House of Läderach Website Privacy Policy

Last modified: January, 2024

General information

The following information provides a simple overview of what happens to your personal data when you visit this website or come to us via one of our social media channels (see chapter ‘Our social media presences‘).

Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

As Läderach (Schweiz) AG, we are generally guided by the EU GDPR, the revised Swiss Data Protection Act and, as far as possible, by national data protection regulations (BDSG, TTDSG, CINIL recommendations) in order to guarantee our customers the greatest possible transparency and security.

Data collection on this website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section “Note on the responsible party” in this data protection declaration.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This can be, for example, Data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time and free of charge to obtain information about the origin, recipient and purpose of your

stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time.

Analysis tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. This is done primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

1. Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting is provided for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) (f) GDPR).

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our hoster(s) will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

We use the following host(s):

DigitalOcean, LLC.
101 Avenue of the Americas
10th Floor
New York
USA – NY 10013

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

2. General Information and Mandatory Information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected.

Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. It is not possible to completely protect data from access by third parties.

Note on the responsible party

The party responsible for processing data on this website is:

Läderach (Schweiz) AG
Bleiche 14
CH-8755 Ennenda

Phone: +41 55 645 44 55
Email: houseofladerach@laderach.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Storage period

Unless a more specific storage period has been specified within this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion takes place after these reasons cease to apply.

General information on the legal basis of data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, provided that special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information in your device (e.g. via device fingerprinting), the data processing is also carried out on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is required for the fulfilment of the contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data, insofar as it is necessary to fulfill a legal obligation, on the basis of Art. 6 para. 1 lit. c GDPR.

Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this data protection declaration.

Data protection supervisor

We have appointed a data protection officer.

Dipl.-Ing. Lars Ebertz on behalf of L-E-C.COM GmbH
Lubergstrasse 2
35756 Mittenaar
Germany

E-mail: lars.ebertz@laderach.com

Note on data transfer to third countries that are not secure in terms of data protection law as well as transfer to US companies that are not DPF-certified

Among other things, we use tools from companies based in third countries that are not secure in terms of data protection law as well as US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that in third countries that are insecure in terms of data protection, it is not possible to guarantee a level of data protection comparable to that of the EU.

We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. According to this, data transfer to the USA is permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has suitable additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of personal data

As part of our business activities, we work together with various external bodies. In some cases, it is also necessary to transmit personal data to these external bodies. We only pass on personal data to external bodies if this is necessary in the context of fulfilling a contract, if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 para. 1 lit. f GDPR or if another legal basis permits the disclosure. When using

We only pass on personal data of our customers to processors on the basis of a valid contract for order processing. In the case of joint processing, a joint processing contract is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Article 21 of the GDPR)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, OPPOSE THE PROCESSING OF YOUR PERSONAL DATA TO OBJECT; THIS SHALL ALSO APPLY TO A CONTRACT BASED ON THESE PROVISIONS.

PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED, PLEASE REFER TO THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, IF WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, IT UNLESS WE CAN HAVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING EVIDENCE THAT OUTWEIGHS YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, THUS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNED FOR THE PURPOSE OF SUCH ADVERTISING TO PICKLE; THIS APPLIES TO PROFILING TO THE EXTENT THAT IT IS CONNECTED TO SUCH DIRECT MARKETING IN CONNECTION IS ESTABLISHED. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right to free of charge at any time. Information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time. The right to restriction of processing consists of:

In the following cases:

If you dispute the accuracy of your personal data stored by us, we need usually time to check. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you use it for the purpose of exercising it,
If you wish to defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, this data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

This site uses for security reasons and to protect the transmission of confidential content, such as for example, orders or inquiries that you send to us as the site operator, an SSL or TLS Encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after the conclusion of a fee-based contract, there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization), this data will be required for payment processing.

Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.

3. Data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small data packets and are aimed at

does not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies).

Cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for processing payment services).

Cookies have different functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent has been given to the storage of cookies and comparable recognition technologies, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in our Cookie Policy.

Consent with Cookie Information

Our website uses Cookie Information’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Cookie Information, Købmagergade 19, 1150 Copenhagen, Denmark (hereinafter referred to as “Cookie Information”).

When you enter our website, a connection is established to Cookie Information’s servers in order to obtain your consent and other declarations regarding the use of cookies. Subsequently, Cookie Information stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way will be stored until you request us to delete it, delete the Cookie Information cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Cookie Information is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) (c) GDPR.

Order processing

We have concluded an order processing contract (OPC) with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data will not be merged with other data sources.

This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.

