Privacy Policy

Last updated: April 30, 2026

The protection of your privacy and your personal data is of central importance to BVS Packaging Group (hereinafter „BVS,“ „we,“ or „us“). Stored data is managed carefully and protected from misuse of any kind. In this privacy policy, we inform you about how we collect, process, and use personal data on our website.
This privacy policy is based on Swiss Federal Act on Data Protection (nFADP) as well as at the General Data Protection Regulation (GDPR), to ensure an appropriate level of protection for all users in Switzerland, Germany, Austria, and worldwide.

1. Responsible Party and Contact

The controller for data processing on this website is:
BVS Packaging Group AG
In der Luberzen 3
CH-8902 Urdorf
Switzerland

Tel.: +41 (0) 44 755 50 00
E-Mail: info@bvsag.ch
Website: https://bvs-verpacken.com

Contact person for data protection:
Simon Mayr – Email: s.mayr@bvs-verpacken.de
Livio Marchioni - E-mail: l.marchioni@bvsag.ch

Regional Locations:
Besides the headquarters in the Switzerland We maintain our own branches in Germany and Austria. Inquiries can be directed to the respective location. Central data protection coordination is handled by our head office in Urdorf.

EU Representative according to Art. 27 GDPR:
BVS Packaging Systems GmbH
Beim Ziegelstadel 6
87766 Memmingerberg
Germany
E-Mail: info@bvs-verpacken.de

2. Scope and Definitions

This policy regulates data protection-compliant information processing at BVS. All employees are obliged to comply with this policy.
Personal data is any information relating to an identified or identifiable natural person (e.g., name, address, email, IP address).
This privacy policy may be changed at any time without prior notice.

3. references

We have no influence on external sites to which our website refers, nor on external sites that refer to our offers. We therefore cannot guarantee that the information contained on such sites is correct or that they are free from malware (such as viruses). Information and services from linked websites or web services are entirely the responsibility of the respective third party. Any responsibility for such websites or web services is rejected.

4. Hosting and Infrastructure

Metanet AG (Hosting)
Our website will be published at METANET AG, hosted at Josefstrasse 218, CH-8005 Zurich, Switzerland. As a Swiss company, Metanet is subject to stringent Swiss data protection regulations. All website data remains on servers in Switzerland.

UptimeRobot
We use UptimeRobot to monitor the technical accessibility of our website. This service performs regular status checks. Technical log data is collected to ensure the stability of our online services.

5. data acquisition

Storage and Deletion
The processing of personal data on our website is limited to that data which is necessary for the provision of a functional website and user-friendly content and services, or to data that you have actively provided to us. The personal data collected by us will only be stored for as long as it is necessary for the fulfillment of the respective purpose. Legal requirements or other obligations may lead to longer storage periods.

Communication and Forms
When you fill out a form on our website (e.g. a contact form), we process the data that you provide to us insofar as this is necessary for the fulfillment of the processing purpose or completion of the order. As a rule, all information is voluntary. Mandatory fields are only marked as such if this information is necessary for the fulfillment of our legal task or your request. This data will be deleted at the latest when the statutory retention period has expired.
All form data is transmitted securely to our internal systems via the WP Mail SMTP plugin. This ensures reliable and encrypted transmission of your requests.
Alternatively, you can contact us via the provided email addresses. In this case, the ...
The user's personal data transmitted by e-mail will be stored. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Newsletter dispatch
If you subscribe to our newsletter, we will store your email address and any other voluntary information you provide in our Microsoft 365 system. Distribution is handled by our internal newsletter software, SuperMailer, via our company's own mail server. Your data will not be passed on to external service providers.
Processing is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

6. Server Log Files

When you access our website, information is automatically transmitted by your browser to our server and stored in log files: - User's IP address - Date and time of access - Browser type and version - User's operating system - Referrer URL (the previously visited page)
This data is used for the technical provision of the website, for security purposes, and for statistical analysis to improve our services. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR / nDSG).

