BSC / Bayirli Swiss Company and BSC GMBH Privacy Policy
This privacy policy informs you about how BSC / Bayirli Swiss Company, 9008 St.Gallen, Switzerland (registered in the Commercial Register of the Canton of St.Gallen under number CHE-259.381.622), handles your personal data and ensures that this data processing complies with applicable law. We comply with the data protection regulations of Switzerland and the EU.
You hereby acknowledge that BSC / Bayirli Swiss Company is the owner of the data collections consisting of the personal data collected from you and other customers.

  1. Scope and purpose of the collection, processing, and use of personal data when visiting our website and shopping in our online shop

a. When visiting www.bsc-online.ch
When you visit our website, our servers temporarily store every access. The following data is collected without your intervention:

  • The IP address of the requesting computer (anonymized)
  • The name of the owner of the IP address range (usually your Internet access provider)
  • The date and time of access
  • The website from which access was made (referrer URL), including any search term used, if applicable
  • The name and URL of the retrieved file
  • The status code (e.g., error message)
  • Your computer’s operating system
  • The browser you use (type, version, and language)
  • The transmission protocol used (e.g., HTTP/1.1)
  • Your user name from registration/authentication, if applicable

This data is collected and processed to enable the use of our website (establishing a connection), to permanently ensure system security and stability, to enable the optimization of our website, as well as for internal statistical and advertising purposes. The aforementioned data is not assigned to specific individuals and is not merged and stored together with other personal data.

Only in the event of an attack on the website’s network infrastructure or if there is suspicion of other unauthorized or abusive website use will the IP address be evaluated for investigation and defense purposes and, if necessary, used in criminal proceedings to identify and pursue civil and criminal proceedings against the users concerned.

This constitutes our legitimate interest in data processing within the meaning of Art. 6 (1) (f) of the General Data Protection Regulation (GDPR) of the European Union.

b. When registering for an online account

To place orders in the online shop and to receive the services you request, you can order as a guest or open an online account. When you register for an online account, we collect the following data:

  • Address type (private or business)
  • Title
  • First and last name
  • Postal address
  • Telephone number
  • Communication language
  • Email address
  • Password

If you apply for a BSC / Bayirli Swiss Company membership when opening an online account, we require additional information to process your application. You must also provide the following information:

  • Date of birth
  • Occupation
  • Postal address (including any previous residential addresses)
  • Nationality
  • Marital status
  • Annual gross income
  • Residence status
  • Place of residence
  • Customer number (for registered customers)
  • Information about the holder of an additional card (last name, first name, title, date of birth, mobile number)

The legal basis for processing the data for this purpose is your consent, our legitimate interest, and the performance of the contract in accordance with Art. 6 (1) (a), (b), and (f) GDPR.

c. When using the website

During your use of the website, we collect data for statistical purposes and to ensure the smooth functioning of the portal. In particular, the following data is collected:

  • The type, frequency, and intensity of website use
  • The duration of your membership
  • Your payment and purchase history
  • Information provided during payment (depending on the selected payment method)
  • Location-based data from mobile devices
  • Session data and behavioral data (sessions, clicks, scrolling)
  • Customer service information (e.g., complaints, inquiries, etc.)

We use the aforementioned personal data to administer your online account and manage your data.

The legal basis for processing the data for this purpose is the consent you have given, our legitimate interest, and the performance of the contract in accordance with Art. 6 (1) (a), (b), and (f) GDPR.

d. When shopping in our online shop

If you wish to place orders in our online shop as a guest, we require the following information to process the purchase contract:

  • Address type (private or business)
  • Title
  • First and last name
  • Billing address (and, if different, Delivery address)
  • Telephone number
  • Email address
  • Communication language

If you wish to place orders in our online shop using an online account, we require the following data to process the purchase contract:

  • Login details, i.e., email address and password
  • Delivery address (if different)

In connection with your purchase, we store the following data in our customer database:

  • Information about the ordered products
  • Information about the ordered services
  • Data about your ordering, purchasing, and payment behavior

Unless otherwise stated in this privacy policy or you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products, and ensure correct payment.

  1. Acquisition and processing of personal data when purchasing in-store or by telephone

When purchasing in-store or when ordering by telephone, we collect the following personal data from you:

  • First name and last name
  • Home address and, if the purchased goods are delivered, a different delivery address (if applicable)
  • Telephone number (for contacting you upon delivery)
  • Email address
  • Payment information, e.g., credit card information

We process the above data primarily to execute the purchase contract, deliver the purchased goods, and process payment of the purchase price.

You hereby acknowledge that the above-mentioned personal data will be included in our customer database. It will be treated there in the same way as personal data collected during your use of our website. The following provisions apply to this personal data mutatis mutandis, unless they are limited exclusively to the acquisition and processing of data in connection with the use of the website.

