Data protection

Protecting your data and safeguarding your privacy are important to us. You can expect us to handle your data sensitively and carefully and to ensure a high level of data security.

We collect and use your personal data exclusively within the framework of the applicable legal provisions, in particular the Swiss Data Protection Act (DSG) and the associated Ordinance (VDSG) and, where applicable, the European Data Protection Regulation (DSGVO).

In this data protection declaration, we inform you about the most important aspects of data processing in our company and about the data protection rights to which you are entitled. The data protection declaration describes how we collect and process your personal data when you visit our website or use our services.

Personal data (hereinafter also referred to as "data") is information that makes it possible to identify a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address and also your IP address.

The most important aspects of our privacy policy

1 – What data do we collect?

Inventory data (for example, personal master data, names and addresses)
Contact data (for example, e-mail, telephone numbers)
Content data (for example, text entries, number entries, photographs, videos).
Usage data (for example, websites visited, interest in content, access times)
Meta/communication data (for example, device information, IP addresses).
Payment data (for example, bank details, payment history, etc.) Vehicle data (for example, car registration number).

2 – Who is affected by our data processing?

Users of the online offer, visitors, service and product recipients (hereinafter referred to as "users").

3 – How do we use your personal data?

We process your personal data for the following purposes:

Display and optimisation of website content;
at your request, to contact you and/or regularly inform you about our activities and offers (newsletter);
Presentation, provision and delivery of products and services;
marketing;
applications;
Provision of contractual services;
organisation of competitions;
Web analytics and remarketing;
Demand analysis for the purpose of direct customer contact and customer acquisition;
Market and opinion research;
Video surveillance for the protection of infrastructure and persons concerned;
Litigation, arbitration, investigations and other proceedings.

4 – To whom do we disclose your personal data?

Where we disclose, transfer or otherwise grant access to personal data to other companies, we do so in particular because of our legitimate interests in administrative simplification.

We disclose your personal data to the following categories of recipients:

Group companies
Business partners and dealers
IT service providers
Companies for credit assessment
Logistics partners
Subcontractors
Service providers
Market research companies
Domestic and foreign authorities, official agencies or courts

In doing so, we naturally comply with the legal regulations on the disclosure of personal data to third parties. Where we use processors to provide our services, we take the necessary technical and organisational measures to protect your privacy in accordance with the relevant applicable data protection regulations.

Our privacy policy in detail

1 – Contacts

1.1 – RESPONSIBLE

The responsible party within the meaning of the applicable data protection laws is:

Emil Frey AG
Badenerstrasse 600
8048 Zurich
Switzerland

Telephone: 044 495 21 11
Fax: 044 495 21 21
Website

1.2 – COMPANY DATA PROTECTION OFFICER

A data protection officer has been appointed. He can be contacted at this website.

1.3 – EU REPRESENTATIVE

The EU Data Protection Representative in relation to processing operations to which we are subject as a data controller under the GDPR is:

Frey Services Deutschland GmbH
Cannstatter Street 46
70190 Stuttgart
Germany
Website

2 – Collection, processing and use of your data in detail

If you would like to know in more detail how we process your data, we hope to be able to assist you with the following more detailed information:

2.1 – VISITING OUR WEBSITE / SERVER LOG FILES

When you visit our website, our servers temporarily store the following information in a log file, the so-called server log files:

IP address of the requesting computer
Date and time of access/retrieval
Name and URL of the retrieved data
Operating system of your computer and the browser you are using
Country from which our website is accessed
Name of your internet access provider
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
amount of data transferred
last visited website
browser settings
Language and version of browser software
activated browser plug-ins

This data is processed for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis, to optimise our offer and for internal statistical purposes and thus on the basis of our legitimate interests. This data is not passed on to third parties or evaluated in any other way.

In order to improve the performance of the website, the data is transmitted to a service company, which temporarily stores the data.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of your data for the provision of the website, this is the case when the respective session has ended.

Reporting damage (by appointment)

You have the option on our website to report damage.

The following details marked with * are mandatory fields when reporting damage. The other details are voluntary:

Salutation*
First name*
Surname*
Address*
Postcode*
City*
Telephone number*
E-mail address*
Insurance details*
Number plate*
Make
Damage description*
Details of the damage
Vehicle data (e.g. chassis number, mileage)
Desired date*

The mandatory information is required to report the damage and to make an appointment. The voluntary information helps us to evaluate and assess the damage more accurately. For this purpose, the data you have provided will be transmitted to the insurance company.

The basis for processing damage reports is our legitimate interest in processing your report. Our legitimate interest in processing is to report a claim to the insurance company in a quick way and subsequently to give you the opportunity to make an appointment with us. Should we process your data for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, this is an additional basis for the processing.

Your data will be deleted when it is no longer necessary for the performance of our contractual and legal obligations or otherwise for the purposes pursued by the processing.

2.2 – NEWSLETTER

On our website you have the possibility to subscribe to our newsletter. This will keep you informed about us and our offers.

If you subscribe to our newsletter, the information marked with * is mandatory. The other details are optional:

Salutation
Name
E-mail address*

The mandatory details are required in order to send you the newsletter. The provision of further personal data is voluntary and is used to address you personally.

The sending of the newsletters and the performance measurement associated with them are based on your consent or, if consent is not required, on our legitimate interests in direct marketing or optimisation of our offer.

We use the so-called double opt-in procedure to register for our newsletter. This means that after registration you will receive an e-mail in which you must click on a link to confirm your registration. This confirmation e-mail serves to check whether you, as the owner of the e-mail address, have authorised the receipt of the newsletter.

