Privacy Policy — BAUMALL SiteWeb

Draft for legal review, not approved for publication — 20 October 2026. BAUMALL has confirmed the legal identity below. International transfer details, suppliers and implementation of the retention period still require validation before publication.

1. Controller and contact

BAUMALL has confirmed that the controller is Baumall Pro Sàrl, UID CHE-395.131.725, Chemin du Couchant 4, 1022 Chavannes-près-Renens, Switzerland. For privacy questions and rights requests, contact info@baumall-pro.ch.

2. Data and purposes

When you browse the site or catalogue, technical connections transmit your IP address and the information needed to route requests. These data are used to provide the site, catalogue and images and to protect and diagnose the services. The site requests catalogue content and images from the BAUMALL API.

When you request a quotation, we receive your name and email address and, if provided, your telephone number, postal address, postcode, city and message. We also receive the requested products, quantities and configurations. We use this information to receive, handle, follow up and answer the request. Submission creates a lead and a quotation request with its line items in the backend, so contact details may appear in both records. A retry key and request fingerprint prevent duplicate submissions. The API temporarily uses the IP address to limit abusive submissions; the examined quotation creation path does not write it to the quotation record.

The general contact form is disabled in the inspected development configuration. Any activation requires a new review; its current version does not transmit entries to a server.

3. Storage in your browser

Quotation items, including products, quantities and choices, are kept in local storage without the contact fields. No expiry is programmed. You can remove items or clear site data in your browser. The flow to continue browsing after a successful submission clears the quotation. Language and display preferences are also stored locally. A retry identifier and SHA-256 fingerprint of the submitted request, derived in part from contact data, are held in session storage to retry after an error; they are removed after a valid response or when the tab session ends. Contact fields remain in page memory before submission. Search and navigation settings may appear in the URL.

The audit of active public pages found no cookie set by them, analytics tool, advertising pixel or consent banner. The production configuration must be checked again before publication. The inspected build does not automatically load Google fonts in the browser.

4. Recipients and external services

The API and staff authorised to handle requests may receive quotation data. The site uses Cloudflare infrastructure; Cloudflare states that it processes connection data from visitors to customer sites. BAUMALL-specific agreements, actual subprocessors, processing locations, log periods and internal access have not been confirmed. Cloudflare's general subprocessor list does not show which services BAUMALL has enabled.

WhatsApp and Google Maps links open only if you select them. Their own terms and privacy notices then apply. Telephone and email links open applications on your device. No automatic transfer of quotation fields to those services was found.

5. International disclosures

The reviewed materials do not establish the countries where suppliers process or store BAUMALL data or the applicable contractual safeguards. If data are disclosed abroad, these details must be established and included in the publication version. This draft does not claim that all processing remains in Switzerland.

6. Retention

BAUMALL has approved an administrative 12-month target for unconverted leads and quotations, subject to legal duties and actual implementation of deletion or anonymisation. The audit found no mechanism currently enforcing that period. Converted business records and records subject to legal duties may require different periods, to be determined by their nature. Technical log and backup periods have not been verified; this draft states no effective period for them.

7. Your rights

Write to info@baumall-pro.ch to request information and access to your data, correction or, where the legal conditions are met, deletion and other rights under applicable law. We may ask for information needed to verify your identity and assess statutory limits. You may also contact the Swiss Federal Data Protection and Information Commissioner.

8. Changes

This notice will be updated if processing, suppliers or legal requirements change. The published version will show its effective date after legal approval.