Privacy Policy

As of March 2026

This privacy policy informs users of this website about the nature, scope, and purpose of the collection and use of personal data, in accordance with Swiss and EU data protection law. We inform you transparently about what we need your data for and whether, and for how long, we store it.

This privacy policy informs you about the following:
1. what personal data we collect and process;
2. for what purposes we use your personal data;
3. who has access to your personal data;
4. what benefit our data processing has for you;
5. duration of the processing and storage of your personal data;
6. your rights with regard to your personal data;
7. contact details.
 
This privacy policy applies under both the Swiss Federal Act on Data Protection (FADP) and the European General Data Protection Regulation (GDPR).
2.1. Personal Data
 
Personal data within the meaning of the FADP and the GDPR is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data includes, for example, names, addresses, email addresses, etc.
 
2.2. Processing
 
"Processing" means any handling of personal data, regardless of the means and procedures used, in particular the collection, storage, retention, use, modification, disclosure, archiving, erasure, or destruction of data.
 
2.3. Controller
 
The controller is the party that determines the purpose and means of processing, i.e., who decides that personal data is to be processed at all and under what essential conditions.
 
2.4. Processor
 
A processor is a party that carries out data processing on behalf of another. While the processor decides to operate its own business and to process the controller's data, whether this processing takes place at all remains the controller's decision. The controller has the right to issue instructions to the processor.

The party responsible for data processing on this website is:

Nachbur AG
Industriestrasse 248
CH-4718 Holderbank (Canton of Solothurn)
Switzerland

Phone: +41 62 387 30 30
Email: info@nachbur.ch

This privacy policy applies to all persons whose data we process, regardless of how you contact us.
 
It applies both to the processing of personal data already collected and to personal data to be collected in the future.
 
Further information can be found in our General Terms and Conditions (GTC), which may contain additional details on the intended data processing activities.

5.1. Data Provided by You

You often provide personal data to us directly, for example when you communicate with us and transmit data in doing so.

This occurs, among other things, in the following situations:

- You enter into a contract with us;
- You create a customer account;
- You participate in a prize draw or competition;
- You contact our customer service;
- You register for other offerings, such as our newsletter.

The provision of personal data is primarily voluntary. However, for the processing and fulfillment of contracts, we must collect and process certain personal data. Statutory retention obligations also apply. Otherwise, we may not be able to conclude, fulfill, or continue the relevant contract. Processing of personal data for the purpose of contract fulfillment is generally permitted.

If you transmit data about other persons (e.g. friends, family members, work colleagues, partners) to us, we assume that you are authorized to do so and that such data is accurate.

You also ensure that these other persons have been informed about this privacy policy.

5.2. Data Collected

Personal data may also be collected automatically, e.g. online. This often includes behavioral and transaction data as well as technical data (time of website visit, payment history, etc.).

Personal data may be collected independently in the following cases (list is not exhaustive):

- You conclude a contract online;
- You pay digitally;
- You visit one of our websites or use one of our apps;
- You order a product from one of our online shops;
- You disclose your customer account in a communication with us;
- You consent to our newsletter or otherwise interact with one of our electronic marketing communications.
From existing personal data, we may derive further personal data, e.g. through the analysis of behavioral and transaction data. Such derived personal data often consists of preference data.

5.3. Data Received

We may also receive personal data from other companies within our group. Likewise, we may receive personal data from other contractual partners, provided you have consented to their transmission to us. We may also obtain personal data about you from publicly available sources.

5.4 Enquiries by Email, Phone, Form, and Other Means

When you contact us by email, phone, form, etc., your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us for the purpose of handling your request.

Some of this data is shared with third parties for the purpose of data processing.

The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested.

We provide services and manufacture goods for customers domestically and abroad. You provide your data to us via our website, the contact form, or by email, post, etc.

We store this data on various servers and use it in the context of contract fulfillment. We pass on necessary data to partners.

6.1. Communication

We wish to stay in contact with you and address your individual needs. We therefore process personal data for the purpose of communicating with you.
 