Akamai

To speed up our websites, we use Akamai’s Content Delivery Network (CDN) Technologies Inc., 150 Broadway, Cambridge, MA 02142, USA, (Akamai). A CDN is a service that helps contents of our online offer, in particular large media files, such as graphics or scripts with the help of regional distributed and internet-connected server, can be delivered faster. The processing of your data is carried out solely for the aforementioned purposes and to maintain the security and functionality of the CDN.

Akamai transfers personal data from the log files (e.g. IP addresses) to the USA during each data processing, since certain servers for processing the log files are only located in the USA. As a result, Akamai has decided to obliged to comply with the standards and regulations of European data protection law.

For more information about Akamai’s privacy practices, please see https://www.akamai.com/legal.

Akamai stores data for up to 24 hours so that content can be delivered more quickly when you visit our website.

Akamai cookies are classified as strictly necessary cookies.

Contact

If you send us enquiries via the contact form, your details from the enquiry form including the contact details you provided there for the purpose of processing the enquiry and stored with us in case of follow-up questions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is linked to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry, including all personal data resulting from it (name, enquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

4. Analysis Tools and Advertising

Google DoubleClick

This website uses functions of Google DoubleClick. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter “DoubleClick”).

DoubleClick is used to show you interest-based advertisements throughout the Google advertising network. With the help of DoubleClick, the advertisements can be tailored to the interests of the respective viewer. For example, our advertisements may be displayed in Google search results or in banner ads associated with DoubleClick.

In order to be able to display interest-based advertising to users, DoubleClick must be able to recognize the respective viewer. For this purpose, a cookie is stored in the user’s browser, behind which the websites visited by the user, clicks and various other information are stored. This information is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned.

The use of Google DoubleClick is in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

You can set your browser so that it no longer stores cookies. However, this may be associated with a restriction of the accessible website functions. In addition, it should be noted that DoubleClick may also use other technologies to create user profiles. Therefore, disabling cookies does not guarantee that user profiles will no longer be created.

For more information on how to object to the advertisements displayed by Google, please refer to the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool with the help of which we can use tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create User profiles, does not store cookies and does not carry out any independent analyses. It is only used for the purpose of administration and playout of the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of Google Tag Manager is based on Article 6 (1) (f) GDPR. The Website operator has a legitimate interest in a quick and uncomplicated integration and administration of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified according to the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link:

https://www.dataprivacyframework.gov/s/participant-search/participant detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective device of the website visitor.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

https://www.dataprivacyframework.gov/s/participant-search/participant detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be processed by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area shortened before transfer to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics in order to be able to display suitable advertisements to website visitors within the Google advertising network. As a result, reports can be created that make statements about the age, gender and interests of the page visitors included. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Order processing

We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Ads

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g. location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.

The use of Google Ads is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.

Google Remarketing

This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user patterns on our website (e.g. clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).

Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC).

If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.

The use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website operator has a legitimate interest in the marketing of the operator’s products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.

For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

Google Conversion-Tracking

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assistance of Google Conversion Tracking we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.

We use Google Conversion Tracking on the basis of Art. 6 Sect. 1 lit. et seq. GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.

For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com).

Hotjar is a tool for analysing your user behaviour on this website. With Hotjar we can, among other things: Record your mouse and scroll movements and clicks. Hotjar can also determine how long you have stayed with the mouse pointer at a certain point. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are preferred by the website visitor.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you have cancelled your entries in a contact form (so-called conversion funnels).

In addition, Hotjar can be used to obtain direct feedback from website visitors. These function serves to improve the website operator’s web offerings.

Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting).

If consent has been obtained, the use of above-mentioned service is exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. The consent can be revoked at any time. If no consent has been obtained, this service is used on the basis of Art. 6 (1) (f) GDPR; the website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Disabling Hotjar

If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/policies/do-not-track/.

Please note that the deactivation of Hotjar must be done separately for each browser or device. For more information about Hotjar and the data collected, please refer to Hotjar’s privacy policy at the following link: https://www.hotjar.com/privacy

Order processing

5. Plugins and tools

Laderach.com

This website uses a direct link to laderach.com. Laderach.com is operated by the umbrella organisation Läderach (Schweiz) AG, which is also responsible for the House of Läderach. When you click on the shop link to laderach.com, you leave the House of Läderach website. Corresponding information and data protection declarations can be found at https://laderach.com/ch-en/privacy-policy.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

We work with dotdigital EMEA Ltd, 1 London Bridge, London, SE1 9BG as our newsletter service provider. Further information on the handling of the transferred data can be found in dotdigital’s privacy policy: Privacy Policy | Dotdigital.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

dotdigital

When emails are sent from the dotdigital platform, recipients will notice the tracking domains associated with it, such as dmtrk.net (which tracks link clicks). Naturally, your recipients will want to verify the legitimacy of these domains if they’ve never seen them before. If an email recipient sees one of the following tracking domains, they can be sure that they have received a legitimate email sent through the platform.

