Data Protection
A. Baggenstos & Co. AG takes the protection of your personal data seriously. In this privacy policy, we inform you about which personal data we process in connection with the use of this website, for what purposes and on what basis this is done, and what rights you are entitled to.
This statement is based on the revised Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). Should foreign law be applicable in individual cases, its mandatory provisions shall take precedence.
1. Controller
The entity responsible for processing your personal data is:
A. Baggenstos & Co. AG
Neugutstrasse 14
8304 Wallisellen
Switzerland
For questions regarding data protection and the exercise of your rights, you can reach us at:
Email: info@baggenstos.ch or via our contact form: https://www.baggenstos.ch/kontakt
2. EU Data Protection Representative
We have appointed the following data protection representative in the European Economic Area (EEA), including the European Union (EU) and the Principality of Liechtenstein, in accordance with Art. 27 GDPR, as an additional point of contact for supervisory authorities and data subjects for inquiries related to the General Data Protection Regulation (GDPR):
VGS Datenschutzpartner GmbH
Am Kaiserkai 69
20457 Hamburg
Germany
Email: info@datenschutzpartner.eu
3. Terms and Principles
"Personal data" refers to any information relating to an identified or identifiable natural person. The revised Swiss Data Protection Act (revFADP) protects only the data of natural persons; data of legal entities is not covered.
We process personal data in good faith, lawfully, and proportionately. We collect personal data only for a specific, identifiable purpose and process it only in a manner compatible with that purpose. We process personal data only to the extent necessary and retain it only for as long as the purpose requires.
Where processing requires a legal basis, we rely in particular on the performance of a contract or pre-contractual measures, our overriding legitimate interests, your consent (e.g., for newsletters and non-essential cookies), and legal requirements. For contact forms and inquiries, processing is carried out primarily to perform pre-contractual measures; for existing customers, we also rely on legitimate interests, such as efficient customer support, communication, and the further development of our services.
Where the General Data Protection Regulation (GDPR) applies, we base the processing of your personal data on the following legal grounds, depending on the case: Art. 6(1)(b) GDPR (performance of a contract or taking steps prior to entering into a contract), Art. 6(1)(a) GDPR (your consent, e.g., for newsletters and non-essential cookies), Art. 6(1)(f) GDPR (overriding legitimate interests, e.g., in the security, analysis, and further development of our services), and Art. 6(1)(c) GDPR (compliance with legal obligations). You may withdraw your consent at any time with future effect.
4. Processing During Website Visits (Hosting and Server Log Files)
This website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. Webflow processes data as our data processor.
Every time you visit our website, technically necessary data is processed that your browser transmits automatically, in particular your IP address, the date and time of access, the name and URL of the file accessed, the referring website (referrer), and the browser and operating system used. This processing is necessary to establish the connection, ensure system stability and security, and correctly deliver the website. We do not link this data to you as an individual.
5. Cookies and Consent Management
This website uses cookies and similar technologies. Cookies are small text files stored on your device. Necessary cookies are required for the website to function. For all other cookies (particularly for statistics and marketing), we will inform you of their use, and you may decline them.
To manage your cookie preferences, we use the consent management platform Cookiebot from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Further information can be found at https://www.cookiebot.com/en/. You can make your selections via the cookie banner and change or withdraw your consent at any time with future effect.
You can find an up-to-date, automatically generated overview of all cookies used (provider, purpose, storage duration) in the Cookiebot cookie declaration.
The storage duration of individual cookies is based on the current Cookiebot cookie declaration.
6. Google Analytics, Google Tag Manager, and Google Ads
Google Analytics 4, Google Tag Manager, and Google Ads are only used if you have provided your consent for the corresponding categories ("Statistics" or "Marketing") via the cookie banner. These services will not be activated without your consent.
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us evaluate website usage and improve our offerings. This involves processing information such as truncated IP addresses, device and browser information, and usage behavior on the website. We also use Google Tag Manager to manage and trigger the tags used.
According to Google, Google Analytics 4 does not store individual IP addresses for traffic from Switzerland, the EU, and the United Kingdom; IP addresses are discarded before logging or are only used to derive rough location information. Unless Google Signals are enabled, we do not use them. We do not use Google Analytics to create personal profiles of individual visitors.
This website uses the online marketing service Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As part of Google Ads, we use cookies to measure the effectiveness of our online advertising (conversion tracking). If we also use remarketing or retargeting functions from Google Ads, Google may display interest-based advertising to you on other websites within the Google advertising network based on your previous visit to our website. Cookies, as well as device and browser information, may be processed during this process.
A transfer of data to Google LLC in the USA cannot be ruled out; Google LLC is certified under the Swiss-U.S. Data Privacy Framework, which ensures an adequate level of protection. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.
