Legal

The website https://biotta.chis operated by us, Biotta AG, Pflanzbergstrasse 8, 8274 Tägerwilen, Switzerland (hereinafter referred to as «Biotta» or also «we»). The website also includes the online shop operated on it. The domain shop.biotta.ch redirects to this website.

When you get in Contact with Biotta, whether through the use of this website, via email or phone, personal data is generally collected. This refers to information you provide to us via the Contact form, such as your name or email address. Personal data also includes purely technical data, such as an IP address that is automatically collected when you visit our website.

This Privacy Policy covers both our online and offline data collection activities, including personal data that we collect through our various channels such as websites, third-party social networks, and sales outlets.

This Privacy Policy explains how we process personal data that we collect in the course of our relationship with you, and how you can exercise your rights. We comply with the Swiss Federal Data Protection Act (DSG) and other applicable data protection provisions.

Please note that this website is only intended for adults and not for children under 16 years old. We do not knowingly collect personal data of individuals under 16 years old through this website. However, Biotta may collect personal data of children and young people under 16 years old directly from the parent or guardian with their express consent.

If you do not provide us with the required personal data, we may not be able to provide you with our goods and/or services.

I. Collection and Purposes of Processing Personal Data

1. Visiting Our Website

You can access our website without providing any personal information. When visiting our website, we only collect information that your browser automatically transmits to our server (so-called log files). These log files may contain information such as:

• IP address of your device

• Date and time of the request

• Time zone difference from Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transferred in each case

• Website from which the request originates

• Browser

• Operating system and its interface

• Language and version of the browser software

This data is processed based on our legitimate interest to enable the use of our website (connection setup), to permanently ensure system security and stability, to resolve technical issues, to defend against attacks on the infrastructure, to carry out analyses in the event of hacker attacks, and to create visitor statistics. After your visit to our website, we store your log files for the above-mentioned purposes for a maximum duration of 30 days.

2. Contact Form

You have the option to get in Contact with us via our website using the Contact form, or via email or phone. In this case, the details you provide will be processed for correspondence with you, to handle your request and complete all associated related tasks. The legal basis for this is our legitimate interest in providing and operating a modern information platform to respond to your requests as effectively as possible.

If you contact us online via the contact form, you must provide your first and last name, your email address, and telephone number, as well as describe your concern; specifying the company you belong to is optional. If you write to us via email or call us by telephone, we process your email address and your telephone number as well as other information you have provided.

3. Customer Management

If you receive services or products from Biotta, the following personal data may be processed:

• Salutation

• First and last name

• Billing address as well as personal or business address

• Delivery address, unless collection in the store was agreed upon

• Email address

• Telephone number

• Your payment information such as IBAN or credit card number, credit card expiration date, etc.

• The products you ordered

• Notes you have added

We process this data based on our contract with you to fulfill your order, to inform you about the status of your orders, to correct addresses, to carry out fraud detection activities, and to provide other contractual services.

To process your orders and payments, we use the e-commerce platform Shopify (Shopify International Ltd., Dublin, Ireland). The data from our online shop is hosted on servers in the European Union. We have concluded contracts with the provider of this platform that ensure your data is only processed by us for the purpose of order processing and meets applicable security standards such as PCI DSS.

Payment processing: For the processing of your payment, we use Shopify Payments (Shopify International Ltd., Dublin, Ireland) and Payrexx (Payrexx AG, Switzerland). Credit and debit cards as well as accelerated payment methods and payment types common in Switzerland are available; the payment types available in each case are displayed to you during the ordering process. Your payment data is processed directly by the respective payment service provider; we ourselves do not receive full card data.

Shipping and delivery: For storage and shipping of your order, we work with an external logistics partner in Switzerland. We transmit to this partner the data required for delivery, especially name, delivery address, and the products ordered.

Customer account:You can create a customer account in the online shop. Registration takes place without a password, using a one-time code that we send to your email address. Your Contact and delivery addresses as well as your order history are saved in the customer account, so you do not need to re-enter this information for future orders. You can request to have your customer account deleted at any time.

