.), and in such cases, it is limited to contractual or legal obligations.

1.2. Online Customers

Through our website, products can be ordered directly or inquiries about a product can be made. In this context, data processing is carried out for the purpose of contract fulfillment or the performance of pre-contractual obligations.

2. Disclosure to Third Parties

2.1. Subsidiary Companies

In general, we provide our services through the subsidiary company with which you are in contact. However, each subsidiary company within the Thömus Group may, as part of the services offered, provide certain services for which the processing of your personal data collected by another subsidiary company may be necessary. Since all subsidiary companies operate under the same data protection regulations, we can ensure compliance with the provisions of this privacy policy in all other group companies as well. The subsidiary companies of the Thömus Group include Thömus AG, Twinner AG, and Swiss Bike Park AG (collectively, the “Thömus Group”).

2.2. Other Third Parties

We do not disclose your data to third parties without your explicit consent. Exceptions to this are our service partners whom we require to process the contractual relationship (e.g., financial institutions for payment processing, postal services, courier services, or shipping companies for product delivery, etc.). In such cases, we strictly adhere to the applicable data protection laws. The extent of data transmission is kept to a minimum.

The use of service partners in countries other than Switzerland or the member states of the European Economic Area is only considered if the respective country either has an equivalent level of data protection according to the Federal Council’s list of countries or if we can ensure the equivalence of the level of protection contractually (e.g., through contracts or the conclusion of so-called standard contract clauses).

3. ompany Pages on Social Media

3.1. Used Platforms

We operate a company page or profile on the following social media platforms, where we publish information about the Thömus Group and interact with other platform users:

  • Instagram: Operated by Meta Platforms Technologies Ireland Limited., Merrion Road, Dublin 4, D04 X2K5, Ireland
  • YouTube: Operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland
  • Facebook: Operated by Meta Platforms Technologies Ireland Limited., Merrion Road, Dublin 4, D04 X2K5, Ireland
  • LinkedIn: 1000 W. Maude Ave Sunnyvale, CA 94085
  • Mailchimp: Operated by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
3.2. Data Processing on Company Pages

We process personal data in accordance with the principles of this privacy policy. Processing of relevant personal data may occur when you interact with us through our company pages on the respective social media platforms.

When visiting a company page, the platform operator collects information that allows them to recognize users and comprehensively analyze user behavior. Based on the data collected in this way, the platform operator can also create user profiles. If you are logged into your respective user account during your visit to a company page, the platform provider can also associate this visit with your account. The platform provider provides us with only an anonymized statistical analysis of the use of our company page based on the information obtained.

You can generally assert your data protection rights regarding data processing through our company pages both with us and with the respective platform operator. However, we would like to point out that these rights can be most effectively exercised with the respective platform operator, as only they have access to user data and can directly take appropriate measures and provide information.

Additional Information about Data Processing, including Location of Processing, by the Respective Operator can be found at:

4. Notifications, Alerts, and Updates

Communication for Advertising Purposes: With your consent, we send you marketing content about our website, services, and products, as well as products offered in partnership with our partners and products and services from third parties (“Newsletters”) through various communication channels such as email, SMS, WhatsApp, pop-ups, and messaging applications. By subscribing to our newsletter, you agree to receive this information.

To lawfully document the registration process, we maintain a list of newsletter subscribers, which includes the registration and confirmation time as well as the IP address. You can opt-out of receiving the newsletter at any time. This can be done by sending an email to or by using the link at the end of the newsletter.

Communication for Informational and Other Purposes: We send you notifications that are necessary or essential for all customers, alerts containing important information, and other notifications requested by you. These notifications cannot be unsubscribed from, but you may be able to customize the media and format through which you receive the notifications.

5. Use of MailChimp in Newsletter Distribution

The newsletters are sent using “MailChimp,” a newsletter distribution platform provided by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in these notices, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Compliance with data protection requirements is ensured through data processing agreements. Furthermore, according to their own information, MailChimp may use this data for the optimization or improvement of its own services, e.g., for the technical optimization of sending and displaying newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them directly or to share it with third parties.

You can find MailChimp’s privacy policy here:

The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from MailChimp’s server when the newsletter is opened. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, is first collected. This information is used for the technical improvement of services based on technical data or target groups and their reading behavior based on the retrieval locations (which can be determined using the IP address) or access times.

The statistical surveys also include findings on whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of MailChimp to monitor individual users. The evaluations serve us more to recognize the reading habits of our users and to tailor our content to them or to send different content based on the interests of our users.

