Privacy policy

BB Wertmetall AG (hereinafter “BB Wertmetall AG” or “we“) takes data protection very seriously. Therefore, we follow the legal provisions on data protection in order to protect the personal data of the users of this website (hereinafter “users” or “you“).

This Privacy Policy complies with the requirements of the European General Data Protection Regulation (hereinafter “GDPR“), which entered into force on 25.05.2018.

All personal data collected via this website (hereinafter “Website“) or otherwise will be collected and processed in accordance with the applicable data protection regulations, in accordance with the standards of the GDPR and the principles described below.

Responsible for data collection and processing is the:

BB WERTMETALL AG
Bachstr. 40
PO Box 612
CH-5600 Lenzburg
UID: CHE-421.131.147 VAT

Inquiries in connection with this privacy policy can be directed at any time to the following contact person:

Werner Ullmann (CEO)
Tel.: +41 (62) 892 48 48
E-mail: service [at] bb-wertmetall.ch.

What data are we talking about?

When data processing is mentioned, it generally refers to personal data. Personal data means any information relating to an identified or identifiable person. This means all information that has a reference (whether direct or indirect) to your person. This includes information such as first name, last name, addresses, e-mail addresses and IP addresses

Why are personal data processed?

In order to conclude a contract with BB Wertmetall AG, it is mandatory to know certain information from you, such as name and address. In addition, we want to offer our customers the best possible product and are therefore always striving to optimize our services.

We process your personal data only in compliance with the statutory provisions. This means that personal data is only processed if there is a legal basis for doing so. This is particularly the case if the data processing is necessary for the provision of our contractual services or for the use of our online services and/or is required by law. In addition, we process your personal data if we have your consent or if we have a legitimate interest in the processing (e.g. interest in the analysis, optimization, economic operation, security of our online offering, in particular in the case of reach measurement as well as collection of access data and use of the services of third-party providers)

When and to what extent do we process personal data?

Below you will find an overview of all processes in which your personal data is collected and processed.

• For the provision of contractual services / registration

We process personal data of our customers, employees, contractors, suppliers, clients and other contractual partners in order to provide our contractual obligations and services (Art. 6 para. 1 lit. b DSGVO).

• Contact

If you contact us by e-mail, the information you provide will be processed to the extent necessary to answer your questions. By means of online contact form, only the essential personal data of the contact and inquiry transmission are processed. You must consent to this transfer in advance.

• Visit our website

When you use our website, we or our authorized service providers, may use cookies or similar technologies. The information collected in this way helps us to better adapt our services to the needs of users.

• Newsletter

If you register for the newsletter, we process the personal data you provide in the context of sending the newsletter. You must consent in advance to receive the newsletter.

This section shows the technologies used by BB Wertmetall AG and how they are used.

Cookies

Our digital offers can generally be used without accepting cookies. Cookies help to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website.

Cookies do not damage your computer’s hard drive, nor do they transmit users’ personal data to us. We use cookies, for example, to track who has visited our website and to deduce how frequently certain pages or offers are visited and to generally survey how the website is used.

Most Internet browsers accept cookies automatically. However, you can configure your browser at any time so that no cookies are stored on your computer or a message always appears when you receive a new cookie.

We use the “Privacy Content” option from Avada. This creates a cookie called “privacy_embeds” to store and manage user consent from third-party cookies and scripts.

Tracking and web analysis tools

This website uses the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, (hereinafter “Matomo“) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 para. 1 lit. f DSGVO data collected and stored.

Pseudonymized usage profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the Internet browser of the user of the website. Among other things, the cookies allow the recognition of the Internet browser. The data collected using Matomo technology (including your pseudonymized IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the users of this website and is not merged with personal data about the bearer of the pseudonym.

If you do not agree with the storage and evaluation of this data from your visit, then you can object to the storage and use at any time by mouse click. In this case, a so-called opt-out cookie is placed in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may need to be reactivated by you.

Transfer of personal data to KYC Spider

We would like to inform you that we transmit personal data of customers to KYC Spider in order to carry out an audit in accordance with the Money Laundering Act (GwG). This data includes your name, birthday, nationality, address, telephone number and e-mail address.