We also process this data based on our legitimate interest to improve and develop new products and services, increase efficiency, protect our systems, networks, and employees, and to comply with legal obligations.

We store the personal data you have provided as well as your interest in our products in our CRM system for the purpose of customer management. We supplement this data with additional characteristics such as role, function, and company affiliation to send you targeted communication, provided you have given your consent for this.

4. Personal Data of Job Applicants

If you want to apply online at Biotta, you must first create a user account by entering your first and last name, your email address, and your place of residence. In connection with job applications, we may then process your resume, including application photos and cover letters, provided you provide these documents to us, as well as manage your account. For the processing of your employment contract, we will request additional data such as your AHV number and bank details.

We process this data with your consent and, if applicable, to take pre-contractual measures. For certain data processing activities, we require your express consent, for example to obtain information from third parties such as previous employers or to keep your application documents in our talent pool for potential other positions. You may revoke your consent for this at any time. Revoking your consent does not affect data processing that has already taken place.

In the event of a successful application, we store your personal data for the duration of the employment relationship and beyond, as long as required by law (usually no longer than 10 years). Should your application not be successful, we will delete your data within six months, unless you expressly agree to longer storage for potential further positions.

If you create an account at Biotta for application purposes, you can expressly agree to be included in our talent pool. In this case, we may store your application and the associated documents and personal data even after the end of the relevant recruitment process, and inform you in the event of a suitable vacant position and review your application again.

5. Marketing, Newsletter, Market Research

At your request, we can send you our newsletter via email through the service Klaviyo (Klaviyo Inc., 125 Summer Street, Boston MA 02110, USA) to keep you updated about our products and current offers. For registering for the newsletter, we need the following information from you:

• Contact category and desired communications

• Language preference

• Salutation

• First and last name

• Company

• Address

• Country

• Email address

We process this data based on your express consent. You can revoke this at any time by contacting us as described in Section VII or directly via the unsubscribe link in the respective newsletter email. Revoking your consent does not affect data processing that has already taken place.

We may also use your contact data for marketing purposes, provided you have concluded a contract with us and have not objected to receiving marketing communications when concluding the contract. In such a case, we will send you information via email, SMS, telephone, or post about products similar to those you have already purchased. For this purpose, in addition to the data specified for the newsletter, we also process information about your past purchases. This data processing is based on our legitimate interest in providing you with targeted information about our products and offers. You may object to this data processing at any time by contacting us at datenschutz@orior.ch or directly via the unsubscribe link in the respective marketing communication.

With your consent, we additionally use information about your purchasing behavior for market research and internal studies as well as to measure the effectiveness of our advertising campaigns. For these purposes, your personal data is first pseudonymized and finally anonymized when creating statistics.

Klaviyo also uses cookies and comparable technologies on our website to track your use of the online shop – for example products you have viewed or items added to the cart – and to display the newsletter sign-up window to you. This processing is governed by your cookie settings; more details can be found in Section III.

 

So that we can show you the appropriate sign-up form, your browser also loads a script from Klaviyo when you visit our website. Your IP address is transmitted to Klaviyo in order to determine your approximate country. No cookies are set for this purpose. This processing is based on our legitimate interest in displaying the newsletter sign-up.

II. Data Disclosure and Transfer Abroad

We only disclose your data to third parties for the purposes outlined in this Privacy Policy if we have a overriding legitimate interest to do so, if there is a legal obligation, if disclosure is necessary to assert, exercise, or defend legal claims or for the processing of contracts and business activities, or if based on your consent. These third parties include in particular:

• Service providers, including for processing payment transactions, IT service providers for hosting our website, for IT support and implementing security measures on our website, delivery services, newsletter services, collection agencies, or analytics services with which interactions with our website can be measured and statistically evaluated, as well as product review providers

• Law enforcement agencies in the event of judicial measures or proceedings, as well as our tax advisors, auditors, and lawyers to assert our rights and fulfill legal obligations.

• Third parties in the event of a change of ownership.

