Privacy policy

This privacy policy explains which personal data we process in connection with our website bpa-zug.ch and our services, for what purposes, and what rights you have. It is governed by the Swiss Federal Act on Data Protection (FADP) and – where applicable in an individual case – the EU General Data Protection Regulation (GDPR).

1. Controller

BPA ZUG GmbH
Gotthardstrasse 30
6300 Zug
Switzerland
Email: info@bpa-zug.ch
Phone: +41 79 599 99 23

You can contact us at the above details for any questions about data protection and to exercise your rights.

2. What data we process and why

2.1 Visiting our website (server log files)
When you access our website, our hosting provider automatically records technical data transmitted by your browser: IP address, date and time of access, page requested, amount of data transferred, referrer URL, and browser and operating system details. We need this data to provide the website securely and reliably and to detect misuse. It is not combined with other data and is deleted or anonymised after a short period.

2.2 Contact form
If you write to us using the contact form, we process the data you provide (name, phone number, email address, enquiry type and message) to answer your enquiry and, where applicable, to prepare a quote. The details are sent to us by email and also stored in our website’s database; for technical reasons your IP address, browser details and the time of the enquiry are also recorded. To protect against spam we use an invisible check field (honeypot) that does not collect any additional personal data.

2.3 Contact by email or phone
If you contact us by email or phone, we process your details to deal with your request.

2.4 Quotes and orders
If you place an order with us, we process the data required for this (e.g. contact and address details, information about the building project, correspondence and billing data) to prepare, perform and invoice the contract and to comply with legal obligations.

3. Cookies and similar technologies

Our website only uses technically necessary cookies and comparable storage technologies:

  • pll_language – stores your chosen language (German/English); retention 1 year.
  • cmplz_* – store your choice in the cookie banner; retention 1 year.
  • The browser’s technical session storage used to display the website; deleted when you close your browser.

We do not use analytics, tracking or advertising cookies. Should we use such services in future, this will only happen with your consent via our cookie banner. You can change your choice at any time via the «Cookie settings» link. Further information can be found in our cookie policy. You can also delete or block cookies in your browser settings.

4. No analytics tools, no external content

We do not use web analytics services (e.g. Google Analytics) or any advertising or remarketing services. Fonts are loaded locally from our own server; no connection is made to Google or other third parties. No maps, videos or social media content from third parties are embedded.

5. Links to social networks

Our website links to our Instagram profile (Meta Platforms Ireland Ltd., Ireland). This is a simple link: data is only transmitted to Instagram when you click the link and visit the platform. Meta is responsible for data processing on Instagram, and its privacy policy applies.

6. Processors and recipients

We only disclose your personal data where this is necessary for the purposes described, required by law, or you have consented. Recipients are in particular:

  • Hosting and email: ALL-INKL.COM – Neue Medien Münnich, Hauptstrasse 68, 02742 Friedersdorf, Germany. Our website, database (including contact enquiries) and emails run on their servers.
  • IT service providers who support us in operating and maintaining the website, insofar as they have access to data in doing so.
  • Authorities and courts where we are legally obliged to disclose data.

7. Disclosure abroad

Our hosting provider operates its servers in Germany. According to Annex 1 of the Swiss Data Protection Ordinance (DPO), Germany provides an adequate level of data protection. We do not transfer data to any other countries. If you click the Instagram link, Meta may also transfer data to the USA; Meta is certified under the Swiss-U.S. Data Privacy Framework.

8. Retention period

We only keep personal data for as long as is necessary for the respective purpose. Contact enquiries that do not lead to an order are deleted after two years at the latest. Business records, contracts and invoices are kept for the statutory retention period of ten years (Art. 958f Swiss Code of Obligations). Server log files are deleted or anonymised after a short period.

9. Data security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse. Data transmitted between your browser and our website is encrypted (SSL/TLS).

10. Your rights

Within the scope of applicable data protection law, you have in particular the right to

  • request information on whether and which personal data we process about you (Art. 25 FADP);
  • have incorrect data corrected;
  • request the deletion of your data or the restriction of processing, unless statutory retention obligations apply;
  • object to processing and withdraw any consent given at any time with effect for the future;
  • receive your data in a common electronic format (Art. 28 FADP).

To exercise your rights, simply send a message to info@bpa-zug.ch. We may ask for proof of identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or – where the GDPR applies – with the competent supervisory authority in your country.

11. No automated decisions

We do not make automated individual decisions and do not carry out profiling.

12. Changes

We may amend this privacy policy at any time. The version published on this website applies.

Status: October 2026

This is a translation for your convenience. The German version is legally binding.