In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

You have the option to unsubscribe from the newsletter at any time and to revoke the consent you have given. To do this, click on the corresponding button (link) in the newsletter sent to you. You will find this link at the end of each newsletter. Alternatively, you have the option of sending your revocation on this website.

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your registration data will be stored until you unsubscribe from the newsletter, or you have revoked your consent or raised an objection.

2.3 – CONTACTING US

When you contact us (for example, by contact form, email, live chat, telephone or via social media), your contact details and the information you provide for conversation with you will be processed for the purpose of handling your enquiry and processing it.

The following information marked with * is mandatory when using the contact form. The other details are voluntary:

Inquiry*
Salutation*
First name*
Surname*
Company
Address*
Postcode*
City*
Canton
e-mail address*
Telephone

The mandatory information is required to process your request. The voluntary provision of further data facilitates the processing of your enquiry and enables us to provide you with more detailed information.

Your data will be used exclusively for processing the conversation or the enquiry.

The basis for processing contact requests is usually our legitimate interest in processing your request. Our legitimate interest in processing is to communicate with you in a quick way and to respond to your enquiries. Should we process your data for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, this is an additional basis for the processing.

You can object to this data processing at any time. Please send your objection on this website.

As a rule, your personal data will be deleted as soon as the request you have made has been dealt with. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified, no statutory retention periods prevent the deletion and we are not in a contractual or pre-contractual relationship with you.

2.4 – MAKING AN APPOINTMENT

When you make an appointment with us (for example, by online form, e-mail or telephone), the information you provide will be processed for the purpose of handling your appointment request and processing the agreed appointment.

The following information marked with * is mandatory and is collected through the use of the contact form. The other details are voluntary:

Appointment:

Date*
Time*

Vehicle details:

Make*
Model*
Canton (must be changed for other EF countries)
Car registration number
Mileage
Replacement vehicle

Replacement vehicle: (Yes/No)

Your details:

Salutation
First name*
Surname*
Street*
Postcode*
City*
e-mail*
Telephone*
Message

The mandatory information is required in order to make an appointment with you. The voluntary provision of further data facilitates the processing of your request and enables us to provide you with more detailed information.

The basis for processing appointment requests is our legitimate interest in processing your request. Our legitimate interest in processing is to make an appointment with you quickly. Should we process your data for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, this is an additional basis for the processing.

If you make an appointment for a test drive with Emil Frey Automobile AG Bern Eigerplatz, Moosseedorf and Schlieren and with Emil Frey Automobiles SA Renes and Genèva on our website, the data will be passed on to the retailer concerned.

You can object to this data processing at any time. Please send your objection on this website.

Your data will be deleted when it is no longer necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued by the processing.

2.5 – CUSTOMER PORTAL

On our website, you have the option of registering on our customer portal by providing your personal data, for the administration of your data, in particular also the vehicle data and the corresponding documentation, for the arrangement of appointments as well as the determination of your preferences.

If you register with us, the information marked with an * is mandatory. The other details are voluntary:

Existing customers:

E-mail address*
First name
Name
Address

New customers:

E-mail address*
Salutation*
First name*
Surname*
Address*
Postcode*
City*
Country*
Telephone number

The mandatory information is required in order to process your request. The voluntary provision of further data helps us to provide you with more comprehensive support.

In addition, the customer portal processes the following data:

Enquiries regarding warranty, leasing and appointments;
Overview of insurance and leasing information concerning you as well as your appointments (sales and aftersales), completed and current orders with details of services, preferences, brand, article description, order date, delivery date, delivery status, invoice amounts;
quotations, contracts, invoices;
Your last login data with date, day and time are displayed.
The basis for the processing of your personal data is the existence of your consent, which is obtained by means of double opt-in. For the processing of your personal data, your consent is therefore obtained during registration and reference is made to this data protection declaration. If the registration serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, this is an additional basis for the processing of your personal data.

You can change or delete your data at any time. Furthermore, you have the option to cancel your customer account at any time. Please send your objection on this website. If the personal data is required for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

2.6 – PROFILING AND AUTOMATED DECISION-MAKING

We process your personal data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to be able to inform and advise you in a targeted manner about our products and services. In doing so, we use evaluation tools that enable us to provide needs-based communication and advertising, including market and opinion research.

As a matter of principle, we do not use automatic decision-making for the establishment and implementation of the business relationship or in any other way. Should we use such procedures in individual cases, we will inform you of this separately, insofar as this is required by law, and inform you of the associated rights.

2.7 – ONLINE PURCHASE

If you would like to order in our online shop, the information marked with an * is mandatory. The other details are optional:

First name*
Surname*
address*
e-mail address*
Telephone number
Password* (when opening a customer account)

When you purchase a vehicle, we also collect vehicle data (e.g. make, model) and information about how you would like the vehicle delivered.

You can choose whether you want to enter your data required for the order only once for this order or whether you want to create a customer account where your personal data is stored for subsequent purchases.

The customer account contains the following data in particular:

Your above-mentioned customer data;
Overview of your completed and current orders with details of order number, brand, article description, order date, delivery date, delivery status;
Your last login data with date, day and time displayed;
Cost of your order, billing address, delivery address, order history, scheduling and status information, etc.

We process this information in order to process the orders and provide them with other services in this context. The basis for this is the fulfilment of the contract with you.

