Data protection

Zuletzt aktualisiert am 29. Dezember 2025

What do we do?

FlexBase Service AG (Werkstrasse 12, 5080 Laufenburg) operates the website flexbase.ch (hereinafter referred to as “we”).

The protection of your personal data is very important to us. In this privacy policy, we provide transparent and clear information about which data we collect via our website and how we process it.

For this reason, we use the icons of the PRIVACY ICONS association. These are intended to help you quickly gain an overview of how we process your data.

What information do we provide?

• Who is responsible for data processing;
• Which data is collected;
• For what purpose this data is collected;
• On which legal basis the data is collected;
• To whom we disclose this data;
• How you can object to data processing;
• Which rights you have and how you can exercise them.

Definitions of Terms

What is personal data?

Personal data (also referred to as “personal information”) includes all information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address or telephone number, as well as the IP address. Data relating to personal preferences, such as leisure activities or memberships, also qualifies as personal data.

What are special categories of personal data?

Special categories of personal data (also referred to as “sensitive personal data”) include:

• Data relating to religious, philosophical, political, or trade union views or activities;
• Data relating to health, private or intimate life, racial or ethnic origin, as well as sexual life and sexual orientation;
• Data relating to administrative or criminal proceedings and sanctions, as well as data concerning social assistance measures;
• Genetic data and biometric data that uniquely identify a person.

Where necessary and where you voluntarily disclose such data to us, we may process data that falls within special categories of personal data. In such cases, the processing of this data is subject to stricter confidentiality requirements.

What does the processing of personal data mean?

Processing (also referred to as “handling”) means any operation performed on personal data, regardless of the means and procedures applied. This includes, in particular, the collection, storage, retention, use, modification, disclosure, archiving, deletion, or destruction of personal data.

What does the disclosure of personal data mean?

This refers to the transmission or making available of personal data, for example through publication or disclosure to a third party.

Contact

If you have any questions or concerns regarding the protection of your data by us, you may contact our data protection officer:

FlexBase Service AG
Marcel Aumer
Werkstrasse 12
5080 Laufenburg
marcel.aumer@flexbase.ch

Data Security

We will store your data securely and take all reasonable measures to protect your data against loss, unauthorized access, misuse, or alteration.

Our contractual partners and employees who have access to your data are obligated to comply with applicable data protection regulations. In certain cases, it may be necessary, within the scope of commissioned data processing, to forward your inquiries to affiliated companies. In such cases, your data will also be treated confidentially.

Within our website, we use SSL (Secure Socket Layer) technology in conjunction with the highest level of encryption supported by your browser.

General Principles

Which data do we process about you and from which sources do we obtain this data?

Primarily, we process personal data that you provide to us or that we collect in the course of operating our website. In certain cases, we may also receive personal data about you from third parties. This may include the following categories:

• Master data (e.g. name, address, date of birth, etc.);
• Contact data (e.g. mobile phone number, email address, etc.);
• Financial data (e.g. bank account details);
• Online identifiers (e.g. cookie identifiers, IP addresses).

Such data may originate from the following sources:

• Information from publicly accessible sources (e.g. media, the internet);
• Information from public registers (e.g. commercial register, debt enforcement register, land register);
• Information in connection with administrative or judicial proceedings;
• Information relating to your professional roles and activities (e.g. professional networks);
• Information about you contained in correspondence and meetings with third parties;
• Creditworthiness information (where we conduct personal business transactions with you);
• Information about you provided to us by persons from your environment in order to conclude or perform contracts with you;
• Data in connection with the use of the website.

Under what conditions do we process your data?

We process your data in accordance with applicable data protection laws, in particular the GDPR. Data processing is carried out for the purposes set out in this privacy policy. In doing so, we observe the principles of transparency and proportionality.

The processing of your data is lawful where one of the legal bases set out in the GDPR applies. In particular, the following legal bases may apply:

• Your consent (Art. 6(1)(a) GDPR);
• The performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR);
• Compliance with a legal obligation to which we are subject (Art. 6(1)(c) GDPR);
• The protection of vital interests of the data subject or another natural person (Art. 6(1)(d) GDPR);
• The performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6(1)(e) GDPR);
• Our legitimate interests, provided that your interests do not override such interests (Art. 6(1)(f) GDPR).

