Pursuant to the Swiss Federal Act on Data Protection (FADP) of 25 September 2020, in force since 1 September 2023, and the Data Protection Ordinance (DPO) of 31 August 2022.
1. Data Controller
Metal Supply Experts GmbH (hereinafter “MSE”, “we” or “us”), Schulhausstrasse 19, 6318 Walchwil, Canton of Zug, Switzerland. Company identification number CHE-298.384.297.
For all data protection matters: enquiries@metalsupplyexperts.com, telephone +41 41 710 64 20.
2. Scope
This Privacy Policy explains how MSE collects and processes personal data when you visit this website or correspond with us. It applies to all natural persons whose personal data we process. Personal data of legal entities is no longer protected under the FADP.
3. Categories of Personal Data
- Contact data you submit by email or through the enquiry form (name, company, email address, content of your message).
- Technical access data transmitted automatically by your browser (IP address, browser type and version, operating system, referrer URL, date and time of access).
- Usage data collected by web analytics, and only where you have consented (see section 5).
We do not process sensitive personal data within the meaning of Art. 5(c) FADP through this website.
4. Purposes and Justification
Under the FADP a private controller does not require a statutory “legal basis” in the sense of the GDPR. Processing is lawful unless it breaches the processing principles of Art. 6 FADP, contravenes the data subject’s express wish, or discloses sensitive personal data to third parties. Where processing would infringe the personality of a data subject, it must be justified under Art. 31 FADP.
- Enquiry handling: to respond to your request and to take steps prior to entering into a contract. Justification: Art. 31(2)(a) FADP - processing in direct connection with the conclusion or performance of a contract.
- Website operation and security: to ensure technical functionality, integrity and protection against misuse. Justification: overriding private interest, Art. 31(1) in conjunction with Art. 31(2) FADP.
- Web analytics: to understand how the site is used. Justification: your consent, Art. 31(1) FADP.
5. Cookies and Web Analytics
This website sets technically necessary cookies required for its operation and security. Art. 45c let. b of the Telecommunications Act (TCA) permits the processing of data on external equipment where users are informed of the processing and its purpose and are advised that they may refuse it.
MSE applies a stricter standard than the TCA requires: no analytics cookie is set and no analytics data is transmitted unless you have actively consented.
Where you select “Accept” in the cookie banner, this website uses Google Analytics 4 (Measurement ID G-74Y4VT5S5C), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (including _ga and _ga_*) and collects usage data such as pages visited, session duration and referral source. IP addresses are anonymised and are not logged or stored in full. No advertising, remarketing or profiling features are enabled.
If you select “Decline”, no analytics script is loaded, no analytics cookie is set, and no data is transmitted to Google. Your choice is stored locally in your browser and may be withdrawn at any time by clearing the site data for this domain in your browser settings.
6. Recipients
We do not sell, rent or otherwise disclose your personal data to third parties, save where required by law or necessary for the performance of a contract. Personal data is disclosed to the following categories of recipient, each acting as a processor on our behalf:
- Hosting provider (Hostpoint AG, Switzerland), which processes technical access data on our behalf under a data processing agreement.
- Google Ireland Limited, for web analytics, and only where you have consented.
7. Disclosure Abroad
In accordance with Art. 19(4) FADP we inform you of the States to which personal data is disclosed and of the applicable safeguards. Where you have consented to web analytics, personal data is disclosed to:
- Ireland - Google Ireland Limited. Ireland is a member state of the European Union and appears on the Federal Council’s list of States with an adequate level of data protection (Annex 1 to the DPO). No additional safeguard is required.
- United States - Google LLC, as an onward recipient. By decision of 14 August 2024, in force since 15 September 2024, the Federal Council recognised an adequate level of data protection for recipients in the United States certified under the Swiss-U.S. Data Privacy Framework. Google LLC holds an active certification under that framework. Where Google does not rely on the Swiss-U.S. Data Privacy Framework, disclosure is based on standard data protection clauses within the meaning of Art. 16(2)(d) FADP.
If you decline analytics, no personal data is disclosed abroad through this website. All remaining processing takes place in Switzerland.
8. Retention
- Correspondence: retained for as long as necessary to handle your enquiry and any resulting business relationship, and thereafter for the statutory retention period of ten years under Art. 958f of the Swiss Code of Obligations.
- Technical access data: deleted after 30 days.
- Analytics data: user-level and event-level data is retained for the period configured in the Google Analytics property, which for a standard property does not exceed 14 months, and is deleted automatically thereafter. Aggregated reporting data is not subject to that setting and is retained by Google.
9. Data Security
In accordance with Art. 8 FADP we take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. All traffic to this website is encrypted in transit (TLS/HTTPS). Access to correspondence is restricted to the persons who require it.
10. Your Rights
Subject to the conditions and exceptions provided by law, you have the following rights:
- Right of access (Art. 25 FADP): to obtain confirmation whether we process personal data concerning you, and to receive the information necessary to exercise your rights.
- Right to data portability (Art. 28 FADP): to receive personal data you have disclosed to us in a commonly used electronic format.
- Right to rectification (Art. 32(1) FADP): to have inaccurate personal data corrected.
- Right to erasure and restriction (Art. 32(2) FADP): to request that processing be stopped, that disclosure to third parties be prohibited, or that personal data be deleted or destroyed, subject to statutory retention obligations.
- Right to object (Art. 30(2)(b) FADP): to object to processing by declaring your express wish.
To exercise these rights, write to enquiries@metalsupplyexperts.com. We may request proof of identity. We respond as a rule within 30 days.
11. Automated Individual Decisions and Profiling
MSE does not take automated individual decisions within the meaning of Art. 21 FADP. No profiling, and in particular no high-risk profiling within the meaning of Art. 5(f) and (g) FADP, is carried out through this website.
12. Data Security Breaches
In the event of a breach of data security that is likely to result in a high risk to your personality or fundamental rights, we notify the Federal Data Protection and Information Commissioner as soon as possible in accordance with Art. 24 FADP, and inform you where required.
13. Supervisory Authority
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland (www.edoeb.admin.ch).
14. Application of the GDPR
Where Regulation (EU) 2016/679 (GDPR) applies to the processing of your personal data, for example because you are located in the European Economic Area, the rights and protections of that Regulation apply in addition. In such cases the legal bases for processing are Art. 6(1)(a) GDPR (consent, for web analytics), Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract) and Art. 6(1)(f) GDPR (legitimate interests, for the operation and security of this website). You may lodge a complaint with a supervisory authority in your country of residence.
15. Amendments
We may amend this Privacy Policy at any time. The version published on this website at the time of your visit applies.
Last updated: July 2026