7. HubSpot (forms, CRM, and appointment booking)
For contact forms, customer relationship management, newsletter distribution, and online appointment booking, we use the HubSpot platform, operated by HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland. Data is processed in a data center within the EU.
When you fill out a form, send an inquiry, or book an appointment, we process the data you provide (e.g., name, email address, company, phone number, the content of your message, and appointment details) to process your request or manage the appointment. HubSpot also uses cookies to analyze usage and optimize our marketing and sales activities. Details can be found in HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy.
Depending on usage, HubSpot may also process communication histories, email tracking information, marketing automation data, and assessments of prospective customers or leads (lead scoring), provided these features are in use. Features that are not used are not activated and are not used for these purposes.
8. Newsletter
You can subscribe to our email newsletter on our website. To sign up, we require your email address and your consent, which you provide actively via a checkbox. We log the time of registration to be able to verify your consent.
You can unsubscribe from the newsletter at any time, for example, via the unsubscribe link at the end of every newsletter email. By unsubscribing, you revoke your consent with effect for the future. The newsletter is sent via HubSpot (see section 7).
9. Microsoft Clarity
To analyze user behavior, we use Microsoft Clarity, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. With Clarity, we create heatmaps and record sessions, meaning interactions such as mouse movements, clicks, and scrolling behavior are captured and evaluated in the form of session replays. This helps us improve the website's user-friendliness. IP addresses, as well as device and browser information, may be processed during this process.
The recorded data is used exclusively for statistical purposes and to improve user-friendliness. According to Microsoft, input fields containing personal data are masked in all masking modes and are not recorded in plain text.
Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the Swiss-U.S. Data Privacy Framework, which ensures an adequate level of protection.
10. Adobe Fonts (Web fonts)
To ensure a consistent appearance across our website, we use the "Futura" font, which is integrated via the Adobe Fonts service provided by Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA. When you visit our website, a connection to Adobe's servers is established so that the font can be displayed in your browser. Your IP address is transmitted to Adobe in the process. According to Adobe, they do not store your IP address for other purposes. A transfer of data to Adobe Inc. in the USA cannot be ruled out. Further information can be found in Adobe's privacy policy at https://www.adobe.com/de/privacy/policy.html.
11. Contacting us
When you contact us (e.g., via a form, email, or phone), we process the data you provide to handle your request and answer any follow-up questions. Required fields are marked as such; without this information, we may be unable to process your request.
12. Photo and video recordings at events
Photo and video recordings may be made at our events. We use these for our communication and marketing purposes, in particular on our website, on social media, and sometimes in other publications.
If you do not wish to be photographed or filmed, please let us know on-site or contact us afterward via email. We will, of course, respect your request. We will remove already published content upon request, as far as possible.
13. Social media and embedded content
Our website may contain links to our profiles on social networks or embedded content from third-party providers, in particular LinkedIn, YouTube, Instagram, or Facebook. If you click on such links or load embedded content, personal data may be transmitted to the respective providers and processed there in accordance with their own privacy policies.
With embedded videos or social plugins, data transmission may occur as soon as the content is loaded, provided no technical two-click solution or comparable protective measure is in place.
Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you load or play an embedded YouTube video, personal data such as your IP address, device and browser information, referrer URL, and information about your use of the video may be transmitted to Google. This can happen even if you are not logged into YouTube or Google. If you are logged into Google, Google may associate your usage with your account.
Wherever possible, we embed YouTube videos in enhanced privacy mode or via a comparable consent or two-click solution. In this case, data is only transmitted to Google once you actively load or play the video or have consented to the video being displayed. Further information on data processing by Google can be found in Google's privacy policy.
14. Job applications
When you apply for a job with us, we process the application data you submit, in particular contact details, your CV, certificates, qualifications, correspondence, and other information you provide to us during the application process. This processing is carried out to review your application, conduct the application procedure, and prepare for a potential employment contract.
We use the application tool jobalino.ch to receive and manage applications. The provider is jobalino AG, Altgasse 45, 6340 Baar, Switzerland. Personal data provided during the application process can be collected and stored via jobalino.ch and transmitted to us for the processing of your application. According to jobalino.ch, the data is stored on certified Swiss servers or at server locations in Switzerland.
Application data may include, in particular, personal details, contact information, information on education and professional career, qualifications, employment references, testimonials, salary expectations, availability, interview notes, and other information you submit voluntarily. We process this data exclusively for the purpose of reviewing your application, communicating with you, conducting interviews, making decisions in the recruitment process, and fulfilling legal obligations.
Access to application data is restricted to internal departments involved in the recruitment process, in particular HR, supervisors, and decision-makers. jobalino.ch processes application data as an external service provider for the technical provision and management of the application tool. Data is only passed on to other third parties if this is necessary for the application process, if you have consented, or if we are legally obliged to do so.
