Privacy Policy

Here you can find the privacy policy of Bauwerk Group Schweiz AG.

Updated: 25-08-2023

We at Bauwerk Group ("Bauwerk Group", "we" or "us") are committed to protecting and respecting your privacy. This privacy policy describes your rights and how we collect and use personal data about our potential, current and former customers, suppliers, business partners, as well as job applicants and visitors of websites, and social networks.

When processing your personal data we comply with applicable regulations, in particular the General Data Protection regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP) which applies in Swiss jurisdiction.

1. Who is the controller and who to contact in case of questions?

Bauwerk Group Schweiz AG, Neudorfstrasse 49, 9430 St. Margrethen, Switzerland

Please do not hesitate to reach out to us if you have any questions or comments regarding your personal data or this privacy policy.

You can reach us by sending an email to Edgaras.Kulionis@bauwerk-group.com.

2. What personal data do we process, how and how long and what are our legal grounds for processing personal data?

We process your personal data for the following purposes and based on the following legal basis:

Purpose	Personal data processed	Legal basis	Term of processing
Our potential, current and former customers, suppliers, and business partners
To communicate with you	Name, surname, position, represented legal person, address, email address, phone number, information contained within your communications with us, such as the contents of emails, messages provided via website’s contact form.	Performance of our contract with you or your employer or for our legitimate interest in effective communication.	Up to 10 years from the last contact (Further storage can take place in individual cases if this is legally stipulated).
To market our products and services	Name, surname, address, email address, phone number will be used to send newsletters, emails with information about our products, services or events.	This processing is based on our legitimate interest in being able to market our products and services to our existing customers or the processing is based on your consent, as you have shown an interest in our products and services.	If you are our existing customer, we will process your personal data until you let us know that you no longer want to get direct marketing from us and/or will unsubscribe from us. For those who have issued us with consent for direct marketing – we will process personal data for 3 years (further storage can take place in individual cases if this is legally stipulated) unless you withdraw your consent. At the end of the 3-year period, we’ll remind you about the expiration of your consent. If you no longer want direct marketing from us, please feel free to follow the unsubscribe instructions contained in the email received from us or contact us directly.
To identify you, conclude and perform the contract	If you are a sole trader natural person, we will process your name, surname, position, customer/supplier ID, address, email address, phone number, personal identification number or date of birth, bank and bank account details (including credit card details when requires), signature. If you are not a sole trader and represent your employer but contact us in the role of representative of a company, we process your name, surname, email address, phone number, company name, position, workplace and sometimes information regarding your right to represent your company, customer/supplier ID signature.	To conclude and perform contract with you or your employer.	10 years (Further storage can take place in individual cases if this is legally stipulated).
To fulfil our legal obligations, e.g. related to bookkeeping	If you are a sole trader, natural person, we will process your name, surname, position, customer ID, address, email address, phone number, personal identification number, bank and bank account details, signature. If you are not a sole trader and represent your employer but contact us in the role of representative of a company, we process your name, surname, email address, phone number, company name, position, workplace, address and sometimes information regarding your right to represent your company, customer/supplier ID, signature.	Legal obligations for bookkeeping, archiving of documents.	Up to 10 years (Further storage can take place in individual cases if this is legally stipulated).
To protect our legal rights and interests	Examples of personal data processed for this purpose is your communication with us, invoices, and agreements (personal data are used in aforementioned sources, i.e. name, surname, email address, phone number, company name, position, workplace, address and other data provided by you).	Legitimate interest to protect and enforce our legal rights and interests, e.g. in connection with legal claims, compliance, regulatory and audit functions.	10 years (Further storage can take place in individual cases if this is legally stipulated).
In connection with a merger or acquisition	In connection with, due to strategical or business-oriented reasons, a potential merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, the personal data we retain about you (name, surname, email address, phone number, company name, position, workplace, address) may be processed, shared, or transferred, to parties involved in the process.	Legitimate interest in being able to develop our business.	Up to 10 years Further storage can take place in individual cases if this is legally stipulated.
In connection with app "My room"	Images of your room you upload to our app from which we may have a theoretical possibility to identify you.	Consent	30 days After 30 days of non-usage, the images are typically deleted. It is possible that we store individual images for a limited amount of time in order to train and improve our recognition algorithm. Thus, if you do not agree to this, please delete your uploaded pictures in our application immediately after usage or contact us for assistance.
In connection with app "Roomvo"	Their online activity, including the functions, features, and resources that are used, the dates and times of usage, details about how Consumer's access Roomvo such as IP address, operating system, and browser version. Products that you share or identify as favorites, images and names of rooms, email addresses with whom you share your rooms.	Consent	Up to 45 days Any other personal information is kept in anonymized form for statistical purposes and will no longer refer to you.
Job applicants
To recruit our employees	Position for which you are applying, name, telephone number, e-mail address, city where you would like to work, salary expectation, date of interview, other information you will provide with your CV, motivation letter and other information that we may collect from your former workplaces, professional portals.	Legitimate interest and/or your consent	Based on legitimate interest we process personal data for 4 months or until the end of the relevant recruitment process, depending on what takes longer. Based on your consent, we may process personal data for 5 years.
To ensure communication via social networks (e.g. LinkedIn, Facebook, Twitter, Instagram, etc.)	Name, surname, nickname (if used), photo (if used), phone number, date, time, and content of the communication.	Consent or legitimate interest	For this purpose, we process your personal data until the moment of withdrawal of your consent (i.e. deletion of the provided data from the account), but no longer until Bauwerk account deletion. We noted that personal data is processed only on the platform of social network therefore the exact processing terms and conditions are determined by the controller of the relevant platform.

