Privacy Policy
As of October 2026
Data Controller
The party responsible for processing your personal data is: Brenda Rudin Sales & Marketing Owner: Brenda Rudin Alpenstrasse 61 3073 Gümligen Switzerland brenda.rudin@brsm.ch +41 79 348 96 42 If you have any questions about data protection or about exercising your rights, you can reach us at this address.
Scope and Principles
This privacy policy applies to the website www.brsm.ch and to all of our business activities, in particular enquiries, quotes, orders and collaboration with clients. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, we comply with it as well. We only process as much data as is necessary for the purpose in question.
What Data We Process
Contact and communication data: e.g. name, company, job title, email address, phone number and the content of your messages. Contract and billing data: e.g. details of quotes and orders, billing address, payment information and correspondence. Website usage data: e.g. pages visited, time of visit, browser and device information, and the IP address. The following sections describe how this data is processed.
Purposes of Processing
We process personal data to respond to your enquiries, prepare quotes and carry out orders, to communicate with you, and to meet our accounting and legal obligations. On the website, we also process data to provide and secure the site technically and – only with your consent – to analyse usage statistically and measure the success of our advertising.
Contact Form and Email
When you write to us via the contact form, your name, email address, message and the language of the page are sent to us by email. This information is not stored on the website itself. To send these emails, we use the email service Resend (Plus Five Five, Inc., USA); emails are sent via servers in Ireland: https://resend.com/legal/privacy-policy Our emails – including your messages from the contact form – are stored by Hostpoint AG in Switzerland: https://www.hostpoint.ch/de/datenschutz We use this data solely to respond to your enquiry and, where appropriate, to prepare for a collaboration.
Clients
In the course of our assignments, we process the contact, contract and billing data of our clients and their contact persons. The legal basis is the performance of the contract or compliance with legal obligations. If, in the course of an assignment, we gain access to personal data for which our clients are responsible (e.g. data from their web analytics, advertising or customer systems), we process it exclusively on their behalf and according to their instructions. The privacy policy of the respective client applies to this data.
Hosting and Security
This website is operated by Vercel Inc. (USA). The website's server functions and the storage of content and images (delivered via our address cdn.brsm.ch) are located in Frankfurt (Germany). Pages are delivered via Vercel's global network, usually from a location near you. When you visit the website, Vercel processes technically necessary data such as IP address, date and time, the page accessed, and browser and device information in order to deliver the website. To protect against attacks and abusive access (e.g. by bots or too many requests in a short time), Vercel's security features automatically analyse this technical data. Further information: https://vercel.com/legal/privacy-policy
Cookie-Free Statistics (Vercel Web Analytics and Speed Insights)
We use Vercel Web Analytics and Vercel Speed Insights to understand which pages are visited and how quickly the website loads. These services set no cookies, store nothing in your browser and do not recognise visitors across pages. The analysis is aggregated and does not allow conclusions to be drawn about individuals.
Google Analytics and Google Ads (Only with Your Consent)
We only use services from Google Ireland Limited (Ireland) or Google LLC (USA) if you consent via the cookie banner: Statistics – Google Analytics 4: shows us how the website is used, e.g. pages visited, time spent, where the visit came from (such as a search or an ad), device and approximate location. Your IP address is used only briefly to determine your approximate location and is not stored by Google for users in Switzerland. Marketing – Google Ads: measures whether visits via our ads lead to an enquiry (conversion measurement). With your consent, this data may also be used to show you our ads again later (remarketing). This involves setting cookies (e.g. “_ga”, “_gcl_au”) and transmitting usage data to Google. Without your consent, no Google service is loaded. You can choose each of the two categories individually and change or withdraw your choice at any time via “Cookie settings” at the bottom of every page; any Google cookies already set will then be deleted. Google Analytics data is automatically deleted after 14 months. Further information: https://policies.google.com/privacy
Cookies and Local Storage
We save your choice in the cookie banner in your browser's local storage (entry “brsm-consent”) so that the banner does not appear again on every visit. This storage is technically necessary. Other cookies are only set with your consent (see above). You can also delete or block cookies and stored data at any time in your browser settings.
Fonts (Adobe Fonts)
To display our typeface, we use Adobe Fonts from Adobe Inc. (USA). When the page loads, your browser connects to Adobe's servers for this purpose; your IP address is transmitted in the process, which according to Adobe is used only to deliver the font and is not stored. Adobe does not set any cookies for this. Further information: https://www.adobe.com/privacy/policies/adobe-fonts.html
Instagram and LinkedIn
On the homepage, we show recent posts from our Instagram profile. The images are delivered via our own server; no connection between your browser and Instagram is established when they are displayed. At the bottom of every page, we link to our profiles on LinkedIn and Instagram. The privacy policies of the respective provider only apply once you click one of these links: https://privacycenter.instagram.com/policy https://www.linkedin.com/legal/privacy-policy
Recipients
We only share personal data where this is necessary for the purposes stated, required by law, or you have given your consent. Recipients include in particular the service providers named in this privacy policy (Vercel, Resend, Hostpoint, Google, Adobe), who process data on our behalf, as well as, where applicable, fiduciary and accounting service providers or authorities if we are legally obliged to do so.
Disclosure Abroad
Our emails are stored in Switzerland; the website runs and stores its data in Germany, and the contact form's emails are sent via Ireland. Under Swiss law, Germany and Ireland are considered to provide adequate data protection. Some service providers are based in the USA, so access from the USA is possible. Vercel, Google and Adobe are certified under the Swiss-U.S. Data Privacy Framework, which ensures adequate data protection under Swiss law. For Resend, we rely on the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Retention
We retain personal data only for as long as necessary for the purpose in question. Enquiries that do not lead to an order are deleted once they have been dealt with, and after two years at the latest. Business records such as quotes, contracts and invoices are retained for the statutory retention period of ten years.
Data Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. The website is transmitted exclusively in encrypted form (HTTPS).
Your Rights
You have the right to request information about the personal data we process about you, as well as its correction, deletion or release in a commonly used electronic format. You may object to processing and withdraw any consent you have given at any time with effect for the future. To do so, please contact brenda.rudin@brsm.ch. We may request proof of your identity. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch
Changes
We may amend this privacy policy at any time, in particular when we start using new services. The version published on this website applies.