Privacy Policy

Last updated: 7 July 2026

1. Controller

The controller responsible for the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR) is:

BPR Swiss GmbH
Weststrasse 16
CH-3672 Oberdiessbach
Switzerland

Email: info@bpr-swiss.com

If a representative in the European Union must be appointed pursuant to Art. 27 GDPR, the representative’s contact details will be added to this page.

2. Scope

This privacy policy applies to the use of our online shop at shop.bpr-swiss.com, customer accounts, orders, enquiries, product reviews, embedded content and all related communication and contract processing.

Our online shop is intended for businesses, freelancers, dealers, medical institutions, public authorities and other commercial or institutional customers. Nevertheless, personal data of natural persons, such as contact persons or employees of an organisation, may be processed when the shop is used.

3. Legal Bases and Principles

We process personal data in accordance with the Swiss FADP. Where the GDPR applies, processing is based in particular on the following legal bases:

• Art. 6(1)(b) GDPR: processing necessary for pre-contractual measures, setting up a customer account, processing orders and fulfilling contracts.
• Art. 6(1)(c) GDPR: processing necessary to comply with legal obligations, in particular commercial, tax and accounting obligations.
• Art. 6(1)(f) GDPR: processing based on legitimate interests, including operating a secure, functional and economically viable online shop, customer support, fraud prevention, IT security and the establishment, exercise or defence of legal claims.
• Art. 6(1)(a) GDPR: processing based on consent, for example for non-essential cookies, web analytics or certain embedded content where these are not technically necessary.

Under the Swiss FADP, we process personal data in particular in accordance with the principles of lawfulness, proportionality, purpose limitation, transparency and data security.

4. Categories of Data Processed

Depending on how you use our online shop, we process in particular the following data:

• Master and contact data, such as name, company, position, address, email address and telephone number.
• Customer account and approval data, such as login data, customer group, dealer status, approval status, price visibility and internal notes relating to customer approval.
• Order data, such as cart contents, ordered products, item numbers, prices, currency, billing and delivery address, payment method, shipping method, comments, dealer purchase order number and B2B confirmation.
• Product-related information, such as serial numbers where required for service kits or spare parts.
• Payment data to the extent necessary for payment processing. Full credit card or bank account details are generally not stored by us, but processed by the payment service provider.
• Communication data, such as the content of emails, contact forms, support requests and order-related queries.
• Usage and log data, such as IP address, access time, browser, operating system, pages visited, referrer URL and technical error logs.
• Review data, if you submit product reviews, testimonials or other feedback.

5. Customer Account, Approval and Price Access

A customer account may be required to place orders. We manually review customer accounts before a customer can place orders or view certain prices. We process the company and contact details provided by you in order to verify business use and to apply the appropriate customer group or discount level.

Manual customer approval serves the B2B orientation of the shop, fraud prevention, correct price and currency display and proper contract fulfilment. Products generally remain visible; depending on approval status, prices or ordering options may be restricted.

6. Orders and Checkout

During checkout, we process the data required for ordering, delivery, invoicing and contract fulfilment. This includes billing and delivery address, contact details, selected payment and shipping method, ordered products, order values, currency, tax information and voluntary comments.

As the shop is aimed at business customers, a confirmation may be required during checkout that the order is not placed as a consumer, but as a business, freelancer, dealer, medical institution, public authority or other commercial or institutional customer. This confirmation is documented together with the order.

If a product requires a serial number, we process the serial number entered in order to ensure compatibility, service handling, spare part allocation and contract fulfilment.

7. Payment Processing with Mollie

For online payments, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. If you choose a payment method offered via Mollie, the data required for payment processing will be transmitted to Mollie or collected directly by Mollie. This may include name, billing details, email address, order number, amount, currency, payment method, transaction data, IP address and technical payment information.

Mollie processes this data to carry out the payment, prevent fraud, comply with regulatory obligations and handle possible queries or refunds. Further information is available in Mollie’s privacy statement: https://www.mollie.com/en/legal/privacy.

8. Shipping, Freight and Delivery Processing

To deliver orders, we transmit the necessary data to parcel services, freight forwarders, shipping providers and, where applicable, customs or logistics partners. This includes name, company, delivery address, telephone number, email address, shipment data, product and weight information and information required for delivery notification, customs clearance or transport insurance.

The specific shipping provider is selected based on delivery country, product type, weight, volumetric weight, warehouse location and shipping logic.

9. Comatic/ERP and Internal Order Processing

For commercial processing, we use a connection to our ERP/business management system Comatic or related service providers. Order, customer, item, price, currency, payment and shipping data may be transferred where necessary for order processing, invoicing, warehouse and shipping handling, accounting, customer service or statutory documentation obligations.

