A. Biral AG Privacy Policy

I.    Name and address of the controller

The controller as defined by the General Data Protection Regulation and other national data protection laws of the Member States and other statutory data protection provisions is:

Biral AG 
Südstrasse 10
3110 Münsingen 
Switzerland
Tel.: +31 720 90 00
E-mail: info@biral.ch 
Website: www.biral.ch

II.    Name and address of the data protection officer

For direct contact with the data protection officer of Biral AG
Michael Goetz
Certified data protection officer TÜV
Kampstrasse 6
50374 Erftstadt
Germany

Tel.:        +49 (0) 2235 – 95 95 912
E-mail:     michael.goetz@wimas.de

III.    General information about data processing

1.    Scope of processing of personal data

In principle, we process our users' personal data only to the extent required to provide a functional website along with our content and services. The processing of our users' personal data takes place on a regular basis only with the users' consent. An exception is made in such cases where prior consent cannot be obtained for practical reasons and statutory provisions permit the processing of the data.

2.    Legal basis for the processing of personal data

Provided that we have obtained the data subject's consent to process their personal data, Article 6(1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
 
In cases where the processing of personal data is required to perform a contract to which the data subject is party, Article 6(1b) GDPR serves as the legal basis. This also applies to processing operations required to take steps prior to entering into a contract.
Insofar as processing of personal data is necessary for compliance with a legal obligation that our company is subject to, Article 6(1c) GDPR serves as the legal basis.
In situations where it is necessary to process personal data to protect the vital interests of the data subject or of another natural person, Article 6(1d) GDPR serves as the legal basis.
If processing is necessary in order to protect the legitimate interests of our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1f) GDPR serves as the legal basis for processing.

3.    Data erasure and storage period

The personal data of the data subject will be erased or made inaccessible once the purpose for storing it is no longer applicable. In addition to this, data can be stored if such storage has been provided for by European or national legislators in the form of union regulations, laws or other provisions that the controller is subject to. Data is also made inaccessible or erased when the storage period in accordance with the specified standards expires, unless continued storage of the data is required for conclusion or performance of a contract.

IV.    Provision of the website and creation of log files

1.    Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the system of the computer used to access the website.
The following data is collected as part of this:

(1)    Information regarding the browser type and the browser version used
(2)    The user's operating system
(3)    The user's Internet service provider
(4)    The user's IP address
(5)    The date and time the website was accessed
(6)    Websites from which the user's system accessed our website
(7)    Websites accessed by the user's system from our website
(8)    Geographical information
(9)    Navigation and click behaviour

This data is also stored in the log files on our system. The user's IP addresses or other data that could be used to assign the data to a user are not included in this. This data is not stored alongside other personal data pertaining to the user.

2.    Legal basis for data processing

The legal basis for temporary storage of the data is Article 6(1f) GDPR.

3.    Purpose of data processing

Temporary storage of the IP address by our system is necessary in order to enable the website to be delivered to the user's computer. It is necessary to store the user's IP address for the duration of the session in order to do so.

These purposes are also in our legitimate interests regarding data processing in accordance with Article 6(1f) GDPR.

4.    Storage period

This data will be erased as soon as it is no longer required to achieve the purpose of its collection. Where the data is collected in order to provide the website, this point is reached when the current session is ended.

5.    Objection and removal option

Collection of data in order to provide the website and storage of the data in log files is absolutely essential for operation of the website. The user therefore does not have an option to object.

V.    Use of cookies

a)    Description and scope of data processing

Our website uses cookies. Cookies are text files that are saved in the user's Internet browser, or are saved on the user's system by the user's Internet browser. If a user accesses a website, a cookie may be saved on the user's operating system. This cookie contains a distinguishing character string that enables the browser to be unambiguously identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our web pages require the ability to identify the browser used to access the website, even after changing pages.

The following data is stored and transferred in the cookies:

(1)    Language settings
(2)    Geolocation
We also use cookies on our website to enable us to analyse the browsing behaviour of our users.
 
The following data may be transferred in this way:

(1)    Search terms entered
(2)    Frequency of page access
(3)    Use of website functions

The user data collected in this way is pseudonymised via technical measures. This ensures that it is no longer possible to assign the data to the specific user accessing the site. This data is not stored alongside other personal data pertaining to the users.

