Privacy Policy

Privacy Policy of G. Bianchi AG

1.0 General Information

G. BIANCHI AG (hereinafter also referred to as „we“ or „us“) processes personal data concerning you or other individuals (so-called „third parties“). We use the term „data“ here synonymously with „personal data.“

In this Privacy Policy, we inform you about the most important aspects of data processing in our company as well as the data protection claims to which you are entitled. This Privacy Policy covers the collection of personal data in both online and offline areas, including personal data received from various sources, such as customers, suppliers, business partners, websites, apps, third-party social networks, and events.

Consequently, we consider it a matter of course to comply with the Swiss Federal Act on Data Protection (FADP), the Ordinance on the Federal Act on Data Protection (DPO), the Telecommunications Act (TCA), and other applicable data protection provisions (e.g., GDPR) where relevant.

2.0 Contact

2.1 Data Controller

The data controller and the party responsible for data processing is:

BIANCHI AG
Allmendweg 6
CH-5621 Zufikon

If you have any questions regarding data protection or wish to exercise your rights (see Section 15.0), please contact us at the following address: datenschutz@bianchi.ch.

2.2 Data Protection Officer

Our Data Protection Officer is:

Mr. Reto Benz
G. BIANCHI AG
Allmendweg 6
CH-5621 Zufikon
Email: datenschutz@bianchi.ch

3.0 Collection and Processing of Personal Data

We collect and process various personal data about you. This includes, in particular, data:

that we receive within the scope of our business relationships from you, future customers, interested parties, service providers, suppliers, business partners, or other persons involved in the business relationship;
that we receive about you in correspondence and meetings with third parties;
that we are legally or contractually obliged to collect;
that we collect when you use our website or other platforms;
that we obtain from publicly accessible sources (media, internet) or public registers (debt collection registers, land registers, commercial registers, etc.);
that we receive from authorities and other third parties (address brokers, credit agencies).

Depending on the nature of the business relationship, we process the following categories of personal data:

Contact and identification data such as surname, first name, address, email address, telephone number, customer number;
Personal details such as age, gender, nationality, place of birth, residence status, marital status, language, details of relatives;
Financial data such as payment information, payment history, creditworthiness data, purchasing power;
Contractual data such as type of contract, contract content, type of products and services, consumer groups, consumer types, forecast data, applicable terms and conditions, start of contract, contract duration, billing data;
Metadata from telecommunications traffic such as telephone number, date, time and duration of the connection, type of connection, location data, IP address, device identification numbers;
Interaction and usage data: correspondence, chat content, voice recordings, customer service information, movement data, customer preferences, customer segment and target group information, device type, device settings, operating system, software, information from the assertion of rights, feedback;
Website information: website, IP address, cookie information, browser settings, frequency of website visits, duration of website visits, search terms, clicks on content, originating website.

4.0 Purposes of Data Processing and Legal Bases

We use the personal data we collect primarily to conclude and process contracts with you and other business partners, as well as to comply with our legal obligations.

We also rely on the processing of data for the purchase of products and services from our suppliers and subcontractors. If you work for a customer or business partner, your data may naturally also be affected in this capacity.

Furthermore, we process data from you and other persons, to the extent permitted and as we deem appropriate, for the following purposes in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

Offering and further development of our products, services, website, and other platforms on which we are present;
Disruption and complaint management;
Communication and processing of inquiries (e.g., via contact forms, email, telephone, online job applications, media inquiries);
Review and optimization of procedures for needs analysis for the purpose of direct customer contact, as well as the collection of personal data from publicly accessible sources for customer acquisition;
Advertising and marketing (including the organization of events, tours, and competitions), provided you have consented to the use of your data or have not objected to it (if we send you advertising as an existing customer, you can object to this at any time free of charge; we will then place you on a blocking list for further advertising mailings);
Market research, media monitoring;
Assertion of legal claims and defense in connection with legal disputes and official proceedings;
Prevention and investigation of criminal offenses and other misconduct (e.g., conducting internal investigations, data analysis to combat fraud);
Ensuring our operations, in particular IT, our website, and other platforms;
Safeguarding our interests and securing our claims.