3. From where do we receive data?

Most of the personal data we process about you is received from you directly. You may directly or indirectly give us information about yourself in different ways, for example when you visit our showrooms or fill in forms on our websites. You can always choose not to provide us with certain information. However, some personal data is necessary for us to provide you with our products and/or services. Not providing such personal data may prevent us from providing the products and/or performing the services you expect from us.

We may also obtain personal data about you from your employer, the website of your employer or other external public sources.

4. To whom do we disclose data, and do we transfer data outside the EU or EEA?

Your personal information is shared with:

Our employees and business partners	Your personal data will be shared with some of our employees (including employees across Bauwerk Group where necessary) business partners. However, we will restrict access to those of our employees and business partners who need it to perform their jobs. Our employees and business partners are subject to strict confidentiality.
Our service providers	We transfer to or share your personal data with our suppliers who help us to provide our products and/or service to you, which require them to process personal data (e.g., IT service providers, cloud service providers, couriers, insurance, credit agencies etc.).
Public authorities	Sometimes legal obligations may require us to share information about you, e.g., to respond to lawful requests from law enforcement agencies, regulatory agencies, and other public and government authorities. We may also disclose information if needed in connection with a legal process, e.g., to enforce our agreements or to protect our rights, you or others.
Parties involved in mergers and acquisitions	We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, to the counter party and advisors involved in the process.

Bauwerk group companies have offices, facilities, and a distribution network all over the world. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission and the use of binding corporate rules.

The hosting facilities for our websites are situated in Switzerland, Germany, and Norway. The European Commission has made an "adequacy decision" with respect to the data protection laws of this country.

Here is a list of some of our service providers:

