Privacy Policy

Brunschwig & Cie SA, rue du Marché 34, 1204 Geneva is the operator of the websites www.bongenie-grieder.ch, www.outlet.bongenie-grieder.ch, www.magasins.bongenie-grieder.ch and www.bg-club.ch (hereinafter: our "Sites") and the services offered on them. Brunschwig & Cie SA is therefore responsible for the collection, processing and use of your personal data and for the compliance of the data processing with the applicable data protection legislation.

Brunschwig & Cie SA takes data security and data processing issues very seriously and respects your rights in connection with the use of your personal data, whether when using our websites, shopping in our shops, in our offline programmes or at our events. We make sure that you are fully informed in this respect, in accordance with the applicable laws and in particular the Federal Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR).

The purpose of this Privacy Policy is to explain how and why Brunschwig & Cie SA handles information collected about you.

Please note that we may amend this Privacy Policy from time to time by posting the amended version on our website. We therefore recommend that you consult our website regularly.

What is the scope of the privacy policy and your consent?

This Privacy Policy applies to the processing of data by

Brunschwig & Cie SA
Rue du Marché 34
1204 Genève

By using our Sites or by submitting your personal data to us, you are accepting the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please refrain from using or visiting our Sites or from submitting your personal data to us.

What information do we collect and when do we collect it?

When registering on our website and placing orders (whether as a registered customer or a visitor), you may be asked to enter your title, your name, contact information including email address, mailing address, telephone number, credit card information, banking and payment information, date of birth, geo-location, user IDs, demographic information such as postcode, preferences and interests, or other details to facilitate your experience.

We also collect technical data when you connect to a web server. This data includes the IP address of the computer accessing the site, the name of the owner of the IP space, the date and time of access, the website from which you accessed our site and any search terms used, the name and URL of the file accessed, the status code, the operating system of your computer, the browser you are using, the communication protocol used and possibly your username from a registration/authentication.

In addition, during your visits to our shops, you may appear on shop surveillance videos.

We may also collect data from third party data aggregators (e.g. Google), promotional partners, public sources or social networks. This information may include personal data as part of your profile on a social network, which you have authorised to transmit your data to us, in accordance with their rules.

On our website, you can also apply for open positions by sending your application by email. We need this information in order to examine your application and, if necessary, to carry out the application procedure. The legal basis for processing your personal data is pre-contractual or contractual measures in accordance with art. 31 al. 2 let. a DPA or in our legitimate interest in accordance with art. 31 al. 1 DPA.

On our website, you can subscribe to our newsletter. This requires registration. Your e-mail address must be transmitted when registering, which triggers the subscription to our newsletter.

We will use your data to send you the newsletter until you revoke your consent. You may revoke your consent at any time with effect for the future or click on the unsubscribe link in the newsletter emails.

Our newsletter contains web beacons or similar technical means (web beacons). These are invisible 1x1 pixel graphics that are associated with the user ID of the corresponding newsletter subscriber. Web beacons provide us with the following information about the sending of the newsletter:

Address files used
Subjects and number of newsletters sent
Information on the addresses that have or have not received the newsletter and on the addresses where delivery has failed
Information on the addresses used to open the newsletter
Information on addresses that have been deleted
Technical information (e.g. time of search, IP address, browser type and operating system).

This information is used for statistical analysis of the sending of our newsletter. The results of these analyses may be used to better tailor future newsletters to the interests of recipients. Web beacons are deleted when you cancel the newsletter.

To prevent the use of web beacons, you can set your email program so that no HTML is displayed in messages, if this is not already the case by default.

By subscribing to the newsletter, you are giving us your consent to process the data you provide for the purpose of regularly sending the newsletter to the address you have given us and for the statistical evaluation of usage behaviour and optimisation of the newsletter. This consent constitutes our legal basis for data processing in accordance with art. 31 para. 1 DPA. You may revoke your consent at any time with effect for the future.

Finally, when you create a BG club customer account on our website or in shop, we collect the data required for this purpose, such as your name, postal and e-mail addresses, date of birth, telephone number and password. The customer account is used to process orders and saves the user having to enter data each time. The legal basis for this is your consent.

Use of customer data and order data

When you place an order on our site, we collect the data we need to process your orders, such as your name, postal and e-mail addresses, the payment method used, the contents of your basket, the delivery date, the delivery method, the browser and, where applicable, the purchase vouchers, your mobile phone number and the delivery address. In order to validate the order you must have a BG club customer account protected by a password.

Your data will be treated confidentially and only for the purposes of fulfilling the contract. It will only be passed on to third parties where this is necessary. For example, we need to pass on your details to the carrier so that your order can be delivered. In addition, we must pass on your payment details to the relevant financial service provider in order to pay for your order.

The details of your purchases may be analysed for the purposes of improving the positioning of our offer and personalised marketing actions. This analysis is carried out via an automated process. By cross-referencing information, we are able to divide our customers into various target groups and provide them with personalised information about their purchases to date and other services offered. The legal basis for this is our legitimate interest in improving our range of services and products.

How do we use your data?

