Privacy policy
ALLPARA AG
Last updated: January 2026
1. Data Controller
The data controller responsible for the processing of personal data within the meaning of applicable data protection laws is:
ALLPARA AG
Fischerweg 7, 4058 Basel, Switzerland
UID / MWST: CHE-157.159.360
Phone: +41 79 883 04 25
Email: [email protected]
Website: https://www.allpara.com
2. Scope of Application
This Privacy Policy applies to all personal data processed by ALLPARA AG in connection with:
• business relationships,
• contractual performance,
• website usage,
• commercial communications,
• logistics and supply chain operations,
• regulatory and compliance obligations.
3. Legal Basis for Processing
ALLPARA AG processes personal data in accordance with:
• the Swiss Federal Act on Data Protection (nFADP),
• the EU General Data Protection Regulation (GDPR), where applicable.
Processing is based on one or more of the following legal grounds:
• contractual necessity,
• legal obligations,
• legitimate business interests,
• consent, where required.
4. Categories of Personal Data Processed
Depending on the relationship with the data subject, ALLPARA AG may process the following categories of data:
• Identification and contact details
• Company, role, and professional information
• Contractual and transactional data
• Payment and billing information
• Logistics and delivery-related metadata
• Technical identifiers (IP address, device data, timestamps)
• Communication records
ALLPARA AG does not intentionally process special categories of personal data unless legally required.
5. Purpose of Processing
Personal data is processed for the following purposes:
• execution and administration of contracts,
• order handling, invoicing, and payment processing,
• logistics coordination and delivery management,
• compliance with tax, customs, and regulatory obligations,
• operational security and risk management,
• internal accounting, auditing, and reconciliation,?
• communication with customers, suppliers, and partners.
6. Operational Traceability & Process Integrity
To ensure lawful operations, contractual performance, supply chain reliability, and regulatory compliance, ALLPARA AG applies structured internal processes that may involve:
• reconciliation of transactional references,
• validation of shipment events and delivery milestones,
• correlation of operational identifiers across systems,
• verification of compliance indicators.
Such processing is strictly limited to legitimate business purposes and implemented in accordance with applicable data protection requirements.
7. Data Sharing & Recipients
Personal data may be shared with:
• logistics and transport partners,
• customs and tax intermediaries,
• IT and cloud service providers,
• professional advisors (legal, tax, audit),
• regulatory or public authorities where legally required.
Data sharing is conducted on a need-to-know basis and subject to contractual confidentiality and data protection safeguards.
8. Data Processors and Third-Party Service Providers
In addition to the recipients listed in Section 7, ALLPARA AG may engage selected third-party service providers, processors, and sub-processors that process personal data for business purposes under applicable data protection requirements.
The principal service providers may include:
• WhatsApp Ireland Limited and, where applicable, Meta Platforms Ireland Limited — messaging communications between ALLPARA AG and customers, partners, suppliers, and other business contacts via WhatsApp Business services.
Where required, such processing is governed by written contractual terms defining the subject matter, duration, nature, and purpose of the processing, the categories of personal data and data subjects, and the respective obligations of the parties, in accordance with:
• Regulation (EU) 2016/679 (GDPR), Art. 28 — processor obligations and controller-processor relationship;
• Regulation (EU) 2016/679 (GDPR), Chapter V, Art. 44–50 — transfers of personal data to third countries or international organisations;
• Swiss Federal Act on Data Protection (FADP / nFADP), Art. 16–17 — disclosure of personal data abroad and applicable safeguards.
Where the use of a service provider involves the transfer of personal data outside Switzerland or the European Economic Area (EEA), ALLPARA AG relies on appropriate safeguards as described in Section 9, including adequacy decisions, Standard Contractual Clauses, and equivalent contractual or technical measures recognised under Swiss and EU data protection law.
9. International Data Transfers
Where personal data is transferred outside Switzerland or the European Economic Area (EEA), ALLPARA AG ensures appropriate safeguards, including:
• contractual protections,
• recognized adequacy decisions,
• technical and organizational security measures.
10. Data Retention
Personal data is retained only for as long as necessary to:
• fulfil contractual obligations,
• comply with legal and regulatory requirements,
• support legitimate business interests.
Retention periods are defined in accordance with applicable laws and internal compliance policies.
11. Data Security
ALLPARA AG implements appropriate technical and organizational measures to protect personal data against:
• unauthorized access,
• loss,
• alteration,
• misuse,
• unlawful disclosure.
Access to personal data is restricted to authorized personnel only.
12. Rights of Data Subjects
Data subjects may exercise their statutory rights, including:
• right of access,
• right to rectification,
• right to erasure (where applicable),
• right to restriction of processing,
• right to object to processing,
• right to data portability (where applicable).
Requests may be submitted to: [email protected]
Requests will be handled in accordance with applicable legal requirements.
13. Cookies & Website Data
The ALLPARA website may use cookies and similar technologies to ensure technical functionality and improve user experience. Detailed information may be provided in a separate Cookie Policy where applicable.
14. Amendments
ALLPARA AG reserves the right to amend this Privacy Policy at any time.
The version published on the website shall prevail.
15. Governing Law
This Privacy Policy is governed by the laws of Switzerland.
Place of jurisdiction: Basel-Stadt, Switzerland.