Datenschutzerklärung (Privacy Policy)

Please note that only the German version on page 1 is legally valid.

Last updated: December 2025

This privacy policy explains how personal data is processed when using this website. Protecting your data is important to us. All data is processed in accordance with the Swiss Federal Act on Data Protection (FADP/DSG) and—where applicable—the EU General Data Protection Regulation (GDPR).

Controller

Bossard Wettstein GmbH
Baumgartenstrasse 335
CH-4715 Herbetswil
Switzerland

E-Mail: contact@bossardwettstein.com

Collection and Processing of Personal Data

We process personal data that you provide to us, as well as data that is automatically collected when you visit this website.

Automatically Collected Data

When you access the website, our hosting provider may automatically store the following technical data:

  • IP address
  • Date and time of the request
  • Browser type and version
  • Operating system
  • Referrer URL
  • Requested pages and files

This processing is technically necessary to provide the website.

Cookies & Consent Management

We use cookies to:

  • provide essential site functions (e.g., cart, login)
  • store settings (e.g., the address you enter during checkout)
  • use similar technologies such as Local Storage

Analytics and marketing cookies are only used if you consent via the cookie banner.

Your cookie selection is stored in a technically necessary cookie.

WooCommerce (Online Store)

To operate our online store, we use WooCommerce, a plugin developed by Automattic (USA/EU).

Data Processed

During the purchase process, the following data is collected:

  • First and last name
  • Billing and shipping address
  • E-mail address
  • Phone number
  • Order details (products, quantities, prices)
  • Payment status
  • Technical metadata (e.g., order ID, transaction ID)

If a user account is created, WooCommerce additionally stores:

  • Username
  • Encrypted password
  • Order history

Legal Basis

  • Performance of a contract (Art. 6(1)(b) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR), such as fraud prevention, store optimization, and order processing

Stripe (Online Payments)

We use Stripe, Stripe Payments Europe Ltd., Ireland, to securely process credit card payments and other payment methods.

Data Processed

For payment processing, the following data is transmitted to Stripe:

  • Name
  • Billing address
  • E-Mail address
  • Payment information (e.g., credit card details)
  • Transaction details (amount, currency, timestamp)

Stripe may also process technical information (e.g., device information) to prevent fraud.

Responsibility & Privacy

Stripe acts as an independent controller for payment processing.

For more information:
https://stripe.com/ch/privacy

Legal Basis

  • Performance of a contract (Art. 6(1)(b) GDPR)
  • Legitimate interest in secure payment processing (Art. 6(1)(f) GDPR)

Google Analytics

This website uses Google Analytics with IP anonymization (“anonymizeIP”).

Service provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose

Google Analytics is used to analyze user behavior in order to:

  • improve the website
  • identify technical issues
  • optimize content and products

Consent Requirement

Google Analytics is only activated if you consent via the cookie banner (Art. 6(1)(a) GDPR). No analytics cookies are used without your consent.

Data Processed

  • Truncated IP address (via anonymizeIP)
  • Page views
  • Time spent on pages
  • Click behavior
  • Device type, browser, operating system
  • Referrer URL

Transfer of Data to the United States

Data may be transferred to the United States. Transfers rely on:

  • Standard Contractual Clauses (SCCs)
  • additional safeguards implemented by Google

Opt-out

You can deactivate Google Analytics at any time via the cookie banner.

Data Retention

We retain personal data for as long as necessary for the following purposes:

  • order processing, returns, and warranty claims
  • statutory retention periods (e.g., accounting: 10 years)
  • technical maintenance
  • customer communication

Data stored in a user account remains stored until you request deletion.

Disclosure of Data to Third Parties

Data is only shared when necessary for:

  • payment processing (Stripe)
  • shipping services (if applicable)
  • technical service providers (hosting, maintenance)
  • analytics (Google Analytics)

Data is never sold to third parties or shared for marketing purposes without consent.

Rights of Data Subjects

Depending on applicable law, you may have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Contact for exercising rights:
contact@bossardwettstein.com

Data Security

We implement technical and organizational measures to protect your data, including:

  • SSL/TLS encryption
  • access restrictions
  • regular security updates
  • secure storage of order and payment data

Changes to This Privacy Policy

We reserve the right to amend this privacy policy at any time.

The version published on this website is the current and applicable version.