Web Behaviour Tracking and abandoned cart emails

The following tracking domains can be used for web behaviour tracking:

dotdigital-pages.com
webinsight.s3.amazonaws.com
static.trackedweb.net
trackedweb.net
r1.trackedweb.net
r2.trackedweb.net
r3.trackedweb.net

Learn more about the use of Web Behaviour Tracking on https://support.dotdigital.com/en/articles/8199233-understand-web-behavior-tracking.

Surveys, pages and forms

The following tracking domains can be used for survey, page and form tracking:

r1.dotmailer-pages.com
r2.dotmailer-pages.com
r3.dotmailer-pages.com
r1.dotdigital-pages.com
r2.dotdigital-pages.com
r3.dotdigital-pages.com

Learn more about the use of web form tracking on https://support.dotdigital.com/en/collections/5610029-surveys-pages-and-forms.

Images and documents

The following tracking domains can be used to display images and documents:

i.emlfiles.com, i.emlfiles1.com, i.emlfiles2.com, and so on, up to i.emfiles9.com

Learn more about the use of web form tracking on https://support.dotdigital.com/en/articles/8198877-images-in-easyeditor and https://support.dotdigital.com/en/articles/8198870-insert-links-into-your-campaign

Local

Our website uses the localsearch web service from Swisscom Directories AG Unternehmens Förrlibuckstrasse 62, CH-8005 Zurich (hereinafter: Local). If you have activated Java Script in your browser and have not installed a Java Script blocker, your browser may transmit personal data to Local. Further information on the handling of the transferred data can be found in Local’s privacy policy: https://www.localsearch.ch/en/privacy-statement.
You can prevent the collection and processing of your data by Local by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

New Relic

On this website, we use a plugin from the New Relic web analytics service. It enables us to record statistical analyses about the speed of the website, to determine whether the website can be accessed and how quickly the respective page is displayed when it is accessed. This service is operated by New Relic Inc (188 Spear Street, Suite 1200 San Francisco, CA 94105, USA; “New Relic”).

New Relic uses cookies. When a user accesses a website that contains a New Relic plugin, their browser establishes a direct connection with the New Relic servers.

By integrating the plugin, New Relic receives the information that a user has accessed the corresponding page of the website. If the user is logged in to New Relic, New Relic can assign the visit to their New Relic account. However, if a user is not a member of New Relic, New Relic stores their IP address.
The purpose and scope of the data collection and the further processing and use of the data by New Relic as well as the relevant rights and setting options to protect the privacy of users can be found in New Relic’s data protection information: https://newrelic.com/privacy.

If a user is a member of New Relic and does not want New Relic to collect data about them via this offer and link it to their membership data stored with New Relic, they must log out of New Relic before visiting the website.

You can object to the collection and storage of data for the purpose of web analysis at any time with effect for the future by deactivating cookies in your browser settings. Please consult the corresponding help file or help function of your browser.

Vimeo without tracking (Do-Not-Track)

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established. In doing so, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. However, we have set Vimeo in such a way that Vimeo will not track your user activities and will not set cookies.

The use of Vimeo is in the interest of an appealing presentation of our online offers.

This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy.

For more information on how to handle user data, please refer to Vimeo’s privacy policy at: https://vimeo.com/privacy.

Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. As a result, Google learns that this website has been accessed via your IP address. The use of Google Fonts is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

If your browser does not support Google Fonts, a standard font will be used by your computer.

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.

https://www.dataprivacyframework.gov/s/participant-search/participant detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. These information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR. Provided that an appropriate consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.

https://www.dataprivacyframework.gov/s/participant-search/participant detail?contact=true&id=a2zt000000001L5AAI&status=Active

WooCommerce

We have integrated the open source shop system WooCommerce as a plugin on our website. This WooCommerce plugin is based on the WordPress content management system, which is a subsidiary of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Through the implemented functions, data is sent to Automattic Inc., stored and processed. In this data protection declaration we inform you what data is involved, how the network uses this data and how you can manage or prevent data storage.

What is WooCommerce?

WooCommerce is an online shop system that has been part of the WordPress directory since 2011 and was developed specifically for WordPress websites. It is a customizable, open-source eCommerce platform based on WordPress and has also been integrated into our website as a WordPress plugin.

Why do we use WooCommerce on our website?

We use this practical online shop solution to be able to offer you our physical or digital products or services in the best possible way on our website. The aim is to give you simple and easy access to our offering so that you can get the products you want quickly and easily. With WooCommerce we have found a good plugin that meets our requirements for an online shop.

What data does WooCommerce store?

Information that you actively enter into a text field in our online shop can be collected and stored by WooCommerce or Automattic. So if you register with us or order a product, Automattic can collect, process and store this data. In addition to email address, name or address, this can also include credit card or billing information. Automattic can subsequently use this information for its own marketing campaigns.