6. transmission of personal data

Unless expressly agreed otherwise, electronic communication is carried out via non-encrypted emails. The use of emails is not technically secure, and it is possible that emails may not be delivered. When transmitting emails, they may cross national borders, even if the sender and recipient are in the same country. The confidentiality of emails cannot be guaranteed without proper or sufficient encryption. Accordingly, we strive to minimize the amount of personal data in email communication.

The transmission of data entered via forms on our website from your computer to the server is encrypted. The data entered in the contact form is not stored on your computer (no cookie or similar). Despite encryption, absolute security is not possible. The server forwards the data entered in the contact form to be processed via email. These emails are not encrypted, so the information provided above regarding email communication applies.

By using the forms or sending an email, you consent to communication via email with knowledge of the described risks.

7. Storage of Your Personal Data

7.1. Server Locations

The personal data collected as part of activities on the website is hosted on servers provided by Cyon GmbH, Brunngässlein 12, 4052 Basel (“Cyon”), in Switzerland. The servers are well protected against unauthorized external access. Backups are created daily. These backups are retained at Cyon’s server location for 14 days.

To protect our website from external attacks, we also use the reverse proxy services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). When a user accesses our website, it is initially checked by Cloudflare to prevent mass attacks on our website. The check is performed automatically through Cloudflare servers in the USA and Canada. The appropriate level of data protection is ensured through a data processing agreement, which can be accessed here.

Regarding your personal data that we directly collect, it is stored on our own servers as well as on virtual servers provided by a reputable cloud provider located in Switzerland or the European Economic Area. The servers are well protected against unauthorized external access. Regular backups are created to prevent data loss as much as possible.

4.2. Retention Period

We only keep your data for as long as it is legally required or necessary for the processing purpose. For analyses, we store your data until the analysis is completed. If we store data due to a contractual relationship with you, this data is retained for at least as long as the contractual relationship exists and no longer than the statute of limitations for possible claims from us or if there are legal or contractual retention obligations. In general, the retention period is not more than 10 years (counted from the termination of the contractual or factual relationship with you).

III. Your Rights

1. General

You generally have the rights to access, rectify, delete, restrict, transfer, withdraw, object, and potentially file a complaint.

2. Data from Individuals Under 16 Years of Age

Under the general requirements of data protection law, individuals under 16 years of age cannot give consent for the processing of their personal data. However, for the use of certain services on our websites and platforms, obtaining consent is necessary.

Our websites and platforms are generally not directed at individuals under 16 years of age, except for our content related to vocational training and internship offers. Where this privacy policy refers to or makes reference to consent, it also includes the consent of parents or legal representatives, if necessary. We generally assume consent from the legal representative as long as a minor interacts with us. This principle applies until we are informed otherwise by the legal representative or we have reason to believe that a minor is acting without the consent of the legal representative.

3. Access, Rectification, and Data Portability

You have the right to access your stored data free of charge at any time, as well as the right to rectify it. Please contact us for this purpose. You can find our contact details under Section I.1. of this privacy policy.

You also have the right to request the free transfer of your electronically available personal data to another responsible party. Please note, however, that we cannot adapt your data to the special formatting requirements of another responsible party and under no circumstances will we transfer your business history or passwords.

4. Withdrawal and Deletion

You can withdraw your data protection consents for processing your data by us at any time and request the deletion of your personal data. Please contact us for this purpose. You can find our contact details under Section I.1. of this privacy policy.

Upon a request for deletion, we will block and deactivate your profile. However, please note that we are obligated by commercial and tax law to retain booking receipts for at least 10 business years. We cannot delete or modify the personal data contained in these documents. Your withdrawal or deletion request applies only to future processing and only to personal data that we process based solely on your consent, rather than a legal justification.

If at the time of receiving your withdrawal and deletion request there is an ongoing contractual relationship, your personal data will continue to be processed until the contract is fully executed. Your data protection withdrawal explicitly has no effect on the processing of existing contractual relationships and does not constitute an extraordinary termination reason.

5. Complaint to a Supervisory Authority

You have the right to lodge a complaint with the competent supervisory authority at the registered office of the controller if you believe that we have violated a provision of the Federal Data Protection Act (DSG).

For complaints by data subjects, the Federal Data Protection and Public Information Commissioner ( is responsible.