The AMLA check takes place for each customer created through our application route. Please note that if you select “Online Legitimation” in the onboarding process, all your data will be transferred to KYC Spider in the form of the application PDF, including all included forms. When performing legitimation via KYC Spider, the images taken in the process (photos of the ID card and face) are also stored.

Please note that if you use our application route, you must agree that we may transfer your data to our partner KYC Spider. We would like to inform you that KYC Spider, as our processor, is obliged to protect your data in accordance with the applicable data protection laws and to use it only for the purpose of the AMLA audit.

Opt-Out iFrame:

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You are not opted out. Uncheck this box to opt-out. You are currently opted out. Check this box to opt-in.

The tracking opt-out feature requires cookies to be enabled.

The IP addresses are immediately anonymized by Matomo, thus an identification of the users of this website is not possible. The anonymous statistical data is stored separately from any personal data you may have provided and does not allow any conclusions to be drawn about a specific person.

In addition, the “Do not track” function is activated in the Matomo installation. If your browser supports this function and you have activated the function in the browser settings, no data will be collected by Matomo, even if you do not use the above-mentioned deactivation cookie.

Data collection when accessing our website

Every access to our internet offers as well as every retrieval of a file is stored and processed in a log file for a limited period of time (exclusively for defense and tracking of security-relevant accesses as well as for error analysis and statistical purposes).

The following information will be stored:

• Date and time of your access
• Your IP address, anonymized in shortened form
• Browser type and version
• the operating system used
• the website from which you visited us
• Pages and files that you access on our website
• the website you visit after our website (when clicking on an external link on our website)
• anonymized IP address of the users of this website.

The IP address identifies the user of Internet services and thus falls under the Data Protection Act. On this page, users’ IP addresses are transmitted to the Analytics tool in anonymized form (the last bytes of the IP address). In this respect, an assignment to a natural person is no longer possible.

Registration and comment function

WordPress as a blog system offers multiple functions of commenting on pages and blog entries.

BB Wertmetall AG has deactivated this function as a matter of principle. It is not possible for any user of this website to register for a comment function on the website. Thus, no comments are allowed and possible. This makes the website more secure and protects users from unauthorized disclosure of personal data.

Use of additional programs (plugins) and integration of third-party offers

Our digital offerings are sometimes networked with third-party functions and systems. This concerns, for example, the contact and application form.

BB Wertmetall AG expressly does not use any social media applications. This way we can exclude that personal data can be transmitted to such services.

The following plugins are used on the website of BB Wertmetall AG:

Login for employees

A login is only possible for the administrator. Other persons or employees are not authorized to make changes to the website and for this reason do not have access. The access data of the webmaster will not be passed on.

 

Email Newsletter

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. To subscribe to the newsletter, it is sufficient to provide the e-mail address. Using the first and last name allows us to address you more personally. However, it is not mandatory to provide the name in order to receive the newsletter. In addition, the following data is collected during registration:

• Your e-mail address
• IP address of the calling computer
• Date and time of registration.

For the processing of the above data, your consent is obtained during the registration process and reference is made to this privacy policy.

• Newsletter subscription and logging

The registration for our newsletter takes place in a so-called double opt-in process. In doing so, you will receive an email after registration asking for confirmation of your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address.

• Our shipping service provider for the newsletter

After extensive research, we decided to use “CleverReach”, a newsletter distribution platform of the provider CleverReach GmbH & Co. KG, Muehlenstr. 43, 26180 Rastede, GERMANY decided to send our newsletter. The e-mail addresses of our newsletter recipients, as well as the other personal data described in the above information, which are collected in connection with the registration for the newsletter, are stored on the servers of CleverReach in Germany. CleverReach uses this personal data to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, the dispatch service provider may use this data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes to determine which countries the recipients come from. However, CleverReach does not use the personal data of our newsletter recipients to write to them itself and does not pass this personal data on to third parties.

In addition, we have concluded a “Data Processing Agreement” with CleverReach. This is a contract in which CleverReach undertakes to comply with the GDPR and to protect the personal data of our users, to process it on our behalf in accordance with the provisions of the Data Processing Agreement and, in particular, not to pass it on to third parties.

