[derelicta]

Considering its a company established in Switzerland, and that by Swiss law you have the right to informational self determination, as in you have the right to correct/delete data about you (to some extend ofc), I'd say its grossely illegal

[n2d4]

Company location does not matter for this — if you sell goods internationally, you must obey consumer laws wherever you sell them, instead of wherever your business is located