This policy explains which personal data HOTIPARTS processes, why and for how long. We collect as little data as possible. Version: November 2026.
1. Controller
Lulzim Hoti
Route du Stant 23, 1163 Etoy, Suisse
E-mail: info@hotiparts.com
2. Legal basis
We process data in accordance with the Swiss Federal Act on Data Protection (revised FADP) and, for users located in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR). Depending on the case, processing is based on the performance of a contract (Art. 6(1)(b) GDPR), on a legal obligation (Art. 6(1)(c)), such as keeping accounting records, or on our legitimate interest in operating a safe and reliable platform (Art. 6(1)(f)).
3. Data we process
- Account: name, company, address, e-mail, phone, language and password (stored only in hashed form). For suppliers, in addition: UID or VAT number and bank details for payouts.
- Requests and orders: parts searched for, quantities, delivery country and address, offers, invoices, messages, uploaded photos and documents, reviews.
- Payments: amount, payment method and status. For bank transfers, the information shown on the bank statement (name and account of the payer). Card details are processed directly by Stripe or PayPal and are never stored by HOTIPARTS.
- Alerts and favourites: the part numbers you follow.
- Technical data: the IP address is used only to determine the country and region of the visit, using a geolocation database installed on our server; it is then discarded. Visitor statistics are anonymous. Our hosting provider also keeps technical logs for the security and operation of the server; these are deleted automatically after a short period.
4. Purposes
- managing your account and verifying suppliers;
- processing requests, offers, orders, payments and payouts;
- passing on messages between buyers and suppliers after review, and preventing circumvention, fraud and abuse;
- sending you e-mails about your requests and orders, and the alerts you have asked for;
- meeting our legal obligations, in particular for accounting;
- improving the website through anonymous statistics.
We do not use your data for advertising and we do not sell it.
5. Anonymity between buyers and suppliers
The supplier does not know the buyer's identity. To set a price, the supplier only sees the delivery country and postcode. After payment, the supplier receives the name and delivery address, without phone number or e-mail, solely to ship the part. The buyer only sees the country where the part is located, never the supplier's identity.
6. Recipients and processors
- Hosting and e-mail: Infomaniak Network SA, Geneva (Switzerland).
- Payments: Stripe (card, TWINT) and PayPal, which process payment data under their own responsibility.
- Transport: the carrier chosen by the supplier receives the delivery address.
- Translation and artificial intelligence: we use translation and artificial intelligence services, only for the functions concerned (translation of part descriptions, message screening, photo search). We pass on as little data as possible.
- Authorities: where we are required to do so by law.
Some providers may process data outside Switzerland and the European Union, in particular in the United States. In that case, we make sure appropriate safeguards are in place, such as standard contractual clauses.
7. Cookies and statistics
HOTIPARTS only uses technically necessary cookies: a session cookie (login, request basket) and a language cookie. We do not use Google Analytics, advertising cookies or third-party tracking tools. Our visitor statistics are anonymous and cannot be used to identify you.
8. Retention periods
- Buyer accounts that have been inactive for 3 years are deleted.
- The sales history (orders, invoices, payments) is kept for 10 years, in accordance with Swiss accounting law (Art. 958f CO).
- Other data is deleted or anonymised as soon as it is no longer needed.
You can ask for your account to be deleted at any time; data subject to a legal retention obligation is then kept until that obligation ends.
9. Security
Connections to the website are encrypted (HTTPS). Passwords are stored only in hashed form. Access to data is limited to the people who need it.
10. Automated decisions
We do not take any automated individual decisions. Offers are approved by a person. Messages flagged by an automated check are reviewed by a person before any decision is made.
11. Your rights
You can request access to your data, its rectification or erasure, or the restriction of its processing, object to processing and, where provided for by law, receive your data in a common format. Write to us at info@hotiparts.com. We may ask you for proof of identity.
You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the data protection authority of your country.
12. Changes
We may update this policy. The version published on the website applies.