Privacy Policy

We, Biotta AG, Pflanzbergstrasse 8, 8274 Täger­wilen, Switzer­land (here­inafter “Biotta” or “we”), op­er­ate the web­site https://​biotta.ch/​en/.

Per­sonal data is usu­ally col­lected when­ever you con­tact Biotta, ei­ther by us­ing this web­site or by e-mail or tele­phone. This con­sists of in­for­ma­tion you pro­vide to us via the con­tact form, such as your name and email ad­dress. How­ever, per­sonal data also com­prises purely tech­ni­cal data, such as your IP ad­dress, which is au­to­mat­i­cally col­lected when you visit our web­site. 

This pri­vacy pol­icy cov­ers both our on­line and of­fline data col­lec­tion ac­tiv­i­ties, in­clud­ing per­sonal data that we col­lect through our var­i­ous chan­nels, such as web­sites, third-party so­cial net­works and points of sale.

It ex­plains how we process the per­sonal data that we col­lect in the course of our re­la­tion­ship with you and how you can ex­er­cise your rights. We com­ply with the Swiss Fed­eral Act on Data Pro­tec­tion (FADP) and other ap­plic­a­ble data pro­tec­tion reg­u­la­tions.

Please be aware that this web­site is in­tended for adults only and not for chil­dren un­der the age of 16. We do not know­ingly col­lect per­sonal data from un­der-16s through this web­site. How­ever, Biotta may col­lect per­sonal data re­lat­ing to chil­dren and young peo­ple un­der the age of 16 di­rectly from their par­ent or guardian with their ex­press con­sent.

If you do not pro­vide us with the re­quired per­sonal data, we may be un­able to pro­vide you with our goods and/​or ser­vices.

1.         Vis­it­ing our web­site

You can ac­cess our web­site with­out pro­vid­ing any per­sonal in­for­ma­tion. When you visit our web­site, we only col­lect in­for­ma­tion which your browser au­to­mat­i­cally trans­mits to our servers, known as log files. These files may con­tain in­for­ma­tion in­clud­ing:

• Your device’s IP address

• The date and time of your request

• Your time zone difference relative to Greenwich Mean Time (GMT) 

• The content of the request (specific page)

• The access status/HTTP status code 

• The data volume transferred, as applicable

• The website from which the request was made

• Your browser 

• Your operating system and its interface

• The language and version of your browser software

This data is processed in our le­git­i­mate in­ter­ests to fa­cil­i­tate the use of our web­site (es­tab­lish a con­nec­tion), safe­guard sys­tem se­cu­rity and sta­bil­ity over the long term, rec­tify tech­ni­cal prob­lems, ward off at­tacks on in­fra­struc­ture, analyse hack­ing at­tacks and com­pile vis­i­tor sta­tis­tics. Af­ter you visit our web­site, we will store your log files for the above pur­poses for a max­i­mum of 30 days.

2.        Con­tact form

You have the op­tion of get­ting in touch with us us­ing the con­tact form on our web­site or by e-mail or tele­phone. When you do so, the in­for­ma­tion you pro­vide will be processed for our cor­re­spon­dence with you and for the pur­pose of pro­cess­ing and car­ry­ing out your re­quest. The le­gal ba­sis for this is our le­git­i­mate in­ter­est in pro­vid­ing and us­ing a mod­ern in­for­ma­tion medium in or­der to deal with your en­quiries in the best pos­si­ble way.

If you con­tact us on­line via the con­tact form, you must pro­vide your first and last name, e-mail ad­dress and tele­phone num­ber and de­scribe your re­quest; nam­ing your com­pany is op­tional. If you write to us by e-mail or tele­phone us, we will process your e-mail ad­dress and tele­phone num­ber and any other in­for­ma­tion you pro­vide.

