On 27 November 2025, Digitec Galaxus (Switzerland’s leading e-commerce platform) officially informed the Federal Data Protection and Information Commissioner (FDPIC) that it had implemented a series of measures to comply with the recommendation received regarding the management of its users’ personal data. Users of the platform can now easily disable website personalisation and object to the processing of their data for marketing purposes with a single click.
The issue came to light after an investigation by the FDPIC in 2024, which found problems with the mandatory collection of data required to create a user account, without proper consent for using data for marketing purposes. The FDPIC pointed out that requiring customers to create an account in order to complete a purchase, and processing their personal data for website personalisation, violated the principle of proportionality set out in the Federal Data Protection Act (FADP).
In response to this criticism, Digitec Galaxus revised its policies and introduced a new feature that allows users to disable data collection for marketing and personalisation purposes with a single click. This new option makes it easy for users to manage their privacy settings in their user profile: personalisation cookies are automatically disabled without requiring further action. In addition, the company updated the registration form, incorporating a clear reference to website personalisation and the users’ right to object to the processing of their data.
On 9 December 2025, Digitec Galaxus informed its community about the new preference options and explained how users can disable website personalisation with a single click. The FDPIC welcomed the initiative, considering these changes to be an important step forward in personal data protection and the transparency of business practices.
These measures are in compliance with Swiss privacy regulations, particularly Article 19 of the FADP, which requires companies to provide users with direct control over their data and to inform them adequately about the purposes of its processing. With this adjustment, Digitec Galaxus has enhanced the transparency of its practices, offering customers complete control over data collection, which can serve as an example to other private companies.
