Privacy policy

The party responsible for processing personal data through this website is:

Dünner BIO AG, Sattlerstrasse 7, 8566 Neuwilen, Schweiz. Email: kontakt@bioduenner.ch

The full company details are given in the legal notice. For any question about data protection, please use the same address.

This website is hosted by Hostpoint AG in Switzerland. The data therefore stays in Switzerland.

When you open a page, the web server processes technically necessary connection data and records it in log files. This may include:

• IP address
• date and time of access
• the page or file requested
• browser and operating system used
• the page visited before (referrer)
• further technically necessary connection data

We need this data to run the website securely and reliably, to detect technical faults and to trace attempted attacks. It is not used to analyse individual visitors.

The logs are kept only as long as necessary for those purposes; the retention period follows the technical arrangements of our hosting provider.

If you write to us through the contact form, we process the details you enter there:

• name
• email address
• telephone number (optional)
• subject
• message

We use these details to handle and answer your enquiry. We do not use them for other purposes and do not pass them on to third parties unless you ask us to or the law requires it.

We keep your enquiry for as long as is necessary to deal with it and with any follow-up questions.

We use no third-party analytics or marketing tools. There is no Google Analytics or comparable service on this website, and we do not track your behaviour across websites. How we count the use of the website ourselves, anonymously, is described in the next section.

No cookies are set when you browse the public part of the website. A single, technically necessary cookie is created only when someone signs in to the internal area – see the section «Internal area».

The fonts used on this site are also served from our own server. No connection is made to Google Fonts or any other external provider for them.

To understand which content is read and how our website is found, we count page views ourselves – without cookies, without storing anything in your browser and without any third-party service. When a page is shown, your browser reports the following to our own server:

• the page viewed (without query parameters)
• on the first page: the name of the website you came from (such as «google.com» – never the full address) and a campaign tag from the link, such as «?ref=poster»
• whether the page exists

From this our server derives the type of device (phone, tablet, computer) and the browser family. Your IP address and full browser identification are not stored: they are only combined with a daily key into an anonymous identifier. This key exists solely in memory and is discarded every day. After that the identifier can no longer be linked to anyone, and the next day you receive a different one. We can therefore neither recognise you nor follow you over several days.

The data is kept in our own database in Switzerland and is only evaluated as totals – for example «120 visitors on Monday, most of them on a phone». Anyone who has switched on «Global Privacy Control» or «Do Not Track» in their browser is not counted.

Separately, the «Speed Insights» service of Vercel Inc. (USA) measures how quickly our pages load for you. It transmits measurements such as loading and response times together with the page viewed, the type of device and the browser. The service sets no cookies and stores nothing in your browser; the values are only evaluated in aggregate so that we can identify and improve slow pages.

There is a protected area for employees at «/portal». It is not public; accounts are created solely by the company, and there is no self-registration.

When someone signs in, we set a technically necessary cookie that identifies the session. It is called «better-auth.session_token», cannot be read by JavaScript, is not sent to other websites and expires after eight hours. Signing in does not work without it; it serves no analytical purpose.

For each sign-in we additionally store the device's IP address and browser identification. In the internal area we also keep a log of sign-ins, actions taken and files downloaded, with time and IP address, which only the management can view. This serves the security of the accounts and the data – for instance to detect misuse of an account.

The internal area is used to process employees' working hours, absences and duty rosters. Anyone holding an account there is informed about this separately; for visitors to the public website this area is of no relevance.

A duty roster can be shared from the internal area via WhatsApp. WhatsApp then opens with prepared text – the data only reaches it once the message is actually sent.

The contact page embeds a map from OpenStreetMap. It loads together with the page. Your browser thereby connects to openstreetmap.org and sends your IP address to that service.

We use the map solely to show the way to us; nothing is stored on our side. If you want to avoid that connection, do not open the contact page – the address and telephone number are also given in the legal notice.

Under the Swiss Data Protection Act you may request information about whether and which personal data we process about you. If data is incorrect you may request its correction; subject to the legal conditions you may also request erasure or object to the processing.

Please write to kontakt@bioduenner.ch. So that we can allocate your request, kindly describe briefly what it relates to. If you believe we are in the wrong, you may contact the Federal Data Protection and Information Commissioner (FDPIC).