3.        Cus­tomer man­age­ment

If you ob­tain ser­vices or prod­ucts from Biotta, the fol­low­ing per­sonal data may be processed:

• Title

• Last name and first name

• Billing address and personal or business address

• Delivery address, unless in-store collection has been arranged

• E-mail address

• Telephone number

• Your payment information, such as your IBAN or credit card number and credit card expiry date

• The products you have ordered

• Any comments you have added

We will process this data on the ba­sis of our con­tract with you in or­der to ful­fil your or­der, in­form you about the sta­tus of your or­ders, cor­rect ad­dresses, carry out fraud de­tec­tion ac­tiv­i­ties and pro­vide other con­trac­tual ser­vices.

We use an e-com­merce plat­form based in Ire­land to process your or­ders and pay­ments. We have con­tracts in place with the provider of this plat­form to en­sure that your data is processed for us only in re­la­tion to the pro­cess­ing of your or­ders and that the ap­plic­a­ble se­cu­rity stan­dards, such as PCI DSS, are com­plied with.

We will also process this data based on our le­git­i­mate in­ter­est to im­prove and de­velop new prod­ucts and ser­vices, in­crease ef­fi­ciency, pro­tect our sys­tems, net­works and em­ploy­ees, and com­ply with le­gal oblig­a­tions.

We will store the per­sonal data you have pro­vided and a record of your in­ter­est in our prod­ucts in our CRM sys­tem for the pur­pose of cus­tomer man­age­ment. We will en­rich this data with ad­di­tional prop­er­ties, such as role, func­tion and com­pany, so we can send you tar­geted com­mu­ni­ca­tions, sub­ject to your con­sent.

4.         Per­sonal data of job ap­pli­cants

If you wish to ap­ply to Biotta on­line, you must first cre­ate a user ac­count. This in­volves en­ter­ing your first and last name, e-mail ad­dress and place of res­i­dence. In con­nec­tion with job ap­pli­ca­tions, we may sub­se­quently process your CV, in­clud­ing can­di­date photo and cover let­ter, if you pro­vide us with these doc­u­ments, and also man­age your ac­count. To process your em­ploy­ment con­tract, we will re­quest ad­di­tional data, such as your AHV num­ber and bank de­tails.

We will process this data with your con­sent and, if nec­es­sary, to take pre-con­trac­tual mea­sures. For cer­tain forms of data pro­cess­ing we will need your ex­press con­sent, for ex­am­ple to ob­tain in­for­ma­tion from third par­ties, such as pre­vi­ous em­ploy­ers, or to keep your ap­pli­ca­tion doc­u­ments in our tal­ent pool for other po­ten­tial jobs. You can with­draw your con­sent for this at any time. Such with­drawal will not af­fect any data pro­cess­ing that has al­ready taken place.

If your ap­pli­ca­tion is suc­cess­ful, we will store your per­sonal data for as long as you are em­ployed by us and be­yond, if pro­vided for by law (gen­er­ally no longer than 10 years). If your ap­pli­ca­tion is un­suc­cess­ful, we will delete your data within six months, un­less you ex­pressly agree to a longer stor­age pe­riod for po­ten­tial po­si­tions in the fu­ture.

When you cre­ate an ac­count with Biotta to sub­mit an ap­pli­ca­tion, you can ex­pressly con­sent to be in­cluded in our tal­ent pool. In such cases, we are al­lowed to re­tain your ap­pli­ca­tion and re­lated doc­u­ments and per­sonal data even af­ter the re­cruit­ment process for that po­si­tion has come to an end, and to no­tify you and re­view your ap­pli­ca­tion again if a suit­able va­cancy comes up.

5.         Mar­ket­ing, newslet­ter and mar­ket re­search

At your re­quest, we can send you our newslet­ter by e-mail through the Mailchimp ser­vice in Switzer­land to keep you up to date about our prod­ucts and lat­est of­fers. To reg­is­ter for the newslet­ter, we will need the fol­low­ing in­for­ma­tion from you:

• Contact category and desired messages

• Language preference

• Title

• Last name and first name

• Company

• Address

• Country

• E-mail address

We will process this data on the ba­sis of your ex­press con­sent. You can with­draw this con­sent at any time by con­tact­ing us as set out in sec­tion VII or di­rectly us­ing the un­sub­scribe link in the newslet­ter e-mail. Such with­drawal will not af­fect any data pro­cess­ing that has al­ready taken place.

