Version dated March 27, 2026
In this Privacy Policy, we, ALROUND AG (hereinafter “we” or “us”), explain how we collect and otherwise process personal data. This is not an exhaustive description; specific matters may be governed by other privacy policies, terms and conditions, terms of participation, and similar documents. Personal data refers to any information relating to an identified or identifiable individual.
If you provide us with personal data about other individuals (e.g., family members, coworkers), please ensure that these individuals are aware of this Privacy Policy and only share their personal data with us if you are authorized to do so and if the personal data is accurate.
This Privacy Policy is designed to comply with the requirements of the EU General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG), and the revised Swiss Data Protection Act (revDSG). However, whether and to what extent these laws apply depends on the specific circumstances of each case.
Unless otherwise specified in individual cases, ALROUND AG is responsible for data processing. If you have any data protection concerns, please contact us at the following address: ALROUND AG, Data Protection Officer, ALROUND AG, Schulhausstrasse 2, 6300 Cham, info@alround.ch
We primarily process personal data that we receive from our customers and other business partners—as well as from other individuals involved in our business relationships with them—or that we collect from users of our websites, apps, and other applications.
To the extent permitted, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registers, commercial registers, the press, the Internet) or receive such data from other companies, government agencies, and other third parties (such as credit bureaus and address brokers). In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, information from public registers, information we obtain in connection with administrative and judicial proceedings, information related to your professional roles and activities (so that we can, for example, conclude and conduct business with your employer with your assistance), information about you in correspondence and meetings with third parties, credit reports (to the extent that we conduct business with you personally), information about you provided to us by people in your circle (family, advisors, legal representatives, etc.) so that we can conclude or process contracts with you or involving you (e.g., references, your delivery address, powers of attorney, information regarding compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, distributors, and other contractual partners of ours regarding your use of or provision of services (e.g., payments made, purchases made), information from media and the internet regarding your person (to the extent this is appropriate in a specific case, e.g., in the context of a job application, press review, marketing/sales, etc.), your addresses and, where applicable, interests and other socio-demographic data (for marketing purposes), data related to the use of the website (e.g., IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location data).
We use the personal data we collect primarily to conclude and fulfill our orders and contracts with our customers and business partners, to purchase products and services from our suppliers and subcontractors, and to comply with our legal obligations both domestically and internationally. If you work for such a customer or business partner, your personal data may of course also be affected in this capacity.
In addition, we process your personal data and that of other individuals, to the extent permitted and where we deem it appropriate, for the following purposes in which we (and, in some cases, third parties) have a legitimate interest that is consistent with the purpose:
Offering and further developing our products, services, websites, apps, and other platforms on which we are present;
Communicating with third parties and processing their inquiries (e.g., job applications, media inquiries);
Reviewing and optimizing processes for needs analysis for the purpose of direct customer outreach, as well as collecting personal data from publicly available sources for the purpose of customer acquisition;
Advertising and marketing (including the organization of events), provided you have not objected to the use of your data (if we send you advertising as an existing customer, you may object at any time; we will then place you on a block list to prevent further advertising);
Market and opinion research, media monitoring;
Assertion of legal claims and defense in connection with legal disputes and administrative proceedings;
Prevention and investigation of criminal offenses and other misconduct (e.g., conducting internal investigations, data analysis for fraud prevention);
Ensuring our operations.
Video surveillance to enforce property rights and other measures for IT, building, and facility security, as well as the protection of our employees, other individuals, and assets owned by or entrusted to us (such as access controls, visitor logs, network and email scanners, and telephone recordings);
The purchase and sale of business units, companies, or parts of companies, and other corporate transactions, and the associated transfer of personal data, as well as measures for business management and, to the extent necessary, for compliance with legal and regulatory obligations and internal regulations of ALROUND AG.
To the extent that you have given us consent to process your personal data for specific purposes (for example, when you sign up to receive newsletters or undergo a background check), we will process your personal data within the scope of and based on this consent, provided that we have no other legal basis and that such a basis is required. Consent that has been given may be revoked at any time; however, this has no effect on data processing that has already taken place.
We typically use “cookies” and similar technologies on our websites and apps to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website or install our app. When you visit this website again or use our app, we can recognize you this way, even if we do not know who you are. In addition to cookies that are used only during a session and deleted after your website visit (“session cookies”), cookies can also be used to store user settings and other information over a specific period of time (e.g., two years) (“persistent cookies”). However, you can set your browser to reject cookies, store them only for a session, or delete them early. Most browsers are set by default to accept cookies. We use persistent cookies to save your user settings (e.g., language, auto-login). If you block cookies, certain features (such as language selection, shopping cart, and checkout processes) may no longer function.
In our newsletters and other marketing emails, we sometimes include visible and invisible image elements—where permitted—which, when loaded from our servers, allow us to determine whether and when you have opened the email. This helps us measure and better understand how you use our offerings so that we can tailor them to your needs. You can block this in your email program; most are set by default to do so.
By using our websites and apps and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must adjust the settings in your browser or email program accordingly, or uninstall the app if the settings cannot be adjusted.