We may use the information we collect from you when you register, respond to a survey or marketing communication, place an order or use certain other website features in the following ways:

To provide our online services;
To enable you to create and manage your membership;
To process transactions with you and fulfil your orders;
To inform you of the availability of a product or service ordered;
To notify you when you have not completed a purchase or to notify you of products remaining in your shopping cart;
To personalise your experience;
To improve our website to better serve you;
To enable us to serve you better by responding to your customer service requests;
For marketing, statistical and data matching purposes;
To send promotional emails about our products and special offers;
To combine information we receive from third parties to better understand your needs and provide you with a better service, including customizing our Sites and providing you with targeted advertising;
For the security of our customers, employees and shops via video surveillance.

How long do we keep your data?

We process and store your personal data for as long as the legal basis for processing remains and in accordance with applicable law. The storage obligations that require us to retain data arise in particular from accounting and tax law regulations. According to these regulations, commercial communications, contracts concluded and accounting documents must be kept for ten years after the end of the year in which they were last processed. After this period, we will delete or anonymise your personal information or, if this is not possible, we will keep it secure and isolate it from further use until deletion is possible.

Do we use cookies?

Yes, a cookie is a piece of information that is sent to your device's hard drive by a web server so that certain information about your browsing activity can be collected. They are also used to help us understand your preferences based on your previous or current activity on the site, enabling us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and interaction, so that we can offer better site experiences and tools in the future.

We use cookies to:

To provide you with an optimal experience on our website. For example, to provide you with a shopping cart function on multiple pages and to temporarily store your information entered when you fill out a form on our site so that you do not have to re-enter it when you visit another page. In addition, cookies may also be used to identify you as a registered user following your registration on our site. This saves you having to log in again when you visit another page.
To understand and record user preferences for future visits.
Follow up on advertisements.
Compile aggregate data about site traffic and interactions in order to provide better experiences and tools in the future. We may also use trusted third party services that track this information on our behalf.

In particular, the following information is stored and transmitted in cookies:

Language settings
Items in a shopping cart
Login information
Search terms entered
Frequency of site visits
Use of website features

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net) on our website in order to collect your consent for data processing and the use of cookies or comparable functions. Using "consentmanager", you can consent to certain features of our website, for example the integration of external elements or streaming content, statistical analyses or the personalisation of advertisements. By using "consentmanager", you can grant or refuse your consent, for all functions or for individual functions. These choices can be modified at a later date.

The use of "consentmanager" involves the processing of personal data from the terminals used, such as the IP address.

If you disable cookies, some of the functions that make our services more effective may not function properly.

The legal basis for processing personal data for the aforementioned purposes is our legitimate interest, in accordance with art. 31 para. 1 DPA and art. 6 para. 1 let. f GDPR, in ensuring the functionality and optimisation of our web pages. In the case of purely analytical cookies, we base the processing of your personal data on your consent, which you give via the cookie banner.

"Consentmanager" stores your data for as long as your user settings are active. Two years after you have made your settings, you will be asked for your consent again and your settings will be saved again.

You can find a full list of the cookies we currently use via the Cookie settings

Protection

As the transmission of information via the Internet is not completely secure, we cannot guarantee the security of any information you transmit to our sites and any transmission is at your own risk. However, we take the question of data protection seriously, and take all appropriate technical and organisational measures, including conducting regular self-assessments, to prevent unauthorised disclosure or access to personal information. We restrict access to personal information and require that employees authorized to access personal information maintain the confidentiality of that information.

You are therefore responsible for all third party personal information obtained, published or shared with us and confirm that you have the third party's consent to provide such information.

Third party links and content and social plug-ins

Occasionally, at our sole discretion, we may include or offer third-party products or services on our website. These third party sites have separate and independent privacy policies. We are therefore not responsible for the content and activities of these sites. Nevertheless, we seek to protect the integrity of our website and welcome any feedback on these sites.

In addition, we select our partners carefully and ensure that they comply with European data protection standards. However, each partner has its own terms and conditions and privacy policy, which should be referred to.

We also use social plug-ins, including Instagram, Facebook, Twitter, Mail and Pinterest. By clicking on the button of these different social networks while logged in to your account, you can link the content of our pages to your profile, which can then link the visit to our pages to your user account. Please note that as the provider of this website, we have no knowledge of the content of the data transmitted or how it is used. We use the functions of these social networks in order to make our offer accessible to a wider public. The transfer of data abroad (outside Switzerland/EU) is subject to the legal provisions of the country of destination, in particular to the USA. You will find more information on this subject in the privacy policies of the various social networks.

Your data protection rights - control of your personal information

The applicable data protection provisions give you specific rights to help you control your personal data and we want to make it easy for you to exercise these rights. Below you will find more information about your rights and how we work to ensure they are respected. You can exercise any of your rights in relation to the data we hold about you by emailing: Support BG Club support@bg-club.ch.

If you believe that the information we hold about you is incorrect or incomplete, please write or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Profiling

Some of your personal data is processed automatically in order to evaluate certain personal aspects (profiling). We use profiling to advise you and provide you with targeted information about certain services and products that we offer. To this end, we use analysis tools enabling us to adapt our communication to your needs and to take appropriate advertising measures (in particular market research and opinion polls).