If you do not create a customer account, we store your data for the purpose of processing the order and generally delete it as soon as we are no longer legally obliged to store it. We are obliged to store your address, payment and order data for a period of at least ten years.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

In the context of order processing, the service providers we use (such as the postal service, logistics providers and payment service providers) receive the necessary data for order and order processing. In this case, the processing of personal and payment data is carried out directly by the provider of the respective payment system. We do not know or store your payment data in this case. In each case, the data protection provisions of the respective provider of the online system also apply. The payment service provider selected by you is responsible for your payment data.

If you wish to terminate your customer account, the associated data will be deleted, subject to legal retention obligations. It is your responsibility to save your data in the event of termination before the end of the contract. We are entitled to irretrievably delete all data stored during the term of the contract.

We do not store credit card information on our website.
If you wish to make a payment, we will redirect you to an external website of a payment system provider, which will store the data relating to your means of payment. The privacy policy of the payment system provider will apply.

2.8 – MARKETING PURPOSES

We also use your personal data on the basis of our legitimate interest for the following purposes:

to maintain our customer relationship with you;
to make your shopping experience customer-friendly and personalised;
to communicate with you about your orders and about specific products or marketing promotions; and
to recommend products or services that may be of interest to you.

The data will be shared with the relevant importer of your vehicle so that they can contact you for the above marketing purposes.

If you do not wish this to happen, you can object to the processing of your data for direct marketing purposes at any time. If you object, we will no longer process your personal data for this purpose. Please send your objection on this website.

2.9 – COMPETITIONS

If you take part in competitions, we collect your personal data which is necessary to carry out the competition. This is usually your name and contact details. We may share your personal data with our competition partners, e.g. to send you the prize.

The data processing and data transfer may vary depending on the competition and is therefore specifically described in the respective conditions of participation. Participation in the competition and the associated data collection is of course voluntary. Detailed information can be found in our conditions of participation for the respective competition.

Your personal data is processed for the purpose of carrying out the competition as well as for the fulfilment of legal obligations and for the protection of our legitimate interests in connection with the competitions and prizes. If you have given us consent to process your personal data, we will process your personal data for the purpose stated in the declaration of consent. You can revoke the consent you have given at any time. Please send your revocation on this website.

Your personal data will be deleted after the competition has ended.

2.10 – DOWNLOADS

We do not require you to provide any personal data for downloading.

2.11 – ONLINE APPLICATIONS

If you apply for a job with us, the data you provide during the application process will be processed in order to check whether we wish to establish an employment relationship with you. The processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via an online form on the website.

The information marked with an * is mandatory and is collected through the use of the online form:

Salutation
Title
First name*
Surname* Street
Street, house no.*
Postcode, town*
Country* Date of birth
Date of birth
e-mail address*
Telephone*
Application documents (cover letter, curriculum vitae, references, certificates, proofs, etc.)*.

The applicant data marked as mandatory fields are required in order to assign the application to you, to contact you regarding your application and to check the chances of success of your application.

This data will only be stored, evaluated, processed or forwarded internally as part of your application. In addition, they may be processed for statistical purposes (e.g. reporting). In this case, no conclusions can be drawn about individual persons.

The basis for processing the application data is our legitimate interest in carrying out the application procedure. Should we process your data for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, this is an additional basis for the processing.

In the event of employment, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the application procedure ends without employment, your data will in principle only be processed until the time of the decision on employment. Thereafter, the data will be deleted immediately 6 months after the rejection has been sent or the application documents have been returned to the applicant. Your data will only be stored in an applicant pool if you expressly give us permission to do so.

Notwithstanding the above, you have the option to object to the data processing and have your electronic data deleted at any time. Please send your objection on this website or to the e-mail address indicated in the job advertisement.

2.12 – FINANCING REQUEST

If you are interested in a vehicle, you have the option of submitting a financing request.

We collect the following data for this purpose:

Calculation of the leasing rate:

Term of the lease
Kilometres per year
Amount of the down payment

Your details:

Salutation
First names*
Surname*
Street*
Postcode*
City*
e-mail*
Phone
Message

The data processed for financing enquiries are processed exclusively for this purpose.

If you submit a financing request on our website to Emil Frey Automobile AG Bern Eigerplatz, Moosseedorf and Schlieren and to Emil Frey Automobiles SA Renes and Genèva, the data will be passed on to the retailer concerned.

The data is deleted or made anonymous as soon as it is no longer required to achieve the purpose for which it was collected. For the data from the financing enquiry, this is the case when the enquiry has been fully answered and no other legally recognised legal basis (in particular statutory retention or archiving obligations) permits further processing.

2.13 – VEHICLE VALUATION

We process your data so that we can value a vehicle on request and arrange an appointment with you for a vehicle valuation.

The following information marked with * is mandatory for an immediate valuation. The other details are optional:

Appointment:

Date*
Time*
Preferred Garage*

Vehicle details:

Chassis number*
Date of placing on the market*
Mileage*

Your details:

Salutation
First name*
Last name*
e-mail address*
Telephone*
Vehicle registration document

The following details marked with * are mandatory fields for a free valuation enquiry. The other details are voluntary:

Vehicle details:

Make*
Model*
Engine
Mileage*
First registration*

Your details:

Salutation
First name*
Surname*
Place*
e-mail*
Telephone*

The mandatory information is required in order to carry out an appropriate vehicle valuation. Voluntarily providing additional information will make it easier for us to process your request and provide you with more accurate information.

If you upload a picture of the vehicle registration document in the case of an instant valuation, the picture will be disclosed to a service provider who will recognise the date of placing on the market and the chassis number from the vehicle registration document. This makes it possible for the date of placing on the market and the chassis number to be automatically inserted into the mandatory fields.