IV. Information on the Use of Cookies

In this section, we would like to inform you about how and for what purpose we use cookies on our website, and provide you with information on the impact of these cookies on your personal data. Your rights as outlined in the above Title III. naturally apply to the cookies described below.

1. Cookies

1.1. General Information about Cookies

Cookies are small text files or pieces of information that are stored on your computer or mobile device (such as a smartphone or tablet) when you use our services. A cookie typically contains the name of the website/application it comes from, the duration of the cookie (i.e., how long it will stay on your device), and a value, which is usually a randomly generated unique number.

We use cookies to make our services more user-friendly and tailor our services and products to your interests and needs. Cookies are capable of this because our services can read these files. This allows our services to recognize you and remember important information that makes your use of our services more user-friendly (e.g., by remembering preference settings). Cookies can also be used to help accelerate your future activities and user experience with our services. We also use cookies to compile anonymous, aggregated statistics that allow us to understand how users use our services and help us improve the structure and content of our digital media.

he maximum storage time of cookies after their initial placement on the user’s terminal is determined in accordance with applicable law.

1.2. Essential Cookies

Essential Cookies are cookies that are strictly necessary for our services to work and to use their functions. Without such absolutely necessary cookies, our services would not function as smoothly as you would like, and it might be that we would not be able to offer the website or certain services or functions that you request.

We also use technical cookies that allow our services to remember selections you have made for customization and personalization purposes (such as your username, language, or region). These cookies do not collect information about you for advertising purposes, and they do not remember which websites you have visited.

The following First Party Cookies are set by us (all resident cookies):

Device Identifier Cookie: We install cookies on your computer that recognize you and inform the website or service that you are logged in.

User Local Cookie: We install cookies that are used to remember certain local selections you have made, such as language selection.

Privacy Visibility Cookies: We install cookies on your computer that indicate whether you have been informed through a displayed banner message about the use of cookies and how your data is handled, and whether you have given your consent to the use of cookies, so the banner does not appear again each time you visit a page.

These cookies are necessary for the operation of our services, so you cannot object to the use of these cookies.

1.3. Functional Cookies

Functional Cookies are cookies that enable the use of certain functions in our services that may be useful to you but are not strictly necessary for our services to work and for their functions to be used. You can refuse the installation of these cookies through appropriate settings in your browser, which may, however, result in you not being able to use certain functions of our services or only being able to use them to a limited extent.

Google Maps (Session Third Party Cookies)

We use Google Maps to display interactive maps and create directions. Google Maps is a mapping service provided by Google (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland [“Google”]).

By using Google Maps, information about the use of this website, including your IP address and the (starting) address entered as part of the route planner function, may be transmitted to Google in the United States.

When you visit a page of our website that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted directly to your browser by Google and integrated into the website by your browser. Therefore, we have no influence on the extent of data collected in this way by Google. According to our knowledge, these are at least the following data:

  • Date and time of the visit to the relevant website,
  • Internet address or URL of the website accessed,
  • IP address,
  • (starting) address entered as part of the route planning.

We have no control over the further processing and use of the data by Google and cannot therefore accept any responsibility for this.

If you do not want Google to collect, process, or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, you cannot use the map display.

For the purpose and scope of data collection and further processing and use of data by Google, as well as your rights and settings options for protecting your privacy, please refer to Google’s privacy policy:

By using our website, you consent to the processing of data about you by Google Maps Route Planner in the manner and for the purposes described above.

Mapbox (Session Third Party Cookies)

We use the Mapbox API, a service provided by Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005, USA (“Mapbox”). We use Mapbox to visually represent geographical information. When using Mapbox, Mapbox also collects, processes, and uses data about the use of the mapping functions by visitors.

You can find more information about how user data is handled in Mapbox’s privacy policy at:


On our website, we use “SnipCart,” which is operated by Snipcart, 226, rue Saint-Joseph Est, Québec, Québec G1K 3A9, CA. SnipCart is a shopping cart platform through which the purchase of our products is made.

To learn more about the data processed through the use of SnipCart, please refer to the privacy policy at: and

WP Complianz

We also use WordPress plugins from WP Complianz (“Complianz”) for our website, which is operated by Complianz BV, Kalmarweg 14-5, 9723 JG, Groningen, Netherlands.

