Skip to content

Data protection declaration

Last updated: 30 September 2026

This declaration describes how BS & Partners processes the personal data collected through the bs-partners.ch website and through the contact forms linked to Google Ads campaigns.

Processing is governed by the Federal Act on Data Protection of 25 September 2020 (FADP, SR 235.1) and by the related Data Protection Ordinance (SR 235.11). For people located in the European Union, Regulation (EU) 2016/679 (GDPR) also applies.

1. Controller (art. 19 para. 2 let. a FADP)

BS & Partners – Stefano Benigni
Morbio Inferiore, Switzerland
Email: direzione@bs-partners.ch

2. Data processed

  • Contact details provided through the website form or the Google Ads contact form: name, email, telephone number, company name and the content of the enquiry.
  • Data exchanged by email or telephone in the course of the contact.
  • Technical browsing data (IP address, browser type, pages visited, date and time of access), recorded by the server for security and operational reasons.
  • Aggregated visit statistics, collected with Umami, a tool that does not use cookies and does not build user profiles.
  • Advertising measurement data, collected only with your consent through the Google Ads tag: the address of the page visited and your IP address, which Google receives automatically from the browser, together with the cookies described in section 8.

3. Purpose of processing (art. 19 para. 2 let. b FADP)

  • Responding to enquiries and requests for quotations.
  • Managing the client relationship, including accounting and tax obligations.
  • Ensuring the security and operation of the website.
  • Measuring the effectiveness of advertising campaigns, only with prior consent.

The data is not used for automated individual decision-making, nor sold to third parties.

For people in the European Union the legal bases are: pre-contractual measures and performance of the contract (art. 6 para. 1 let. b GDPR), legal obligations (art. 6 para. 1 let. c GDPR), legitimate interest in the security of the website (art. 6 para. 1 let. f GDPR), consent for the advertising measurement cookies (art. 6 para. 1 let. a GDPR).

4. Recipients (art. 19 para. 2 let. c FADP)

The data may be processed, on behalf of BS & Partners, by the following providers:

  • Infomaniak Network SA (Switzerland), for hosting the website and the email service;
  • Umami Software, Inc. (United States), for anonymous visit statistics; the servers may be located in the European Union or in the United States.

For Google Ads — both the contact forms linked to the campaigns and the conversion measurement carried out by the tag on this website — the data is processed by Google Ireland Limited (Ireland), the company responsible for the European Economic Area and Switzerland, and by Google LLC (United States). For this processing Google does not act on our behalf: under the Google Ads contractual terms the two parties are independent controllers, each answerable for its own purposes.

The data is not disclosed to any other party, save for legal obligations.

5. Disclosure abroad (art. 19 para. 4 and art. 16 FADP)

  • Ireland (European Union): a State with an adequate level of protection under Annex 1 to the Data Protection Ordinance.
  • United States: Google LLC is certified under the Swiss-U.S. Data Privacy Framework; since 15 September 2024 certified companies have been recognised by the Federal Council as providing adequate protection (Annex 1 to the Data Protection Ordinance). For people in the European Union the transfer is based on the EU-U.S. Data Privacy Framework.
  • Umami Software, Inc.: visit data, processed anonymously, may be stored in the European Union, a State with an adequate level of protection under Annex 1 to the Data Protection Ordinance, or in the United States.

6. Retention period

  • Contact enquiries not followed by an engagement: 12 months from receipt.
  • Client data: for the duration of the relationship and thereafter for 10 years, as required for accounting records (art. 958f of the Swiss Code of Obligations).
  • Technical server data: for the limited period set by the hosting provider's configuration.
  • Advertising cookie data: the cookies remain on your device for the period stated in section 8. In its own server logs Google states that it anonymises advertising data by removing part of the IP address after 9 months and cookie information after 18 months.

7. Rights of the data subject

You may exercise at any time, by writing to direzione@bs-partners.ch:

  • the right of access to your data (art. 25 FADP), with a reply that is as a rule free of charge within 30 days;
  • the right to the handover or transfer of your data (art. 28 FADP);
  • the right to request the correction or deletion of your data and to object to the processing (art. 32 FADP);
  • the right to withdraw your consent to the advertising cookies at any time, from the "Cookie preferences" link at the foot of every page, without affecting the lawfulness of processing already carried out.

You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

If you are in the European Union you also have the rights set out in art. 15–21 GDPR and may lodge a complaint with the supervisory authority of your country (in Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Cookies and similar technologies (art. 45c TCA)

The website uses Google Ads measurement cookies, which serve to connect a visit to an advertisement you clicked and to count the enquiries that follow from it. These cookies are not switched on until you give your consent through the banner: before you choose, and if you decline, the Google tag is not even loaded and Google receives no data about your visit.

These are the cookies with the _gcl_ prefix, which Google uses to determine whether someone who clicked an advertisement then completes an action on the advertiser's site. They last 90 days.

You can change your mind at any time from the "Cookie preferences" link at the foot of every page, or block and delete cookies from your browser settings.

Visit statistics are collected with Umami, which does not use cookies and does not require consent.

9. Security

We take technical and organisational measures appropriate to the risk to protect data against unauthorised access, loss or alteration (art. 8 FADP).

10. Changes

This declaration may be updated. The version in force is the one published on this page.