We may also use your con­tact de­tails for mar­ket­ing pur­poses, pro­vided you have en­tered into a con­tract with us and did not ob­ject to re­ceiv­ing mar­ket­ing com­mu­ni­ca­tions when you did so. In such cases, we will no­tify you by e-mail, text mes­sage, tele­phone or post about prod­ucts that are sim­i­lar to pur­chases you have al­ready made. For this pur­pose, we will also process in­for­ma­tion about your past pur­chases in ad­di­tion to the data pro­vided in re­la­tion to the newslet­ter.  This data pro­cess­ing is based on our le­git­i­mate in­ter­est in send­ing you tar­geted in­for­ma­tion about our prod­ucts and of­fers. You can ob­ject to this pro­cess­ing pur­pose at any time by con­tact­ing daten­schutz@orior.ch or di­rectly by click­ing on the un­sub­scribe link in that mar­ket­ing com­mu­ni­ca­tion. 

With your con­sent, we will also use in­for­ma­tion about your pur­chas­ing be­hav­iour for mar­ket re­search and in­ter­nal stud­ies and to mea­sure the ef­fec­tive­ness of our ad­ver­tis­ing cam­paigns. For these pur­poses, your per­sonal data will first be pseu­do­nymised and ul­ti­mately anonymised when the sta­tis­tics are com­piled.

We will only dis­close your data to third par­ties for the pur­poses de­scribed in this pri­vacy pol­icy if we have an over­rid­ing le­git­i­mate in­ter­est in do­ing so, if there is a le­gal oblig­a­tion to do so, if the dis­clo­sure is nec­es­sary for the as­ser­tion, ex­er­cise or de­fence of le­gal claims or for the per­for­mance of con­tracts and busi­ness ac­tiv­i­ties, or on the ba­sis of your con­sent. Such third par­ties in­clude in par­tic­u­lar:

• Service providers, including those that process payment transactions; IT service providers that host our website, provide IT support and implement security measures on our website; delivery services; newsletter services; debt collection agencies; and analytics services that measure and statistically analyse interactions with our website.

• Law enforcement authorities in the event of judicial actions or proceedings, and our tax advisors, auditors and lawyers in relation to the exercise of our rights and legal obligations.

• Third parties in the event of a change of ownership.

Most of these re­cip­i­ents are usu­ally based in Switzer­land or the EU. If per­sonal data needs to be trans­mit­ted to a coun­try out­side the EU that does not as­sure ad­e­quate data pro­tec­tion, in­clud­ing the USA, such a trans­fer will only take place if it has been en­sured that ap­pro­pri­ate mea­sures have been taken to pro­tect your per­sonal data. This in­cludes in par­tic­u­lar ob­tain­ing your ex­press con­sent to data pro­cess­ing or the con­clu­sion of recog­nised stan­dard con­trac­tual clauses.

Cook­ies: To make your visit to the Biotta web­site more user-friendly and ef­fec­tive, cook­ies that iden­tify your browser and de­vice are au­to­mat­i­cally in­stalled on your com­puter. A cookie is a small text file sent to your com­puter or au­to­mat­i­cally stored on your com­puter or mo­bile de­vice by the web browser that you are us­ing when you visit our web­site.

These cook­ies are needed for tech­ni­cal rea­sons: they make the web­site us­able by en­abling ba­sic func­tions such as page nav­i­ga­tion and re­mem­ber­ing in­for­ma­tion such as your lan­guage se­lec­tion. They are processed on the ba­sis of our le­git­i­mate in­ter­est in the eco­nomic op­er­a­tion of this web­site and its op­ti­mi­sa­tion.

You can de­ac­ti­vate this func­tion in your com­put­er’s browser set­tings and delete the cook­ies that are stored there. How­ever, cer­tain func­tions may no longer work if you block cook­ies. These cook­ies are only used dur­ing a ses­sion and are deleted af­ter your web­site visit (ses­sion cook­ies).