The basis for processing the vehicle valuation is our legitimate interest in processing your request. Our legitimate interest in processing is to carry out a vehicle assessment with you in a quick way. Should we process your data for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, this is an additional basis for the processing.

You can object to this data processing at any time. Please send your objection on this website.

Your data will be deleted when it is no longer necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing.

2.14 – PROVISION OF CONTRACTUAL SERVICES

We will also process your data to the extent necessary in each case to fulfil our contractual and pre-contractual obligations and to carry out other services requested by you (e.g. a repair order or an order for a tyre change). In addition, we will use your data to ask you about your satisfaction with the contractually provided service.

The data processed in this way, the type, scope and purpose of the processing required in each case are therefore determined by the contract agreed with you or the service you have requested.

The processed data includes in particular the master data (e.g. name, address, etc.), the contact data (e.g. e-mail address, telephone number, etc.) the contract data (e.g. services used, subject of the contract, contractual communication, names of contact persons) and the payment data (e.g. bank details, payment history, etc.).

The deletion of the data takes place when the data is no longer required for the fulfilment of contractual or legal duties of care and for dealing with any warranty and comparable obligations.

3 – Cookies

Our website uses cookies. Cookies are text files that are placed and stored on your terminal device. We use cookies to automatically recognise you the next time you visit our website. Cookies are used to make our website more user-friendly, effective and secure and to make your visit to our website as pleasant as possible. Furthermore, certain cookies are used to analyse the use of our website.

Temporary cookies

We use temporary cookies. These are automatically deleted when you log out or close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the web session. This means that your computer can be recognised when you return to the website.

Persistent cookies

In addition, we use persistent cookies, which are placed on your computer beyond the respective usage process. When you visit us again, it is then automatically recognised that you have already been to our website and which entries and settings you prefer. These cookies are stored on your hard drive and delete themselves after the specified time. Thanks to these files, it is possible, for example, for you to receive information on the site that is specifically tailored to your interests.

Non-personal cookies

Non-personal cookies do not transmit any personal data to us. For example, statistics cookies. They help us understand how visitors interact with the website by collecting and reporting information anonymously.

Preference cookies

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.

Security cookies

We use security cookies to help us identify and prevent security risks. For example, we may use these cookies to store information about your web session. This allows us to prevent others from changing your password without your username and password.

Performance cookies

We use performance cookies to collect information about how you use our Services. This helps us to improve our services. For example, we may use these cookies to determine whether you have accessed a particular page.

Third-party cookies

Furthermore, we make use of functions of some web analysis services that help us to make our internet offer and the website more interesting for you. Therefore, cookies from partner companies are also stored on your hard drive when you visit our website. For more information on the use of third-party cookies, please refer to section 13 "Analysis tools".

The basis on which we process your personal data using cookies depends on whether we ask you for consent. If we ask you for consent and you consent to the use of cookies, the basis of the processing of your personal data is your consent. If we do not obtain your consent, we will process the personal data processed using cookies on the basis of our legitimate interests (e.g. in the business operation of our online service and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations, on the basis of that contract.

Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent given or to object to the processing of your personal data by cookies. You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies. However, this may also restrict the functionality of our online offer.

You can find out about this option for the most commonly used browsers via the following links:

4 – Analysis tools

On our website and apps, we use various website analytics and tracking services, which we explain in more detail below. Where we ask for your consent to use the third party providers, the legal basis for this form of data processing is consent. If we do not obtain your consent, your personal data will be processed on the basis of our legitimate interests, i.e. our interest in providing efficient, economic and recipient-friendly services.

4.1 – GOOGLE ANALYSIS TOOLS

We use the following Google analytics tools on our website.

Insofar as personal data is processed in the USA, we would like to point out that Google is certified under the Swiss-U.S. and EU-U.S. Privacy Shield agreements and thus offers a guarantee of compliance with Swiss and European data protection law respectively (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google (Universal) Analytics

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you are a resident of the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use Google Analytics in the form of "Universal Analytics". Universal Analytics allows us to analyse the activities on our pages across devices (e.g. access via laptop and later via tablet). This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across devices.

Google uses cookies. The information generated by the cookie about your use of our website (including your IP address) may be transmitted to and stored by Google on servers in the United States.

Google uses this information to evaluate the use of our website, to compile reports on website activity and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Your personal data will be deleted or anonymised after 26 months.

We only use Google Analytics with IP anonymisation activated. This means that your IP address is shortened by Google within Switzerland or the EU/EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the collection and processing of data by Google by downloading and installing the browser plug-in available at the following link https://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. In order to prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used. Further information on Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376.

Further information on the terms of use and data protection of Google Analytics can be found at https://marketingplatform.google.com/about/analytics/terms/de/.

Google marketing and remarketing services

We use marketing and remarketing services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you are a habitual resident of the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present you only with ads that potentially match your interests. For these purposes, when you access our website and other websites on which Google marketing services are active, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons" or "pixels") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on your device (comparable technologies can also be used instead of cookies). This file records which web pages you have visited, which content you are interested in and which offers you have clicked on, as well as technical information on the browser and operating system, referring web pages, time of visit and other information on the use of our offers.

Your IP address is recorded, whereby your IP address is shortened within Switzerland or the EU/EEA and only in exceptional cases is transmitted in full to a Google server in the USA and shortened there.

Your other data will be processed pseudonymously within the scope of Google marketing services. This means that Google does not store and process your name or email address, for example, but processes the relevant data in a cookie-related manner within pseudonymous user profiles; from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if you have expressly allowed Google to process the data without this pseudonymisation.