We occasionally use Google Analytics or similar services on our websites. These are third-party services that may be located in any country in the world (in the case of Google Analytics, this is Google Ireland (based in Ireland), which relies on Google LLC (based in the U.S.) as a data processor (both “Google”), www.google.com), which allows us to measure and evaluate website usage (non-personal data). For this purpose, permanent cookies set by the service provider are also used. We have configured the service so that the IP addresses of visitors from Europe are truncated by Google before being forwarded to the U.S., thereby preventing them from being traced. We have disabled the “Data Sharing” and “Signal” settings. Although we can assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles, and link this data to these individuals’ Google accounts. To the extent that you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider is then carried out under the service provider’s responsibility in accordance with its privacy policy. The service provider merely informs us about how our respective website is used (no information about you personally).
We also use plug-ins from social networks such as Facebook, Twitter, YouTube, Pinterest, and Instagram on our websites. You can easily identify these (typically by the corresponding icons). We have configured these elements so that they are disabled by default. If you enable them (by clicking on them), the operators of the respective social networks can detect that you are on our website and where you are, and may use this information for their own purposes. The processing of your personal data is then the responsibility of that operator in accordance with its privacy policy. We do not receive any information about you from them.
As part of our business activities and for the purposes set forth in Section 3, we may, to the extent permitted and as we deem appropriate, disclose such information to third parties, whether because they process it on our behalf or because they wish to use it for their own purposes. This applies in particular to the following entities:
Our service providers (such as insurance companies), including data processors (such as IT providers, cost estimators, and internet platforms);
Dealers, suppliers, subcontractors, and other business partners;
Customers;
Domestic and foreign authorities, government agencies, or courts;
Media;
The general public, including visitors to websites and social media;
Competitors, industry organizations, associations, organizations, and other bodies;
Acquirers or parties interested in acquiring business units;
Other parties in potential or actual legal proceedings;
all recipients together.
Some of these recipients are located within Germany, but they may be located anywhere in the world. In particular, you should expect your data to be transferred to any country where the service providers we use are located (such as Microsoft, KSR, Adobe, and Wortmann).
If a recipient is located in a country without adequate legal data protection, we contractually require the recipient to comply with applicable data protection laws (for this purpose, we use the European Commission’s revised Standard Contractual Clauses, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is already subject to a legally recognized framework ensuring data protection and we cannot rely on an exception provision. An exception may apply, for example, in the case of legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract requires such disclosure, if you have consented, or if the data in question has been made publicly available by you and you have not objected to its processing.
We process and store your personal data for as long as necessary to fulfill our contractual and legal obligations or to achieve the purposes for which the data is processed; this includes, for example, the duration of the entire business relationship (from the initiation and execution of a contract through to its termination) as well as any subsequent period required by statutory retention and documentation obligations. In this context, it is possible that personal data may be retained for the period during which claims can be asserted against our company and to the extent that we are otherwise legally obligated to do so or legitimate business interests require it (e.g., for evidentiary and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will generally be deleted or anonymized to the extent possible. For operational data (e.g., system logs), shorter retention periods of twelve months or less generally apply.
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as issuing guidelines, providing training, implementing IT and network security solutions, enforcing access controls and restrictions, encrypting data storage media and transmissions, pseudonymization, and conducting audits.
All partners and employees have agreed to sign our confidentiality agreement in addition to the standard contracts.
As part of our business relationship, you must provide the personal data necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations (you are generally not legally required to provide us with data). Without this data, we will generally not be able to enter into or fulfill a contract with you (or the entity or person you represent). Furthermore, the website cannot be used if certain information necessary to ensure data transmission (such as your IP address) is not disclosed.
As a general rule, we do not use fully automated decision-making (as defined in Article 22 of the GDPR) for the establishment and conduct of our business relationship or for any other purposes. Should we use such processes in individual cases, we will inform you separately, provided this is required by law, and explain your related rights to you.
Under the data protection laws applicable to you and to the extent provided for therein (such as in the case of the GDPR), you have the right to access, rectification, erasure, the right to restrict data processing, and otherwise to object to our data processing, in particular that carried out for direct marketing purposes, profiling for direct marketing, and other legitimate interests in processing, as well as the right to receive certain personal data for the purpose of transferring it to another party (so-called data portability). Please note, however, that we reserve the right to invoke the restrictions provided for by law, for example if we are obligated to retain or process certain data, have an overriding interest in doing so (to the extent we are permitted to invoke such an interest), or require it to assert claims. If costs are incurred on your part, we will inform you in advance. We have already provided information regarding the possibility of withdrawing your consent in Section 3. Please note that exercising these rights may conflict with contractual agreements and may result in consequences such as early termination of the contract or financial implications. We will inform you in advance in such cases, unless this is already regulated by contract.
Exercising these rights generally requires that you provide clear proof of your identity (e.g., by submitting a copy of your ID if your identity is otherwise unclear or cannot be verified). To exercise your rights, you may contact us at the address provided in Section 1.
Every data subject also has the right to seek legal redress or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
We may update this Privacy Policy at any time without notice. The most recent version published on our website is the one that applies. If this Privacy Policy is part of an agreement with you, we will notify you of any changes via email or by other appropriate means in the event of an update.