• Legal basis for data processing

The legal basis for the processing of personal data in the context of sending the newsletter is the consent of the user (Art. 6 para. 1 lit. a DSGVO).

• Purpose of data processing

The collection of the user’s e-mail address is used to deliver the newsletter. Our interest is focused on the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users.

• Possibility of objection and elimination

The receipt of our newsletter can be cancelled at any time. In this case, the consent is revoked. A link to cancel the newsletter is listed at the end of each newsletter. After cancellation, your personal data will be deleted except for the e-mail address. The email address is stored in a blacklist and is only used to ensure that no further emails are sent to your email address.

• Description and scope of data processing

Our website contains forms that can be used for electronic contact. If you use this option, the data entered in the input mask will be transmitted to us and stored. The following data is also stored at the time the message is sent:

• Your email address
• Your IP address
• Date and time of registration
• Legal basis of data processing

The legal basis for the processing of personal data, if the user has given his consent, is Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of personal data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

• Purpose of data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the personal data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Customer access S-Deposito

The processing of your personal data within the framework of the provision of an online customer access S-Deposito serves the purpose of contract processing (Art. 6 para. 1 lit. b DSGVO). Insofar as the provision of services serves our legitimate interests, the additional legal basis for the processing is Art. 6 para. 1 lit. f GDPR.

Intermediary access

The processing of your personal data in the context of the provision of an online agent access serves the purpose of contract execution (Art. 6 para. 1 lit. b DSGVO). Additional legal basis for the processing is Art. 6 para. 1 lit. f GDPR.

The personal data collected via this website will only be stored as long as this is necessary for the purposes pursued with the processing and/or there is a legal obligation to retain the data or an overriding private or public interest. Personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and there is no legal obligation to retain it or an overriding private or public interest. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

To the extent permitted by law and where we deem it appropriate, we may disclose your personal data to third parties in the course of our business activities for processing for our purposes or for their own purposes.

In particular, we are entitled to commission data processors in Switzerland and abroad to process personal data and to disclose the personal data to them for this purpose, provided that they contractually undertake to process the personal data only on our behalf and for our purposes and to comply with this data protection declaration and the applicable data protection law.

We will then disclose your personal data to our group company in Germany, provided that it undertakes to process the personal data in accordance with this Privacy Policy and the applicable data protection law and thus to ensure an equivalent level of protection of the personal data.

Subject to a legal obligation or an official or judicial order, your personal data will only be disclosed to third parties with your consent.

We take appropriate technical and organizational measures to ensure the security of your personal data, in particular to protect it from unauthorized access by third parties and misuse. These safety measures are always adapted to the current state of the art.

The website of BB Wertmetall AG is operated on a Swiss server with SSL certificate. All data is transferred via a secure connection.

Possibility of objection and elimination

You have the possibility to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. The following is a description of the way in which revocation of consent and objection to storage is made possible. All personal data stored in the course of contacting us will be deleted in this case, provided that there are no statutory retention obligations or an overriding private or public interest to the contrary.

Right to information

You can request confirmation at any time as to whether and, if so, which personal data concerning you is being processed by us. This information is of course free of charge. Please use the following form for this purpose.

[wpgdprc_access_request_form]

Right to rectification

If the personal data we have stored is incorrect or incomplete, you can submit a request for correction at any time.

Right to deletion

Provided that there are no statutory retention obligations or an overriding private or public interest to the contrary, you can assert your right to deletion at any time.

Revocation of consents

Any data processing that is based on your consent will cease as soon as you withdraw your consent. The revocation can be made at any time and with effect for the future. Because our accountability requires us to keep a record of consent given, revocation must be in writing. A revocation by e-mail is sufficient.

Right of appeal

You have the right to complain to the competent supervisory authority if you believe that the processing of your personal data is not lawful.

We reserve the right, at our sole discretion and without notice, to modify, amend, expand or update this Privacy Policy at any time. Changes are valid as of publication on the website. Insofar as the data protection declaration is part of the contractual agreement with you, you will be informed of any changes in an appropriate manner.