Insofar as you have given us consent to process your data for specific purposes, we process your personal data within the scope of and based on this consent, unless we have another legal basis and require one. Consent once given can be revoked at any time, although this has no effect on data processing that has already taken place. Revocation can be made in writing or by email to datenschutz@bianchi.ch or, in the case of newsletters, via the link provided for unsubscribing in the newsletter (see also Newsletter Distribution and Marketing Emails). Processing may then serve to fulfill our services and implement contractual measures as well as to respond to inquiries. Furthermore, processing may be based on our legitimate interest or due to legal obligations.

5.0 Contacting Us

When you contact us via our contact addresses and channels (e.g., by email, telephone, WhatsApp, or contact form), your personal data will be processed. The data you have provided to us will be processed, e.g., the name of your company, your first and last name, your function, your email address or telephone number, and your request. In addition, the time of receipt of the inquiry is documented. Mandatory fields in contact forms are marked with an asterisk (*).

We process this data exclusively to implement your request (e.g., providing information, support in contract processing, etc.).

Further information regarding communication via WhatsApp can be found on the WhatsApp legal overview page.

6.0 Job Applications

If you apply for a position with us, we process the personal data we receive from you as part of the application process. In addition to your personal details, education, work experience, and skills, this includes standard correspondence data such as postal address, email address, and telephone number. Furthermore, all documents submitted by you in connection with the application, such as motivation letters, CVs, and certificates, will be processed. Applicants may also voluntarily provide us with additional information. This data will be stored, evaluated, processed, or forwarded internally exclusively within the scope of your application. Furthermore, it may be processed for statistical purposes (e.g., reporting). In this case, no conclusions can be drawn about individual persons.

Processing may also take place by other electronic means. This is particularly the case if you submit corresponding application documents to us electronically, for example by email.

Your applicant data will be stored separately from other user data and will not be merged with it.

You can object to this data processing at any time and withdraw your application. Please send your objection to the person named as the contact in the job advertisement or to the email address datenschutz@bianchi.ch.

If we conclude an employment contract with you, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal regulations.

If the application process ends without employment, your personal data will be stored for a further 3 months for documentation purposes and then deleted, unless you have given us consent to use your details for further application processes with us and, if necessary, to contact you again. You have the option to revoke this consent at any time. You can send your revocation to the email address datenschutz@bianchi.ch.

7.0 Newsletters and Marketing Emails

We only send newsletters and marketing emails if you have registered for one of our newsletters or if the legal requirements for sending marketing emails are met. For registration, we use the simple opt-in procedure, whereby you must provide us with your email address, your first and last name, and explicitly register to receive newsletters. You can stop receiving newsletters and marketing emails at any time by revoking your consent, either via the link provided in the newsletter or by email to marketing@bianchi.ch.

8.0 Log Data

When you visit our website or similar, our servers temporarily store each access in a log file, the so-called server log files. For example, your IP address, the date and time of your visit, the name of the file accessed, access status (successful, partially successful, failed, etc.), the web browser and operating system used, and other similar information that serves to prevent danger in the event of attacks on our information technology systems are recorded.

The purpose of processing this information is to correctly display our website and its content and offers and to ensure data traffic, to optimize our website, content, and offers, to permanently guarantee the stability and security of our website and systems, and to enable the investigation, defense, and prosecution of cyberattacks, spam, and other illegal acts in relation to our website and systems and to enforce related claims.

9.0 Online Shop

9.1 General Information

The basis for processing your personal data in the online shop is your and our common legitimate interest in processing your order. If the order serves to fulfill a contract to which you are a party or to implement pre-contractual measures, this is an additional basis for processing your personal data.

