English
Deutsch

Privacy Policy – Surpose

1. Data Controller

BURY | WALZ GmbH
Baselstrasse 25 A
4125 Riehen, Switzerland
E-Mail: gesa.bury@burywalz.com
Phone: +41 61 501 6700

2. General Information

We, BURY | WALZ GmbH, take the protection of your personal data very seriously. This Privacy Policy explains what data we collect, how we use it, share it, and store it, and what rights you have.

This Privacy Policy applies to:

  • the use of our website https://www.surpose.com/
  • direct communication via email, phone, contact form or platforms such as LinkedIn
  • processing of customer inquiries

Important Note: In addition to data collected via our website, we also process personal data provided directly in connection with inquiries, or contracts, exclusively for the processing of orders, billing, and fulfillment of contractual obligations.

3. Types of Personal Data

We process personal data only to the extent necessary and exclusively for the specified purposes.

This includes:

  • Technical Data (automatically collected): IP address, browser type/version, operating system, date/time, visited pages, referrer, device information
  • Contact form fields: Name, email, phone number, message
  • Cookies & tracking data (see Section 5)
  • External tools & services (see Section 6)

4. Purpose of Data Processing

  • Processing of inquiries
  • Ensuring functionality, stability, and security of our website
  • Website usage analysis (tracking)
  • Communication via email and phone
  • Compliance with legal obligations

5. Cookies & Tracking Technologies

We use cookies and similar technologies to analyze website usage and improve user experience.

  • Session cookies – Used to ensure the proper functioning of the website.
    • Duration: active only during the session.
    • Provider: Surpose / Strato
  • Preference Cookies – Used to remember language or display settings.
    • Duration: typically 1 day to 1 year.
    • Provider: Surpose / WordPress, WordPress plugins (Polylang)
  • Analytics / Tracking Cookies – Used to analyze visitor behavior and improve our website.
    • Duration: User Identifier – 2 years; Session Identifier – 24 hours; Session State – 2 years
    • Providers: Google Analytics

6. External Tools & Services

We use external tools and services that process data to embed content, operate the website, or provide analytics. Examples include:

  • Analytics tools (Google Analytics)
  • Hosting provider (Strato)
  • Security services (SiteLock Scan, WPScan databases, Strato SiteGuard)

7. Storage and Automatic Deletion

We store personal data only as long as necessary for the purposes or legally required. Examples:

  • Server log files: 30 – 45 days
  • Contact inquiries: Until the end of contractual obligations + legal retention (usually 5–10 years for accounting/tax purposes)
  • Form data: 180 days to 365 days
  • Cookies: according to individual duration
    • Session Cookies:
      Duration: Deleted automatically when you close your browser.
    • Preference Cookies:
      Duration: Usually persist for 6–12 months.
    • Analytics / Tracking Cookies:
      Duration: 2 years

8. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access, e.g.:

  • SSL/TLS encryption
  • Access restrictions to data
  • Regular security audits and updates
  • Strong Password policies
  • Secure server locations
  • Encryption of storage media and transmissions
  • Pseudonymization, where possible
  • Employee training on data protection

9. Data Sharing

Data is shared only if necessary for the intended purpose or required by law. Potential recipients include:

  • Technical service providers (Strato, Google Analytics)
  • Authorities, if legally required
  • With explicit consent of the data subject

10. Rights of Data Subjects

Under Swiss Data Protection Law (DSG / revDSG), you have the right to:

  • Right of access: to obtain information about the data we store and process.
  • Right to rectification: to correct inaccurate or incomplete data.
  • Right to deletion: to request the erasure of your data, where legally permissible.
  • Right to restriction of processing: to limit how your data is used.
  • Right to data portability: to receive your data in a structured, commonly used format.
  • Right to withdraw consent: at any time, with future effect.
  • Right to object: in particular to processing for direct marketing purposes.

Complaints: can be directed to the Federal Data Protection and Information Commissioner (FDPIC / EDÖB): www.edoeb.admin.ch

11. Contact for Data Protection Matters (Data Privacy Champion)

If you have questions about data protection or wish to exercise your rights, you may contact our designated Data Privacy Champion at:
Gesa Bury, Inhaberin BURY | WALZ GmbH
E-Mail: info@burywalz.com
Adresse: Baselstrasse 25 A
Telefon: +41 61 5016700
We will respond to all data protection inquiries as soon as possible and in accordance with applicable legal requirements.

12. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. The current version published on the website applies.

13. Last Updated

This Privacy Policy was last updated on: 18 December 2025