Website Privacy Statement

Valid from 01.09.2023.

"MDF-BIS S.A." (hereinafter referred to as "we" or "us") undertakes to process all personal data (hereinafter referred to as "personal data") entered via the online portal [] (hereinafter referred to as "portal" or "website") in accordance with the applicable data protection legislation and to take appropriate security measures to protect them against unauthorised access. In this statement, we provide you with information about the personal data that is collected and processed in connection with the use of the portal, the purposes for which it is used, who it may be transmitted to and about your rights when we use your personal data. Personal data is any information that relates to an identified or identifiable natural person, e.g.  surname, first name, address, e-mail, date of birth or telephone number.

This privacy statement is an integral part of the terms of use of the "MyPrivate" software.

By accessing the portal and using the services and products we offer, you declare that you have carefully read this statement and agree to the data processing described therein. If you have any questions about this privacy policy, please send an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. at any time. If you do not agree with this statement, you must refrain from accessing the portal and using our services and products.


  1. The person responsible for your personal data
  2. How we process your personal data
  3. The personal data we collect and the purpose of processing it
  4. The legal bases on which we process your personal data
  5. Who we share your personal data with
  6. Transfer of personal data to countries outside the EEA
  7. How long we keep your personal data
  8. Cookies, services Google
  9. Social Media Plugins
  10. E-mail and newsletter communications for advertising purposes
  11. No automated decision-making with legal effect, including profiling
  12. Security
  13. Privacy policy of external service providers
  14. Children
  15. Your rights
  16. Changes to our Privacy Statement

Due to the detailed approach of this document, some points of the content are subdivided into various sub-points always related to the title in the "Content".

1. The person responsible for your personal data

The controller responsible for the processing of personal data within the meaning of data protection legislation is Valérie Schüpbach, CH-1316 Chevilly, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it..

Valérie Schüpach determines the purposes and means of the processing of your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy statement. If you have any questions or doubts regarding the declaration in question or the processing of your personal data, please do not hesitate to contact us at any time by sending an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it..

2. How we process your personal data

All personal data collected through the website is processed in accordance with applicable data protection laws. We collect and process personal data carefully and for the purposes described in this Privacy Statement. In accordance with applicable law, we may also use your personal data in ways other than as described in this statement. In this case, we will provide you with specific explanations or communications about data protection at the time of collection and, if necessary, we will ask for your consent. We always make reasonable efforts to collect anonymized or pseudonymized information so that we cannot identify you.

3. The personal data we collect and the purpose of its processing

3.1 Personal data transmitted automatically through the use of the portal

We collect and store the information that your browser automatically transmits to us in so-called "server log files" when you visit our website. The data is collected on the basis of your willingness and interest in visiting our website and our legitimate interests in operating the website. This may include the following data:

  • Browser type and version
  • Operating systems used
  • URL reference (the previously visited page)
  • Host name of the computer accessing the site
  • Date and time of the request to the server
  • Internet Protocol address (IP address)
  • Amount of data transmitted
  • Other data and similar information used to prevent risks in the event of attacks on our IT systems

We use automatically collected personal data to fulfill the following purposes:

  • enable the display, operation and proper functioning of the portal
  • Ensuring the stability and security of the system
  • Protect and improve our services
  • for statistical purposes, in the event of an attack on the network infrastructure on which the website is made available

3.2 Personal data that the user provides to us

We collect and process the personal data that the user voluntarily transmits to us by means of an online form on the portal, via our contact e-mail address, via any other applications connected to the portal, by telephone or in another way. This information includes, for example, the following personal data:

  • surname, first name(s), postal address, e-mail address, telephone number, date of birth
  • your message or request

The provision of this personal data is expressly voluntary. Without this data, however, we will not be able to provide the services requested by the user in the desired quality, or even unable to provide them altogether.