You can generally object to interest-based advertising by Google. To do so, call up the link via your browser: https://adssettings.google.de and make the desired settings there.

Conversion tracking for Adwords

The Google marketing services we use include the online advertising programme Google Ads (formerly Google AdWords). In the case of Google Ads, each Ads customer receives a conversion cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information obtained with the help of the cookie is used to create conversion statistics for us. However, in doing so, we only learn the total number of users who clicked on our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which you can be personally identified. For more information about Google Ads, please visit https://ads.google.com/intl/de_ch/home/.

Google Marketing Platform

Another Google marketing service we use is Google Marketing Platform (formerly Google DoubleClick). Google Marketing Platform uses cookies to enable Google and its partner websites to serve ads based on your visits to our website or other websites on the Internet. For more information about Google Marketing Platform, please visit https://marketingplatform.google.com/about/enterprise/.

Google Tag Manager

We also use Google Tag Manager to integrate and manage Google analysis and marketing services on our website. Google Tag Manager is a solution with which we can manage so-called website tags via an interface. The Tag Manager itself, which implements the tags, does not process any personal data of the users.

You can find more information about the Google Tag Manager at: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Optimize

We also use the Google marketing service Google Optimize. Google Optimize allows us to track the effects of various changes to a website (e.g. changes to the input fields, design, etc.) as part of so-called "A/B testing". For these testing purposes, cookies are placed on your devices. Only pseudonymous data about you will be processed.

For more information on Google Optimize, please visit: https://optimize.google.com/optimize/home/.

Google Data Studio

We also use the Google Data Studio. Google Data Studio enables the aggregation and visualisation of different data in connection with other Google services or via external data sources. This service is used in particular for statistical evaluations, forecasts and as a basis for strategic decisions. All data processed by us with Google Data Studio is of a purely statistical nature. No personal data is processed, nor is anonymised or pseudonymised data merged with personal data.

4.2 – FACEBOOK PIXEL, CUSTOM AUDIENCES AND FACEBOOK CONVERSION

We use the so-called "Facebook pixel" of Meta Platforms Inc., 1601 Willow Avenue, Menlo Park, CA 94025, USA, or if you have your habitual residence in the European Union (EU), the European Economic Area (EEA) or Switzerland, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offers as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Furthermore, when using the Facebook Pixel, we use the additional function "extended matching" (data such as telephone numbers, e-mail addresses or Facebook IDs of users) to create target groups ("Custom Audiences" or "Look Alike Audiences") which are transmitted to Facebook (encrypted). Further information on "advanced matching": https://de-de.facebook.com/business/help/611774685654668.

We also use the "Custom Audiences from File" procedure. Here, the email addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload is used solely to determine recipients of our Facebook ads. In this way, we want to ensure that the ads are only displayed to users who are interested in our information and services.

Data processing by Facebook takes place within the framework of Facebook's data policy. Accordingly, you will find general information on the display of Facebook ads, in Facebook's data policy: https://www.facebook.com/policy.php.

You can object to the collection by the Facebook pixel and the use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can also object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the network advertising initiative http://optout.networkadvertising.org/ and additionally the US website http://www.aboutads.info/choices/ or the European website http://www.youronlinechoices.com/de/praferenzmanagement/.

Insofar as personal data is processed in the USA, we would like to point out that Facebook has included data protection in its Standard Contractual Clauses (SCC) and thus complies with the requirements of the EU (DSGVO) as well as Switzerland (DSG).

4.3 – HOTJAR

We use Hotjar, a web analytics service Hotjar provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Hotjar helps us to better understand the needs of our users and to optimise the offer on our website. With the help of Hotjar's technology, movements on the website can be tracked (so-called "heat maps"). Hotjar provides us with information about where the mouse goes, which buttons are clicked, where people scroll to, the size of the screen of the device used, the type of device used and information about the type of browser. We also receive information about your location (country only) and the preferred language for displaying our website. This valuable information allows us to make our website even faster and more customer-friendly. Hotjar stores this information in a pseudonymised user profile. The information is neither used by Hotjar nor by us to identify individual users nor is it combined with other data about individual users. Areas of the website in which personal data of you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable by the tool at any time. The above analysis is carried out on the basis of our legitimate interests for optimisation and marketing purposes and the interest-oriented design of our website.

You can object to the data processing at any time. Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool so that no data about the visit to the respective website is recorded. You can find the opt-out option at: https://www.hotjar.com/legal/compliance/opt-out.

5 – Other services

As part of our website and for the provision of our services, we use other services which we explain in more detail below. Where we ask for your consent to use the third party service providers, the legal basis for this form of data processing is consent. If we do not obtain your consent, we process your personal data on the basis of our legitimate interests, i.e. interest in efficient, economical and recipient-friendly services.

5.1 – GETTY IMAGES

We use components of the stock photo agency Getty Images, which offers images and other visual material. These components are a service of Getty Images Inc, 605 5th Avenue South, Suite 400, Seattle, Washington 98104, USA, or, if you have your habitual residence in the European Union (EU), the European Economic Area (EEA) or Switzerland, Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland. Images embedded in this way can be recognised by the "Getty Images" note in the frame of the embedded image. Further information on this can be found at: https://www.gettyimages.de/resources/embed

A prerequisite for this display of images from the Getty Images stock photo archive on our website is that your IP address is transmitted to Getty Images. To our knowledge, the IP address is currently only used for the integration of the images on our website. Should Getty Images store or even evaluate the collected IP address for other purposes, we have no influence on this.

Getty Images is certified under the Swiss-U.S. and EU-.US. Privacy-Shield-Agreement and thereby offers a guarantee to comply with Swiss and European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNchAAG&status=Active).