When accessing our website, users are informed of the use of cookies for analytical purposes and of this Data Protection Statement via an info banner. This banner also informs users how they can prevent cookies being saved via their browser settings.

b)    Legal basis for data processing

The legal basis for the use of technically necessary cookies is our legitimate interest in accordance with Article 6(1f) GDPR.

The legal basis for processing of personal data using cookies for analytical purposes is the consent of the user to such processing in accordance with Article 6(1a) GDPR.

c)    Recipients of cookies

Some of the cookies used are set by third-party providers, such as Google Analytics. Consequently, your data may be transferred to the relevant third-party providers.

d)    Transfer to third countries

In some cases, the data collected by cookies is transferred to servers in third countries (e.g. USA), especially in instances where Google or Facebook services are used. In these instances, we ensure an appropriate level of data protection through suitable guarantees (e.g. EU standard contractual clauses).

e)    Purpose of data processing

The purpose of the use of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without using cookies. For these functions, it is necessary for the website to be able to recognise the browser, even after changing pages.

We require cookies for the following purposes:

(1)    Applying language settings
(2)    Applying country allocation
(3)    Remembering search terms

The user data collected via technically necessary cookies is not used to create user profiles.
Analysis cookies are used in order to improve the quality of our website and its contents. These analysis cookies enable us to determine how our website is used and to make continuous improvements to the services we offer.

This enables us to improve content such as news, themes and product information and provide interested parties with the best possible content to enable them to work with our information efficiently and effectively.

These purposes are also in our legitimate interests regarding the processing of personal data in accordance with Article 6(1f) GDPR.

f)    Storage period, objection and removal options

Cookies are saved on the user's computer and are sent from there to our site. As a result, you as a user also have complete control over the use of cookies. You can disable or limit the transfer of cookies by changing the settings of your Internet browser. Cookies that have already been saved can be erased at any time. This can also be carried out automatically. If cookies are disabled for our website, it may not be possible to fully utilise all of the functions of our website. You can also withdraw your consent at any time via the cookie banner in the footer of our website.

VI.    Newsletter

1.    Description and scope of data processing

Our website provides the option to subscribe to our free newsletter. When a user subscribes to the newsletter, the data from the input screen is sent to us.

We need the following data for this application:

(1)    First name & surname
(2)    E-mail address
(3)    Optional: Company name

The following data will also be recorded when a user subscribes to the newsletter:

(1)    IP address of the computer used to access the website
(2)    Date and time of registration

 
As part of the registration process, we obtain the user's consent to the processing of this data and the user is referred to this Data Protection Statement. An e-mail is also sent to the user following registration for confirmation of registration (double opt-in), to prevent misuse of the newsletter registration form and ensure the security of our information technology systems.

No data is sent to third parties as part of data processing for sending newsletters. This data is used exclusively for the purposes of sending the newsletter.

2.    Image rights and copyright

In our newsletters and other electronic messaging, we use only images, graphics and other content to which we own the necessary usage rights. This may be our own content, licensed creations or images from sources with the necessary licences. Third parties are not permitted to use these without the express authorisation of the rights holder.

3.    Legal basis for data processing

The legal basis for data processing after the user has subscribed to the newsletter is the existence of user consent, Article 6(1a) GDPR.

4.    Purpose of data processing

The purpose of collecting the user's e-mail address is to enable us to deliver the newsletter.

The purpose of collecting other personal data as part of the registration process is to prevent misuse of the service or the e-mail address used.

5.    Storage period

This data will be erased as soon as it is no longer required to achieve the purpose of its collection. The user's e-mail address and other personal data are therefore saved for as long as the subscription to the newsletter is active.

6.    Objection and removal option

The user can cancel their subscription to the newsletter at any time – simply by clicking the unsubscribe link in any one of our newsletters. Once the user has unsubscribed, the e-mail address is removed from the mailing list. If you unsubscribe from the newsletter by mistake, you can subscribe again at any time via the website.
 
VII.    Registration

1.    Description and scope of data processing

On our website, we offer users the option to register by entering their personal data. This data is entered into an input screen and sent to and stored by us. We do not transfer this data to third parties.

The following data is collected as part of the registration process:

(1)    First name & surname
(2)    E-mail address
(3)    Company name (optional)

The following data is also saved at the time of registration:

(1)    The user's IP address
(2)    Date and time of registration

As part of the registration process, we obtain the user's consent to processing of this data.

2.    Legal basis for data processing

The legal basis for processing of this data is the consent of the user to such processing in accordance with Article 6(1a) GDPR.