The purpose of processing your personal data is to provide you with the services you requested and to process the related payment.

To prevent unauthorized access by third parties to your personal data, data transmission to the online shop is encrypted using TLS technology/HTTPS.

9.2 Setting Up a Customer Account

By opening a customer account, you receive password-protected direct access to your data stored with us. You can use your customer account to log in to our online shop. In the customer account, you can, among other things, view data about your completed, open, and recently shipped orders or manage your personal data.

To place orders in the online shop, you must open a customer account. To open a customer account, information (*mandatory) such as your first and last name, your address, your email address, and your company is required. Further information is voluntary.

The mandatory information is required to provide you with password-protected direct access to your master data stored with us and to process your request.

If you wish to close your customer account, the associated data will be deleted, subject to legal retention obligations. It is your responsibility to secure your personal data upon termination before the end of the contract. We are entitled to irretrievably delete all data stored during the term of the contract. You can send your request for closure to the following email address: datenschutz@bianchi.ch.

9.3 Ordering

If you wish to place orders in our online shop, we require information (*mandatory) such as your first and last name, your address, your email address, and your company for the processing of the contract. Further information is voluntary.

The mandatory information is required to process your order, deliver the ordered products, and ensure correct payment.

Further information on data protection at these providers can be found on their websites.

10.0 Cookies / Tracking and Other Technologies in Connection with the Use of Our Website

10.1 Fundamentals

In certain cases, we use so-called cookies and comparable technologies with which we and third parties engaged by us can recognize you during your use and, under certain circumstances, track you across several visits. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser used when you visit our website. When you call up this website again, we can recognize you in this way, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your website visit („session cookies“), cookies can also be used to store user settings and other information over a certain period of time („permanent cookies“). However, you can set your browser to reject cookies, store them only for one session, or delete them. Most browsers are preset to accept cookies.

We sometimes use Google services or comparable services on our website. With these services, we can in particular measure and evaluate the use of the website and the effectiveness of online advertisements. Permanent cookies set by the service provider are also used for this purpose. The service provider does not receive any personal data from us (and does not keep any IP addresses), but can track your use of the website, combine this information with data from other websites you have visited and which are also tracked by the service provider, and use these findings for its own purposes (e.g., controlling advertising). If you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider then takes place under the responsibility of the service provider in accordance with its data protection provisions. The service provider only informs us how our respective website is used (no information about you personally).

We currently use offers from the following service providers:

Microsoft services: Operator of the IT operating infrastructure; service provider: Microsoft Corporation (USA) or Microsoft Ireland Operations Limited (Ireland); General information on data protection: „Data protection at Microsoft“, „Data protection (Trust Center)“, Privacy Policy; Data processing agreement: „Microsoft Products and Services Data Protection Addendum (DPA)“; Standard contractual clauses (guaranteeing data protection level for processing in third countries): „Microsoft Products and Services Data Protection Addendum (DPA)“.

Google services: Web analysis and reach measurement; service provider: Google LLC (USA) or Google Ireland Limited (Ireland) for users in the European Economic Area (EEA) and Switzerland; General information on data protection: „Privacy and Security Principles“, Privacy Policy, „Google is committed to complying with applicable data protection laws“, „Privacy guide in Google products“, „How we use data from websites or apps that use our services“ (information from Google), „Types of cookies and other technologies used by Google“, „Personalized advertising“ (activation / deactivation / settings); Data processing agreement: „Google Ads Data Processing Terms“; Standard contractual clauses (guaranteeing data protection level for processing in third countries): „Google Ads Data Processing Terms“.

10.2 Google Services

Based on our legitimate interests, we use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).