For further information on the purpose and scope of data collection, please refer to the Getty Images privacy policy at: https://www.gettyimages.de/company/privacy-policy.

5.2 – CAMPAIGN MONITOR

We use the service provider "Campaign Monitor" to send the newsletter. The provider is Campaign Monitor Pty Ltd, 404/3-5 Stapleton Avenue, Sutherland NSW 2232, Sydney, Australia. Camaign Monitor is a service that organises and analyses newsletter distribution. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is transmitted to and stored on Camaign Monitor's servers in the USA and, where applicable, Germany and Australia.

Campaign Monitor uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is therefore excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

Campaign Monitor offers extensive analysis options. For example, it is recorded whether the newsletter was opened and which links were clicked on in the mails. However, the analyses of newsletter usage are always carried out on a group basis, i.e. no analyses are carried out on the individual newsletter recipient.

Furthermore, Campaign Monitor may use this data itself on the basis of its own legitimate interest in pseudonymous form, i.e. without attribution to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletters or for statistical purposes to determine which countries the recipients come from. However, Campaign Monitor does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

If you wish to object to data analysis for statistical purposes, you must unsubscribe from the newsletter.

We have concluded an order processing agreement with Campaign Monitor, in which we oblige Campaign Monitor to protect the personal data of our customers and not to pass it on to third parties.

The personal data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Campaign Monitor after you unsubscribe from the newsletter.

You can view the privacy policy here http://www.campaignmonitor.com/privacy/.

5.3 – FACEBOOK CONNECT

We use "Facebook Connect", a service provided by Meta Platforms Inc, 1601 Willow Avenue, Menlo Park, CA 94025, USA, or if you are a habitual resident of the European Union (EU), the European Economic Area (EEA) or Switzerland, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook Connect makes it easy to register for services on the internet. Instead of using a registration mask on our website, you can enter your login data for Facebook and then use our offers. By using "Facebook Connect", your browser automatically establishes a direct connection with the Facebook server. To register, you will be redirected to the Facebook page. There you can log in with your user data. This links your user account with Facebook to our service. We have no influence on the scope and further use of data collected by Facebook through the use of Facebook Connect. As far as we are aware, Facebook receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook will learn and store your IP address and possibly other identifying features.

We use Facebook Connect to facilitate and shorten the registration and login process for you. This is also our legitimate interest in the processing of the above data by the third-party provider. You can prevent Facebook from processing the above information by using our registration form and not using Facebook Connect.

Facebook is certified under the Swiss-U.S. and EU-.US. Privacy Shield agreements and thus offers a guarantee of compliance with Swiss and European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC).

Further information on Facebook's data processing and data protection can be found at: https://www.facebook.com/policy.php.

5.4 – GOOGLE MAPS

On our website, we use the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a resident of the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purpose of tailoring services, advertising and market research. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this, you must log out beforehand. If you do not agree to the processing of your data, you have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use Google Maps or only to a limited extent.

Insofar as personal data is processed in the USA, we would like to point out that Google is certified under the Swiss-U.S. and EU-U.S. Privacy Shield agreements and thereby offers a guarantee of compliance with Swiss and European data protection law respectively (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data processing and data protection by Google Maps can be found at: http://www.google.com/intl/de_de/help/terms_maps.html and https://policies.google.com/privacy.

5.5 – YOUTUBE

We use the provider YouTube for the integration of videos. YouTube is a service of YouTube LLC ("YouTube"), 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your habitual residence in the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

Further information on YouTube's data processing and data protection can be found at: https://www.youtube.com/t/terms and https://policies.google.com/privacy.

5.6 – GOOGLE RECAPTCHA

We use the reCAPTCHA function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your habitual residence in the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The purpose of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is made by a human being or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The reCAPTCHA analyses run entirely in the background. Website visitors are not made aware that an analysis is taking place.

The service also includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out on the basis of our legitimate interest in determining the individual intent of actions on the Internet and the prevention of misuse and spam.

Insofar as personal data is processed in the USA, we would like to point out that Google is certified under the Swiss-U.S. and EU-U.S. Privacy Shield agreements and thereby offers a guarantee of compliance with Swiss and European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy.

5.7 – JQUERY

We use the JavaScript library "jQuery" for our website. To increase the loading speed of our website, we use Google's CDN (Content Delivery Network) to load this library. It is very likely that you have already downloaded jQuery from the Google CDN by visiting another website. In that case, your browser can access the cached copy. If your browser does not have a cached copy or if you download the file from the Google CDN for some other reason, your IP address will be transmitted to Google during the connection to the Google server. If you are logged in to Google with an existing user account while visiting our website, Google may also be able to associate your visit to our website with your user behaviour. In addition, further cookies may be sent to your browser by Google. We have no influence on this procedure and do not receive any information from Google about the transmitted content.

Insofar as personal data is processed in the USA, we would like to point out that Google is certified under the Swiss-U.S. and EU-U.S. Privacy Shield Agreements and thus offers a guarantee of compliance with Swiss and European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

For more information on jQuery and Google's privacy policy, please visit: https://jquery.com/ and https://policies.google.com/privacy.

5.9 – REPUTATION.COM

We use the technologies of Reputation.com Inc, 1400A Seaport Blvd, Suite 401, Redwood City, CA 94063, USA ("Reputation.com").

Reputation.com collects and evaluates data from third-party sources and third-party platforms (such as online review sites, social media sites and other sites on the Internet) on our behalf. This provides us with extensive insights into our company's online presence. We use this information to improve customer service and the customer experience.

