Privacy Policy of APOS GmbH

Protecting your personal data is a matter of great importance to us. We process your data exclusively in accordance with the legal requirements of the General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG), and relevant telecommunications laws. This Privacy Policy informs you about the key aspects of how we collect and use data, especially in relation to our website and our point-of-sale (POS) systems.

1. Data Controller

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website and to fulfill our contractual obligations. Processing takes place based on:

• your consent (Art. 6(1)(a) GDPR),
• the performance of a contract (Art. 6(1)(b)),
• legal obligations (Art. 6(1)(c)),
• or our legitimate interests (Art. 6(1)(f)).

3. Website Data Processing

a) Access Data & Server Log Files

When you visit our website, the hosting provider automatically collects and stores information in server log files, including:

• IP address of the requesting device
• Date and time of the request
• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer

This data is used for ensuring system security and stability and for administrative purposes. We do not combine this data with other personal information.

b) Cookies

We use cookies to make our website user-friendly and to enable specific functionalities. You can manage or disable cookies in your browser settings at any time.

4. Contacting Us

If you contact us via form or email, your provided data (e.g., name, email, phone number, message) will be stored for the purpose of processing the inquiry and any follow-up questions.

5. POS System Data Processing

When installing, using, or maintaining our POS systems, we process personal data such as:

• Customer master data (name, address, email, phone number)
• Order and transaction data
• System and device information
• Payment data (e.g., card transactions through third-party providers)

6. Data Disclosure to Third Parties

We disclose personal data only when necessary for fulfilling a contract (e.g., to payment providers, IT hosting partners), when legally required, or when you have given explicit consent. If data is transferred outside the EEA, we ensure appropriate safeguards under Art. 44 ff. GDPR.

7. Your Rights

You have the following rights under the GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent (Art. 7(3))
• Right to lodge a complaint with a supervisory authority (Art. 77)

8. Data Security

We implement appropriate technical and organizational measures to protect your data from loss, manipulation, destruction, or unauthorized access. Our security practices are continuously improved in line with technological developments.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect legal or technical changes. The most current version will always be available on our website.