1. Introduction and Contact Details of the Controller

Only the german version has legal effect.

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Markus Hilfiker, BBA AG, Schachenallee 29, 5000 Aarau | +41 62 836 90 40. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (if applicable, in anonymized form)

There is no disclosure or other use of the data. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

3. Hosting & Content Delivery Network

3.1 AWS-CloudFront

We use a content delivery network from the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

This service allows us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

3.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with the Swiss data protection level.

4. Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process specific user information such as browser and location data and IP address values to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies are used to simplify the order process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit).

We may work with advertising partners who help us make our internet offering more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we work with such advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected within the paragraphs below.

Please note that you can set your browser to inform you about the setting of cookies and allow you to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

• Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporäres-zulassen-von-cookies-und-website-daten-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari: https://support.apple.com/kb/ph21411?locale=de_DE
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5. Contacting Us

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form can be seen from the respective form. This data is used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. Your data will be deleted after your request has been fully processed. This is the case when it can be inferred from the circumstances that the relevant issue has been conclusively clarified and there are no statutory retention obligations.

7. Use of Your Data for Direct Marketing

7.1 Subscription to our Email Newsletter

By providing your personal data, you agree that we may use this data to send newsletters.

We store your IP address and the date and time of registration as provided by your Internet Service Provider (ISP) to be able to trace any potential misuse of your email address. The data collected during newsletter registration is used exclusively for promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting us directly. Once you unsubscribe, your email address will be immediately deleted from our newsletter distribution list, unless we can demonstrate a legitimate interest or legal justification for further processing under Art. 31 para. 2 DSG.

7.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services via email. For this, we do not need to obtain separate consent from you. Data processing in this respect is based solely on our legitimate interest in personalized direct advertising. If you initially objected to this use, we will not send emails. You can object to the use of your email address for this advertising purpose at any time by contacting the controller mentioned at the beginning. You will only incur transmission costs according to the base rates. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately stopped.

7.3 MailGun

We use the following provider to send our email newsletters:

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during newsletter registration to this provider, who sends the newsletters on our behalf.

For data transfers to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC) to ensure compliance with Swiss data protection standards.

8. Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used, which, according to the provider, only starts storing user information when the video(s) are played. When you start playing an embedded YouTube video, “YouTube” sets cookies to collect information about user behavior. According to “YouTube”, these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices. If you are logged into Google, your data will be directly associated with your account when you click a video. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. Using YouTube may also result in the transmission of personal data to Google LLC servers in the USA.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy