The data controller within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG) is:
PackSys Global AG
Spitalstrasse 38
8630 Rüti
Switzerland
Tel: +41 55 253 37 00
Email:info@packsysglobal.com
Website: www.packsysglobal.com
Data Protection Contact:
datenschutz@packsysglobal.com
Collection and Storage of Personal Data, as well as the Nature and Purpose of Use
1. On the website – Public area
a) When visiting the website
When you visit our website, the browser used on your device automatically sends information to our website’s server, which is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
IP address of the requesting computer,
Date and time of access,
Name and URL of the file accessed,
Website from which the access originated (referrer URL),
the browser used and, if applicable, your computer’s operating system, as well as the name of your Internet service provider.
We process this data for the following purposes:
To ensure a smooth connection to the website,
To ensure a comfortable user experience on our website,
Evaluating system security and stability, as well as
for other administrative purposes.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
Art. 31(2)(a) DSG (overriding interest)
Under no circumstances do we use the collected data for the purpose of drawing conclusions about your identity.
b) Subscribe to our newsletter
If you have subscribed to our newsletter, we use your email address to send you our newsletter on a regular basis. Providing an email address is sufficient to receive the newsletter.
Legal basis:
Art. 6(1)(a) GDPR
Art. 31(1) DSG (Consent)
You may unsubscribe at any time. After you unsubscribe, your data will be deleted unless there are legal retention requirements.
c) Using our contact form
You have the option to contact us via a form provided on the website. To do so, you must provide a valid email address so that we know who the inquiry is from and can respond to it. Additional information may be provided voluntarily.
Legal basis:
Art. 6(1)(a) GDPR
Art. 31(1) DSG
The data will be deleted after processing is complete, provided there are no legal retention obligations.
d) Disclosure of data
Your personal data is generally not transferred to third parties. We will only disclose your personal data to third parties if:
you have given your consent
it is necessary for the performance of a contract
it is necessary to protect legal claims
there is a legal obligation
there is a legitimate interest
Legal basis:
Art. 6(1)(a)–(f) GDPR
Art. 31 DSG
If data is transferred abroad, this is done in accordance with Art. 16 et seq. DSG and Art. 44 et seq. GDPR, in particular on the basis of adequacy decisions or appropriate safeguards (e.g., standard contractual clauses).
e) Use of Service Providers
Processors are used to maintain our website, which means that data is also transferred to them. This applies in particular to our hosting provider “Hetzner” for the website and the provider of the data asset management tool “Kontainer.”
We have contracts with these parties in accordance with Art. 28 GDPR and Art. 9 DSG.
f) Cookie Settings
g) Analysis tools, conversion tracking, social media plug-ins
Various tools are used on our website, and in some cases your data is processed in the form of IP addresses. You can give, refuse, or revoke your consent for this at any time via the Consent Manager at .
Further information on the tools and cookies used, particularly regarding their respective retention periods, can also be found in our Consent Manager.
1. Matomo
Matomo, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand, is a web analytics software platform that can be used for tracking on the website. It provides detailed reports on the website’s functionality and its users. Matomo is used on the website in its privacy-friendly version, so no cookies are set.
2. Plausible
Plausible, Plausible Insights OÜ Västriku tn 2, 50403, Tartu, Estonia, is also a web analytics software platform used for tracking on the website. Plausible enhances tracking with cookies and enables a detailed and personalized user experience by tracking behavior across multiple visits and allowing targeted advertising based on individual preferences. Cookies are set for this purpose, and the IP address is collected and stored. The legal basis for data processing is § 25(1) TDDDG or Art. 6(1)(a) GDPR.
3. Algolia
Algolia, 3790 El Camino Real, Unit #518, Palo Alto, CA 94306, USA, is an AI search engine that supports users with an intelligent search function. For this purpose, the IP address is collected by Brückner. A direct search via Algolia is performed only at the user’s explicit request, resulting in data being transferred to Algolia. This may involve data transfer to Algolia, Inc. in the USA. The legal basis for data processing is § 25(1) TDDDG and Art. 6(1)(a) GDPR. Further information can be found here: https://www.algolia.com/policies/privacy
4. Friendly Captcha
We use forms on some pages. Here, we use the tool Friendly Captcha, Am Anger 3-5, 82237 Wörthsee, Germany, to secure these forms. The Captcha ensures that forms are not filled with spam by bots. For example, it prevents a bot from submitting the form thousands of times.
5. IP-Stack
IP-Stack, 4001 W. Parmer Lane, Suite 125, Austin, TX 78727
US, provides APIs for geolocating website visitors based on their IP address, allowing relevant offers/services to be provided based on the individual’s location. We use IP-Stack in a way that truncates IP addresses. This makes it impossible to trace the data back to a specific person.
6. OpenStreetMap
OpenStreetMap enables a user-friendly display of interactive maps and location-based information. The IP address of the accessing computer is collected and stored. The legal basis for data processing is § 25(1) TDDDG or Art. 6(1)(a) GDPR.
7. Brevo
In the context of email campaigns and if you subscribe to the newsletter, the tool Brevo, Köpenicker Strasse 126, 10179 Berlin, is used for this purpose. In addition to your IP address, information regarding newsletter behavior is also collected and stored, such as whether a newsletter has been opened. Brevo also transfers this data to countries that do not offer an adequate level of data protection and have not been recognized by the European Commission in an adequacy decision, such as the United States and India. The legal basis for data processing is Section 25(1) of the TDDDG or Article 6(1)(a) of the GDPR.
8. YouTube
YouTube is used on the website to present and display videos. YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA. YouTube also transfers personal data to countries outside the EU and the European Economic Area (“third countries”). Further details can be found in the privacy policy: How user data is protected on YouTube – How does YouTube work?
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA
The integration is done via YouTube Embed, using the “two-click solution.” The video is loaded once users have given their consent via the cookie banner. The legal basis for data processing is Section 25(1) TDDDG or Article 6(1)(a) GDPR.
9. Meta: Facebook and Instagram
On our website, services provided by Meta Platforms, Inc., Menlo Park, California, United States, are occasionally used as part of campaigns. This involves the transfer of personal data to countries outside the EU and the European Economic Area (“third countries”). The integration is carried out via Matomo Tag Manager. Data is only loaded once users have given their consent via the cookie banner. The legal basis for data processing is Section 25(1) TDDDG or Article 6(1)(a) GDPR.
10. LinkedIn
LinkedIn, a service provided by LinkedIn, Inc. based in Sunnyvale, California, USA, is integrated into our website.
This results in the transfer of personal data to countries outside the EU and the European Economic Area (“third countries”). The integration is carried out via Matomo Tag Manager. Data is only loaded if the user has consented via the cookie banner. The legal basis for data processing is Section 25(1) TDDDG or Article 6(1)(a) GDPR.
1.2 Login Area
On our website, registered users have the option to log in to a separate area. In this area, no tracking takes place via analytics tools, cookies, or fingerprints. Only necessary cookies are used. The following data is processed from you in the login area: The following data is processed:
Username
Password (hashed)
Log metadata
Legal basis:
Art. 6(1)(b) GDPR
Art. 31(2)(a) DSG
Log data is deleted after 7 days, provided there are no security-related reasons to the contrary.
The retention period is determined by statutory retention obligations or the duration of the business relationship.
1.3 Business Partners
When you contact us, request a quote, or enter into a contract, we collect your business contact information as well as your first and last name. Additionally, video or image recordings may be made when a video conference is conducted. We use the following tools for this purpose:
WebEx
MS Teams
GoToMeeting
Visavid
Legal basis:
Art. 6(1)(a)–(f) GDPR
Art. 31 DSG
The retention period is determined by statutory retention obligations or the duration of the business relationship.
2. Transfer of Data Abroad
Personal data is transferred abroad only in compliance with the legal requirements set forth in Art. 16 et seq. DSG and Art. 44 et seq. GDPR.
In the absence of an adequacy decision, we rely on appropriate safeguards, in particular standard contractual clauses.
3. Your rights
You have the following rights under the GDPR and the Swiss DSG:
Right of access (Art. 15 GDPR; Art. 25 FADP)
Rectification (Art. 16 GDPR; Art. 32 FADP)
Erasure (Art. 17 GDPR; Art. 32 DSG)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR; Art. 28 FADP)
Objection (Art. 21 GDPR; Art. 30 DSG)
Withdrawal of consent (Art. 7(3) GDPR; Art. 31 FADP)
You may also lodge a complaint with a competent EU supervisory authority or with the Federal Data Protection and Information Commissioner (FDPIC).
4. Data Security
We take appropriate technical and organizational measures in accordance with Art. 8 FADP and Art. 32 GDPR to protect your data from loss, misuse, or unauthorized access.
5. Validity and Changes to This Privacy Policy
This Privacy Policy is currently valid and has the following status:
Date: March 2, 2026
We reserve the right to amend this Privacy Policy as necessary, particularly in the event of changes to the legal landscape or data processing practices.