Your data x rights - control of your personal information

Where we rely on your consent to process your personal data (for example when you save details in your account for future use), you have the right to withdraw your consent at any time by contacting us at the above email address. We will respect your choice and stop processing your data; however, any use of your data prior to the withdrawal of your consent will not be affected.
If you believe that the information we hold about you is incorrect or incomplete, please write or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

You have the right to request free access at any time to your personal data stored with us if we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

You have the right to request the deletion of your personal data in certain circumstances. In individual cases, the right to deletion may be excluded.

We would like to draw your attention to the fact that the exercise of your rights may, in certain circumstances, come up against legal restrictions. We reserve the right to do so, for example, when we are obliged to store or process certain data, when we have an overriding interest in doing so (insofar as we can invoke it) or when it is necessary for the exercise of certain rights. Please note that the exercise of your rights may, in certain circumstances, conflict with contractual provisions and have repercussions on the performance of the contract (e.g. early termination of the contract or financial consequences). If this point has not already been settled contractually, you will be informed in advance.

To exercise your rights, you will need to prove your identity (e.g. with a copy of your ID, if your identity cannot be verified in any other way). If you have to pay these costs, we will inform you in advance.

If you are concerned by the processing of personal data, you can assert your rights before the courts or lodge an appeal with the competent supervisory authority. In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).

Sharing of personal data

We will only pass on your personal data if you have expressly consented to this, if we are under a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce our rights arising from the contractual relationship.

In addition, we pass on your data to third parties insofar as this is necessary for the use of the website and the execution of the contract.

In particular, we may share some of your personal data with, or obtain your personal data from, the following categories of third parties:

Government authorities, law enforcement agencies and regulatory bodies where necessary to provide our service or required by law.
Suppliers who provide services to us to help us run our business and improve our services and your customer experience. For example, we may disclose your information to companies that help us obtain your feedback on our services, the shipping company or the company that provides us with IT support. In this context, we may transfer your personal data abroad.
Partners and associates, for example for marketing purposes.
Credit and debit card companies and our banking partners. We share some of your personal data, which includes information about your payment method and, in some cases, your name and address, with the credit or debit card company that issued the card you use and with other banking partners. For the processing of your credit card information by these third parties, please also read the terms and conditions and privacy policy of your credit card issuer.
If we advance payments, e.g. in the case of payment on account, we may request creditworthiness data from an information office such as the CRIF or ZEK/IKO.
In addition, we pass on your data to third parties insofar as this is necessary for the use of our websites or the application and performance of the contract (also outside our website). Some third parties have already been mentioned (Google Inc.). Our websites are hosted on servers in Switzerland. The data is transmitted for the purpose of fulfilling our pre-contractual and contractual obligations and providing and maintaining the functionalities on our website and applications.

We select our suppliers who process your personal data on our behalf very carefully and require that they adhere to high security standards for the protection of your personal data.

In addition, we will not sell, distribute or lease your personal data to third parties unless we have your permission or are required by law to do so.

Transfer of personal data abroad

We may also transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are required to protect your data to the same extent as we are. If the level of data protection in a country does not correspond to that of Switzerland or the European Union (hereinafter "EU"), we will ensure by means of a contract communicated in advance to the Federal Data Protection and Information Commissioner (FDPIC) that the protection of your data corresponds at all times to that of Switzerland or the EU.

For the sake of completeness, we note that under US law, the US authorities may take surveillance measures and access data, which may also include data transferred from Switzerland or the EU to the US. This is done without any distinction, restriction or exception based on the objective pursued and without any objective criteria that would make it possible to limit access by the US authorities to personal data and their subsequent use to certain strictly limited purposes that would justify access to such data.

Furthermore, in the United States there is no legal remedy for data subjects from EU Member States or Switzerland to access, rectify or delete data about them that is the subject of government action, and there is no effective legal protection against the general access rights of US authorities.

We would like to point out to users residing in Switzerland or in an EU Member State that in the opinion of the competent authorities in Switzerland and in the European Union - partly due to the issues mentioned in this section - the United States does not have an adequate level of data protection. If data recipients (e.g. Google) are based in the United States or are expected to carry out the relevant data processing in the United States, we will take all reasonable measures to ensure that your data is protected at an appropriate level with our partners through contractual agreements with these companies and, if necessary, additional safeguards to protect the rights of individuals whose personal data is transferred to a third country.

We expressly draw your attention to this legal and factual situation so that you can make an informed decision as to whether to consent to the disclosure of your data to persons who are domiciled in the United States or who are likely to process the data concerned in the United States.

Updates to our privacy policy

Our Privacy Policy is a dynamic tool and we will amend it when there is a change in the way we process your data. We may update this Privacy Policy from time to time, to ensure that the information we provide to you is up to date and complies with relevant data protection laws. Any new version of this notice will be posted on our website.

Contact

If you have any questions about this privacy policy, you can contact us by e-mail at: support@bg-club.ch.