As of March 2026
This privacy policy informs users of this website about the nature, scope, and purpose of the collection and use of personal data, in accordance with Swiss and EU data protection law. We inform you transparently about what we need your data for and whether, and for how long, we store it.
The party responsible for data processing on this website is:
Nachbur AG
Industriestrasse 248
CH-4718 Holderbank (Canton of Solothurn)
Switzerland
Phone: +41 62 387 30 30
Email: info@nachbur.ch
5.1. Data Provided by You
You often provide personal data to us directly, for example when you communicate with us and transmit data in doing so.
This occurs, among other things, in the following situations:
- You enter into a contract with us;
- You create a customer account;
- You participate in a prize draw or competition;
- You contact our customer service;
- You register for other offerings, such as our newsletter.
The provision of personal data is primarily voluntary. However, for the processing and fulfillment of contracts, we must collect and process certain personal data. Statutory retention obligations also apply. Otherwise, we may not be able to conclude, fulfill, or continue the relevant contract. Processing of personal data for the purpose of contract fulfillment is generally permitted.
If you transmit data about other persons (e.g. friends, family members, work colleagues, partners) to us, we assume that you are authorized to do so and that such data is accurate.
You also ensure that these other persons have been informed about this privacy policy.
5.2. Data Collected
Personal data may also be collected automatically, e.g. online. This often includes behavioral and transaction data as well as technical data (time of website visit, payment history, etc.).
Personal data may be collected independently in the following cases (list is not exhaustive):
- You conclude a contract online;
- You pay digitally;
- You visit one of our websites or use one of our apps;
- You order a product from one of our online shops;
- You disclose your customer account in a communication with us;
- You consent to our newsletter or otherwise interact with one of our electronic marketing communications.
From existing personal data, we may derive further personal data, e.g. through the analysis of behavioral and transaction data. Such derived personal data often consists of preference data.
5.3. Data Received
We may also receive personal data from other companies within our group. Likewise, we may receive personal data from other contractual partners, provided you have consented to their transmission to us. We may also obtain personal data about you from publicly available sources.
5.4 Enquiries by Email, Phone, Form, and Other Means
When you contact us by email, phone, form, etc., your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us for the purpose of handling your request.
Some of this data is shared with third parties for the purpose of data processing.
The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested.
Legal Bases for Data Processing
The processing of personal data is based on different legal grounds depending on the purpose of processing. In Switzerland, data processing is primarily permissible provided it is not prohibited by law (FADP or GDPR).
Data processing is permissible for the performance of a contract regardless of, or even contrary to, the wishes of the data subject.
Furthermore, legitimate interests permit us to process data.
Legitimate interests may be of an idealistic or commercial nature. A recognized purpose is, for example, direct marketing, which includes contacting individuals with advertising information by telephone, email, or letter.
Furthermore, any data processing is permissible that is based on your consent or is required to comply with domestic or foreign legal provisions.
8.1. Within Our Company and Corporate Group
We may share your personal data within our company and corporate group. Such sharing may serve the purpose of internal group administration or the support of the companies concerned.
8.2. To Third Parties
We may also share your personal data with companies outside our organization when we use their services. These service providers primarily process your personal data on our behalf as processors.
We contractually oblige our processors, by means of a data processing agreement, to process your personal data exclusively in accordance with our instructions and to implement appropriate data security measures.
The disclosure of your personal data to other third parties for their own purposes requires your consent, unless there is a legal basis that obliges us by law to disclose it, such as:
9.1. Switzerland and EU
We process and store personal data in Switzerland and in the European Union. The GDPR provides a level of data protection equivalent to that of Switzerland.
In certain cases, however, we may also disclose personal data to service providers and other recipients located outside this area or who process personal data outside this area, in principle in any country in the world.
Personal data may only be transferred abroad without further conditions if the country in question offers a level of protection that is deemed adequate from a Swiss perspective.
Countries outside the EU often do not have laws that protect your personal data to the same extent as in Switzerland or the EU. Where we transfer your personal data to such a country, we ensure that your personal data is adequately protected.
One means of ensuring adequate data protection is of a contractual nature, securing the required protection of your personal data abroad. Standard contractual clauses (approved by the FDPIC, the Federal Data Protection and Information Commissioner) are often used for this purpose.
Contractual provisions do not always fully compensate for weaker or absent statutory protection, making your consent necessary. By visiting our website, you grant us this consent.
9.2. Third-Country Transfers (e.g. USA)
Our website incorporates services from companies based in or with ties to the USA. You must consent to this data processing. In such cases, unrestricted access to your personal data by US authorities cannot be excluded. Legal recourse may not be available. In the following cases, we cannot adequately ensure the protection of your personal data, even through standard data protection clauses.
The following services and service providers are included, though this list is not exhaustive:
Google
- Google Analytics
- Google Ads
- Google Adwords
- Google Maps
- Google Fonts
- YouTube
Service provider: Google Ireland Limited, Dublin, Ireland
Parent company: Google LLC, Mountain View, USA
Facebook/Meta
- Facebook
- Instagram
- Threads
Privacy policy: www.facebook.com/privacy/policy
LinkedIn
Privacy policy: https://de.linkedin.com/legal/privacy-policy
The accuracy of the address and corporate information listed above is not guaranteed and may change in a dynamic business environment.
For all of the companies listed above, it cannot be ruled out that they may be required to grant US authorities access to your personal data (US CLOUD Act), even where storage does not take place in the USA.
The information regarding the USA is provided subject to the reservation that Switzerland and the USA do not yet have an EU-US Data Protection Framework or an equivalent adequacy decision in the form of a Swiss-US Data Privacy Framework.
Certain types of personal data are considered particularly worthy of protection under data protection law. These include primarily, but not exclusively, health data, biometric characteristics, and DNA profiles.
We only process particularly sensitive personal data where it is strictly necessary for the provision of a service, where you have voluntarily disclosed such data yourself, or where you have consented to its processing. Such data is generally not shared with third parties or transferred abroad.
Automated individual decisions are made entirely automatically, without any human involvement. However, these decisions have legal consequences for the person concerned or significantly affect them in other ways.
We do not use automated individual decisions. Should we use automated individual decisions in specific cases, we will notify you. You will then have the option to request a review of the decision by a human.
We implement appropriate technical and organizational security measures in line with the current state of the art to safeguard your personal data, to protect it against unauthorized or unlawful processing, and to counter the risk of loss, unintentional alteration, unwanted disclosure, or unauthorized access.
We also require our processors to implement appropriate technical and organizational security measures.
Unfortunately, we cannot entirely rule out data security breaches. In the event of a potential data loss or data breach, we will notify you and the FDPIC in the cases provided for by law.
Applying the principles of data minimization and transparency, we process and store your personal data only for as long as is necessary to achieve the agreed purpose (e.g. contract fulfillment). That is, only for as long as we have a legitimate interest in storing it, but at least until full payment has been received.
Where statutory retention obligations apply, data is stored for the corresponding period.