Privacy Policy

Sam Pack GmbHBuchmattstrasse 4a3400 BurgdorfSwitzerland

Controller

The controller for the processing of your personal data is Sam Pack GmbH, Buchmattstrasse 4a, 3400 Burgdorf, Switzerland.

For data protection enquiries: info@sam-pack.com.

Principles

We process personal data in accordance with the Swiss Data Protection Act (DPA). We process only the data we need for the business relationship, use it only for the purposes stated here, and keep it only as long as necessary or legally required.

We are a wholesale business supplying companies. The data we process therefore relates mainly to establishments — and to the people responsible for ordering there.

Data we process

Master data
company name, contact person, address, telephone and mobile number, e-mail address, website, UID/VAT number, language, delivery zone and delivery days.
Order and delivery data
items ordered, quantities, prices, time of order, deliveries, individually agreed prices and discounts.
Invoice and payment data
invoices, payments received, open amounts, payment method.
Access data
e-mail address and password for the customer portal as well as technical login data.
Communication data
messages you send us by telephone, WhatsApp, e-mail or through the portal, including voice messages and photographs of order lists.
Consents
whether and when you accepted the terms and conditions and which version, as well as whether you wish to receive reminders by SMS or WhatsApp and when you declared or withdrew this.

Purposes

  • receiving, checking and delivering orders
  • issuing invoices and allocating payments
  • informing you about delivery days and the order cut-off
  • operating the customer portal and managing your account
  • meeting our legal obligations, in particular accounting and retention duties
  • improving our assortment and processes

Orders by voice message, photograph and text

When you send us an order as a voice message, as a photograph of a list, or as text, we process it with the help of automated systems in order to create an order from it. Specifically:

  • Voice messages are transmitted to a Google service and converted into text there.
  • The text or photograph is transmitted to an Anthropic service, which identifies items and quantities from it.
  • The result is always only a proposal. Before an order is created, a person here checks and confirms every line.

For analyses of turnover and assortment, we replace your name with an identifier before transmission; the analysing systems therefore see no customer names.

We keep the original recording only as long as we need it to verify the recorded order, and delete it afterwards.

No automated decision producing legal effects for you takes place.

Disclosure to third parties

We do not pass on your data for sale or advertising purposes. We do, however, use service providers who process data on our behalf:

Supabasedatabase and storagedata centre in Switzerland (Zurich)
Verceloperation of the applicationEU / USA
Anthropicrecognising orders from text and photographs, analysesUSA
Googleconverting voice messages into textUSA
Twiliosending SMS and WhatsApp messagesUSA
bexioaccountingSwitzerland
PostFinancepayment transactionsSwitzerland

These providers may process the data only for us and only for the stated purposes.

We also disclose data where we are legally obliged to do so or where it is necessary to enforce our claims.

Processing abroad

Some of the providers listed above process data outside Switzerland, in particular in the USA. We ensure appropriate protection through contractual arrangements with these providers. Protection equivalent to that in Switzerland cannot, however, be guaranteed in every case.

Retention

We keep invoices, orders and the associated records for ten years; we are legally required to do so (Art. 958f CO).

Master data is kept for the duration of the business relationship and thereafter for as long as claims may be asserted.

Voice messages and photographs are deleted once the resulting order has been checked.

Access data is deleted when the account is closed.

Reminders by SMS and WhatsApp

We send reminders about your delivery day only with your express consent. We record when and by what means you gave it.

You may withdraw your consent at any time — in the portal, by telephone, or with a short message to us. Withdrawal carries no disadvantage: you continue to use the portal and to be supplied as before.

Messages concerning the handling of a specific order are sent regardless, as they form part of performing the contract.

Your rights

You have the right to request information about the data we process, to have inaccurate data corrected, to request deletion where no statutory retention obligation prevents it, to object to processing, and to receive your data in a common format.

Please contact us at info@sam-pack.com. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Data security

We protect your data with technical and organisational measures. Access to the portal is encrypted. Each customer account sees only its own data. Purchase prices, margins and other customers' data are technically inaccessible to customer accounts.

Cookies and log data

The portal sets only the technically necessary cookies required for login and operation. We use no advertising or tracking cookies.

Technical log data is recorded on access (including the time and the page requested) and serves the secure operation of the service.

Changes

We may amend this privacy policy. The version published on our website prevails.

Version of 1 August 2026

production · e2d9479 · main

Privacy Policy