Data Protection & GDPR
How we handle personal data under GDPR / Swiss data protection rules, and how you can exercise your rights.
Last updated: 26 October 2025.This page summarizes our general approach to data protection. It should be read together with the Privacy Policy.
1. Data controller
For activities like responding to quote requests, managing customer relationships, preparing audits and delivering products and services, Pulix acts as the “data controller.” This means we decide why and how personal data is processed.
In some cases, especially when we process documented instructions for a client (for example in a regulated site), we may act as a “processor.” In such cases, we will follow the client’s written instructions.
2. Lawful basis
We process personal data under one or more legal bases recognized by GDPR and Swiss data protection law, typically:
- Contract / pre-contract — you ask for a quote or service, we prepare and deliver it.
- Legitimate interest — improve logistics, ensure safe product usage, prevent fraud.
- Consent — when required (e.g. certain marketing or analytics).
- Legal duty — retention for compliance, invoicing or audit.
3. Your rights under GDPR / Swiss law
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your personal data where legally possible.
- Object to or restrict some forms of processing.
- Request a copy (data portability) in a structured, commonly used format.
To exercise a right, email us at info@pulix.ch. We may need to confirm your identity before proceeding.
4. Security measures
We apply reasonable technical and organizational security measures, such as restricted access, internal policies, and supplier screening. No method of storage or transmission is 100% secure, but we aim to continuously reduce exposure of personal data.
We also work with you (the customer) to ensure products are used safely and documentation is handled correctly on site.
5. Subprocessors / third parties
We may rely on service providers (for example: logistics, hosting, analytics, invoicing). Where those providers handle personal data on our behalf, we take reasonable steps to ensure appropriate contractual and technical safeguards are in place.
On request, we can provide more detail about categories of subprocessors relevant to your engagement with us.
6. International data transfers
Data may be processed in Switzerland, the EU/EEA, or (in limited cases) other countries. Where data is transferred outside Switzerland / the EEA, we aim to use safeguards acceptable under applicable law (for example, standard contractual clauses or equivalent protections).
7. Raising concerns
If you have privacy or data protection concerns, we encourage you to contact us first. You may also have the right to lodge a complaint with your local supervisory authority (for example, a data protection authority in the EU or Switzerland).
8. Contact for GDPR / data protection
This GDPR page is an overview to support compliance conversations. It is not a substitute for a signed data processing agreement.
Need a DPA or security questionnaire?
We can provide documentation for procurement, legal or compliance review.
Contact our data team