Privacy Policy
Last updated: 01.09.2026
This translation is provided for information only. In the event of any discrepancy, only the German version is binding.
1. Controller
Controller within the meaning of Art. 5 let. j revFADP (CH) and Art. 4 no. 7 GDPR (EU):
Paletten-Pool GmbH, Hinterbergstrasse 16, 6312 Steinhausen, Switzerland · info@paletten-pool.ch
2. What data we process
Contact / enquiry data (company, name, e-mail, telephone, postcode and town, message), order data, technical data (IP address, browser, from server logs, deleted after 30 days), the content you enter into the chat assistant, as well as, for customer accounts, the account and order data. If you reach us via a Google ad and have consented, we additionally process that ad's click identifier (parameter “gclid” or “wbraid”) together with its timestamp and your consent signals (section 4c).
3. Purpose
Processing of enquiries / orders, assigning your enquiry to the person responsible for your region (based on the postcode), contract performance, accounting (statutory retention of 10 years, Art. 958f CO), platform security, customer communication. With your consent, additionally: measuring the success of our Google ads (section 4c).
4. Cookies & storage
We use technically necessary storage. Advertising and measurement technology is only loaded once you have expressly agreed — before that nothing is set and nothing is transmitted to Google. We store your choice with its timestamp in your browser (key “pp-consent-v2”); you can withdraw it at any time via “Cookie settings” in the page footer. So that we can tell which campaign or search engine an enquiry came from, we also retain campaign parameters from the address bar (utm_*), the domain of the referring site and the page visited — only for the duration of your visit, in your browser's session storage (key “pp_attr”) and without any personal reference. These details are only transmitted when you submit a form and go exclusively to our own database. We use neither general visitor statistics nor error monitoring. The details of the advertising measurement are set out in section 4c.
4a. AI chat assistant
A chat assistant is available on this website. What you enter there is transmitted to and processed by Anthropic PBC (USA) in order to generate the reply. To associate your conversation, the assistant stores a random identifier in your browser. Please do not enter sensitive data or credentials in the chat. For a confidential enquiry, please use the contact form or info@paletten-pool.ch.
4b. Product images from the ERP
The product images in the shop, on the product pages and on the home page are loaded directly from our ERP system (Odoo, paletten-pool.odoo.com). In doing so, Odoo receives your IP address, browser identification and the calling page — technically necessary for the image to be delivered. No further data is transmitted.
4c. Google Ads: advertising measurement and click identifier
We run ads on Google. Only if you click “Accept” in the notice below do we load the Google Ads tag (account AW-752430552) and report to Google that an enquiry was submitted or that you clicked one of our telephone numbers. Google sets cookies for this and receives your IP address, browser identification and the page called. We do not transmit your name, e-mail address, telephone number or the content of your message. If you reach us via an ad, Google appends a click identifier to the address (“gclid”, in special cases “wbraid”). We store that identifier — again only after your consent — in your browser and file it together with your enquiry in our system, so that we can later attribute an order to the ad it came from; for that we would report the click identifier to Google together with the date, order number and order value. We use the click identifier for no more than 90 days; after that it is worthless for this purpose. We do not release your data for personalised advertising — the ad personalisation signal stays on “denied” even with your consent. Without your consent the tag is not loaded, no identifier is stored and nothing is reported to Google. You can withdraw at any time; the withdrawal takes effect from that moment for the future, and an identifier stored beforehand is no longer used for new reports to Google. The recipient is Google Ireland Ltd. (Ireland); the data may also reach Google LLC in the USA — on the basis of the standard contractual clauses (section 5). The legal basis is your consent (Art. 31 para. 1 in conjunction with Art. 6 para. 6 revFADP, Art. 6(1)(a) GDPR).
Change or withdraw consent:
5. Processors
| Service provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Web hosting / CDN | EU (Frankfurt) |
| Supabase Inc. | Database, authentication, storage | EU (Frankfurt) |
| Resend Inc. | E-mail dispatch | USA (SCCs) |
| Payrexx AG | Payment processing in the shop | Switzerland |
| Anthropic PBC | AI chat assistant on this website (content of chat messages) | USA (SCCs) |
| Odoo S.A. | ERP: order and invoice processing; delivery of the shop's product images | EU |
| Google Ireland Ltd. | Google Ads: measuring which ad led to an enquiry or an order (only with your consent) | EU (Ireland); transfer to the USA to Google LLC (SCCs) |
For transfers to third countries (USA) we rely on the standard contractual clauses of the EU Commission.
Google Ireland Ltd. processes the advertising measurement data partly on our behalf and partly for its own purposes, and is to that extent a controller in its own right. Details in section 4c.
6. Retention
Business records 10 years (Art. 958f CO); account data for as long as the account is active plus 30 days of backup; server logs 30 days. We use the click identifier from Google ads for no more than 90 days; after that it only remains as part of the respective enquiry record and is subject to that record's retention periods.
7. Your rights
Access, rectification, erasure / blocking (insofar as no retention obligation precludes this), data portability, objection. Complaint to the FDPIC (CH). Requests to info@paletten-pool.ch.