We use the personal data that the user provides to us for the following purposes:

  • providing, maintaining, protecting and optimizing the services and information offered
  • communicate with you and provide you with the most personalised information possible (e.g. about our products and services)
  • To offer you new services and information and to offer you, based on your profile, personalised services and information that may be of interest to you
  • Comply with legal requirements, other regulatory requirements, and internal rules
  • establishing, exercising and/or defending actual or potential rights, whether in the context of similar investigations or proceedings
  • for other legitimate purposes, if such processing is apparent from the circumstances or was indicated at the time of collection

4. The legal bases on which we process your personal data

The processing of the above-mentioned data is based on the following legal bases:

  • your consent, only if it can be revoked at any time (e.g. when you sign up for our newsletter and other marketing communications),
  • for the performance of a contract with you or for the purpose of entering into a contract with you (e.g. when purchasing a product),
  • to comply with a legal obligation (for example, for tax reasons or for the purposes of an investigation or legal proceeding); or
  • to protect our legitimate interests (e.g., protecting and securing our services, systems, assets; complying with legal, regulatory and contractual obligations; establishing, exercising or defending legal claims; maintaining and effectively organising business activities; improving and developing our services and selling and marketing them).

If the processing is based on your consent or on our legitimate interests, you can revoke your consent or object to this processing at any time by contacting us directly at This email address is being protected from spambots. You need JavaScript enabled to view it.. Please note, however, that the revocation of your consent does not affect the lawfulness of processing based on consent before its revocation.

5. Who we pass your personal data to

MDF-BIS S.A. takes the necessary measures to ensure that only our authorised personnel and auxiliaries with the necessary knowledge have access to your personal data in order to achieve the purposes for which it was collected.

We may transfer your personal data to the following possible categories of recipients, in accordance with the purposes and legal bases for the processing described above, insofar as this is necessary for the intended data processing:

  • Other companies in the group
  • service providers who process personal data on behalf of and on behalf of MDF-BIS S.A. (so-called processors, e.g. in the field of IT, hosting and support)
  • Customers, partners, suppliers, insurers and other business partners
  • news agencies, the public, including visitors to the Group's websites and social media
  • Industry Organizations, Associations and Other Bodies
  • Purchasers or parties interested in acquiring business units, businesses or other parts of the group
  • courts, conciliation bodies, law enforcement authorities, supervisory authorities, lawyers and other parties to potential or actual legal proceedings, where necessary to comply with the law or to establish, exercise or defend legal rights or claims

We select our partners and processors carefully and only if we are satisfied that they have the appropriate technical and organisational measures in place in accordance with the legal requirements. Our processors may only process personal data on documented instructions from us. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to achieve the purpose for which your personal data was collected, unless otherwise required by law.

6. Transfer of personal data to countries outside the EEA

The personal data collected via our website is stored in Switzerland. In addition, we may transfer, store and process your personal data in data sites around the world, such as where our third-party vendors or partners are located. We may therefore transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this privacy policy in accordance with applicable law.

When data is transferred to countries that do not provide an adequate level of protection, we ensure that data protection is adequate by taking appropriate safeguards, such as certain contractual safeguards (e.g. on the basis of EU standard clauses), on the basis of binding corporate rules, the transfer of data in accordance with your explicit consent,  for the conclusion or performance of a contract with you or in connection with the establishment, exercise or defence of legal claims. For more information on our appropriate security measures, please contact us by email at This email address is being protected from spambots. You need JavaScript enabled to view it..

7. How long we keep personal data about you

In principle, personal data will be deleted as soon as it is no longer required for the fulfilment of the purpose for which it was collected, unless further storage is necessary for the fulfilment of legal obligations (e.g. retention and documentation obligations), contractual or pre-contractual obligations or legitimate business interests on our part (e.g. to assert,  exercising or defending legal claims).

On this basis, we generally process personal data in compliance with the following rules and obligations:

  • Personal data that you automatically transmit when using our portal (see Section 3.1) for the purpose of displaying, operating and ensuring the proper functioning of the Portal will be deleted within three to six months;
  • Personal data that you have provided to us in connection with the use of our services and products offered on our portal or that you have otherwise provided to us via the e-mail address (see Section 3.2) will generally be stored by us until you request us to delete it, revoke your consent to its storage or the purpose for its storage has ceased to exist (e.g. after processing your request);
  • For personal data related to a contract (including business documents and communications), we retain personal data for as long as the contractual relationship exists, and then for a further ten years after the contractual relationship has ended, unless (i) a shorter or longer legal retention obligation applies in a particular case,  (ii) the retention is necessary for evidentiary reasons or for another valid reason according to applicable law, or (iii) the deletion of the data is necessary sooner (e.g. because the data is no longer needed or we need to delete the corresponding data).