We only use other cook­ies with your ex­press con­sent, as de­scribed in our cookie ban­ner. These may in­clude per­sis­tent cook­ies, which are deleted af­ter a pre­de­fined pe­riod, which may dif­fer de­pend­ing on the cookie.

re­CAPTCHA: To pro­tect our web­site as much as pos­si­ble from mal­ware and abuse, we use Google re­CAPTCHA, pro­vided by Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, D04E5W5 Ire­land. This ser­vice does not process per­sonal data.

Google An­a­lyt­ics and Google Tag Man­ager: We also use the web an­a­lyt­ics ser­vice Google An­a­lyt­ics to analyse your web be­hav­iour. Google An­a­lyt­ics uses cook­ies and sim­i­lar tech­nolo­gies to eval­u­ate how you use the web­site and pro­vide other ser­vices in re­la­tion to the web­site and in­ter­net us­age. The in­for­ma­tion gen­er­ated about how you use this web­site, in­clud­ing your trun­cated IP ad­dress, is trans­mit­ted to Google An­a­lyt­ics so that anony­mous sta­tis­tics about web­site ac­tiv­ity can be com­piled.

We also use Google Tag Man­ager to quickly up­date mea­sure­ment codes and as­so­ci­ated code frag­ments (tags) and in do­ing so im­prove the func­tion­al­ity of Google An­a­lyt­ics.

When you visit our web­site, Google An­a­lyt­ics and Google Tag Man­ager are only ac­ti­vated with your ex­press con­sent. You can give or with­draw your con­sent at any time via the cookie set­tings (http://​javascript:gaOptout()). You can also gen­er­ally de­ac­ti­vate Google An­a­lyt­ics and Google Tag Man­ager by fol­low­ing the in­struc­tions be­low: https://​tools.google.com/​dl­page/​gaoptout.

To en­sure the law­ful pro­cess­ing of your per­sonal data to the great­est pos­si­ble ex­tent, we have con­cluded data pro­tec­tion con­tracts with Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, D04E5W5 Ire­land. This pro­cess­ing also in­volves send­ing cer­tain items of per­sonal data to Google Inc. in the USA. An as­sess­ment by the Eu­ro­pean Com­mis­sion and the Swiss Fed­eral Data Pro­tec­tion and In­for­ma­tion Com­mis­sioner con­cluded that the USA does not have an ad­e­quate level of data pro­tec­tion. When a trans­fer to the USA is made, there is a risk that your data might be viewed by US pub­lic au­thor­i­ties. By con­sent­ing to the use of Google An­a­lyt­ics and/​or Google Tag Man­ager, you not only agree to the set­ting of cook­ies, but also ex­pressly agree to the trans­fer to the USA in the knowl­edge of this risk.

Google Maps: Our web­site uses the Google Maps ser­vice via an API. The provider is Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, Ire­land, with which we have en­tered into con­tracts to en­sure data pro­tec­tion. Us­ing the Google Maps func­tion­al­i­ties re­quires the stor­ing of your IP ad­dress, your lat­i­tude and lon­gi­tude co­or­di­nates, and your search terms. This in­for­ma­tion may be trans­ferred to a Google server in the USA and stored there, where it may be viewed by US pub­lic au­thor­i­ties for au­dit and mon­i­tor­ing pur­poses out­side of our con­trol. 

So­cial net­works: Biotta is also pre­sent on so­cial net­works. When you visit the Biotta page on these net­works, we are con­sid­ered a joint con­troller with the op­er­a­tor of the so­cial net­work in ques­tion. We have con­cluded agree­ments with the re­spec­tive op­er­a­tors un­der which they will en­sure the se­cu­rity of your per­sonal data and the ex­er­cise of your rights. You can ex­er­cise your rights ei­ther against us or against the op­er­a­tor in ques­tion. If you con­tact us, we will in­form the op­er­a­tor of your re­port and pro­vide them with the nec­es­sary in­for­ma­tion. Please note that de­spite this joint re­spon­si­bil­ity, we have no in­flu­ence over the data pro­cess­ing processes of the so­cial me­dia op­er­a­tors. For fur­ther in­for­ma­tion, please re­fer to the terms of use and pri­vacy poli­cies of the op­er­a­tor in ques­tion.

