(Effective: March 2025)

This privacy policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as "data") in connection with our services, as well as within our online offering, including associated websites, functions, content, and external online presences such as our social media profiles (hereinafter collectively referred to as the "online offering").

Regarding the terminology used, such as "processing" or "controller," we refer to the definitions provided in Article 4 of the General Data Protection Regulation (GDPR).

Data Controller

If you have any questions regarding data protection or the processing of your personal data, you can contact us at any time via the email address provided above.

Types of Processed Data

We process the following categories of personal data:

  • Basic data (e.g., name, address, date of birth, customer or contract numbers).

  • Contact data (e.g., email address, phone numbers, social media profiles).

  • Content data (e.g., text entries, photographs, videos, uploaded files).

  • Usage data (e.g., visited websites, interest in content, access times, IP addresses).

  • Meta/communication data (e.g., device information, browser type, location data, cookies).

Categories of Data Subjects

The processing of personal data applies to:

  • Visitors and users of our website and online services.

  • Customers and business partners in the context of contract execution and service processing.

  • Interested parties and applicantswho contact us via our website or other means.

Purpose of Processing

We process personal data for the following purposes:

  • Provision and operation of our online offering (including technical functions and content).

  • Handling contact requests and customer communication.

  • Contract execution and service delivery.

  • Security measures and fraud prevention.

  • Audience measurement, analysis, and marketing.

Terminology Used

"Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). A person is considered identifiable if they can be directly or indirectly recognized by certain characteristics—such as their name, identification number, location data, an online identifier (e.g., cookies), or other unique attributes that define their physical, physiological, genetic, psychological, economic, cultural, or social identity.

"Processing" refers to any operation or set of operations performed on personal data, regardless of whether it is automated. This includes activities such as collection, recording, organization, storage, adaptation, transmission, linking, deletion, or destruction of data.

"Pseudonymization" means processing personal data in such a way that it can no longer be attributed to a specific person without the use of additional information. This additional information is stored separately and protected by technical and organizational measures to prevent identification.

"Profiling" refers to any form of automated processing of personal data that involves analyzing or predicting certain personal aspects of a natural person. This includes evaluations of work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movement patterns.

"Controller" refers to the natural or legal person, authority, or organization that determines, alone or jointly with others, the purposes and means of processing personal data.

"Processor" refers to a natural or legal person, authority, or organization that processes personal data on behalf of the controller. The processing is based on a contractual agreement that ensures compliance with data protection regulations.

Legal Basis for Processing

In accordance with Article 13 of the GDPR, we inform you of the legal bases for our data processing:

  • Consent (Article 6(1)(a) GDPR) – If you have given us explicit consent, for example, for newsletters or tracking services.

  • Contractual fulfillment (Article 6(1)(b) GDPR) – When data processing is necessary to fulfill a contract with you.

  • Legal obligations (Article 6(1)(c) GDPR) – If we are required to process data due to legal regulations.

  • Legitimate interests (Article 6(1)(f) GDPR) – If we have a legitimate interest in processing the data, such as improving our services or ensuring IT security.

Security Measures

We implement appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of technology, implementation costs, as well as the nature, scope, circumstances, and purposes of processing. These measures are designed to ensure an adequate level of protection against potential risks to the rights and freedoms of individuals. We particularly consider the likelihood and severity of risks when implementing these safeguards.

Our security measures include, but are not limited to:

  • Encryption technologies (e.g., SSL/TLS for our website) to ensure secure data transmission.

  • Access restrictions and authentication procedures to prevent unauthorized access to systems and data.

  • Regular security audits and data backups to ensure the integrity and availability of information.

  • Control of physical and digital access to stored data, as well as the regulation of data input, transmission, and separation of sensitive information.

  • Deletion and protection mechanisms to ensure that personal data is either securely stored or deleted in compliance with legal requirements.

  • Privacy-by-design and privacy-friendly default settings, ensuring that data protection is considered from the outset when developing and selecting hardware, software, and procedures.

These measures are continuously reviewed and updated to maintain the highest level of security.

Collaboration with Processors, Joint Controllers, and Third Parties

If we transfer personal data to other companies, processors, or third parties, or grant them access to such data as part of our processing activities, this occurs only on the basis of a legal authorization, a contractual agreement, or our legitimate interests.

This may include situations where:

  • Data needs to be transferred to payment service providers or technical service providers for contract fulfillment.

  • A legal obligation requires such a transfer.

  • We engage external service providers such as web hosting companies, IT security firms, or marketing agencies.

If we share data within our corporate group, this is primarily done for administrative purposes based on our legitimate interests and in compliance with all applicable data protection regulations.

Our partners and processors are contractually obligated to comply with data protection regulations and to process personal data exclusively on our behalf and in accordance with our instructions.

Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google"), to analyze and continuously improve the use of our online services. Google Analytics uses cookies to collect information about your website usage, which is typically transferred to and stored on a Google server in the United States.

Google processes this information on our behalf to analyze user behavior, generate reports on website activities, and provide other services to improve our online presence. This may involve the creation of pseudonymized user profiles.

We have enabled IP anonymization, meaning that your IP address is truncated within European Union member states or other contracting states of the European Economic Area (EEA). Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then truncated.