The legal basis for processing data for this purpose is your consent pursuant to Art. 6 (1) (a) GDPR.

  1. Acquisition and processing of personal data when purchasing gift cards

Gift cards can be purchased via our website. The following information must be provided when purchasing:

  • Title
  • First and last name
  • Postal address (or any alternative delivery address)
  • Email address or mobile number
    The legal basis for processing your data for this purpose is the fulfillment of a contract pursuant to Art. 6 (1) (b) GDPR.
  1. Acquisition and processing of personal data when contacting us via the contact form

On our website, you have the option of contacting us via the contact form. The following information must be provided when contacting us:

  • Title
  • First and last name
  • Postal address
  • Telephone or mobile number
  • Email address

We need this data to process your request. We need the telephone number to contact you and for efficient customer service.
The legal basis for processing your data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

  1. Acquisition and processing of personal data upon receipt of your application

You have the option of applying to us spontaneously or for a specific job opening, by mail or online. We generally require the following information and documents:

  • Title
  • First and last name
  • Postal address
  • Telephone or mobile number
  • Email address
  • Date of birth
  • Nationality
  • Cover letter
  • CV

We use this and other data you provide voluntarily to process your application. Application documents from unsuccessful applicants in connection with a specific application for a vacant position will be deleted no later than six (6) months after the position has been filled, as our company may have to fulfill legal requirements by then (e.g., compliance with SECO requirements).

The legal basis for processing your data for this purpose is therefore the performance of a contract (pre-contractual phase) and our legitimate interest pursuant to Art. 6 (1) (b) and (f) GDPR.

  1. Acquisition and processing of personal data when conducting credit checks

If we provide advance payment, e.g., for a purchase on account, we may obtain a credit report from a credit agency based on mathematical-statistical procedures to protect our legitimate interests. For this purpose, we transmit the personal data required for a credit check to a credit agency and use the information received regarding the statistical probability of a payment default to make a considered decision regarding the establishment, implementation, or termination of the contractual relationship.

A credit report may contain probability values ​​(score values) calculated based on scientifically recognized mathematical and statistical methods, which include, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions.
When reviewing a credit application, we or our commissioned partner company will also obtain a credit report (from the Credit and Business Information Office, the residents’ registration office, debt collection offices, etc.). We are also entitled to record any information about a rejection of a card application, payment arrears, or card misuse. To prevent over-indebtedness, the Consumer Credit Act (KKG) requires us to exchange additional information about creditworthiness with the Consumer Credit Information Office (IKO).

The legal basis for processing data for this purpose is the performance of a contract and our legitimate interest pursuant to Art. 6 (1) (b) and (f) GDPR.

  1. Use of your data for advertising purposes

a. Newsletter, Print, or SMS Advertising

You will only receive a newsletter, print, or SMS advertising from us upon express request, i.e., if you have consented to receiving advertising either on our website under the “Newsletter” section, on the BSC / Bayirli Swiss Company application form, when making a purchase in-store, when ordering by phone, or when participating in competitions.

To receive advertising, we must have the following information:

  • Title
  • First and last name
  • Postal address
  • Mobile number
  • Email address

You can unsubscribe from receiving advertising at any time. Furthermore, the unsubscribe option will be displayed in every newsletter or SMS message.

We are entitled to commission third parties to handle the technical processing of advertising measures and to pass on your data for this purpose.

The legal basis for processing data for this purpose is your consent and our legitimate interest pursuant to Art. 6 (1) (a) and (f) GDPR.

b. Cookies

Cookies help in many ways to make your visit to our website easier, more enjoyable, and more meaningful. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website. Cookies do not damage your computer’s hard drive, nor do they transmit any personal user data to us.

For example, we use cookies to offer you the shopping cart function across multiple pages and to temporarily store your entries when you fill out a form on the website so that you do not have to repeat the entry when you visit another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website, so that you do not have to log in again when you visit another subpage.

Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a notification appears every time you receive a new cookie. On the following pages, you will find explanations of how to configure the processing of cookies in the most common browsers:

  • Microsoft Windows Internet Explorer
  • Microsoft Windows Internet Explorer Mobile
  • Mozilla Firefox
  • Google Chrome for Desktop
  • Google Chrome for Mobile
  • Apple Safari for Desktop
  • Apple Safari for Mobile

Disabling cookies may prevent you from using all the features of our website.

c. Tracking, Retargeting, and Remarketing

We use the web analysis service Google Analytics from Google Inc. (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. We use Google Analytics to continuously optimize our offering and tailor it to user needs. Google Analytics uses cookies (see below), which are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website, in particular

  • the navigation path a visitor takes on the page
  • the length of time spent on the website or subpage
  • the next website accessed after visiting the website
  • the country, region, or city from which access is made
  • the device (type, version, color depth, resolution, width, and height of the browser window)
  • recurring or new visitors
  • the type and version of the Internet browser used
  • the operating system used
  • the website from which access is made (so-called referrer URL)
  • the IP address of the accessing computerers (anonymized)
  • the time of the server request
  • the actions on the website (clicks, downloads, purchases)

are transmitted to Google servers in the USA and stored there. Google will use this information to evaluate your website usage, to compile reports on website activity for us, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. Google will never associate your IP address with any other data held by Google. IP addresses are anonymized so that they cannot be assigned to you as an individual. Google is listed as a Privacy Shield participant. The Privacy Shield agreement between the EU and the USA guarantees minimum standards in data protection.

We also use Google Remarketing (so-called DoubleClick by Google) and Google AdWords for online advertising and to evaluate the use of our website. Through the combined use of first-party cookies and third-party cookies (e.g., DoubleClick cookies), reports can be evaluated to determine how ad impressions relate to website visits. Third-party vendors, including Google, have the ability to display ads on websites and target and optimize them based on demographic characteristics and interests (e.g., age, gender, or interests) based on previous visits to the website. This data may be obtained from Google or from visitor data from third-party vendors.

We also use Google Tag Manager to manage services within the scope of usage-based advertising. The Google Tag Manager tool itself is a cookie-free domain and does not collect any personal data. Rather, the tool triggers other tags, which in turn may collect data. If you have deactivated at the domain or cookie level, this deactivation will remain in place for all tracking tags implemented with Google Tag Manager.

By using our website, you consent to the processing of the data collected about you by Google in the manner and for the purposes set out above.

You have the option of preventing your data from being evaluated by Google Analytics. If you wish, please follow this link to download and install a browser plug-in.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

d. Creation of user profiles

In order to provide you with personalized services and information, we use and analyze the data we collect about you. The analysis of your user behavior may lead to the creation of a so-called user profile.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

e. Facebook Custom Audience

We use Facebook Custom Audience, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you use Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes.

We also use Facebook Pixel, also a service provided by Facebook. This allows us to track the actions of users after they have seen or clicked on a Facebook ad. This allows us to measure the effectiveness of Facebook ads for statistical purposes. The data collected in this way is anonymous to us but is stored and processed by Facebook. Facebook can link this data to the respective Facebook account and also use it for its own advertising purposes.

Further information on how Facebook Pixel works and the general display of Facebook ads can be found in Facebook’s privacy policy.

The legal basis for processing data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

f. Microsoft Bing Ads

We use conversion tracking from Bing Ads (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). When you click on a Bing ad, a cookie is placed on your computer. This allows both Bing and us to recognize that you were redirected to our website via the Bing ad. This allows us to measure the effectiveness of Bing ads for statistical purposes. The data collected in this way is for

We use the data anonymously, but it is stored and processed by Bing. We also use the data for remarketing. If you do not wish to participate in the tracking process described, you can refuse the necessary cookie setting via your browser settings. Deactivation can also be done via this link.

g. LinkedIn Custom Audience

We use features and content from LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When using Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to LinkedIn for analysis and marketing purposes.

We also use the LinkedIn Insight Tag, also a service provided by LinkedIn. This can include content such as images, videos, or text, as well as buttons that allow you to express your likes regarding content, subscribe to the authors of the content, or subscribe to our posts. If you are a member of the LinkedIn platform, LinkedIn can assign the access to the aforementioned content and features to your profiles. We can also integrate scripts and measures that allow us to use marketing and statistical functions in LinkedIn. The data collected in this way is anonymous to us, but is stored and processed by LinkedIn. LinkedIn can link this data to the respective account and also use it for its own advertising purposes.

Further information on how the LinkedIn Insight Tag works and the general display of LinkedIn ads can be found in LinkedIn’s privacy policy.

The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

h. econda

In order to tailor and optimize this website to meet your needs, solutions and technologies collect and store anonymized data, and user profiles are created from this data using pseudonyms. Cookies can be used for this purpose, which enable the recognition of an internet browser.

However, user profiles will not be merged with data about the bearer of the pseudonym without the visitor’s express consent. In particular, IP addresses are obscured immediately upon receipt, making it impossible to assign user profiles to IP addresses. User behavior is analyzed on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. Visitors to this website can object to this data collection and storage at any time in the future here.
The objection only applies to the device and web browser on which it was set; please repeat the process on all devices if necessary. If you delete the opt-out cookie, requests will be sent to firestorm again.

