Privacy Policy

1. Data controller

The data controller for personal data collected through this website is:

BAUTRUST AG

Via San Gottardo 10
6900 Lugano — Svizzera
CHE-282.456.034

Email: office@bautrust.ch
Phone: +41 91 640 07 00

2. Personal data collected

During navigation and use of our website, we may collect the following categories of personal data:

• Browsing data: IP address, browser type, operating system, pages visited, date and time of access, referring URL. This data is collected automatically by the IT systems responsible for the operation of the website.
• Voluntarily provided data: first name, last name, company name, email address, phone number, and any other information communicated through contact forms, assessment requests, or newsletter subscriptions.
• Usage data: interactions with the website, expressed preferences, aggregated data on the use of services.

2-bis. Details on data collection methods

Below are the specific methods of collecting personal data through the forms on the website:

a) Contact form

Data collected: name, email, company, sector, number of employees, problem description. Purpose: to organize an introductory call and provide consulting. Legal basis: explicit consent and pre-contractual measures.

b) Newsletter subscription

Data collected: first name, last name, email, phone, type of business, country. Purpose: sending updates on tools, methods, and automations for the construction/windows and doors industry. Legal basis: explicit consent.

c) Savings calculator (business diagnostic)

Data collected: name, email, phone, company, questionnaire responses (16 questions across 6 operational areas), profiling data (sector, revenue bracket, main problem), company parameters (number of employees, office staff, hourly cost). Purpose: generating a personalized business diagnostic report and proposing solutions. Legal basis: explicit consent.

d) Article PDF download

Data collected: email. Purpose: generating and sending the PDF of the requested article. Legal basis: explicit consent.

All forms require explicit consent to data processing (nFADP/GDPR) before submission. Consent to commercial communications is always optional and separate.

3. Purposes of processing

The personal data collected is processed for the following purposes:

• Service delivery: responding to contact requests, providing consulting, managing B2B business relationships, and providing technical support.
• Website operation: ensuring proper display and functionality of the website, preventing fraudulent or malicious activities, ensuring IT security.
• Analysis and improvement: analyzing in aggregated and anonymous form the usage patterns of the website to improve its content and functionality.
• Commercial communications: with explicit prior consent, sending communications related to products, services, updates, and initiatives of BAUTRUST AG.
• Legal obligations: complying with obligations under applicable Swiss and European legislation.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

• Performance of a contract or pre-contractual measures: processing is necessary for the performance of a contract to which the data subject is party, or for the implementation of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR; Art. 31(1) nFADP).
• Legitimate interest: processing is necessary for the pursuit of a legitimate interest of the controller, such as the proper functioning of the website, IT security, and aggregated statistical analysis (Art. 6(1)(f) GDPR; Art. 31(1) nFADP).
• Consent: for commercial communications and the use of non-essential cookies, processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR; Art. 31(1) nFADP).
• Legal obligation: processing is necessary to comply with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).

5. Data retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, in compliance with applicable legal limitation periods. In particular:

• Browsing data is retained for a maximum of 12 months.
• Data related to contractual relationships is retained for 10 years from the end of the relationship, in accordance with Swiss legal retention obligations.
• Data processed on the basis of consent is retained until consent is withdrawn.

6. Recipients and data transfers

Personal data may be disclosed to:

• Employees and agents of BAUTRUST AG, to the extent necessary for the performance of their duties.
• Competent authorities, where required by law.

Sub-processors

BAUTRUST AG uses the following service providers who process personal data on behalf of the controller:

• Vercel Inc. (USA) — Website hosting and delivery. Data processed: IP address, user agent, HTTP request timestamps. Privacy policy: vercel.com/legal/privacy-policy
• Resend Inc. (USA) — Transactional email delivery (diagnostic reports, article PDFs, contact notifications). Data processed: email address, name, message content. Privacy policy: resend.com/legal/privacy-policy
• n8n GmbH (Germany) — Automation platform for processing contact requests and leads. Data processed: data from the form filled in by the user. Privacy policy: n8n.io/legal/privacy
• Google LLC (USA) — Web font delivery (Exo 2, Inter, JetBrains Mono). Data processed: user IP address during font loading. Privacy policy: policies.google.com/privacy

Where data is transferred outside Switzerland or the European Economic Area (in particular to the USA), BAUTRUST AG adopts the appropriate safeguards provided for by the nFADP and the GDPR, including Standard Contractual Clauses (SCC) approved by the European Commission, the EU-US Data Privacy Framework, and adequacy decisions of the FDPIC (Federal Data Protection and Information Commissioner).

7. User rights

In accordance with the nFADP and the GDPR, the user has the right to:

• Access: obtain confirmation as to whether or not personal data concerning them exists and receive a copy thereof.
• Rectification: request the correction of inaccurate data or the completion of incomplete data.
• Erasure: request the deletion of personal data, within the limits provided by law.
• Restriction of processing: request the restriction of processing under certain circumstances.
• Data portability: receive their data in a structured, commonly used, and machine-readable format.
• Objection: object to the processing of data on grounds relating to their particular situation.
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise their rights, the user may contact BAUTRUST AG at office@bautrust.ch. The request will be processed within 30 days.

The user also has the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority under the GDPR.

8. Cookies

This website uses cookies and similar technologies to ensure proper operation and improve the browsing experience. For detailed information on the types of cookies used, their purposes, and how to manage them, please refer to our Cookie Policy.

9. Data security

BAUTRUST AG adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration, in accordance with Art. 8 nFADP and Art. 32 GDPR. These measures include encryption of communications (SSL/TLS), need-to-know-based data access restrictions, and periodic review of security policies.

10. Contacts and data protection officer

For any questions regarding the processing of personal data or to exercise the rights referred to in section 7, the user may contact:

BAUTRUST AG — Data Protection Officer

Via San Gottardo 10, 6900 Lugano — Switzerland
Email: office@bautrust.ch
Phone: +41 91 640 07 00

11. Changes to this privacy policy

BAUTRUST AG reserves the right to update or modify this privacy policy at any time. Changes will be published on this page with an indication of the date of the last update. We recommend checking this page periodically to stay informed of any changes.