• LinkedIn: We are jointly responsible with LinkedIn Ireland Unlimited Company for the processing of your personal data when you visit our LinkedIn page. For more information about how LinkedIn processes your personal data, visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

• Instagram: We are jointly responsible with Meta Platforms, Inc. for processing your personal data when you visit our Instagram page. For more information about how Instagram processes your personal data, visit https://privacycenter.instagram.com/policy?__coig_consent=1.

• Pinterest: We are jointly responsible with Pinterest Inc. for processing your personal data when you visit our Pinterest page. For more information about how Pinterest processes your personal data, visit https://policy.pinterest.com/en/privacy-policy. 

• Facebook: We are jointly responsible with Meta Platforms, Inc. for processing your personal data when you visit our Facebook page. For more information about how Facebook processes your personal data, visit https://www.facebook.com/about/privacy/previous.

• YouTube: We are jointly responsible with Google Ireland Ltd for the processing of your personal data when you visit our YouTube page. For further information about how YouTube processes your personal data, visit https://support.google.com/youtube/answer/7671399?hl=en&p=privacy_guidelines.

• TikTok: We are jointly responsible with TikTok Pte. Ltd. for the processing of your personal data when you visit our TikTok page. For more information about how TikTok processes your personal data, visit https://www.tiktok.com/legal/page/row/privacy-policy/en.

Ex­ter­nal links: We are not re­spon­si­ble for the con­tent of or data pro­cess­ing by third-party web­sites that can be ac­cessed through links on the Biotta web­site. Please read the pri­vacy poli­cies of these third par­ties to learn how your data is processed.

We take ap­pro­pri­ate tech­ni­cal and or­gan­i­sa­tional se­cu­rity pre­cau­tions to pro­tect per­sonal data against unau­tho­rised ac­cess and mis­use. This in­cludes in­struc­tions to em­ploy­ees, ac­cess reg­u­la­tions and re­stric­tions, and en­cryp­tion of data car­ri­ers.

Ex­cept as oth­er­wise pro­vided in this pri­vacy pol­icy, we process and store per­sonal data that we col­lect in the course of our ac­tiv­i­ties de­scribed in this pri­vacy pol­icy for as long as and to the ex­tent needed to ful­fil the pur­poses de­scribed and our con­trac­tual and le­gal oblig­a­tions, in­clud­ing le­gal re­ten­tion oblig­a­tions, and for as long as we have a le­git­i­mate in­ter­est in re­tain­ing per­sonal data or your valid con­sent. 

You can ex­er­cise the fol­low­ing rights un­der the ap­plic­a­ble le­gal pro­vi­sions:

• Right to be informed about your personal data

• Right to rectification of your personal data if it is inaccurate or incomplete

• Right to erasure, unless there is a legal obligation to retain records or another legal reason for continued storage

• Right to restrict processing if we process personal data based on our legitimate interest

• Right to withdraw your consent to data processing at any time; such withdrawal of consent will have no influence on data processing that has already taken place

• Right to transfer your personal data to a third party (data portability)

Please note that these rights are not ab­solute, and we re­serve the right to en­force the re­stric­tions pro­vided for by law.

You also have the right to lodge a com­plaint with the com­pe­tent data pro­tec­tion au­thor­ity (in Switzer­land, this is the Fed­eral Data Pro­tec­tion and In­for­ma­tion Com­mis­sioner) or to en­force your claims in a court.

To ex­er­cise your rights, con­tact us at the con­tact ad­dress be­low. Please note that we re­serve the right to re­quest a copy of your ID and other in­for­ma­tion if needed to ver­ify your iden­tity.

The con­troller for the terms of use and data pro­tec­tion de­scribed here is

Biotta AG, Pflanzbergstrasse 8, 8274 Täger­wilen, Switzer­land

To ex­er­cise your rights, con­tact the data pro­tec­tion of­fi­cer at daten­schutz@orior.ch.

We re­serve the right to amend this pri­vacy pol­icy at any time. The lat­est ver­sion pub­lished on this web­site shall al­ways ap­ply.

Date of last re­vi­sion: Oc­to­ber 2022