Purpose	Vendor Name	Description	Privacy Policy
Web Hosting	Flownative GmbH	Flownative is our hosting provider. We host our website on Flownative Beach. Google Cloud Platform (Cloud Hosting) is the technical basis for Flownative Beach. Flownative has concluded a contract with Google for commissioned data processing.	https://www.flownative.com/en/privacy/subcontractors.html https://www.flownative.com/en/privacy/privacy-policy.html
Web Hosting	Bradler & Krantz GmbH & Co. KG	Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and follow our instructions in relation to this data. Order processing We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions.	https://www.providerdienste.de/de/unternehmen/datenschutz/
Content Management System (CMS)	Neos Foundation e.V.	We use the open-source content application platform "Neos" as our content management system. Basically, anyone can participate in the further development (open source). Within the project, the Neos team takes care of the further development. For the development the service Github is used. We do not transmit any data to Github or the Neos team.	https://www.neos.io/footer-content/privacy-statement.html https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement
Web agency	sitegeist NEOS solutions GmbH	"sitegeist" is our web agency and responsible for maintaining, observing and the technical development of our branded website.	https://sitegeist.de/datenschutz.html
Web agency	MASSIVE ART WebServices GmbH	"Massive Art" is our web agency and responsible for maintaining, observing and the technical development of our Business Portal(s).	https://www.massiveart.com/datenschutz
Google Analytics	Google LLC (Wordwide) Google Dublin (EU)	We have integrated Google Universal Analytics (UA) and Google Analtytics 4 (GA4) on our website.	https://policies.google.com/privacy?hl=en
Google Ads	Google LLC (Wordwide) Google Dublin (EU)	We run advertisements on the Google search network. For this purpose, we use the "Google Ads" service and have connected it with our Google Analytics instances (conversion tracking).	https://policies.google.com/privacy?hl=en
Google Tag Manager	Google LLC (Wordwide) Google Dublin (EU)	We use Google Tag Manager to embed various code snippets on our website.	https://policies.google.com/privacy?hl=en
YouTube	Google LLC (Wordwide) Google Dublin (EU)	We use the video platform "YouTube" to embed videos on our website.	https://policies.google.com/privacy?hl=en
Facebook & Facebook Pixel	Meta Platforms Inc. (Worldwide) Meta Platforms Ireland Limited (EU)	We use the "Facebook Pixel" on our website. For this purpose, we have implemented a JavaScript code snippet on our website.	https://www.facebook.com/policy.php
Instagram	Meta Platforms Inc. (Worldwide) Meta Platforms Ireland Limited (EU)	We use the social network "Instagram" to inform users about our products and activities.	https://help.instagram.com/519522125107875
LinkedIn	LinkedIn Corporation (Worldwide) LinkedIn Ireland Unlimited Company (EU)	We use the social network "LinkedIn" to inform users about our products and activities.	https://www.linkedin.com/legal/privacy-policy
Pinterest	Pinterest Inc. (Worldwide) Pinterest Europe Limited (EU)	We use the social network "Pinterest" to inform users about our products and activities.	https://policy.pinterest.com/en/privacy-policy
Mailchimp	The Rocket Science Group, LLC	We use Mailchimp from The Rocket Science Group, LLC, to send our newsletters.	https://www.intuit.com/privacy/statement/#3._Privacy_for_Contacts
Customer Relationship Management (CRM)	Salesforce, Inc. (Worldwide) SFDC Ireland Limited (EU)	Cloud-based enterprise platform used as CRM tool for Bauwerk Group in the following markets (countries): US, UK, IT, LT, DE, AT, LT, CH, FR.	https://www.salesforce.com/company/privacy/
ECHOO by Aioma	Heroku is a Salesforce company Salesforce, Inc. (Worldwide) Aioma AG Hardturmstrasse 105 8005 Zürich Switzerland	Aioma is the provider of the software. The software is a custom product developed for Bauwerk Group and Aioma processes the corresponding data on behalf of Bauwerk Group. ECHOO is hosted by Heroku (https://www.heroku.com/) as a cloud application in the region of Europe. Heroku does not specify an accurate "location" for this. We are still seeking a data processing agreement with Heroku/Salesforce, as they are considered a sub-processor. Heroku is a Salesforce company.	https://www.salesforce.com/company/privacy/
Mautic	Acquia Inc. (Worldwide)	We use "Mautic" on our Website, which is a software for marketing automation.	https://www.mautic.org/privacy-policy

We maintain online presences on the following social networks: LinkedIn, Xing, Twitter, Instagram, Facebook, YouTube, Pinterest. When you visit these platforms, their privacy policies apply.

For information about social networking privacy policies and practices, please visit the following links:

• https://www.linkedin.com/legal/privacy-policy
• https://privacy.xing.com/
• https://twitter.com/privacy
• https://www.facebook.com/policy.phpp
• https://help.instagram.com/519522125107875
• https://policies.google.com/privacy
• https://policy.pinterest.com/en/privacy-policy

5. How do we use cookies on our website?

This website uses cookies. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

We use cookies for the following purposes:

Mandatory cookies are used to support the navigation. Without these cookies, the website cannot be operated. These cookies do not collect any personal information that can be used for marketing purposes or to track your access to different websites.

We use them to:

• increase the page speed of our website
• remember your cookie settings
• save your basket
• process online payments
• protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally

Functional cookies are used to provide website services and to remember your preferences.

We use them to:

• remember settings you have applied such as layout, language, or cookie preferences
• send information to third parties to enable services on our website (such as playing videos, registering, or displaying maps). The shared information is solely used for providing the requested service and is never used for any other purpose.

Performance cookies (Audience Measurement) are used to collect information about your website usage. All data is stored anonymously.