In some cases, it is necessary for you to provide certain personal data so that contractual obligations can be fulfilled. Without such data, we are generally unable to conclude or perform a contract.

Likewise, the website cannot normally be used if certain information required to ensure data transmission, such as your IP address, is not disclosed.

In which cases may we disclose your data to third parties?

a. General principle

In some cases, we rely on the services of third parties or affiliated companies and may commission them to process your data (so-called processors). Categories of recipients include, in particular:

• Accounting, fiduciary, and auditing companies;
• Consulting firms (legal advice, tax advice, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion, and advertising services.

We ensure that such third parties and our affiliated companies comply with applicable data protection requirements and treat your personal data confidentially.

In certain circumstances, we may also be legally obliged to disclose your personal data to authorities.

b. Disclosure to partners and cooperation companies

We cooperate with various companies and partners who publish their offers on our website. It is clearly identifiable that these are third-party offers (marked as “advertising”).

If you make use of such an offer, we will transfer your personal data to the relevant partner or cooperation company (e.g. name, position, communication details) whose offer you wish to use. These partners and cooperation companies are independently responsible for the personal data they receive. After the transfer of data, the respective partner’s privacy policy applies.

c. Disclosure abroad

In the course of commissioned processing, it may be necessary to transfer your personal data to companies abroad. These companies are subject to the same data protection obligations as we are. Data transfers may take place worldwide.

If the level of data protection does not correspond to that of the EEA, we conduct a prior risk assessment and contractually ensure that the same level of protection as within the EEA is guaranteed (e.g. by using the European Commission’s standard contractual clauses or other legally prescribed measures). If our risk assessment results in a negative outcome, we will take additional technical measures to protect your data. You can access the European Commission’s standard contractual clauses via the relevant link.

How long do we retain your data?

We store personal data only for as long as necessary to fulfil the purposes for which the data was collected.

We retain contractual data for a longer period, as we are legally required to do so. In particular, we must retain business correspondence, concluded contracts, and accounting records for up to ten (10) years. Where we no longer require such data to perform our services, the processing of the data will be restricted and the data will only be used for accounting and tax purposes.

Individual Data Processing Activities

Provision of the Website and Creation of Log Files

When you merely visit flexbase.ch, i.e. without registering or otherwise providing information, only the data that your browser automatically transmits to our server is collected. This data is technically necessary for the operation of the website.

Which data do we process?

For the provision of the website and the creation of log files, the following data is processed in particular:

• Name of the internet service provider
• IP address
• Technical information such as browser type, operating system, or screen resolution
• Date and time of access
• Referrer URL

This data cannot be assigned to a specific person, and it is not merged with other data sources.

For what purpose do we process the data?

The processing of log files serves to ensure the functionality of the website and to safeguard the security of our information technology systems.

On what legal basis do we process the data?

The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interests arise from the purpose of the data processing as described above.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements regarding data disclosure.

How can you prevent the data processing?

The data is stored only for as long as necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session.

The storage of log files is essential for the operation of the website. Therefore, you do not have the option to object to this data processing unless you refrain from visiting our website.

Contact

You can contact us in several ways. If you contact us and provide personal data, this will result in data processing by us. This includes any form of contact with us, whether oral, written, or otherwise.

Which data do we process?

If you contact us, we process all data that you provide to us. This includes, in particular:

• Name
• Email address
• Content and time of your contact request
• Contact details

In some cases, you may be required to provide certain data in order to contact us, for example when using a contact form or requesting a call-back.

For what purpose do we process the data?

The purpose for which we use the data depends on the nature of the contact. However, we do not use the data for any unforeseeable or unexpected purposes. The most common purposes are communication and feedback, customer service, and the handling of business inquiries.

On what legal basis do we process the data?

The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interests arise from the purpose of the data processing.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements regarding data disclosure. If the purpose of your contact requires the disclosure of your data to third parties, we will disclose the data to the extent necessary.

