Privacy Policy
Sam Pack GmbHBuchmattstrasse 4a3400 BurgdorfSwitzerlandController
The controller for the processing of your personal data is Sam Pack GmbH, Buchmattstrasse 4a, 3400 Burgdorf, Switzerland.
For data protection enquiries: info@sam-pack.com.
Principles
We process personal data in accordance with the Swiss Data Protection Act (DPA). We process only the data we need for the business relationship, use it only for the purposes stated here, and keep it only as long as necessary or legally required.
We are a wholesale business supplying companies. The data we process therefore relates mainly to establishments — and to the people responsible for ordering there.
Data we process
- Master data
- company name, contact person, address, telephone and mobile number, e-mail address, website, UID/VAT number, language, delivery zone and delivery days.
- Order and delivery data
- items ordered, quantities, prices, time of order, deliveries, individually agreed prices and discounts.
- Invoice and payment data
- invoices, payments received, open amounts, payment method.
- Access data
- e-mail address and password for the customer portal as well as technical login data.
- Communication data
- messages you send us by telephone, WhatsApp, e-mail or through the portal, including voice messages and photographs of order lists.
- Consents
- whether and when you accepted the terms and conditions and which version, as well as whether you wish to receive reminders by SMS or WhatsApp and when you declared or withdrew this.
Purposes
- receiving, checking and delivering orders
- issuing invoices and allocating payments
- informing you about delivery days and the order cut-off
- operating the customer portal and managing your account
- meeting our legal obligations, in particular accounting and retention duties
- improving our assortment and processes
Orders by voice message, photograph and text
When you send us an order as a voice message, as a photograph of a list, or as text, we process it with the help of automated systems in order to create an order from it. Specifically:
- Voice messages are transmitted to a Google service and converted into text there.
- The text or photograph is transmitted to an Anthropic service, which identifies items and quantities from it.
- The result is always only a proposal. Before an order is created, a person here checks and confirms every line.
For analyses of turnover and assortment, we replace your name with an identifier before transmission; the analysing systems therefore see no customer names.
We keep the original recording only as long as we need it to verify the recorded order, and delete it afterwards.
No automated decision producing legal effects for you takes place.
Disclosure to third parties
We do not pass on your data for sale or advertising purposes. We do, however, use service providers who process data on our behalf:
| Service | Purpose | Location |
|---|---|---|
| Supabase | database and storage | data centre in Switzerland (Zurich) |
| Vercel | operation of the application | EU / USA |
| Anthropic | recognising orders from text and photographs, analyses | USA |
| converting voice messages into text | USA | |
| Twilio | sending SMS and WhatsApp messages | USA |
| bexio | accounting | Switzerland |
| PostFinance | payment transactions | Switzerland |
These providers may process the data only for us and only for the stated purposes.
We also disclose data where we are legally obliged to do so or where it is necessary to enforce our claims.
Processing abroad
Some of the providers listed above process data outside Switzerland, in particular in the USA. We ensure appropriate protection through contractual arrangements with these providers. Protection equivalent to that in Switzerland cannot, however, be guaranteed in every case.
Retention
We keep invoices, orders and the associated records for ten years; we are legally required to do so (Art. 958f CO).
Master data is kept for the duration of the business relationship and thereafter for as long as claims may be asserted.
Voice messages and photographs are deleted once the resulting order has been checked.
Access data is deleted when the account is closed.
Reminders by SMS and WhatsApp
We send reminders about your delivery day only with your express consent. We record when and by what means you gave it.
You may withdraw your consent at any time — in the portal, by telephone, or with a short message to us. Withdrawal carries no disadvantage: you continue to use the portal and to be supplied as before.
Messages concerning the handling of a specific order are sent regardless, as they form part of performing the contract.
Your rights
You have the right to request information about the data we process, to have inaccurate data corrected, to request deletion where no statutory retention obligation prevents it, to object to processing, and to receive your data in a common format.
Please contact us at info@sam-pack.com. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Data security
We protect your data with technical and organisational measures. Access to the portal is encrypted. Each customer account sees only its own data. Purchase prices, margins and other customers' data are technically inaccessible to customer accounts.
Changes
We may amend this privacy policy. The version published on our website prevails.
Version of 1 August 2026