Reputation.com is certified under the Swiss-U.S. and EU-U.S. Privacy Shield agreements, thereby providing a guarantee of compliance with Swiss and European data protection law respectively(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data protection at Reputation.com can be found at: https://www.reputation.com/de/privacy-policy/.

5.10 – PAYMENT SERVICES AND PAYMENT METHODS

All common means of payment can be processed via the interface of the Saferpay e-payment platform. The provider of Saferpay is SIX Payment Services, which is headquartered in Zurich. Saferpay complies with the current security standards, in particular the Payment Card Industry Data Security Standard (PCI DSS).

Further information can be found in the data protection declaration of SIX Payment Services at: https://www.six-payment-services.com/de/services/legal/privacy-statement.html.

5.11 – CHAT SERVICE & WHATSAPP MESSENGER

On our websites we use LiveChat (www.livechat.com) from LiveChat Inc, 1 Int. Place 1400, Boston, MA 02110, USA. This service allows us to have a face-to-face conversation with you in the form of a real-time chat while you are visiting our website. LiveChat uses cookies to store information about you, the conversation you are having and your use of LiveChat. This information is usually transferred to a LiveChat server in the USA and stored there. LiveChat uses this data to enable your real-time chat with us.

LiveChat is certified under the "Privacy Shield" data protection agreement and undertakes to comply with the data protection requirements of the EU. According to the EU, the US has adequate laws to protect personal data. Further information on this so-called "Adequacy Decision" can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de. In addition, we have concluded an order data processing agreement with LiveChat, which obliges LiveChat to protect the data of our users and not to pass it on to third parties. You can view LiveChat's privacy policy at https://www.livechatinc.com/legal/privacy-policy/.

By clicking the chat button on our websites, you start the real-time chat and thereby also consent to the processing of your personal data by LiveChat as well as the transmission of all entries to the USA. You can ask us for the data stored by LiveChat and have it deleted.

By sending a start message, I agree to the validity of the internal data protection regulations of Emil Frey AG.
In particular, in accordance with Art. 6 Para. 1 lit. a DSGVO, I consent to my personal data (surname and first name, telephone number, messenger ID, IP address, profile picture and message history) being stored, processed and used within the framework of the use of the respective messenger in order to transmit messages to me. An active account with the respective provider is required to use the messenger service.
I am also aware that Emil Frey AG uses MessengerPeople GmbH, Seidlstraße 8, 80335 Munich as a technical service provider and order processor to provide this service.
My consent to the processing of personal data can always be freely revoked; a corresponding notification to info@emilfrey.ch is sufficient for this purpose. Further information can be found in the respective data protection policies of Emil Frey AG the Messenger Services and MessengerPeople GmbH.

5.12 - MAUTIC

We use Mautic (www.mautic.org) on this website. This is an analysis and tracking software for the allocation and storage of usage data (including browser used, last page visited, length of stay). The software uses this information to individualise our marketing measures and better align them with the interests of each individual user. The software also helps us to better evaluate the success of individual marketing measures.

Mautic operates so-called email marketing, whereby personalised emails are sent to you. These are partly based on your usage behaviour when visiting our website, reading our emails and interacting with the links contained therein. Furthermore, emails are also sent as part of campaigns. Mautic also collects information from you when you click on landing pages. Landing pages are special web pages that have been defined as the target of advertising campaigns. They usually contain interaction options, e.g. to download white papers or checklists. For the assignment of individual activities to anonymous profiles, the software also uses various technical procedures such as tracking pixels (to recognise whether, for example, an email has been opened) and personalised links (to recognise whether, for example, a user calls up a link from an email). In addition, the anonymous profile software also uses cookies and the currently used IP address to recognise users of the website.

For these activities, data such as the number of page views and dwell time of the website visitor, the click path of the respective visitor, downloads of files provided via the website, visits to landing pages, activity on our website and openings of emails from newsletters and campaigns are used in particular. In the course of registering on the website or downloading a whitepaper, the provider collects contact data (such as company, name, postal or e-mail address, telephone or fax number), business contact data (such as your job title, the name of your business, business e-mail address, telephone or fax number), the IP address of the terminal from which the use of the website takes place (a sequence of digits that identifies your current computer connection on the Internet) through the use of "Mautic".

6 – Social Media Plugins

We currently use the following social media plugins (plugins): Facebook, Twitter, Instagram, YouTube and LinkedIn.

You can recognise the provider of the plugin by the marking on the box above its initial letter or logo. The integration of the plugins only takes place via a link. When you visit our website, no data is therefore automatically transmitted to the listed plug-in providers. Only when you yourself actively click on one of the plug-ins listed on the website is a connection established between your browser and the server of the social network concerned and data transmitted to the respective provider. We have no influence on the type and scope of the data that is then collected by the social networks.