How can you prevent the data processing?

If you contact us, data processing cannot be prevented. Consequently, you must refrain from contacting us if you do not wish your data to be processed.

Cookies

Our website uses cookies. Cookies are text files that are stored on your device’s operating system via your browser when you visit our website. Cookies do not cause any damage to your device and do not contain viruses.

Some cookies are technically necessary for the website to function. Most of the cookies we use are so-called “session cookies,” which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them or their storage period expires.

For what purpose do we process the data?

We use cookies to make our website more user-friendly, effective, and secure based on the data collected. In particular, we use cookies to store your preferences (such as language and location settings), to ensure fast delivery and an attractive presentation of website content (for example through the use of fonts and content delivery networks), and to analyze the use of this website for statistical evaluation and continuous improvement (generally by means of third-party cookies).

The specific purposes for which non-essential cookies are used are described in more detail in the following sections of this privacy policy.

On what legal basis do we process the data?

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Insofar as technically necessary cookies are concerned, our legitimate interest pursuant to Art. 6(1)(f) GDPR constitutes the legal basis.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements regarding data disclosure. In addition, the following sections of this privacy policy concerning individual data processing activities apply.

ow can you prevent the data processing?

When accessing the website, a cookie banner is displayed. Cookies that require your consent pursuant to Art. 6(1)(a) GDPR are only activated once you have given your consent. If you refuse consent, no data collection by consent-based cookies will take place.

Data collection via cookies that we use on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR cannot be prevented via the cookie banner. These technically necessary cookies are stored on your device. You can delete them entirely or disable or restrict their transmission by changing your browser settings. If cookies are disabled for our website, some functions of the website may no longer be fully available.

Instructions for the most common browsers can be found here:

• For Google Chrome
• For Apple Safari
• For Microsoft Edge
• For Mozilla Firefox

For cookies used for performance and reach measurement or for advertising purposes, a general opt-out is available for many services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

Comments

You have the option to comment on certain content on our website.

Which data do we process?

In order to publish a comment, you must provide us with the following information:

• Content of the comment
• Name
• Email address (not published)

For what purpose do we process the data?

The content of the comment must be collected in order to enable the publication of the comment. The name is collected in order to assign a comment to a specific user. If you do not wish your name to be published, you may use a pseudonym.

We use your email address for verification purposes, to notify you of responses to your comment, or to contact you if a third party reports your comment as unlawful. To prevent the unauthorized use of email addresses and to ensure the security of your data, we use the so-called double opt-in procedure. This means that you will receive an email in which you must confirm that you are the owner of the email address and that you wish to receive notifications.

You may unsubscribe from notifications at any time by clicking the link contained in the email. Your personal data, including your email address, the time of your registration for the service, and your IP address, will be stored by us until you unsubscribe from the notification service.

On what legal basis do we process the data?

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. By publishing a comment, you consent to the processing of your data.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements regarding data disclosure.

How can you prevent the data processing?

You can only prevent the collection of your data via the comment function by refraining from publishing a comment. If you choose to publish a comment, the data processing is unavoidable.

Tracking Pixels

We may use tracking pixels on our website or in our emails. Tracking pixels are also referred to as web beacons. These are small, usually invisible images that are automatically loaded when you visit our website or open our emails.

Which data do we process?

Tracking pixels may collect the same information as log files. In addition, session-wide movement or usage profiles may be created. Tracking pixels are used in particular by third parties whose services we use. Details of these third-party services are described later in this privacy policy.

For what purpose do we process the data?

Tracking pixels are used by various tracking services to analyze the use of this website for statistical evaluation and continuous improvement. In addition, tracking pixels may be used for email tracking.

On what legal basis do we process the data?

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements regarding data disclosure. Please also refer to the sections of this privacy policy relating to the individual tracking services.

How can you prevent the data processing?

To prevent data processing via tracking pixels, you may install suitable browser extensions such as uBlock Origin and block external images in your email program.

Does this Privacy Policy remain unchanged?

We may amend this privacy policy at any time. Any changes will be published on flexbase.ch. You will not be notified separately.