8. Cookies and Google services

When you access or use the Site, we may place "cookies" - small text files - or similar tools on your computer. We use these cookies to recognise you as a user of the website, to tailor the content, to improve the performance of the website and to make it more user-friendly.

a) Categories of cookies we use

Depending on their function and use, the cookies we use can be classified into the following categories: functional cookies, performance cookies and advertising cookies.

  • Functional cookies: These cookies serve many purposes for the presentation, functionality and performance of a website and, in particular, to improve the experience and enjoyment of visitors on the site. They allow a website to remember information already provided (e.g. username, location or language selection) and provide visitors with enhanced, more personal functions. Functional cookies are used, for example, to store things such as your access data. These cookies cannot track your movements on other websites.
  • Performance cookies: These cookies are used to collect information about how a website is used – for example, how visitors arrived at our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, for example the number of visitors who have come to our site. These cookies are used to monitor the level of activity of the site and improve its performance.
  • Advertising cookies (sometimes referred to as "targeting cookies"): These allow us or a third-party provider to serve ads on our website or on third-party websites featuring products that the user likes, so that the advertising the user sees may be more relevant to their preferences or interests. They can also be used to evaluate the effectiveness of advertisements and commercial promotions.

These cookies may be placed by us or by a third party on our behalf. For more information about cookies and their use, please visit:

The legal basis for the data processing is your consent (Art. 6(1)(a) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).

You can configure your browser settings so that no cookies are stored on your computer. Disabling cookies altogether may prevent you from using all the features of our website.

By continuing to use our website and/or accepting this privacy policy, you consent to our setting of cookies and to the collection, storage and use of personal usage data even after the end of the browser session. You can revoke this consent at any time by activating your browser preferences to refuse cookies from third-party providers.

b) Google Analytics

MDF-BIS S.A. uses the web analysis service Google Analytics on its website, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and thus enable an analysis of your use of the website.

The use of Google Analytics is based on our legitimate interests in regularly analysing and improving our website as well as in constantly improving our offer with the statistics obtained in this way and making it more interesting for you. In addition, the use of Google Analytics requires your consent to tracking. It also requires this with regard to your surfing behaviour on our websites and the resulting analysis.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. These cookies may contain, for example, the following information: IP address, number, date and time of the visit, duration of the visit, access page from which you use the website (referrer URL), the pages visited on our website, the browser type/version as well as the operating system used. Google uses this information on our behalf, as we have a legitimate interest in analyzing user behavior in order to optimize the offer on our website as well as our advertising. Google will use this information for the purpose of evaluating the use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. Pseudonymised user profiles of users can also be created from the personal data processed.

You can prevent the storage of cookies by configuring your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection by Google of the personal data generated by the cookie and relating to the use of the website (including your IP address) as well as the processing of this personal data by Google by downloading and installing the browser plug-in available under the following link: As an alternative or for browsers on mobile devices, you can prevent the collection of your personal data by Google Analytics by clicking on the following link: deactivate the collection of personal data by Google Analytics for this website. In this case, a special opt-out cookie will be set on your device, which will prevent the future collection of your personal usage data when you visit this website. If you delete the stored cookies, you must click on this link again. For more information on the processing of users' personal data by Google Analytics, please refer to Google's privacy policy:

In addition, it is possible that Google will check the use of the website by the user and possibly combine the personal data collected with other information about the user that Google has collected autonomously from other websites visited by the user and that Google will use this information for its own purposes (e.g. to control advertising),  under its own responsibility and based on its own privacy statement. For more information on this and how Google processes personal data, please refer to Google's privacy policy under: ;

d) List of cookies

Below is a full list of the cookies we use or will use on this site, including information about their use and expiration.


Cookie name


Purpose and Expiry



e.g. performance cookie



9. Social Media Plugins

We use the following social plugins on our website to publicize our company. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of Article 6 para. 1 lit. f GDPR [the weighing of legitimate interests and the weighing of the interests of the data subject in the respect of his or her fundamental rights must be included in the register of procedures]. Responsibility for data protection-compliant operation must be guaranteed by their respective providers. The processing of data in connection with these plugins takes place with your consent when you use them.