We would like to point out that you use our social media pages and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). We would also like to point out that the data collected about you in this context will be processed by the respective social networks and, if necessary, transmitted to countries outside Switzerland or the EU/EEA. Please refer to the data protection declarations of the respective networks to find out what information the social networks receive and how it is used. There you will also find information on contact options as well as on the settings options for protecting your privacy. You can view the data protection declarations here:

https://www.facebook.com/polic...; The controller of personal data is, Meta Platforms Inc, 1601 S California Ave, Palo Alto, California 94304, USA, or if you are habitually resident in the European Union (EU), the European Economic Area (EEA) or Switzerland, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook is certified under the Swiss-US and EU-US Privacy Shield Agreements, https://www.privacyshield.gov/....
https://twitter.com/de/privacy; The controller of personal data is Twitter Inc,1355 Market Street, Suite 900, San Francisco, CA 94103, USA or if you are habitually resident in the European Union (EU), the European Economic Area (EEA) or Switzerland, Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland.
Twitter is certified under the Swiss-US and EU-US Privacy Shield Agreements, https://www.privacyshield.gov/....
https://instagram.com/about/le...; Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.
https://policies.google.com/pr...; The controller of personal data is GoogleLLC / YouTube LLC, 1600 Amphitheatre Parkway, Moun-tain View, CA 94043, USA, or if you are habitually resident in the European Union (EU), the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google is certified under the Swiss-US and EU-US Privacy Shield agreements, https://www.privacyshield.gov/....
https://www.linkedin.com/legal...;The controller of personal data is, LinkedIn Corporation, 2029 Stierlin Ct, Mountain View, CA 94043, USA, or if you are habitually resident in the European Union (EU), the European Economic Area (EEA) or Switzerland, LinkedIn Ireland, Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn is certified under the Swiss-US and EU-US Privacy Shield Agreements, https://www.privacyshield.gov/....

7 – Relevant legal basis

We regularly use the following as the legal basis for processing your personal data:

Your consent, which you can revoke at any time (e.g. for receiving our newsletter or registering for a customer account);
the conclusion or fulfilment of a contract with you or your enquiry in advance of this (preliminary contract) (for example, by ordering products or services from us or submitting a job application);
the protection of our legitimate interests on our part (for example, if your professional contact details are collected when you place an order/contact us on behalf of your employer);
a legal obligation (such as for us to keep records);
vital interests, where applicable.

8 – Storage period

Unless expressly stated within the scope of this data protection declaration, we process and store your personal data only for as long as is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e. e.g. for the duration of the entire business relationship (from the initiation, processing to the termination of a contract and the warranty period as well as a subsequent support phase) as well as beyond this in accordance with the statutory retention and documentation periods. It is also possible that personal data will be retained for the time during which claims can be asserted against us and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes).

As soon as your personal data is no longer required for the above-mentioned purposes or a prescribed retention period expires, your personal data will be deleted or blocked as a matter of principle and as far as possible.

9 – Data security

We take technical, contractual and organisational measures to ensure the security of data processing in accordance with the state of the art. In this way, we ensure that the provisions of the data protection laws are complied with and that the personal data processed by us is protected against manipulation, loss, destruction or access by unauthorised persons. These security measures include, among other things, the use of recognised encryption procedures (e.g. encryption using SSL/TLS). Our security measures are continuously improved in line with technological developments.

We also take our own internal data protection seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of data protection law. Moreover, they are only granted access to your personal data to the extent necessary.

10 – Transfers to third countries

If the level of data protection in a country in which the data is processed does not comply with the applicable data protection regulations, we will contractually ensure that the protection of your data corresponds to that in Switzerland or the European Union (EU)/European Economic Area (EEA) at all times.

11 – Minors

Our website and our services are aimed at an adult audience. Minors, in particular children under the age of 16, are prohibited from transmitting personal data to us or registering for a service without the consent of their parents or legal guardians. If we discover that such data has been transmitted to us, it will be deleted immediately. The parents (or legal guardian) of the child can contact us and request deletion or deregistration.

12 – Links to other websites

Our website may contain links to other websites which are not operated by us and to which this data protection declaration does not apply. After clicking on the link, we no longer have any influence on the processing of any data transmitted to third parties (such as the IP address), as the behaviour of third parties is naturally beyond our control. Therefore, we cannot assume any liability for these third-party contents. The respective provider or operator of the pages is always responsible for the content of the linked pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, a permanent control of the contents and examination of the linked pages without concrete indications of a violation of the law is not reasonable. Such links will be removed immediately if infringements become known.

13 – Your rights as data subjects

Right to information

You have the right to request information from us as to whether and, if so, which of your personal data we process.

Right to rectification

You have the right to request the rectification of your inaccurate personal data and, if necessary, the completion of incomplete personal data in our systems.

Right to erasure

You have the right to request that your personal data is deleted, for example, if the data is no longer needed for the purposes pursued. However, if we are obliged or entitled to retain your personal data nevertheless due to legal or contractual obligations, in these cases we may therefore restrict or block your personal data only to the extent necessary.

Right to restriction of processing

Under certain conditions, you have the right to request that we restrict the processing of your personal data.

Right to data portability

Where applicable, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party. If you request the direct transfer of personal data to another responsible party, this will only be done insofar as this is technically feasible.

Right to object

You have the right to object to the processing of your personal data at any time in accordance with the legal requirements. In particular, you have the right to object to the processing of your personal data for the purpose of direct marketing.

Revocation of consent

You have the right to revoke your consent to the processing of your personal data at any time, in principle with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of appeal

Depending on the applicable data protection legislation, you may have the right to lodge a complaint with the data protection authority responsible for you.

Please note that exceptions and limitations apply to these rights. In particular, we may need to process and store your personal data to fulfil a contract with you, to comply with legal obligations, or to protect our own legitimate interests. To the extent permitted by law, we may therefore also refuse your data protection-related requests or only comply with them to a limited extent.

If you have any questions in connection with our data protection practices or if you wish to obtain information about your rights or to exercise them, please contact us using the contact details provided in section 1 of this privacy policy. If necessary, we reserve the right to request your identification in an appropriate manner for the processing of requests.

14 – Changes to the privacy policy

We expressly reserve the right to modify and amend this Privacy Policy at any time and at our sole discretion.