1General information
This privacy policy is based on the Swiss Federal Act on Data Protection (FADP), which has applied in its revised version since 1 September 2023, and – where applicable – on the European Union’s General Data Protection Regulation (GDPR). BRERO Schweiz AG is responsible for processing your personal data (contact details see section 17).
In principle, our website can be used without providing personal data. Where personal data (e.g. surname, first name, phone, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. We do not sell your data and only pass it on to third parties where this is necessary for the purposes stated (see section 7) or where we are legally obliged to do so.
Please note that, despite all the measures we have taken, data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities, and complete protection of data against access by third parties cannot therefore be guaranteed in every case.
2Processing of personal data
Personal data means any information relating to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing means any handling of personal data, irrespective of the means and procedures used, in particular the storage, disclosure, procurement, deletion, saving, modification, destruction and use of personal data.
We process personal data in accordance with Swiss data protection law. In addition – to the extent that the EU GDPR is applicable – we process personal data on the basis of the following legal grounds in connection with Art. 6(1) GDPR:
- lit. a) Processing of personal data with the consent of the data subject.
- lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
- lit. c) Processing of personal data to fulfil a legal obligation to which we are subject under any applicable EU law or under any applicable law of a country in which the GDPR applies in whole or in part.
- lit. d) Processing of personal data in order to protect the vital interests of the data subject or of another natural person.
- lit. f) Processing of personal data in order to safeguard our legitimate interests or those of third parties, unless such interests are overridden by the fundamental freedoms, fundamental rights and interests of the data subject. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.
We process personal data for the period required for the respective purpose or purposes. Where longer retention obligations apply on the basis of statutory or other obligations to which we are subject, we restrict processing accordingly.
3Visiting the website and server log files
When you visit our website, the hosting provider automatically records technical data transmitted by your browser, e.g. IP address, date and time of access, page visited, referrer URL, browser type and operating system. We need this data to provide the website securely and reliably and to detect misuse. It is not combined with other data and is deleted after a short period unless it is needed to investigate a security incident.
4Cookies and local storage
Our website does not set any tracking or advertising cookies and does not use any web analytics services.
For the enquiry, quotation and order form to work, we store the items you select and your form entries locally in your browser («local storage») so that they are retained when you switch between pages. A timestamp of the last submission is also stored locally to prevent duplicate and spam submissions. This information remains on your device and is only transmitted to us when you submit the form. You can delete it at any time in your browser settings.
5Enquiry, quotation and order form
If you contact us via the enquiry, quotation or order form, we process the data you provide: company, name, e-mail address, phone number, billing and delivery address, UID or customer number where applicable, the items and quantities selected, your message and any uploaded files.
We use this data to answer your enquiry, prepare quotations, process orders, issue invoices and stay in contact with you. Mandatory fields are marked; without this information we cannot process your request.
6Contact by e-mail, phone and WhatsApp
If you contact us by e-mail or phone, we process your details in order to respond to your request.
Our website also offers a link to WhatsApp, e.g. for sending us photos or videos. For users in Switzerland and the European Economic Area, WhatsApp is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of Meta Platforms Inc., USA. You are only redirected to WhatsApp when you click the link. WhatsApp then processes your phone number, metadata and the content you send us; a transfer to the USA is possible. If you do not want this, please contact us by e-mail or phone. Further information can be found in WhatsApp’s privacy policy.
7Recipients and disclosure abroad
We only pass on personal data where this is necessary for the purposes stated, in particular to:
- service providers for hosting, website operation, e-mail and IT who process data on our behalf;
- transport and logistics companies for delivering ordered goods;
- fiduciary, accounting and consulting firms as well as authorities, where we are obliged to do so.
The recipients are generally located in Switzerland or the European Economic Area (EEA). When WhatsApp, Instagram, YouTube, Google Maps and Google Fonts are used (sections 6 and 10 to 13), data may also be transferred to the USA. The companies involved are certified under the Swiss-U.S. Data Privacy Framework, which the Federal Council has recognised as adequate since 15 September 2024; otherwise we rely on the European Commission’s standard contractual clauses or on your consent.
8Retention
We retain personal data for as long as is necessary for the respective purpose. Data relating to quotations, orders and invoices is retained for the statutory retention period of ten years (Art. 958f CO).
9SSL encryption
To protect the transmission of confidential data via our forms and for security reasons, we use SSL encryption technology. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol displayed in your browser. Data encrypted via SSL cannot be read by third parties during transmission.
10Google Fonts
To display our typefaces we use the Google Fonts service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page is opened, your browser loads the typefaces from Google servers; in the process your IP address is transmitted to Google, and a transfer to the USA is possible. Google Fonts does not set cookies. Further information can be found in the Google privacy policy.
11Google Maps
On the «Company» page you can display a map from the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded when you click «Load map». Only then is data such as your IP address transmitted to Google; a transfer to the USA is possible. If you are logged in to Google, Google can associate the visit with your account. The «Plan route» link leads directly to Google Maps. Further information can be found in the Google privacy policy.
12Instagram
On our website, we link to our presence on the Instagram service. For users in Switzerland and the European Economic Area, Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Only when you click on the Instagram link are you redirected to Instagram and data transmitted to Meta. If you are logged in to your Instagram account at the time, Instagram can assign the visit to your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or of its use by Meta.
Further information can be found in the Instagram privacy policy.
13YouTube
Our videos are stored directly on our website. In addition, we link to our YouTube channel. For users in Switzerland and the European Economic Area, YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You are only redirected to YouTube, and data is only transmitted to Google, when you click the YouTube link. Here you can find the Google privacy policy.
14Your rights
Within the scope of applicable data protection law, you have the right at any time to obtain information free of charge about your stored personal data, in particular its origin and recipients and the purpose of processing, as well as the right to rectification, erasure, restriction of processing and the return or transfer of your data. You may also object to processing and revoke any consent given at any time.
You also have the right to lodge a complaint with the competent supervisory authority – in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
15Objection to unsolicited e-mails
We hereby object to the use of the contact details published in connection with the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails or post.
16Amendments
We may amend this privacy policy at any time without prior notice. The current version published on our website applies. Where the privacy policy forms part of an agreement with you, we will inform you of the amendment by e-mail or in another appropriate manner in the event of an update.
17Data protection contact
BRERO Schweiz AG
Ebikonerstrasse 75
6043 Adligenswil
+41 41 375 03 03
info@brero.ch