7 Cookies and consent

Our website uses cookies to make visiting the site more appealing and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies used are deleted from your hard drive after the end of the browser session (so-called session cookies). Other cookies remain on your computer and allow us to recognize you on your next visit (so-called persistent cookies).
You can prevent the storage of cookies in your browser by restricting or disabling the storage and reading of cookies. Please note that certain website functions may not be usable without cookies.

Consent to storage
We use the Consent Management Tool Borlabs Cookie, to obtain your consent for the storage of certain cookies and to document this in compliance with data protection regulations. When you access our website, a Borlabs cookie will be stored in your browser, which stores the consents you have given or the revocation of these consents.

Personalization through Geo-IP and Browser Language
To display the appropriate country version, we determine your probable region by using your truncated IP address. Processing is carried out locally on our server solely for the purpose of providing you with the correct country-specific content. The legal basis is our legitimate interest according to Art. 6 (1) lit. f GDPR.
To display the most relevant content to you, we process data as follows:

Localization Using your IP address, we identify your country of origin (Switzerland, Germany, or Austria). This identification takes place locally on our server. A cookie (selected_location) stores this selection for 30 days. The default setting is Switzerland.
Language We detect your browser's language settings to automatically deliver the website in the appropriate language (German, English, French, or Italian).

8. Analysis and Tracking Tools

Google Tag Manager & Google Analytics
If you have given your consent via the Borlabs Cookie banner, we use Google Tag Manager and Google Analytics (Google Ireland Limited, Ireland). These services enable us to analyze the use of our website and to improve it regularly. We use Google Analytics with IP anonymization enabled.
The use of Google Analytics is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. A transfer of data to the USA cannot be excluded. Google uses the EU Standard Contractual Clauses for this purpose.

SalesViewer®
This website uses SalesViewer®, a service provided by SalesViewer® GmbH (Germany). SalesViewer® uses a JavaScript-based code to collect company-related data (B2B tracking). The IP addresses are pseudonymized (hashed) immediately after collection and are not used to identify natural persons. You can object to the collection at any time at https://www.salesviewer.com/opt-out.

Error messages and stability (Sentry)
To improve the technical stability of our website, we use the Sentry service to identify system errors and code anomalies in real time. Sentry collects anonymized technical data (e.g., browser type, operating system, error message) that help us make the website easier to maintain. IP addresses are processed only temporarily and in an anonymized form.
Processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the secure and error-free provision of our website.

9. Social Media (Facebook, Instagram, YouTube, LinkedIn)

We integrate functions and content from social networks. Integration is only carried out with your consent in accordance with Art. 6(1)(a) GDPR. These pages or services are offered and operated by third parties. If you use them, a connection to the servers of the providers (Meta, Google, LinkedIn) is established. Personal data may be transferred to third countries, in particular the USA.
For further information, please refer to the respective providers' privacy policies.

10. Your Rights

You have the following rights with regard to your personal data:

Right to access (Art. 15 GDPR / nGDPR)
Right to rectification or erasure (Art. 16 & 17 GDPR / nDSG)
Right to restriction of processing (Art. 18 GDPR / nDSG)
Right to object to processing (Art. 21 GDPR / nDSG)
Right to data portability (Art. 20 GDPR / nDSG)

You also have the right to lodge a complaint with the competent supervisory authority for data protection regarding our processing of your personal data.
Please contact us with relevant concerns at the addresses listed in Section 1.
The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of our website. Therefore, users of our website have no right to object in this regard.

Competent supervisory authorities include, in particular:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
Germany: The State Data Protection Officer of the respective federal state
Austria: Austrian Data Protection Authority

11. Data Security

Website We use encrypted data communication based on TLS/SSL, in conjunction with the highest encryption level supported by your browser. You can tell if an individual page of our website is being transmitted in encrypted form by the closed appearance of the key or padlock icon in your browser's address bar.
To protect our website and your data, we also use the security service Sucuri. This service monitors the website for malware, brute-force attacks, and other security threats to ensure the integrity of our platform.
The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in maintaining the security of our IT systems.
However, you should always be aware that the transmission of information over the internet and other electronic means involves certain security risks, and we cannot guarantee the security of information transmitted in this way.

General Data Processing: In addition, we apply appropriate technical and organizational security measures during data processing to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are in line with the current state of the art.