3.    Purpose of data processing

User registration is a requirement for provision of certain content and services on our website.

This registration (login access) is used for logging in to Biral software products such as the Biral PumpSelector, so that the user can be notified of the relevant updates.

4.    Storage period

This data will be erased as soon as it is no longer required to achieve the purpose of its collection.
 
For data collected during the registration process, this is the case once the registration is cancelled or modified on our website.

5.    Objection and removal option

As a user, you have the option to cancel your registration at any time. You can have the stored data relating to you modified at any time.

The user can request adjustment to their data or the erasure of their account by contacting Biral via the contact form or by e-mail. Users are informed of this option when using the registration facility on the website.

VIII.     Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager provides an interface for managing website tags. The service does not itself collects any personal data from the user, nor does it set any cookies or create its own user profiles. It serves solely to issue different tags, which can, in turn, capture data. For more information about Google Tag Manager, go to: https://www.google.com/intl/de/tagmanager/use-policy.html

IX.    Contact form and e-mail contact

1.    Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input screen is transmitted to us and stored. This data comprises:

(1)    First name & surname
(2)    Company name
(3)    Company address
(4)    E-mail address
(5)    Optional: Phone
(6)    Subject/department

The following data is also saved at the time the message is sent:

(1)    The user's IP address
(2)    Date and time of registration

As part of the process of using the contact form, we obtain the user's consent to the processing of this data and the user is referred to this Data Protection Statement.
Alternatively, users can contact us via the e-mail address provided. In this case, the user's personal data transmitted in the e-mail will be stored.
The data collected as part of this process is not sent to third parties. This data is used exclusively for the purposes of processing the conversation.
The contents mentioned above under IX. / 1. also apply for the following service forms:

(1)    Commissioning form
(2)    Order form – guarantee services
(3)    Quotation request – maintenance form
(4)    Pump returns form
(5)    Registration for campus training courses
(6)    Registration for events

These service forms require additional product-specific and object-specific information that is needed for processing the forms.

2.    Legal basis for data processing

The legal basis for processing of this data is the consent of the user to such processing in accordance with Article 6(1a) GDPR.

The legal basis for the processing of data transferred in the course of sending an e-mail is Article 6(1f) GDPR. If the purpose of the e-mail contact is the conclusion of a contract, the additional legal basis for processing is Article 6(1b) GDPR.

3.    Purpose of data processing

We process the personal data from the input screen solely for the purpose of making contact with users. In the case of contact via e-mail, the processing of data is also in our necessary legitimate interest for this same purpose.
Other personal data processed as part of the sending process is processed for the purpose of preventing misuse of the contact form and ensuring the security of our information technology systems.

4.    Storage period

This data will be erased as soon as it is no longer required to achieve the purpose of its collection. For personal data taken from the input screen of the contact form and personal data transmitted via e-mail, this is the case if the relevant conversation with the user is terminated. The conversation is terminated if it can be determined from the circumstances that the matter concerned is completely resolved.

5.    Objection and removal option

The user has the option to withdraw their consent to the processing of their personal data at any time. If the user contacts us via e-mail, they can object to storage of their personal data at any time.
In such cases, the conversation cannot be continued.

The user can request adjustment to their data or the erasure of their data via the contact form or by e-mail.

In this case, all personal data that has been saved as part of the contact process will be erased.

X.    Tracking and web analysis through Google Analytics

Details of the cookies used can be found in the “Use of cookies” section.

1.    Tracking

Our website uses various tracking technologies to analyse user behaviour and improve our online services. Within this, we respect the “Do not track” setting you may have activated in your web browser.

Observing the “Do not track” setting:
We use various web analysis services to ensure our website design meets users’ needs and is continuously optimised. As part of this, pseudonymised usage profiles are generated and cookies are used. The cookie-generated data concerning your use of this website is normally sent together with other log file data to the service provider’s server, where it is stored and processed. This can mean data is transferred to servers abroad, e.g. in the USA.

Following the processing of data, we receive the following information, among other data:
•    The navigation path that a user follows on the website (incl. viewed content and selected or purchased products);
•    The duration of the visit to the website or subpage;
•    The subpage from which the website is exited;
•    The country, region or city from which the website is accessed;
•    The device (type, version, colour depth, resolution, width and height of the browser window);
•    Whether it is a returning visitor or a first-time visitor.

The provider uses this information on our behalf to analyse use of the website, compile reports on website activity, and provide other services related to the use of the website and the Internet for the purposes of market research and ensuring our website design meets user needs.

