Privacy policy

The controller within the meaning of the Swiss Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR) is:

BIK AG
Sergio Habegger
Zeughausgasse 29
3011 Bern

Schlüsselfund-Service
PO Box 1181
3001 Bern

Telephone: +41 31 312 11 70
E-mail: info@bik-ag.ch
Website: https://bik-ag.ch/

Principles

The protection of your personal data matters to us. We process personal data in accordance with the revised Swiss Data Protection Act (DPA, in force since 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR).

We process only the data we genuinely need in order to provide our service. We do not sell personal data and we do not pass it to third parties for advertising purposes.

Personal data means all information relating to an identified or identifiable person. Processing covers any handling of personal data, in particular obtaining, storing, using, disclosing, altering and deleting it.

Our core service: the key return service

This processing is the heart of our business. We therefore describe it first and in detail.

What we collect. When you order a BIK tag we record your name, your postal address, your e-mail address, your telephone number where applicable, and the details needed for payment and delivery. Each tag is assigned an individual code which is linked to your contact details.

Why we need it. The code on the tag contains no name and no address. It is a number. Only the link between that number and your contact details in our system allows us to identify found keys and return them to you. Without this processing the service cannot be provided.

When keys are found. If someone finds your keys, they drop them into the nearest post box or contact us. We use the code to identify the person entitled to them and send the keys back by registered post. If the finder contacts us, we process their details solely in order to handle that one return. We do not pass the finder’s contact details to you, nor yours to the finder, unless both sides expressly wish it.

Changes of address. You can change your address at any time during the term. We then update the record attached to your code. You can notify us through the form on our website, by e-mail or by telephone.

Legal basis. The processing is carried out in order to perform the contract with you (Art. 31(2)(a) DPA, Art. 6(1)(b) GDPR). No additional consent is required for this, and we do not ask for any.

Retention. We keep the link between code and contact details for as long as the service runs. After it ends we keep the data for as long as statutory retention obligations require — in particular the ten-year commercial and tax law obligation to retain business records. After that it is deleted.

Other processing

Orders and customer account. To handle orders we process master data, communication data, contract data and payment data. You may optionally create a customer account in which you can view your orders. Customer accounts are not public and are not indexed by search engines.

Contact form and reporting a find. When you write to us through a form, we process the details you provide in order to answer your enquiry and to deal with any follow-up questions. We do not pass this data on without your consent.

Newsletter. If you would like to receive our newsletter, we need your e-mail address and confirmation that you are its owner and wish to receive it. You can withdraw your consent at any time, in particular through the unsubscribe link in every issue. The legal basis is your consent (Art. 6(1)(a) GDPR).

Server log files. When our website is accessed, the browser type and version, the operating system used, the referrer URL, the host name of the accessing computer and the time of the server request are logged automatically. This data cannot be assigned to particular individuals and is not merged with other data sources. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).

Disclosure to third parties

We pass on personal data only where this is necessary in order to provide the service or where there is a legal obligation. Recipients are in particular:

• Swiss Post and other transport companies, for despatching the tags and for the registered return of keys
• payment service providers and financial institutions, for handling payments
• our hosting provider, which operates the website and the database
• our fiduciary and auditors, within the scope of statutory accounting obligations

These recipients are themselves bound to confidentiality and to compliance with data protection law.

Cookies and consent

This website uses cookies. These are small text files stored on your device. Necessary cookies are required for the website to work, for example for the contents of the shopping basket and the login status; they are set without consent. All other cookies, in particular for statistics and marketing, are only set once you have agreed in the cookie banner.

You can change or withdraw your choice at any time through the cookie settings on our website. You can also block or delete cookies in your browser. In that case some functions of the website may no longer be available.

Statistics and embedded services

Google Analytics. We use Google Analytics, a web analysis service of Google Ireland Limited, to evaluate the use of our website statistically and to improve what we offer. Collection takes place with a shortened IP address. Google Analytics is only loaded after you have consented in the cookie banner (Art. 6(1)(a) GDPR). Further information can be found in Google’s privacy policy.

Google Maps. We embed map material from Google Maps so that you can see locations conveniently. When a page with a map function is called up, Google receives the information that you have visited that page. The embedding takes place only after your consent.

Google Fonts. For a uniform display of typefaces we use web fonts. Your IP address may be transmitted to Google in the process.

YouTube. Videos from YouTube (Google Ireland Limited) are embedded on individual pages. They are only loaded once you actively start them or have consented to the embedding.

Product data. So that our products appear in search services and price comparison sites, we transmit product data to those services. Only product information is transmitted — name, description, image, price and availability. No customer data.

Security

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that your browser’s address line begins with “https://” and shows a padlock symbol. As long as the encryption is active, the data you transmit cannot be read by third parties.

Together with our hosting provider we take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse and falsification. We point out that the transmission of data over the internet, in particular communication by e-mail, can have security gaps. Complete protection is not possible.

Disclosure abroad

Personal data is processed in principle in Switzerland and in the European Economic Area.

Individual services named above may transmit data to the United States. Since 15 September 2024 the Swiss Federal Council has recognised, through the Swiss-U.S. Data Privacy Framework, an adequate level of data protection at US companies certified under that framework. For the EU, the corresponding EU-U.S. Data Privacy Framework has been in place since 10 July 2023. Where a recipient is not certified, we base the transfer on the standard contractual clauses or on your express consent.

Your rights

Within the scope of applicable law you have in particular the following rights:

• Access to whether and which personal data we process about you
• Rectification of inaccurate data
• Erasure of your data, unless a statutory retention obligation prevents it
• Restriction of processing
• Release and portability of data in a common electronic format
• Objection to processing based on a legitimate interest
• Withdrawal of consent with effect for the future, at any time and without giving reasons

An informal message to info@bik-ag.ch is enough to exercise these rights. To protect your data we may ask for proof of identity. Exercising these rights is free of charge for you.

Important note on erasure: if you request erasure of your data while a service is running, we can no longer identify found keys or return them to you. The service effectively ends at that point. Erasure is not conditional on your returning the tag to us.

Right to complain

You have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. If you are resident in the EU, you may contact the data protection authority of your country of residence.

Copyright

The copyright and all other rights in content, images, photographs and other files on this website belong exclusively to BIK AG or to the rights holders expressly named. Prior written consent from the rights holders must be obtained for any reproduction.

Liability

All information on this website has been carefully checked. We endeavour to keep it current, accurate and complete. We are liable for damage arising from the use of this website within the scope of the statutory provisions. Mandatory statutory liability provisions remain reserved in every case.

We accept no responsibility for the content and availability of third-party websites reachable via external links. The respective operators are solely responsible for their content.

Changes to this privacy policy

We may adapt this privacy policy at any time in order to reflect changes in the law or in our processes. The version published on this website applies. We will inform you in a suitable manner of any material changes.

Contact

If you have questions about data protection, please contact the controller named at the beginning:

BIK AG, Sergio Habegger, Zeughausgasse 29, 3011 Bern
Schlüsselfund-Service, PO Box 1181, 3001 Bern
E-mail: info@bik-ag.ch
Telephone: +41 31 312 11 70

Last updated: 15 August 2026