Privacy notice

RIVACY NOTICE – BESTCONT SA
Detailed information pursuant to the Swiss Federal Act on Data Protection (nFADP), entered into force on September 1, 2023, with operational effect from September 25, 2023.
Last update: March 6, 2026

DATA CONTROLLER (Art. 5 letter j nFADP)
The Data Controller is the entity that determines the purpose (why) and the means (how) of processing personal data. Bestcont SA, with registered office at Corso Elvezia 37, 6900 Lugano, assumes this responsibility.

• Direct contact: m.andrea@bestcont.eu
• Phone: +41 (0) 79 649 25 53

PRINCIPLES OF DATA PROCESSING (Art. 6 nFADP)
Bestcont SA processes all data in accordance with the fundamental principles established under Art. 6 nFADP:

• Lawfulness and Good Faith: Data are processed only for legitimate purposes and in a fair manner.
• Proportionality: We collect only the data strictly necessary for the stated purposes (“data minimization”).
• Purpose Limitation: Data are not used for purposes incompatible with those indicated at the time of collection.
• Accuracy: We commit to keeping data up to date and correcting inaccurate information.

CATEGORIES OF DATA AND LEGAL BASIS (Art. 31 nFADP)
In Switzerland, processing is lawful provided that it does not violate the personality rights of the data subject. Bestcont SA bases data processing on the following grounds:

A) Navigation and Technical Data
• Description: IP addresses, system logs, timestamps.
• Art. 31 explanation: Processing is justified by our overriding legitimate interest in maintaining the website secure and operational. Without these data, access to the portal www.bestcont.eu would be technically impossible.

B) Data Provided via Contact Forms
• Description: Name, surname, email, telephone number.
• Art. 31 explanation: The legal basis is the performance of pre-contractual measures. If a user requests consultation, processing their contact details is necessary to respond to such request.

C) Data for Marketing Purposes
• Art. 6 para. 6 explanation: In accordance with the nFADP, newsletters are sent exclusively on the basis of the freely given and explicit consent of the data subject. Such consent may be withdrawn at any time with immediate effect.

DATA SECURITY AND PROTECTION (Art. 8 nFADP)
Article 8 nFADP requires the Data Controller to ensure data security appropriate to the level of risk. Bestcont SA has implemented:

• Technical Measures: Encryption of data in transit through HTTPS/TLS protocols and protection of databases against external intrusion.
• Organizational Measures: Access to data is restricted exclusively to authorized personnel who require such information for the performance of their duties.

DISCLOSURE AND INTERNATIONAL DATA TRANSFERS (Arts. 16–17 nFADP)
The nFADP is particularly strict regarding the transfer of data outside Swiss territory:

• Art. 16 (Transfer to Countries with Adequate Protection): We transfer data to EU countries that guarantee protection standards equivalent to those in Switzerland.
• Art. 17 (Safeguards for Countries without Adequate Protection): For services such as Google Analytics (USA), we use Standard Contractual Clauses (SCC) approved by the Federal Data Protection and Information Commissioner (FDPIC). This ensures that even if data are stored on foreign servers, the rights of Swiss users remain contractually protected.

WEB ANALYTICS (GOOGLE ANALYTICS)
We use analytics tools to understand how the website is used. To protect user privacy:

• IP anonymization is activated, transforming the IP address into non-identifiable data before it leaves the Swiss/European legal area.
• Users may exercise the right to opt out through their browser settings.

RIGHTS OF THE DATA SUBJECT (Arts. 25–29 nFADP)
The nFADP grants users full control over their personal data:

• Right of Access (Art. 25): You have the right to request confirmation as to whether personal data concerning you are being processed and to receive a copy of such data. This allows verification of the lawfulness of the processing.
• Right to Rectification (Art. 6): If the data we hold are inaccurate or incomplete, you have the right to request immediate correction.
• Right to Erasure (Arts. 30–32): You may request the deletion of your data. Note: data required for legal obligations (e.g., accounting) will be retained for the minimum statutory period (10 years).
• Right to Data Portability (Art. 28): You may request delivery of your data in a commonly used electronic format in order to transfer them to another service provider.
• Right to Withdraw Consent: Where processing is based on consent, it may be withdrawn at any time by writing to m.andrea@bestcont.eu.

DATA RETENTION
Data are retained in accordance with the principle of necessity:

• Unresolved inquiries: 12 months
• Accounting and tax documents: 10 years (Swiss legal obligation)
• Marketing data: Until unsubscription

COMPLAINT TO THE SUPERVISORY AUTHORITY
If you believe that data processing violates the nFADP, you have the right to report the matter or lodge a complaint with the Swiss supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, CH-3003 Bern
Website: www.edoeb.admin.ch

On our website www.bestcont.eu we use Google Analytics, a web analytics service provided by Google Ireland Limited (based in Ireland) or Google LLC (based in the United States). Google Analytics uses “cookies”, which enable analysis of how users interact with the website.

• IP Anonymization: We have activated IP anonymization on this website. This means that your IP address is shortened by Google within Switzerland or within the Member States of the European Union before being transmitted to the United States, making direct identification of the user impossible.
• Purpose: On behalf of Bestcont SA, Google will use this information to evaluate the use of the website, compile reports on website activity and provide us with other services related to website and internet usage.
• International Transfer: The data generated by the cookie may be transmitted to a Google server in the United States and stored there. Google LLC is certified under the Switzerland-US and EU-US Data Privacy Framework, ensuring an adequate level of data protection according to the decisions of the Swiss Federal Council.
• Right to Object: You can prevent the storage of cookies by selecting the appropriate settings in your browser. You may also prevent the collection of data generated by the cookie by downloading and installing the browser add-on available at the following link:
https://tools.google.com/dlpage/gaoptout

Last update: March 6, 2026.