If you have the “Do not track” setting activated in your web browser, the tracking on our website is automatically deactivated. In this instance, your browser notifies us that you do not want to be tracked. To reactivate tracking, you have to deactivate the “Do not track” setting in your web browser.
For information regarding further processing of the data by the service provider in question, including instances where this information may be passed on to third parties, e.g. authorities, owing to national legal regulations, please refer to that provider’s own data privacy statement.

2.    Scope of the processing of personal data

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). This service is used on the basis of Article 6(1f) GDPR. Google Analytics uses "cookies", which are text files that are saved on your computer and enable your use of the website to be analysed. The cookie-generated information about your use of the website, such as:

(1)    Browser type and version
(2)    Operating system used
(3)    Referrer URL (the site visited beforehand)
(4)    Host name of the computer accessing the site (IP address)
(5)    Time of the server request
(6)    The website accessed
(7)    The sub-pages accessed from the accessed website
(8)    The duration of the visit to the website
(9)    The frequency of access to the website

is generally transmitted to and saved on a Google server in the USA. The IP address relayed by your browser within the scope of Google Analytics is not linked to other Google data. We have also added the "anonymizeIP" code to Google Analytics on this website. This guarantees that your IP address is masked, ensuring that all data is collected anonymously. Only in exceptional cases is the full IP address sent to a Google server in the USA and abbreviated there.

At the request of the operator of this website, Google will use this information to analyse your use of the website in order to compile reports on the website activities and in order to provide other services associated with website use and Internet use for the website operator. You can prevent cookies from being stored by choosing the appropriate setting in your browser software; however, we would like to point out that by doing so, you may not be able to use all the functions of this website in full.
Furthermore, you can prevent the collection of data generated by the cookie and related to your usage of the website (including your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

We continue to use Google Analytics to analyse data from double-click cookies and Google Ads (AdWords) for statistical purposes. If you do not want this to happen, you can deactivate personalised advertising at any time in your Google marketing settings: : https://adssettings.google.com/
You can find more information about data protection in connection with Google Analytics on the Google Analytics help pages, for instance     (support.google.com/analytics/answer/6004245).

3.    Legal basis for the processing of personal data

The legal basis for processing of users' personal data is Article 6(1f) GDPR.

4.    Purpose of data processing

Processing users' personal data enables us to analyse our users' browsing behaviour. By evaluating the data collected in this way, we are able to compile information about how the individual components of our website are used. This helps us to make continuous improvements to our website and make it more user-friendly. These purposes are also in our legitimate interests regarding the processing of data in accordance with Article 6(1f) GDPR. Anonymising the IP addresses of our users enables us to sufficiently take into account the interests of our users regarding the protection of their personal data.

5.    Storage period

The data is erased once it is no longer needed for our record-keeping purposes. In the case of our company, this point is reached after 10 years.

6.    Objection and removal option
Cookies are saved on the user's computer and are sent from there to our site. As a result, you as a user also have complete control over the use of cookies. You can disable or limit the transfer of cookies by changing the settings of your Internet browser. Cookies that have already been saved can be erased at any time. This can also be carried out automatically. If cookies are disabled for our website, it may not be possible to fully utilise all of the functions of our website.
For more information regarding the privacy settings of the Google Analytics software, please see the following link: https://policies.google.com/privacy?hl=en

XI.    Social media

1.    Data processing via social media
Our website contains links to our profiles on the social networks of the following providers:
•    Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA
•    LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland
•    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
If you click on the social network icons, you will be automatically redirected to our profile on the corresponding network. This establishes a direct connection between your browser and the server of the corresponding social network. This informs the network that you are visiting our website with your IP address and you have clicked on the link.

Linking to your user account:
If, when you click on the link, you are already logged into your user account with the network in question, the network provider can link your visit to our website directly with your user account. If you wish to prevent this from happening, please log out of your user account before clicking on the link.
The provider in question is responsible for the data processing associated with your visit to the social network. For further information on data processing and your rights, please refer to the privacy policies of the corresponding providers:
•    Meta privacy policy: https://www.facebook.com/policy.php 
•    LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy 
•    Google privacy policy: https://policies.google.com/privacy 