  1. Social Media

We have integrated links to our social media profiles on our website. The links lead to the following networks:

  • Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
  • Instagram Inc., 1601 Willow Road, Meno Park, CA 94025, USA
  • Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA
  • Twitter, Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
  • Google+, operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043
  • YouTube, operated by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

If you click on the respective social network icons, you will automatically be redirected to our profile on the respective network. To use the functions of the respective network, you may need to log in to your user account. If you click on a link to one of our social media profiles, a direct connection is established between your browser and the server of the respective social network. This informs the network that you are visiting our website using your IP address and have accessed the link. If you click on a link to a network while logged into your account on the respective network, the content of our website can be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the respective links. An association will definitely occur if you log in to the respective network after clicking on the link.

  1. Disclosure of data to third parties

We will only share your personal data if you have expressly given your consent to do so.

a legal obligation exists or this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.

We will also pass on your data to third parties if this is necessary for the use of the website and the execution of the contract. The use of the data passed on for this purpose by third parties is strictly limited to the stated purposes.

If you choose to pay by credit card, you will be redirected to the payment provider’s application. Regarding the processing of your credit card information by these third parties, we ask you to also read the general terms and conditions and the privacy policy of your credit card issuer.
When reviewing the application for, or in the case of purchase on account, we or our commissioned partner company will also obtain a credit report (from the information office for credit and business information, the residents’ registration office, debt collection offices, etc.). We are also entitled to record any information about a rejection of the card application, payment arrears, and card misuse. To prevent over-indebtedness, the Consumer Credit Act (KKG) requires Möbel BSC / Bayirli Swiss Company to exchange additional information about creditworthiness with the Consumer Credit Information Center (IKO).

The legal basis for processing data for this purpose lies in our legitimate interest, in part in your consent, or in the execution of a contract pursuant to Art. 6 (1) (a), (b), and (f) GDPR.

  1. Transfer of personal data abroad

BSC / Bayirli Swiss Company is entitled to transfer your personal data to third parties abroad, provided this is necessary for the purposes stated above. In doing so, the legal regulations regarding the transfer of personal data to third parties are naturally observed. These third parties are obligated to protect data to the same extent as the provider itself. If the level of data protection in a country does not correspond to Swiss or EU data protection law, we contractually ensure that the protection of your personal data is always equivalent to that in Switzerland or the European Economic Area (EEA).

For the sake of completeness, we would like to point out to users residing or based in Switzerland that surveillance measures are in place in the USA by US authorities that generally allow the storage of all personal data of all individuals whose data has been transferred from Switzerland to the USA. This occurs without differentiation, restriction, or exception based on the objective pursued, and without an objective criterion that would allow US authorities to restrict access to the data and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to this data and its use. We would also like to point out that in the USA, data subjects from Switzerland have no legal remedies that would allow them to access the data concerning them and to obtain its correction or deletion, nor does there exist any effective judicial protection against general access rights of US authorities. We explicitly draw the data subjects’ attention to this legal and factual situation so that they can make an informed decision regarding consent to the use of their data.
We would like to point out to users residing in an EU member state that, from the perspective of the European Union, the USA does not have an adequate level of data protection – due, among other things, to the issues mentioned in this section. Where we have explained in this Privacy Policy that recipients of data (e.g., Google) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.

  1. Right to Information, Deletion, Correction, and Retention of Data

You can request information about your personal data stored by us at any time, or view and change it by logging into our website using your login details. A formal request for information must be made in writing.

You can request that your data or your user profile be deleted or corrected at any time. This can be done by sending a corresponding request by email to info@bsc-online.ch. We would like to point out that we reserve the right to request proof of identity in this case as well and that in the event of deletion of your data, we may exercise our right to object to the processing of your personal data services is not possible or not fully possible.

You can revoke your consent to certain data processing at any time with future effect.
Please note that statutory retention periods apply to certain data. We must store this data until the expiration of the retention period. If you have requested its deletion, we will block this data in our system and use it exclusively to fulfill our legal obligations.

  1. Data Security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

If you register with us as a customer, access to your customer account is only possible after entering your personal password. You should always treat your payment information confidentially and log out of your online account after your session and close the browser window when you have finished communicating with us, especially if you share the computer with others.
We also take internal data protection very seriously. Our employees and the service providers we engage have been obligated to maintain confidentiality and comply with data protection regulations.

  1. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy from time to time to reflect new circumstances. Such changes will take effect from the time they are posted. We therefore recommend that you review this Privacy Policy regularly.

  1. Contact Person

If you have any questions about data protection on our website, would like to request information, or request the deletion of your data, please contact our data protection contact person by sending an email to info@bsc-online.ch.

www.bsc-online.ch