Most of these recipients are typically based in Switzerland or the EU. If a transfer of personal data to a country outside the EU that does not guarantee adequate Privacy Policy protection, including the USA, is required, such transfer will only take place if it has been confirmed that appropriate measures to protect your personal data have been implemented. This includes in particular your explicit consent to data processing, or the conclusion of recognised standard contractual clauses.

III. Use of Cookies, Analytics and Marketing Tools, Social Networks, and External Links

Cookies: To make visiting the Biotta website more user-friendly and effective, cookies are automatically installed on your computer that can identify your browser or your device. A cookie is a small text file that is sent to your computer or automatically saved on your computer or mobile device by the web browser you are using when you visit our website.

These technically necessary cookies are required to make the website usable by enabling basic functions such as page navigation and remembering information such as your language selection. They are processed based on our legitimate interest in the economic operation of this website and its optimization.

You can deactivate this function in your browser settings on your computer at any time and delete the cookies stored there yourself. However, if you block cookies, it may be that certain functionality is no longer guaranteed. These cookies are only used during a session and are deleted after your website visit (so-called session cookies).

For visitors from the European Economic Area and the United Kingdom, we display a cookie banner when you first access our website, through which you can make your selection; further cookies are only set there with your express consent. In Switzerland, we use these cookies based on our legitimate interest; you can adjust your selection at any time via the «Cookie Settings» link in the footer of the website and object to the processing. These may also be persistent cookies, which are deleted after a specified period, which may vary depending on the cookie.

Spam and abuse protection: To protect our website and our forms from malicious software and abusive activities, we use hCaptcha (Intuition Machines, Inc., San Francisco, USA). Your IP address and information about your usage behavior are transmitted to the provider and evaluated there to distinguish whether an input is done by a human or automatically.

 

Translation: To display our website in several languages, we use the Shopify app “Translate & Currency” provided by Hextom. When you visit our website, your browser loads files from Hextom’s servers (tms.hextom.com) for this purpose. For technical reasons, your IP address is transmitted to Hextom. This processing is necessary for the multilingual display of the website, is based on our legitimate interest and takes place regardless of your cookie settings.

Google Analytics: We also use the web analytics service Google Analytics to analyze your web behavior. Google Analytics uses cookies and similar technologies to evaluate how you use the website and to offer other services in the context of the website and internet usage. The information generated about your use of this website, including your truncated IP address, is transmitted to Google Analytics so that anonymous statistics about website activity can be compiled.

When visiting our website, the use of Google Analytics is governed by your cookie settings. You can adjust or revoke your selection at any time via the «Cookie Settings» link in the footer of the website. You can also deactivate Google Analytics entirely by following these instructions: https://tools.google.com/dlpage/gaoptout.

Google Ads and Google Merchant Center: We advertise our products via Google Ads and the Google Merchant Center. For this purpose, when you visit our website, cookies and comparable technologies are used by Google to measure which ads have led to a visit or an order, and to display to you advertisements tailored to your interests on third-party websites (remarketing). This processing is also governed by your cookie settings.

Meta Pixel (Facebook and Instagram): On our website, we use the Meta Pixel from Meta Platforms Ireland Ltd., Dublin, Ireland. This allows us to measure the effectiveness of our advertising on Facebook and Instagram and to display advertisements tailored to your interests there. Among other things, your IP address and information about your behavior on our website are transmitted to Meta and can be linked to your Meta account. This processing is also governed by your cookie settings.

TikTok Pixel: To measure and deliver our advertising on TikTok, we use the TikTok Pixel from TikTok Information Technologies UK Limited, London, United Kingdom. Information about your visit and your orders is transmitted to TikTok. This processing is also governed by your cookie settings.

Server-side transmission: A portion of this event data is not transmitted from your browser, but directly from the servers of our shop platform to the named providers. This transmission is also governed by your cookie settings or by your objection.

To ensure the lawful processing of your personal data, we have entered into Privacy Policy agreements with Google Ireland Ltd, Gordon House Barrow Street Dublin 4, D04E5W5 Ireland. As part of this processing, certain personal data is also sent to Google Inc. in the USA. According to assessments by the European Commission and the Swiss Federal Data Protection and Information Commissioner, the USA does not maintain an adequate level of Privacy Policy protection. When transferring data to the USA, there is a risk that your data will be accessed by US authorities. The same applies to transfers to Meta and our other service providers based in the USA.