If you use the services of these social networks independently or in connection with our website, the social networks evaluate your use of the plugin. In this case, certain information about the plugin is transmitted to the social networks.

a) Facebook

Our website uses plugins from the social network Facebook, provided by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA. Facebook plugins are marked with a Facebook logo or "Like" or "Share". An overview of the Facebook plugins and their appearance can be found at:

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page.

As a result of this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not logged in to Facebook at the time. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plugins, e.g. by clicking on the "Like" button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and shown to your Facebook friends.

For information on the purpose and scope of the data collection, the further processing and use of the data by Facebook, as well as your rights in this regard and setting options to protect your privacy, please refer to Facebook's privacy policy:

[To the extent that this service is used, the indications must be checked according to its exact use and adapted if necessary].

  1. E-mail and newsletter communications for advertising purposes

When you sign up for our newsletter, we use your email address to send you information about our services as well as other commercial communications (e.g. announcements of events, competitions, promotions and surveys) that may be of interest to you. You can unsubscribe from the newsletter at any time by clicking on the "Unsubscribe from this list" link at the end of each e-mail or by contacting us directly at This email address is being protected from spambots. You need JavaScript enabled to view it..

11. No automated decision-making with legal effect, including profiling

We do not make any decisions about you that are based solely on automated processing, including profiling, and that produce legal effects with respect to you or that affect you in a significant and similar way. [If you make an automated decision, including profiling, which produces legal effects, you must describe the logic, scope and expected effects of such processing for the data subject. In addition, you must indicate a body within the company, subject to the discretion of a natural person, to which the person concerned can contest the decision taken automatically and make his or her views known.]

12. Security

MDF-BIS S.A. has implemented organisational and technical measures to preserve the security of personal data and to protect them against unauthorised or unlawful processing, accidental loss, alteration, disclosure or unauthorised access.

MDF-BIS S.A. may use third parties as data controllers to collect and process your personal data. The data processors commissioned by us will only process your personal data in accordance with our instructions and are required by law to take strict security measures when processing personal data.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of any data you transmit to our website; Each transmission is at your own risk. For this reason, you are always free to provide us with your personal data by other means, e.g. by telephone. Once we have received your data, we apply strict procedures and rigorous security measures to prevent unauthorised access.

13. Privacy statement of external service providers

Please note that if you click on a link to a third-party site (e.g. Google or social media or other sites), you will be redirected to a site that we do not control and our privacy statement will no longer apply. Your browsing and interaction on another website is subject to the terms of use and privacy statements and notices of those third-party websites. In addition, we cannot guarantee the accuracy and timeliness of the links provided on such sites.

We recommend that you carefully read the terms of use and privacy statements and data protection notices of other websites before transmitting any personal data via this website. We are not responsible for the content, information and data processing of these third-party sites.

14. Children

Our website is not intended for children and we do not knowingly collect personal data from children under the age of 16 unless we have obtained the explicit consent of their parents. If we are informed or otherwise learn that personal data from a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete such personal data.

[If data concerning children is processed, the text must be adapted accordingly].

15. Your rights

You have the right to ask MDF-BIS S.A. to inform you whether personal data concerning you is being processed. In addition, you have the right to request the rectification, destruction or restriction of personal data concerning you, as well as to object to the processing of your personal data.  If the processing is based on your consent or on our legitimate interests, you can revoke your consent or object to this processing at any time by contacting us directly by e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it.. In certain cases, you have the right to receive personal data generated during the use of online services in a structured, common and machine-readable format, so that further use and transmission to a possible third-party provider is possible.

Requests in this regard should be addressed to MDF-BIS S.A. at the following e-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.. MDF-BIS S.A. reserves the right to limit your rights within the framework of current legislation and, for example, not to disclose complete information or to delete certain personal data.

If we refuse your request or if you are not satisfied with our processing, you also have the right to lodge a complaint with the competent supervisory authority and lodge an appeal with the competent supervisory authority. For users based in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC) ( For users residing in EU countries, a list of supervisory authorities is available on

16. Changes to our Privacy Statement

MDF-BIS S.A. reserves the right to adapt, supplement or otherwise amend this privacy policy at any time and without giving reasons. The applicable privacy policy is the one published on our portal.



logo swiss label 140