We use them to:

• provide statistics on how our website is used
• see how effective our adverts are
• detect any errors that may occur
• test different designs of our website

Targeting/Marketing/Personalization cookies are linked to services provided by third parties, such as 'Like' buttons and 'Share' buttons.

We use them to:

• link to social networks like Facebook, which may subsequently use information about your visit to target advertising to you on other websites.
• provide advertising agencies with information on your visit so that they can present you with adverts that you may be interested in
• measure the performance of our advertising campaigns.

Our website uses the following cookies:

Cookie	Domain	Description	Duration	Type
7wqoihq1g31imnagrukfa4w	form.bauwerk.com	This cookie is set by the provider Mautic.	1 year	Performance
mtc_id	form.bauwerk.com	This cookie is set by the provider Mautic. It is a targeting cookie to enhance the user communication and experience.	1 year	Marketing
_gat_UA-209486829-1	bauwerk-parkett.com	This cookie is set by the provider Google. It is used to throttle request rate to Google Analytics and the pattern element on the name contains the unique identity number of the account or website it relates to.	1 minute	Performance
_gid	bauwerk-parkett.com	This cookie is set by the provider Google. It registers a unique ID that is used to generate statistical data on how the visitor uses the website.	1 day	Performance
mautic_session_id	form.bauwerk.com	This cookie is set by the provider Mautic. This cookie is used to store a unique session ID.	1 year	Marketing
uid	bauwerk-parkett.com	This is a Google UserID cookie that tracks users across various website segments.	1 year 1 month 4 days	Performance
mtc_sid	bauwerk-parkett.com	This cookie is set by the provider Mautic. It is a targeting functional cookie in case you use forms or focus items.	Session	Marketing
mtc_sid	form.bauwerk.com	This cookie is set by the provider Mautic. It is a targeting functional cookie in case you use forms or focus items.	Session	Marketing
mautic_device_id	form.bauwerk.com	This cookie is set by the provider Mautic. It is used to track and store interaction on a website through different devices.	1 year	Marketing
_ga	bauwerk-parkett.com	This cookie is set by the provider Google. It registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years	Performance
mautic_device_id	bauwerk-parkett.com	This cookie is set by the provider Mautic. It is used to track and store interaction on a website through different devices.	1 year	Marketing
mautic_referer_id	form.bauwerk.com	This cookie is set by the provider Mautic. It is used to store referrer ID`s.	30 minutes	Marketing
mtc_id	bauwerk-parkett.com	This cookie is set by the provider Mautic. It is a targeting cookie to enhance the user communication and experience.	Session	Performance
_ga_NVM2FZ02TD	bauwerk-parkett.com	This cookie is set by the provider Google. It is used to store and count pageviews.	1 year	Performance
favourites	bauwerk-parkett.com	This cookie is set by the website www.bauwerk-parkett.com. It stores information about products that have been added to the "Bauwerk Wishlist".	3 months 8 days	Technically necessary
1P_JAR	google.com	This cookie is set by the provider Google. It is used to provide ad delivery or retargeting (Google Ads).	30 days	Marketing
DV	google.com	This cookie is set by the provider Google. It is used to provide ad delivery or retargeting (Google Ads).	1 day	Marketing
SOCS	google.com	This cookie is set by the provider Google. It is used to store cookie consent preferences (Google Ads).	1 year 1 month	Functional
CONSENT	google.com	This cookie is set by the provider Google. It is used to store cookie consent preferences (Google Ads).	2 years	Marketing
AEC	google.com	This cookie is set by the provider Google. It ensures that requests within a browsing session are made by the user, and not by other sites.	3 months	Functional
NID	google.com	This cookie is set by the provider Google. This cookie is used to display Google advertisements in Google services for logged out users.	6 months	Marketing
OGPC	google.com	This cookie is set by the provider Google. It is used to store user preferences and information while viewing Google mapped pages.	Session	Marketing
OTZ	google.com	This cookie is set by the provider Google. It is used to help customize ads on Google properties, like Google Search.	1 month	Marketing
session-	b2b.bauwerk-parkett.com	Session cookie that keeps the session alive.	Session	Technically necessary
cookie-preference	b2b.bauwerk-parkett.com	Stores the user's cookie settings.	Session	Technically necessary
sw-currency	b2b.bauwerk-parkett.com	This cookie is set when the non-logged-in user with an empty shopping cart changes the currency. Why does Shopware need a separate cookie for currency? It allows us to maximize cache hits for customers who are not logged in, because we separate the cache as little as possible.	Session	Technically necessary
sw-cache-hash	b2b.bauwerk-parkett.com	This cookie replaces the "sw-currency" cookie and contains the active rules and the active currency. This cookie is set when the active rules no longer match the default (e.g. customer login / items in shopping cart).	Session	Technically necessary
sw-states	b2b.bauwerk-parkett.com	This cookie describes the current session in simple tags like "cart-filled" and "logged-in". If the client tags match the sw-invalidation-states response header, the cache is skipped. For example, this feature is used to save the cache for logged-in clients only.	Session	Technically necessary
timezone	b2b.bauwerk-parkett.com	Saves the user's time zone.	Session	Technically necessary
csrf[*]	b2b.bauwerk-parkett.com	Serves the security of the website and provides protection to the user against CSRF (Cross-Site-Request-Forgery) attacks.	1 month	Technically necessary
google-analytics-enabled	b2b.bauwerk-parkett.com	Saves the consent of the enabling of Google Analytics.	365 days	Performance
_swag_ga_ga	b2b.bauwerk-parkett.com	Collection of statistics concerning the use of the website (Reach measurement).	2 years	Performance
_swag_ga_ga_*	b2b.bauwerk-parkett.com	Collection of statistics concerning the use of the website (Reach measurement).	2 years	Performance