The data transferred may include company, contact person, billing and delivery address, email address, telephone number, ordered products, item numbers, prices, currency, payment status, shipping information, dealer purchase order numbers, comments and serial numbers.

10. Contact and Communication

If you contact us by email, contact form, telephone or other communication channels, we process the data you provide in order to handle your enquiry. The data may be stored in our email system, customer account, ERP system or internal case documentation where this is necessary for processing and traceability.

11. Product Reviews and Expert Opinions

If product reviews, references or expert opinions are displayed or processed in the shop, we may process, depending on the case, name, professional role, practice/organisation, review text, language, product reference, publication status and technical log data. Published content is used only where there is a legal basis, in particular consent, a contractual agreement or a legitimate interest in presenting professional references.

12. Cookies and Technically Necessary Functions

Our online shop uses cookies and similar technologies that are necessary for the operation of the shop. These include cart, session, login, security and language settings. Without these technologies, core functions such as cart, checkout, customer account, language selection or price/currency display cannot be provided reliably.

WooCommerce uses cookies, for example, to recognise cart contents, sessions and changes to the cart. According to WooCommerce, these cookies do not contain directly personal information, but may be linked to a shop session.

Non-essential cookies and comparable technologies are used only if consent has been given or another legal basis exists. You can manage and withdraw your consent using the cookie settings provided in the shop.

13. Web Analytics, Statistics and Optimisation

If web analytics services such as Google Analytics are used in the shop, this is generally done on the basis of your consent. Usage data, technical data, shortened or pseudonymised IP addresses, device information, page views, interactions and approximate location information may be processed.

The analysis serves to improve the shop, detect technical problems and evaluate which content and products are relevant to users. If Google Analytics or comparable services are not activated or no consent has been given, this analysis does not take place.

14. Embedded Content, Videos and External Media

The shop may contain embedded content such as videos, product media, maps, scripts or external media. When such content is embedded, providers such as Vimeo, YouTube or other service providers may process technical data, in particular IP address, browser data, device information and usage data. Where such content is not technically necessary, it is loaded only after your consent or active interaction.

15. Hosting, Server Logs and Security

To provide the shop, we use hosting, server, maintenance and IT service providers. Technical access data is processed, in particular IP address, date and time of access, requested URL, referrer, browser, operating system, transferred data volume and status codes. This data is processed to provide the shop, ensure security, analyse errors and prevent attacks or misuse.

We take appropriate technical and organisational measures to protect personal data. These include access restrictions, encrypted transmission via HTTPS/TLS, role and permission concepts, backups, logging of security-relevant events and regular maintenance of the systems used.

16. Recipients and International Data Transfers

Personal data may be transmitted to the following categories of recipients: hosting and IT service providers, payment service providers, shipping and logistics partners, ERP/business management service providers, tax and legal advisers, authorities, banks, support service providers and providers of embedded content or analytics services, where these are used.

A transfer to countries outside Switzerland, the European Union or the European Economic Area takes place only if there is a legal basis, an adequate level of data protection has been recognised or appropriate safeguards exist, such as standard contractual clauses, contractual data protection guarantees or explicit consent.

From the perspective of the European Commission, Switzerland has an recognised adequate level of data protection. For other third countries, we review the required safeguards on a case-by-case basis.

17. Retention and Deletion

We store personal data only for as long as necessary for the respective purposes or as long as statutory retention periods apply. Customer account and contract data are generally stored for the duration of the business relationship. Order, invoice and accounting data are retained in accordance with statutory retention obligations, in Switzerland generally for up to ten years.

Communication data is stored for as long as necessary to process the enquiry, document the business relationship or establish, exercise or defend legal claims. Technical log data is generally stored only for a short period unless longer retention is required for security, error analysis or legal enforcement.

18. Your Rights

Subject to applicable data protection law, you have in particular the right of access, rectification, erasure, restriction of processing, data disclosure or portability, objection to certain processing operations and withdrawal of consent with effect for the future.

To exercise your rights, you can contact us at info@bpr-swiss.com. Please note that we may carry out an appropriate identity check before processing a request.

If the GDPR applies, you also have the right to lodge a complaint with a competent data protection supervisory authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

19. Automated Decisions

We do not make exclusively automated decisions within the meaning of Art. 22 GDPR that produce legal effects concerning you or similarly significantly affect you. Customer account and customer group approvals are generally carried out manually.

20. Obligation to Provide Data

The provision of certain data is necessary for setting up a customer account, processing an order, payment processing, delivery or statutory documentation. Without this data, we may not be able to provide a customer account, process an order or provide certain services.

21. Updates to this Privacy Policy

We update this privacy policy if legal, technical or organisational changes occur or if data processing in the shop changes.