Product reviews: To collect and display product reviews, we use the service Judge.me (Judge.me Ltd., London, United Kingdom). If you submit a review, we process the data you provide – name, email address, review text, and any images – for the purpose of publishing your review in the online shop. This processing is required for the operation of the review function and is independent of your cookie settings.

Social networks: Biotta is also present on social networks. When you visit the Biotta page on these networks, we are considered joint controllers with the operator of the respective social network. We have concluded agreements with the respective operators in which the operators ensure the security of your personal data and the exercise of your rights. You can exercise your rights either towards us or the respective operator. If you contact us, we will inform the operator about your report and provide them with the required information. Please note that despite the joint responsibility, we have no influence on the data processing processes of the operators of the social media platforms. For more information, please refer to the terms of use and privacy policies of the respective operators.

• LinkedIn: For the processing of your personal data when visiting our LinkedIn page, we are joint controllers with LinkedIn Ireland Unlimited Company. Further information about the processing of your personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.

• Instagram: For the processing of your personal data when visiting our Instagram page, we are joint controllers with Meta Platforms, Inc. Further information about the processing of your personal data by Instagram can be found at https://privacycenter.instagram.com/policy.

• Pinterest: For the processing of your personal data when visiting our Pinterest page, we are joint controllers with Pinterest Inc. Further information about the processing of your personal data by Pinterest can be found at https://policy.pinterest.com/de/privacy-policy.

• Facebook: For the processing of your personal data when visiting our Facebook page, we are joint controllers with Meta Platforms, Inc. Further information about the processing of your personal data by Facebook can be found at https://www.facebook.com/about/privacy.

• YouTube: For the processing of your personal data when visiting our YouTube page, we are joint controllers with Google Ireland Ltd. Further information about the processing of your personal data by YouTube can be found at https://policies.google.com/privacy.

• TikTok: For the processing of your personal data when visiting our TikTok page, we are joint controllers with TikTok Pte. Ltd. Further information about the processing of your personal data by TikTok can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.

External links: We are not responsible for the content and data processing on third-party websites that are accessible via links on the Biotta website. Please read the privacy policies of these third parties to learn how your data is processed.

IV. Data Security

We take appropriate technical and organizational security measures to protect personal data against unauthorized access and misuse. These include, among other things, instructions for employees, access rules and restrictions, as well as the encryption of storage media.

V. Retention Period of Personal Data

Unless otherwise specified in this Privacy Policy, we process and store personal data collected by us in the course of the activities described in this Privacy Policy for as long and to the extent required to fulfill the described purposes and our contractual and legal obligations, including statutory retention requirements, and as long as we have a legitimate interest in storing personal data or your valid consent.

VI. Your Rights Regarding Your Personal Data

You can exercise the following rights under the terms of applicable statutory provisions:

• Right to information about your personal data

• Right to correction of your personal data, if it is incorrect or incomplete

• Right to erasure, unless there is a statutory retention requirement or another legal reason for further storage

• Right to restriction of data processing, provided we process personal data based on our legitimate interest

• Right to revoke your consent to data processing at any time; revoking your consent does not affect data processing that has already taken place

• Right to transfer your personal data to a third party (data portability)

Please note that these rights are not absolute and we reserve the right to assert the statutory restrictions on our part.

You also have the right to file a complaint with the competent Privacy Policy authority (in Switzerland, the Federal Data Protection and Information Commissioner) or pursue your claims through legal proceedings.

To exercise your rights, please contact us at the contact address provided below. Please note that we reserve the right to request a copy of your identification document and, if applicable, additional information to verify your identity.

VII. Controller and Contact

Responsible for the usage and privacy policies described here is

Biotta AG, Pflanzbergstrasse 8, 8274 Tägerwilen, Switzerland

To assert your rights, please contact the responsible data protection officer at datenschutz@orior.ch.

VIII. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy at any time. The version published on this website at the respective time applies.

 

Status: October 2026