We only obtain references if this is necessary for the application process and you have provided us with the relevant contact persons or have expressly agreed to us doing so. We only process sensitive personal data to the extent that it is necessary for the specific position or if you provide it to us voluntarily.
Application documents are deleted as soon as they are no longer required for the application process and there are no legal retention obligations or overriding interests to the contrary. As a guideline, we delete application data no later than 90 days after the conclusion of the application process if no employment is established. This period serves in particular to defend against any potential claims arising from the application process. Longer retention, for example for a talent pool or for future suitable positions, only occurs with your express consent, which you can provide separately in the application form. You may revoke this consent at any time with effect for the future.
15. Downloads, whitepapers, and brochures
When we offer downloads such as whitepapers, brochures, or similar content on our website in exchange for contact details, we process the provided data to deliver the requested content and, provided you have given your consent or there is a legitimate interest, to subsequently contact you and provide information about relevant offers or services.
16. Protection against spam (Google reCAPTCHA)
To protect our forms from misuse and automated entries (spam), we use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyzes visitor behavior based on various characteristics to distinguish whether an entry is made by a human or automatically (e.g., by a bot). This may involve collecting and transmitting data such as your IP address, time spent on the site, mouse and keyboard movements, and device and browser information to Google.
The analysis begins automatically as soon as you access a page or form protected by reCAPTCHA. Data transmission to Google LLC in the USA cannot be ruled out; Google LLC is certified under the Swiss-U.S. Data Privacy Framework, which ensures an adequate level of protection. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.
17. Customer satisfaction and online surveys (Microsoft Forms)
To conduct customer and satisfaction surveys, we use Microsoft Forms, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When you participate in one of our surveys, we process the information you provide to evaluate your feedback and improve our products, services, and customer support.
Participation in our surveys is voluntary. If a survey is designed to be anonymous, we do not collect information that would allow you to be identified. If you voluntarily provide contact details as part of a survey (e.g., to enter a prize draw or for personal feedback), we process this information exclusively for the stated purpose. Transmission to Microsoft Corporation in the USA is possible; Microsoft is certified under the Swiss-U.S. Data Privacy Framework.
18. Disclosure of data and data processors
We only disclose your personal data if it is necessary to provide our services, if you have consented, or if we are legally obligated or entitled to do so.
We use data processors (specifically Webflow, Google, HubSpot, Microsoft, jobalino.ch, and Cookiebot) to operate our website and services. They process personal data exclusively on our behalf and according to our instructions; we have entered into appropriate data processing agreements with them.
19. Disclosure of personal data abroad
Within the scope of the services mentioned above, personal data may be transferred abroad, particularly to EU/EEA countries and the USA.
The specific recipient countries depend on the services used and their current data processing information.
For transfers to countries without a legally recognized adequate level of data protection, we ensure appropriate protection through suitable measures, specifically by using standard contractual clauses recognized by the FDPIC. Transfers to the USA to recipients certified under the Swiss-U.S. Data Privacy Framework are covered by this framework.
20. Retention and deletion
We only retain personal data for as long as is necessary for the respective purposes or as required by statutory retention obligations. Thereafter, the data is deleted or anonymized.
The following are considered guidelines:
- Contact and inquiry data: up to 24 months after processing is complete, provided no contractual relationship is established.
- Newsletter data: until consent is withdrawn.
- Business-relevant documents subject to statutory retention requirements: 10 years (Art. 958f CO).
- Server log files: up to 90 days.
- Cookie data: in accordance with the respective Cookiebot cookie declaration.
- Application data: generally 90 days after the conclusion of the application process, provided no employment relationship is established.
21. Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse. Data transmission on this website is encrypted via TLS (recognizable by the "https" in the address bar).
22. Your rights
Under applicable data protection law, you have the following rights:
- Access to the personal data processed about you (Art. 25 revFADP);
- Correcting inaccurate personal data;
- Deleting or destroying your personal data;
- Restricting processing, to the extent provided for by applicable law;
- Receiving or transferring your personal data in a common electronic format (Art. 28 revFADP);
- Objecting to processing and withdrawing consent with future effect.
Please note that these rights may be restricted in individual cases, for example, if overriding interests or legal obligations prevent them. To exercise your rights, please contact the address provided in Section 1 or, if the GDPR applies, the EU data protection representative mentioned in Section 2. We may require appropriate proof of identity to verify your request.
23. Automated decision-making
We do not make decisions based solely on automated processing that have legal effects or similarly significant impacts on you.
24. Supervisory authority
You have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
If the GDPR applies to you, you also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement within the European Economic Area.
25. Changes to this privacy policy
We may update this privacy policy at any time to reflect changes in legal requirements or adjustments to our services. The version published on this website at any given time shall apply.
Last updated: July 31, 2026