The purpose of communication includes in particular:
 
- responding to enquiries;
- contacting you with questions;
- customer relationship management;
- communication in connection with contract fulfillment or issues arising from it;
- notifications about process progress or status;
- quality assurance and training
 
6.2. Contract Processing
 
We also aim to ensure contract fulfillment to your highest satisfaction. We therefore process personal data for the purpose of contract fulfillment and all areas directly or indirectly related to it, such as support, warranty cases, repairs, information, amendments, etc. The purpose of contract processing generally encompasses everything required or appropriate to conclude, carry out, and fulfill a contract. Contract processing may also include agreed personalization of services.

6.3. Information and Marketing

We also process personal data for relationship management and marketing purposes, e.g. by sending written or electronic communications. Such communications may be personalized and
may include the following types of communications (list is not exhaustive)

- Newsletter
- Promotional emails
- In-app messages
- Electronic messages
- Information by post
- Advertising brochures, magazines, and other printed materials;
- Invitations to events, prize draws, and competitions.

You may object to marketing contacts at any time. This requires you to proactively express your objection.
 
For newsletters and other electronic communications, you will be given the option to unsubscribe.
 
6.4. Tools Used

Your data may be processed using the following tools:
 
Hotjar
 
We use Hotjar to better understand our users' needs and to optimize this service and their experience. Hotjar is a technology service that helps us better understand our users' experience (e.g. how much time they spend on which pages, which links they click, what users like and dislike, etc.) and enables us to build and maintain our service based on user feedback. Hotjar uses cookies and other technologies to collect data on the behavior of our users and their devices, including a device's IP address (processed during your session and stored in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling any of the data collected on our behalf. For further details, please see the "About Hotjar" section of Hotjar's support site.
For further details, please see the "About Hotjar" section on Hotjar's support site.

Use of Microsoft® Clarity Technology

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Use of SalesViewer® Technology

On this website, SalesViewer® technology from SalesViewer® GmbH is used to collect and store data for marketing, market research, and optimization purposes, based on the legitimate interests of the website operator (Art. 6(1)(f) GDPR).
A JavaScript-based code is used for this purpose, which serves to collect company-related data and its corresponding use. The data collected using this technology is encrypted via a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.
Data stored within the scope of SalesViewer® is deleted as soon as it is no longer required for its intended purpose and provided no statutory retention obligations preclude deletion.
You may object to the collection and storage of data at any time with future effect by clicking this link https://www.salesviewer.com/opt-out to prevent future collection by SalesViewer® on this website. An opt-out cookie will be placed on your device for this website. If you delete your cookies in this browser, you will need to click this link again.

Use of Zapier Technology
 
For our website we use the automation software Zapier, provided by Zapier Inc., headquartered in the USA at 548 Market Street 6241, San Francisco, CA 94104.
Zapier processes data, including your data, in the USA. We wish to point out that the European Court of Justice has currently determined that there is no adequate level of protection for data transfers to the USA. This may potentially give rise to various risks for the lawfulness and security of data processing.
To nevertheless ensure that your data meets European data protection standards even when transferred to third countries, in particular the USA, Zapier uses standard contractual clauses pursuant to Article 46(2) and (3) of the General Data Protection Regulation (GDPR). These standard contractual clauses are model clauses developed by the EU Commission and are intended to ensure that your data is adequately protected even when transferred to and stored in third countries. Through these clauses, Zapier commits to upholding European data protection standards even when your data is stored, processed, and managed in the USA. These clauses are supported by a decision of the EU Commission. Further information on this decision and the corresponding standard contractual clauses can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
 
Google Fonts
 
For consistent display of fonts, we use web fonts provided by Google Ireland Limited, Dublin, Ireland. To do this, the browser you are using must connect to Google's servers. This enables Google to learn that our website was accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of our online services. The legal basis is Art. 6(1)(f) GDPR. For more information on Google Fonts, please see Google's privacy policy: https://developers.google.com/fonts/faq/privacy
To the extent that Google carries out any further independent processing of data, Google is solely responsible for such processing.
 
6.5. Security and Prevention
 
We aim to ensure your safety and ours, and to prevent misuse.
 