To learn more about the data processed through the use of Complianz, please refer to the privacy policy at:

1.4. Social Media Plug-in Cookies

Facebook Plugins (resident third-party cookies)

On our pages, plugins from the social network Facebook, operated by Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, are integrated. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our page. An overview of Facebook plugins can be found here:

When you visit our websites, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

For more information on the purpose and scope of data collection by Facebook, as well as your rights and privacy settings, please refer to Facebook’s privacy policy:

You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g.,

for Mozilla Firefox:

for Opera:

for Chrome:

YouTube (Session Third Party-Cookies)

Our website uses plugins from the Google-operated site YouTube. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube’s servers is established. This informs the YouTube server about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information about how user data is handled, please refer to YouTube’s privacy policy:

Facebook-Pixel (Session Third Party-Cookies)

This website uses the “Facebook Pixel” from Facebook for analysis, optimization, measurement, and the economic operation of our online offering. The Facebook Pixel is operated by Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Facebook”).

Facebook is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law (

With the Facebook Pixel, Facebook can determine the visitors to our websites as a target group for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display Facebook Ads only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined based on the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and are not annoying. With the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were redirected to our website after clicking on a Facebook ad (so-called “Conversion”).

The processing of data by Facebook is carried out in accordance with Facebook’s data usage policy. Accordingly, general information on displaying Facebook Ads is provided in Facebook’s data usage policy: For specific information and details about the Facebook Pixel and how it works, please visit the Facebook Help Center:

You can object to the collection by the Facebook Pixel and the use of your data for displaying Facebook Ads. To set which types of ads are displayed to you on Facebook, you can visit the page set up by Facebook and follow the instructions on adjusting usage-based advertising settings: The settings are platform-independent, meaning they apply to all devices such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes through the Network Advertising Initiative’s opt-out page ( and additionally through the U.S. website ( or the European website (

1.5. Analytical Cookies and Cookies for Marketing, Profiling, and Retargeting

Control of Google Tools via the Tag Manager

The Google Tag Manager from Google is used on our website. The Google Tag Manager is a cookieless domain that does not collect personal data. The Google Tag Manager triggers other tags that may collect data. We would like to point this out separately. The Google Tag Manager does not access this data. If you have made deactivation at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

Google Analytics (resident Third Party-Cookies)

The Google Analytics service from Google is used to analyze the usage behavior of our website. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.

Usage and user-related information that is collected includes, for example, IP address, location, time, or frequency of visits to our website. We have used IP anonymization for the use of Google Tools. With this addition, the last digits of your IP address are shortened before it is stored on Google’s servers. As a result, the technical and analytical Google services remain usable, but you are no longer fully traceable, which means you have a higher level of anonymity regarding your browsing behavior than without IP anonymization.

The data collected in this way is used by Google to provide us with an evaluation of the visit to our website and the user activities there. This data may also be used to provide other services related to the use of our website and the internet.

Google states that it does not merge your IP address with other data. Google states that it does not merge your IP address with other data. as well as information about options to prevent data usage.

Google also offers a so-called deactivation add-on at as well as further information on this. The deactivation add-on can be installed with the common internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs Google Analytics’ JavaScript (ga.js) that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can also prevent Google Analytics from collecting your page visit data in the future by clicking on the following link.

You can also prevent Google Analytics from collecting your page visit data in the future by clicking on the following link. By clicking on the link, a so-called “opt-out cookie” is set, which means that the analysis of your page visit on our site will be prevented in the future:

Please note that, if you delete the cookies in your browser settings, this may also delete the opt-out cookie and may need to be reactivated by you.

Google Site Kit

We have integrated the WordPress plugin Google Site Kit by Google Inc. into our website, which is operated by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. With Google Site Kit, we can quickly and easily view statistics from various Google products such as Google Analytics directly in our WordPress dashboard. The tools integrated into Google Site Kit also collect personal data from you.

For more information about the data processed by using Google Site Kit, please refer to the privacy policy at:

Hotjar (resident Third Party-Cookies)

We use the Hotjar web analytics service provided by Hotjar Ltd (“Hotjar”) for our website. Hotjar is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). This tool allows us to track movements on our website (so-called heat maps). For example, it is possible to see how far users scroll and which buttons users click on and how often. Furthermore, with the help of the tool it is also possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to improve our website and make it more customer-friendly.

We take special care to protect your personal data when using this tool. For example, we can only track which buttons are clicked, mouse history, how far scrolled, device screen size, device type and browser information, location (country only) and preferred language to display our website.

Hotjar offers every user the option of using a “Do Not Track header” to prevent the use of the tool so that no data about the visit to the respective website is recorded. Detailed instructions with information about your browser can be found at

Privacy Policy Status: September 2023