The transmitted IP address is not merged with other Google data. You can prevent the storage of cookies by adjusting your browser settings. Additionally, you can disable Google Analytics data collection and processing by downloading and installing the following browser plugin:

Link: Google Opt-Out Plugin

If we explicitly request your consent for the use of Google Analytics (e.g., via cookie consent banners), the processing is based on Article 6(1)(a) GDPR. Otherwise, data collection is based on our legitimate interest under Article 6(1)(f) GDPR, as user behavior analysis helps optimize and improve the economic efficiency of our online services.

Please note that Google may process data in the United States. Although the Privacy Shield Agreement is no longer valid, Google has committed to complying with European data protection standards.

For more details on Google's data usage, opt-out options, and privacy settings, refer to Google's Privacy Policy:

Link: Google Privacy Policy

Link: Google Ads Settings

The collected data is either anonymized or deleted after 14 months.

Cookies and Tracking Technologies

We use cookies to:

  • Ensure the functionality of our website,

  • Collect statistics on usage,

  • Enable personalized advertising.

You can adjust your cookie settings in your browser or disable cookies via Your Online Choices.

Social Media Presence

We operate social media pages on:

When visiting our profile, the privacy policies of the respective platform apply.

Contacting Us

If you contact us (e.g., via the contact form, email, phone, or social media), we process your data to handle your request and maintain further communication in accordance with Article 6(1)(b) GDPR (for the fulfillment of contractual or pre-contractual obligations) and Article 6(1)(f) GDPR (based on our legitimate interest in efficient and professional communication).

Your information may be stored in a Customer Relationship Management (CRM) system or a similar inquiry management system to structure requests and provide you with the best possible service.

We store your inquiries only as long as necessary for the respective communication. The necessity of storage is reviewed regularly, at the latest every three years. Additionally, legal retention obligations may require us to keep certain correspondences for a longer period (e.g., under commercial or tax law).

If you wish for your contact inquiry to be deleted earlier, you can contact us at any time at info@alpexion.ch.

Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access (Article 15 GDPR) – You can request a copy of the personal data we have stored about you.

  • Right to rectification (Article 16 GDPR) – If your data is incorrect or incomplete, you have the right to have it corrected.

  • Right to erasure (Article 17 GDPR) – You may request the deletion of your data, provided that no legal retention obligations prevent this.

  • Right to restriction of processing (Article 18 GDPR) – You can request a temporary restriction of data processing.

  • Right to object (Article 21 GDPR) – You have the right to object to the processing of your data.

To exercise any of these rights, please contact us at info@alpexion.ch.

Integration of Third-Party Services and Content

As part of our online offering, we integrate content and services from external providers based on our legitimate interest under Article 6(1)(f) GDPR (interest in analysis, optimization, and the economic operation of our website). This includes, for example, videos, fonts, and security features (hereinafter referred to as "third-party content").

The integration of such content requires that the respective third-party providers collect users' IP addresses, as they would otherwise not be able to deliver content to the browser. We carefully select our partners and ensure that they only use personal data for the purpose of providing their services.

Some third-party providers may use so-called pixel tags (web beacons). These invisible graphics allow for statistical analysis of visitor traffic on our website. The collected data may be stored pseudonymously in cookies and may include technical details such as browser type, operating system, referring websites, and visit times. In some cases, this data may be linked with information from other sources.

Google Fonts

To ensure a consistent and visually appealing presentation of our website, we use Google Fonts, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

  • The use of Google Fonts is based on our legitimate interest in a technically flawless, maintenance-free, and efficient display of fonts.

  • According to Google, the fonts are loaded directly in the user's browser without storing any personal data.

For more information, please refer to Google's Privacy Policy: Google Privacy Policy

Google ReCAPTCHA

To protect against spam and automated attacks (bots), we use Google reCAPTCHA, a security service provided by Google Ireland Limited.

  • reCAPTCHA analyzes visitor behavior and detects automated inputs based on certain characteristics (e.g., mouse movements, response times).

  • This analysis starts automatically when a user visits the website—no separate consent is required.

Processing is based on our legitimate interest in website security and protection against abuse and unauthorized access under Article 6(1)(f) GDPR.

For more information about Google reCAPTCHA:

Google Privacy Policy

Google Ads Opt-Out

We only use trusted third-party providers and minimize the collection of personal data to ensure user privacy and security.

LinkedIn Integration

Within our online services, we integrate features and content from the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland).

This integration may include images, videos, text, or buttons that allow users to share content from our website directly on LinkedIn.

If you visit our website while logged into your LinkedIn account, LinkedIn may associate your access and interactions with these features directly with your LinkedIn profile. This data processing is carried out by LinkedIn and is subject to their privacy policies.

For more information on LinkedIn's data processing, please visit:

LinkedIn Privacy Policy

If you wish to prevent LinkedIn from tracking your activities on our website and linking them to your LinkedIn profile, you can adjust your LinkedIn account settings:

LinkedIn Opt-Out: Ad Settings

Please note that LinkedIn may transfer personal data to countries outside the European Union. However, LinkedIn is committed to complying with European data protection standards and implements appropriate safeguards for data protection.

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy to reflect new legal requirements or changes in our data processing practices.

Last updated: March 2025