To ensure your safety and ours and to prevent misuse, we process personal data for security purposes, to ensure IT security, to prevent theft, fraud, and abuse, and for evidentiary purposes.
 
We will therefore collect, evaluate, and store your personal data for security purposes.
 
6.6. Legal Obligations
 
Where legal obligations exist, such as retention or disclosure requirements, we will comply with them. 
 
6.7. Enforcement of Legal Rights
 
To enforce our claims, we process your personal data in the context of preserving evidence or clarifying potential litigation prospects. Upon request, we will disclose your personal data to authorities.

Legal Bases for Data Processing
 
The processing of personal data is based on different legal grounds depending on the purpose of processing. In Switzerland, data processing is primarily permissible provided it is not prohibited by law (FADP or GDPR).

Data processing is permissible for the performance of a contract regardless of, or even contrary to, the wishes of the data subject.

Furthermore, legitimate interests permit us to process data.

Legitimate interests may be of an idealistic or commercial nature. A recognized purpose is, for example, direct marketing, which includes contacting individuals with advertising information by telephone, email, or letter.

Furthermore, any data processing is permissible that is based on your consent or is required to comply with domestic or foreign legal provisions.

8.1. Within Our Company and Corporate Group

We may share your personal data within our company and corporate group. Such sharing may serve the purpose of internal group administration or the support of the companies concerned.

8.2. To Third Parties

We may also share your personal data with companies outside our organization when we use their services. These service providers primarily process your personal data on our behalf as processors.

We contractually oblige our processors, by means of a data processing agreement, to process your personal data exclusively in accordance with our instructions and to implement appropriate data security measures.

The disclosure of your personal data to other third parties for their own purposes requires your consent, unless there is a legal basis that obliges us by law to disclose it, such as:

- information relating to product recalls
- the assignment of claims to other companies
- the review or execution of corporate law transactions such as company acquisitions, sales, and mergers;
- the disclosure of personal data to courts and authorities in Switzerland and abroad
- the processing of personal data in order to comply with a court order or official directive
- to assert legal claims

9.1. Switzerland and EU

We process and store personal data in Switzerland and in the European Union. The GDPR provides a level of data protection equivalent to that of Switzerland.
In certain cases, however, we may also disclose personal data to service providers and other recipients located outside this area or who process personal data outside this area, in principle in any country in the world.

Personal data may only be transferred abroad without further conditions if the country in question offers a level of protection that is deemed adequate from a Swiss perspective.

Countries outside the EU often do not have laws that protect your personal data to the same extent as in Switzerland or the EU. Where we transfer your personal data to such a country, we ensure that your personal data is adequately protected.

One means of ensuring adequate data protection is of a contractual nature, securing the required protection of your personal data abroad. Standard contractual clauses (approved by the FDPIC, the Federal Data Protection and Information Commissioner) are often used for this purpose.

Contractual provisions do not always fully compensate for weaker or absent statutory protection, making your consent necessary. By visiting our website, you grant us this consent.

9.2. Third-Country Transfers (e.g. USA)

Our website incorporates services from companies based in or with ties to the USA. You must consent to this data processing. In such cases, unrestricted access to your personal data by US authorities cannot be excluded. Legal recourse may not be available. In the following cases, we cannot adequately ensure the protection of your personal data, even through standard data protection clauses.
The following services and service providers are included, though this list is not exhaustive:

Google

- Google Analytics
- Google Ads
- Google Adwords
- Google Maps
- Google Fonts
- YouTube

Service provider: Google Ireland Limited, Dublin, Ireland
Parent company: Google LLC, Mountain View, USA

Facebook/Meta

- Facebook
- Instagram
- Threads

Privacy policy: www.facebook.com/privacy/policy

LinkedIn

Privacy policy: https://de.linkedin.com/legal/privacy-policy

The accuracy of the address and corporate information listed above is not guaranteed and may change in a dynamic business environment.

For all of the companies listed above, it cannot be ruled out that they may be required to grant US authorities access to your personal data (US CLOUD Act), even where storage does not take place in the USA.

The information regarding the USA is provided subject to the reservation that Switzerland and the USA do not yet have an EU-US Data Protection Framework or an equivalent adequacy decision in the form of a Swiss-US Data Privacy Framework.

