Privacy Policy

Company:

Mathis Trading GmbH

Please refer to our Impressum for full company details.

Brand: Biomatra® is a registered brand owned by Mathis Trading GmbH.

1. Introduction

This Privacy Policy explains how Mathis Trading GmbH (“we”, “our”) processes personal data when you visit our website www.biomatra.ch, use our contact form, request information, samples or Safety Data Sheets (SDS), or enter into a business relationship with us. We comply with the Swiss Federal Data Protection Act (revDSG, SR 235.1, effective 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). We process personal data only as necessary for the purposes described below, in a lawful, fair, transparent and proportionate manner.

2. Data Controller

Mathis Trading GmbH
Wiggenhalde 11
6010 Kriens, Switzerland
Email: info@biomatra.ch
No Data Protection Officer (DPO) is required under revDSG or GDPR for the size and nature of our business.
For any privacy-related questions or requests, please contact us at info@biomatra.ch.

3. Categories of Personal Data Processed

We may process the following categories of personal data:
- Contact and identification data: name, company, position, email, phone, address
- Inquiry data: messages sent via the contact form, product and volume requests, SDS or sample requests
- Contract and billing data: orders, deliveries, invoices, payments
- Technical usage data: IP address, browser, device information, access times, website usage logs
- Communication data: emails, phone conversations, online-form exchanges
Even in B2B transactions, contact persons of companies are considered data subjects and their data is protected under revDSG and GDPR.

4. Purposes and Legal Bases

We process personal data for the following purposes:
- Responding to inquiries, sample & SDS requests, preparing quotations – Pre-contractual measures (GDPR Art. 6(1)(b); revDSG Art. 31)
- Performing and managing contracts (orders, delivery, invoicing, after-sales) – Contract (GDPR Art. 6(1)(b); revDSG Art. 31)
- Compliance with Swiss/EU commercial, tax, chemical-safety & product-liability obligations – Legal obligation (GDPR Art. 6(1)(c))
- Protection of legitimate interests (fraud prevention, IT & data security, business continuity) – Legitimate interests (GDPR Art. 6(1)(f); revDSG Art. 31)
- Optional website analytics, cookies, marketing – Consent (GDPR Art. 6(1)(a); revDSG Art. 6)
We do not sell or rent personal data.

5. Disclosure to Third Parties

We may disclose personal data only as necessary for the purposes stated above to:
- Logistics and delivery partners (e.g. Swiss Post, freight forwarders)
- IT and hosting providers (e.g. Wix, secure email servers)
- Payment service providers and banks
- Competent authorities where required by law
All such third parties are contractually bound to comply with Swiss revDSG / GDPR data-protection standards.

6. International Data Transfers

Some service providers (e.g. Wix, analytics tools) may process data in countries outside Switzerland/EU.
Such transfers take place only if:
- the country is recognized by Switzerland/EU as providing an adequate level of protection, or
- we use Standard Contractual Clauses and other safeguards to ensure equivalent protection.

7. Data Retention

We keep personal data only as long as necessary for the purposes stated or as required by law:
- Inquiries without contract: up to 12 months
- Contracts and related business records: 10 years (Swiss Code of Obligations & tax law)
- Technical logs: max. 12 months
- Cookies: according to browser and site-settings
When data is no longer required, it is securely deleted or anonymised.

8. Cookies and Analytics

Our website uses essential cookies for core functionality and usability.
If we use Wix Analytics or Google Analytics, personal data (e.g. IP address, device information) may be processed on servers outside Switzerland/EU with appropriate safeguards.
You can configure your browser to block or delete non-essential cookies; this may affect website functionality.

9. Rights of Data Subjects

Under the revDSG and (where applicable) the GDPR, you have the right to:
- Obtain information about the personal data we process about you
- Request correction or deletion of your data
- Request restriction of processing or data portability (GDPR)
- Withdraw any consent given (e.g. for marketing cookies)
- Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with an EU supervisory authority
To exercise these rights, please contact: info@biomatra.ch

10. Third-Party Website Tools

Our website uses third-party apps provided via the Wix platform, including:
- Easy Language Translate, which enables multilingual website display.
- Mega Content Protector, which helps protect our website content from unauthorized copying or scraping.
These services may collect limited technical data (e.g. IP address, browser type, language preference, usage data) required to perform their functions. The processing of such data is carried out under the responsibility of the respective providers.
We will publish direct links to the privacy policies of these providers as soon as we make the multilingual and related features fully active.
In the meantime, you can contact us at info@biomatra.ch for more information.

11. Data Security

We use appropriate technical and organisational measures (revDSG Art. 8; GDPR Art. 32) to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
All employees and third-party processors are bound by confidentiality obligations.

12. Payment Security

All card payments on our website are processed securely via Wix Payments and its licensed partners, which are PCI-DSS Level 1 compliant. During checkout, sensitive payment details such as credit card numbers and security codes (CVV/CVC) are transmitted in encrypted form (SSL/TLS) directly to the payment processor and are not stored on our servers. For enhanced protection, Strong Customer Authentication (3‑D Secure) may be applied by the customer’s bank. Mathis Trading GmbH has no access to and does not store customers’ card numbers or security codes.

13. Special Notes for B2B Customers

Even in B2B relationships, contact details of company representatives (names, emails, phone numbers) constitute personal data. Business customers are responsible for informing their employees that their data is provided to us for order processing.

14. Social Media and Plugins

Our website may include links to our official pages on social media (e.g. Facebook, Instagram, LinkedIn, YouTube).
When you access these platforms, their own privacy policies apply. We do not control their data processing.
If plugins such as “Like” or “Share” buttons are integrated, your browser may directly connect to the platform’s servers, transmitting your IP address and other data.
If you are logged in to such a platform, this information can be linked to your profile.
You can avoid this by logging out before visiting our site or by adjusting your browser settings.

15. Limitation of Liability

While we take all reasonable measures to protect personal data, no transmission or storage system can be guaranteed 100% secure.
Mathis Trading GmbH is liable only for breaches caused by our intentional or grossly negligent misconduct and to the extent required by Swiss law.
We are not liable for unauthorised access by third parties due to factors beyond our reasonable control.

16. Changes to this Privacy Policy

We may update this Privacy Policy at any time to reflect legal, technical or business changes.
The latest version published on www.biomatra.ch applies.

17. Version

Current version: 01.10.2025

Thank you visiting our website.