6. What are your rights as a data subject?

You have the following rights:

Right to access your data	You have the right to request a transcript of personal data processed by us, and additional information on how the data has been collected, processed, shared, etc. The first transcript may be requested free of charge, however if you make repeated and unreasonable requests, we might charge you an administrative fee.
Right to rectification	You have the right to correct inaccurate or incomplete information about yourself.
Right to erasure ("right to be forgotten")	You have the right to request that we delete personal data about you, e.g., if the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, or if there is no legal basis for processing the data.
Right to object	You have the right to object to processing based on legitimate interest. This means that we may no longer process personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests. You can always contact us for more information on the balance test that has been done. You may also object to your personal data being processed for direct marketing purposes.
Right to transfer your data	You have the right to transfer your personal data to another controller under certain conditions.
Right to restriction	You are entitled to request that the processing of your personal data should be limited until inaccurate or incomplete information about you has been corrected, or until an objection from you has been handled.
Right to withdraw your consent	You may at any time withdraw any consent you have given us. However, please note that it will not affect any processing that has already taken place.
Right to complain	You have the right to lodge a complaint to the Supervisory Authority in the country you live or work in, if you believe that we have not complied with our obligations regarding your personal data.

7. How do we protect personal data?

To protect personal data, we apply the following organizational and technical data security measures:

• We apply access control measures.
• We ensure proper management of hardware and software we use.
• We track personal data security breaches and security incidents.
• We train our staff in training on personal data protection and cybersecurity threats.
• We ensure the protection of the workplace.
• We ensure security of network and communication.
• We take care of backups.
• We take care of the protection of mobile devices.
• We maintain the procedure for proper destruction and deletion of data.
• We also take care of physical security.

8. Changes in personal data processing related to the new Swiss Federal Act on Data Protection (FADP).

Since before the entry into force of FADP (Swiss Federal Act on Data Protection), we processed your personal data in accordance with a provision of GDPR, that are very similar in terms of data subjects’ rights, legal basis for data processing and other requirements related to data processing, therefore the changes in FADP does not change our Privacy policy in essence. If in the course of processing, we face the situation where FADP requires substantially different way of data processing we’ll update our Privacy policy accordingly, for example, we’ll inform you and ask for your consent in case we process sensitive data relating to religious, ideological, political or trade union-related views or activities; health, one's intimate life or racial origin; social security measures; administrative or criminal proceedings and sanctions.

9. Changes in this Privacy Policy

In the light of continuous development of our business processes (digitalisation and other areas) it is inevetably that data processing operations will be the subject to change from time to time, accordingly our privacy policy will be changed. Should we make amendments to this privacy policy, we will place the amended policy on our websites, with an indication of the amendment date. If the amendments are significant, we may also inform you about this by other means, for example by sending an email or placing a bulletin on our homepage. We recommend that you review this privacy policy from time to time to ensure you are aware of any amendments made.