Certain types of personal data are considered particularly worthy of protection under data protection law. These include primarily, but not exclusively, health data, biometric characteristics, and DNA profiles.

We only process particularly sensitive personal data where it is strictly necessary for the provision of a service, where you have voluntarily disclosed such data yourself, or where you have consented to its processing. Such data is generally not shared with third parties or transferred abroad.

Automated individual decisions are made entirely automatically, without any human involvement. However, these decisions have legal consequences for the person concerned or significantly affect them in other ways.

We do not use automated individual decisions. Should we use automated individual decisions in specific cases, we will notify you. You will then have the option to request a review of the decision by a human. 

We implement appropriate technical and organizational security measures in line with the current state of the art to safeguard your personal data, to protect it against unauthorized or unlawful processing, and to counter the risk of loss, unintentional alteration, unwanted disclosure, or unauthorized access.

We also require our processors to implement appropriate technical and organizational security measures.

Unfortunately, we cannot entirely rule out data security breaches. In the event of a potential data loss or data breach, we will notify you and the FDPIC in the cases provided for by law.

Applying the principles of data minimization and transparency, we process and store your personal data only for as long as is necessary to achieve the agreed purpose (e.g. contract fulfillment). That is, only for as long as we have a legitimate interest in storing it, but at least until full payment has been received.

Where statutory retention obligations apply, data is stored for the corresponding period.

 
We inform you about how and for what purposes we collect, process, use, and store personal data and other data when you use our websites and mobile apps, in particular in connection with cookies and similar technologies. References to websites below also include mobile apps.

15.1. Log Data

Each time our websites are used, certain data is automatically stored temporarily in log files for technical reasons. The following technical data is included, though this list is not exhaustive:

- IP address of the requesting device,
- information about your internet service provider,
- information about the operating system of your device (tablet, PC, smartphone, etc.),
- information about the referring URL,
- information about the browser used,
- date and time of access, and
- content accessed during the visit to the website.

This data is processed for the purpose of using our websites, such as establishing connections, ensuring functionality, system security and stability, optimizing our online services, and for statistical purposes.

The IP address is also evaluated together with log data and other data in the event of attacks on the IT infrastructure for investigation and defense purposes, and may be used in the context of criminal or civil proceedings, e.g. to identify the persons concerned.

15.3. Cookies and Similar Technologies

Our websites use cookies. Cookies are small text files that are stored on your computer or mobile device via a web browser when you visit the websites. When you visit one of the websites again, it recognizes you without knowing who you are. The purpose of this recognition is to make using the website easier for you. The use of cookies allows us to provide more user-friendly services that would not be possible without setting cookies.

You can configure your browser settings to block certain cookies or similar technologies, or to delete existing cookies and other data stored in the browser. You can also extend your browser with software that blocks tracking by certain third parties. You can find information about this in your browser's help pages, often under Privacy settings.

If you block cookies and similar technologies, our website may no longer function fully.
17.1. Right of Access

You have the right to request confirmation from us as to whether personal data relating to you is being processed by us. If so, you have a right of access to that personal data and to further information. We ask that you submit your access request together with proof of identity.

17.2. Right to Rectification

You have the right to request that we correct without delay any inaccurate personal data relating to you. Taking into account the purposes of processing, this also includes the right to have incomplete personal data completed, including by means of a supplementary statement.
 
17.3. Right to Erasure

You have the right to request without delay the deletion or anonymization of all personal data relating to you, provided we are not legally obliged to retain it.
 
17.4. Right to Data Portability and Release

You also have the right to receive the data you have provided to us in a commonly used file format.
 
17.5. Withdrawal of Consent

Any consents you have given may be withdrawn at any time with effect for the future. Please note that the exercise of these rights may conflict with contractual agreements and may have consequences, such as cost implications.

17.6. Right to Object

You may object to data processing, in particular where we process your personal data on the basis of a legitimate interest and the other applicable conditions are met.
 
17.7. Legal Recourse

You may also enforce your rights through the courts or file a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). Further information can be found at: http://www.edoeb.admin.ch.

Unsolicited Application