Our website uses the following Google services:

Google Analytics
Google Tag Manager
Google Ads

10.2.1 Google Analytics

For the purpose of analyzing our website and its visitors as well as for marketing and advertising purposes, we use the web analysis service Google Analytics. In this context, pseudonymized usage profiles are created and cookies are used to evaluate your use of our website, to compile reports on website activities, and to provide us with further services associated with website and internet use. The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. This information may also be transmitted to third parties if this is required by law or if third parties process this data on our behalf. We do not merge the IP address transmitted by your browser as part of Google Analytics with other Google data.

We only use Google Analytics with activated IP anonymization. This means that your IP address is shortened by Google within the EU/EEA or Switzerland. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent the collection and transmission of the data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link. An opt-out cookie will be set that prevents the future collection of your data when visiting our website. However, we would like to point out that in this case you may not be able to use all functions of our websites to their full extent.

Further information can be found in the Terms of Service and Privacy Policy of Google.

10.2.2 Google Tag Manager

Furthermore, we use the Google Tag Manager to integrate and manage Google analysis and marketing services into our website. Google Tag Manager is a solution with which we can manage website tags via an interface.

The Google Tag Manager itself, which implements the tags, is a cookie-less domain and does not collect any personal data. However, the tool ensures the triggering of other tags, which in turn may collect personal data. Google Tag Manager itself does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Further information can be found in the usage guidelines for this service.

Further information on data use for marketing purposes by Google can be found on the overview page, and Google’s privacy policy is available at this link.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google.

10.2.3 Google Ads

With Google Ads, a cookie is set on your computer („conversion cookie“) if you reached our website via a Google advertisement. These cookies have a limited validity, do not contain any personal data, and thus do not serve for personal identification. If you visit certain pages of ours and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were thus redirected to our website. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked via the websites of Ads customers. The information obtained with the help of the conversion cookie serves Google to create conversion statistics for Ads customers who have opted for conversion tracking. Through these statistics, we learn the total number of users who clicked on our ads and also which of our websites were subsequently called up by the respective user. We do not receive any information with which you can be personally identified.

Based on the information collected, interest-relevant categories are assigned to your browser. These categories are used to display interest-based advertising.

We use the data acquired about you with the above-mentioned cookie (so-called conversion tracking) for the following purposes:

Remarketing
Affinity audiences
Custom affinity audiences
In-market audiences
Similar audiences
Demographic and geographic targeting
Dynamic remarketing
User lists

With the use of Google Ads, we reach users who have already visited our website. This allows us to present our advertising to target groups that are already interested in our products or services.

You can generally prevent the storage of cookies by deactivating the storage of cookies in your browser. Furthermore, you have the option to object to interest-based advertising by Google Ads by making the appropriate settings.

Further information on the terms of use and data protection of Google Ads can be found at this link.

10.3 Salesforce

To optimize our website and customer contact, we also use Salesforce, a service of Salesforce Inc. (Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA). Salesforce uses cookies that are stored on your computer. The basis for this is our legitimate interest in analyzing your use of our website and its optimization.

Since Salesforce is an international company headquartered in the USA, it cannot be ruled out that your personal data will be transferred to the USA. Salesforce is certified under the Swiss-US as well as EU-US Privacy Shield Framework and thus undertakes to ensure an adequate level of data protection for the transfer of personal data that is comparable to that in the EU and thus also to that in Switzerland. Further information in this connection can be found under Privacy Shield.

Furthermore, we have concluded a corresponding contract for order data processing with Salesforce.

The collection and processing of data can be objected to at any time. In individual cases, this may lead to functional restrictions when using the website.

Further information on this can be found in Salesforce’s privacy policy.

11.0 Social Media Presence / WhatsApp

We maintain social media profiles on Facebook, Instagram, and LinkedIn. In addition, you have the option to contact us on WhatsApp.

The data you enter on our social media profiles is published by the social media platform and is at no time used or processed by us for other purposes. However, we reserve the right to delete content if this should be necessary. If necessary, we also communicate with you via the social media platform in addition to communication on WhatsApp. The basis is your and our legitimate interest in exchanging information with each other in this way.