2.    Facebook Page
We operate a Facebook Page at: https://www.facebook.com/biral.ag
Together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, we are joint controllers for the operation of this page within the meaning of Article 26 GDPR. The joint controllership agreement with Meta can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum
When you visit our Facebook Page, Meta processes personal data (e.g. your IP address and other information that is stored on your device in the form of cookies) in order to provide us, as the operator of the Facebook Page, with statistical analyses of the use of the Facebook Page (known as “Facebook Insights”). More detailed information is available from Meta via the following link:    
https://www.facebook.com/legal/terms/information_about_page_insights_data
Data is processed on the basis of our legitimate interest (Article 6(1f) GDPR) in the optimised presentation of our company and in effective communication with customers, interested parties and visitors.
Further information about data processing by Meta, including the legal bases and options for exercising your rights, can be found in Meta’s Privacy Policy. https://www.facebook.com/policy.php
 
3.    YouTube

In various places on our website, you can load videos. The videos are displayed by embedding (iFrame) content from YouTube, a service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (YouTube)). These videos are embedded in YouTube's privacy-enhanced mode, which blocks the use of YouTube cookies until the user actively clicks to play the video. By clicking on the play button, you confirm your consent to YouTube placing cookies on your device, which may also be used to analyse user behaviours for market research and marketing purposes. More detailed information about YouTube’s use of cookies can be found in Google’s cookie policy at policies.google.com/technologies/types.

XII.    Your rights

Provided the legal requirements are met, you as the data subject have the following rights with regard to the processing of your personal data:

1.    Right of access by the data subject:
You have the right to demand information, free of charge, about personal data processed by us. This gives you the opportunity to check what data we store and process about you, as well as its accuracy and lawful use in accordance with the applicable data protection regulations.
2.    Right to rectification:
If your personal data we have saved is inaccurate or incomplete, you may request the rectification of this data at any time. In this event, we will correct the affected data and, if necessary, inform third parties to whom this data has been transferred.
3.    Right to erasure:
You have the right to ask us to erase your personal data if there is no longer a need for us to be storing or processing it. This right may be restricted if we are legally obliged to continue saving certain data, e.g. for tax reasons or legal purposes. In such instances, data can instead be blocked.
4.    Right to restriction of processing:
Under certain circumstances, you have the right to demand the processing of your personal data be restricted: This applies in particular if the accuracy of the data is contested or the data processing is unlawful, but you do not wish for the data to be erased.
5.    Right of withdrawal:
You have the right to withdraw previously granted consent to data processing at any time. However, the withdrawal has no impact on data processing that has already taken place on the basis of your consent prior to the withdrawal. 
6.    Right to object:
If we are processing your personal data on the basis of legitimate interest, you have the right to lodge an objection to this processing at any time. This is particularly applicable if the data is being processed for the purposes of direct marketing.
To exercise one of these rights, you can contact us at any time:
Biral AG
Südstrasse 10
3110 Münsingen
Switzerland
E-mail: marketing@biral.ch 
We reserve the right to request proof of identity when you exercise these rights in order to verify that you are actually the data subject.
7.    Right to lodge a complaint:
If you feel that the processing of your personal data is in violation of applicable data protection law, you have the right to lodge a complaint with the responsible supervisory authority.

XIII.    Data processing in the online store

In the operation of our online store, we only collect and process data that is required to process your online orders. This is done in accordance with the minimum principle, i.e. we only process the data that is absolutely necessary.

Data collected upon placement of orders:
•    Full name (first and last name)
•    Billing address
•    Delivery address (if different to billing address)
•    E-mail address
•    Telephone number for questions or to arrange delivery
•    Payment type (e.g. invoice, prepayment, etc.)
•    Bank details (if necessary)

In processing the order, we also save the following information:
•    Order confirmation
•    Dispatch information
•    Delivery notes
•    Invoices and vouchers
•    Correspondence relating to the order
 
Data processing for customer registration: When you register as a new customer in our online store, your data is first recorded in our ERP system and then linked to your online account. In the online store, existing customers are linked to the data stored in the ERP system (including discount structures). The customer administrator is responsible for registering additional employees for online access, whereby the job titles of these employees are also saved.

Special instructions for payment processing: When payments are processed in the online store, no bank details are saved in the online store itself. This data is securely stored on external web servers and is used solely for the requisite processing of payments (e.g. via PayPal or GooglePay). Cookies from payment service providers are only set if these service providers are specifically selected in the payment process.

Retention periods: All customer data is erased once the order has been completed, unless this is prevented by legal retention obligations (e.g. commercial law or tax law).

Münsingen – 26th August 2025