Be aware that the operators of the above-mentioned platforms use web tracking methods. Web tracking, over which we have no influence, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the platform can be found in the privacy policy of the respective provider:

12.0 Data Disclosure and Data Transfer Abroad

We generally treat your personal data confidentially and only pass it on if you have expressly consented to this, if we are legally obliged or entitled to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. Furthermore, we pass on your personal data to third parties insofar as this is necessary or appropriate within the scope of using the website or for the possible provision of the services requested by you (also outside the website).

We disclose your personal data to the following categories of recipients:

Group companies (see Legal Notice);
Business partners;
Service operators;
Subcontractors;
Debt collection partners;
Service companies;
Authorities.

The recipients are predominantly domestic but may also be based outside Switzerland. In particular, you must expect your data to be transferred to other countries in Europe and the USA, where the service providers we use are located (such as Microsoft, Google).

In doing so, the legal regulations for the disclosure of personal data to third parties are of course complied with. If we use processors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of your personal data in accordance with the relevant legal regulations (see Section 1.0).

If the level of data protection in a country in which the data is processed does not correspond to the applicable data protection provisions (see Section 1.0), we ensure contractually that the protection of your personal data corresponds to that in Switzerland or the European Economic Area (EEA) at all times.

13.0 Outsourcing of Business Areas or Services

We outsource certain business areas and services in whole or in part to third parties (such as payment transactions, management of IT systems, CRM, etc.). The service providers who process personal data on our behalf for this purpose (so-called processors) are carefully selected. Whenever possible, we work with processors domiciled in Switzerland or the European Economic Area, so that data processing can take place in Switzerland or, if applicable, in the EEA. Further delegation of certain services always requires our consent. The processors may only process received personal data in the same way as we do ourselves and are contractually obliged to guarantee the confidentiality and security of the data.

14.0 Duration of Retention of Personal Data

We process and store your data only as long as is legally necessary or required to provide the service requested by you or otherwise required for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract), in accordance with the legal retention and documentation obligations, and beyond that in the case of a legitimate business interest (e.g., for evidence and documentation purposes). If there are no legal or contractual obligations to the contrary, we delete or anonymize your data after the storage or processing period has expired as part of our usual processes in order to act in accordance with the law (especially FADP and GDPR).

15.0 Data Security

We take appropriate technical and organizational measures to protect your data and your personal data from unauthorized access and misuse. These security measures include, for example, IT and network security solutions, encryption of data carriers and transmissions, access controls and restrictions, issuance of instructions, confidentiality agreements, controls, and training of employees. We regularly review our security measures and adapt them to the state of the art. We also oblige our processors to take appropriate security measures. However, security risks cannot generally be completely ruled out; residual risks are unavoidable.

16.0 Your Rights

Within the scope of the data protection law applicable to you (see Section 1.0), and insofar as provided therein, you have the following rights:

the right to request information from us as to whether and which data of yours we are processing;
the right to have us correct data if it is incorrect;
the right to request the deletion of data;
the right to request from us the surrender of certain personal data in a common electronic format;
the right to revoke consent, insofar as our processing is based on your consent;
the right to object to the processing of your data, in particular for direct marketing purposes and other legitimate interests in processing;
the right to receive further information on request that is necessary for the exercise of these rights;
the right to state your point of view in the case of automated individual decisions and to request that the decision be reviewed by a natural person.

You also have the right to enforce your claims in court or to file a complaint with the competent data protection authority.

To exercise these rights, please send us an email to the following address: datenschutz@bianchi.ch.

Please note that conditions, exceptions, or restrictions apply to these rights (e.g., if we are legally obliged to store or process certain data, have an overriding interest in doing so (insofar as we can rely on this), or need it for the assertion of claims). We will inform you accordingly if necessary.

17.0 Changes to this Privacy Policy

We reserve the right to supplement or change this Privacy Policy at any time. The version published on our website at the time applies.