There is also information that Automattic automatically collects from you in so-called server log files:

IP address
Browser information
Default language setting
Date and time of web access

WooCommerce also sets cookies in your browser and uses technologies such as pixel tags (web beacons), for example to clearly identify you as a user and possibly offer interest-based advertising. WooCommerce uses a number of different cookies that are set depending on user actions. This means that, for example, if you put a product in your shopping cart, a cookie will be set so that the product remains in your shopping cart if you leave our website and come back at a later time.

How long and where is the data stored?

Unless there is a legal obligation to retain data for a longer period of time, WooCommerce will delete the data when it is no longer needed for the purposes for which it was stored. For example, server log files containing technical data about your browser and your IP address are deleted after approximately 30 days. As long as Automattic uses the data to analyze the traffic on its own websites (e.g. all WordPress pages) and to fix possible problems. The data is stored on Automattic’s American servers.

How can I delete my data or prevent data storage?

You have the right to access your personal data at any time and to object to the use and processing of it. You can also file a complaint with a government supervisory authority at any time.

In your browser you also have the option of individually managing, deleting or deactivating cookies. However, please note that deactivated or deleted cookies may have negative effects on the functions of our WooCommerce online shop. Depending on which browser you use, managing cookies works slightly differently.

6. Payment providers

Processing of customer and contract data

We collect, process and use personal customer and contract data to establish, design and change our contractual relationships. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill for it. The legal basis for this is Article 6 (1) (b) GDPR.

The collected customer data will be processed after completion of the order or completion of the business relationship and expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.

Data transfer upon conclusion of a contract for services and digital content

We only transmit personal data to third parties if this is within the scope of the contract processing is necessary, for example to the credit institution commissioned with the payment processing.

A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Payment services

We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. These transactions are subject to the respective contractual and data protection provisions of the respective providers. The payment service providers are used on the basis of Art. 6 (1) (b) GDPR (contract processing) and in the interest in a payment process that is as smooth, convenient and secure as possible (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

We use the following payment services / payment service providers within the framework of this website:

Payment service providers used by us are:

SIX Payment Services, ein Service der Worldline Schweiz AG, Hardturmstrasse 201 CH-8005 Zürich

The processing takes place on the basis of Art. 6 (1) sentence 1 lit. b) GDPR. The provision of your payment data is necessary and obligatory for the conclusion and implementation of the contract. If the payment data is not provided, it is impossible to conclude and / or execute a contract by means of a credit card payment. The data required for payment processing is transmitted securely via the “SSL” procedure and processed exclusively for payment processing. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention requirements. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we will restrict processing and reduce processing to compliance with existing legal obligations. Further information can be found at https://www.six-payment-services.com/en/services/legal/privacy-statement.html

7. Our social media presences

This privacy policy applies to the following social media presences

Data processing by social networks

We maintain publicly accessible profiles on social networks. The social networks we use in detail can be found below.

Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g. LikeButtons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

Legal basis

Our social media presences are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The measures initiated by the social networks in regards to the analysis of processes may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

Controller and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against .dem operator of the respective social media portal (e.g. against Facebook).

Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the corporate policy of the respective provider.

Your rights

You have the right at any time and free of charge to obtain information about the origin, recipient and purpose of your

stored personal data. You also have the right to object, to data portability and a right of appeal to the competent supervisory authority. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Social networks in detail

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the data collected will also be transferred to the USA and other third countries.

We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381?cms_id=566994660333381.

Details can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://www.facebook.com/help/566994660333381?cms_id=566994660333381.

Details on how they handle your personal data can be found in Instagram’s privacy policy: https://help.instagram.com/519522125107875.

TikTok

We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok’s privacy policy:

https://www.tiktok.com/legal/privacy-policy?lang=en.

Data transfer to non-secure third countries is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.tiktok.com/legal/privacy-policy?lang=en.

7. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

MailChimp

This website uses the services of MailChimp to send out its newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among other things, MailChimp is a service that can be deployed to organize and analyze the sending of newsletters. Whenever you enter data for the purpose of subscribing to a newsletter (e.g. your e-mail address), the information is stored on MailChimp servers in the United States.

MailChimp is in possession of a certification that is in compliance with the “EU-US-Privacy-Shield”. The “Privacy-Shield” is a compact between the European Union (EU) and the United States of America (USA) that aims to warrant the compliance with European data protection standards in the United States.

With the assistance of the MailChimp tool, we can analyze the performance of our newsletter campaigns. If you open an e-mail that has been sent through the MailChimp tool, a file that has been integrated into the email (a so-called web-beacon) connects to MailChimp’s servers in the United States. As a result, it can be determined whether a newsletter message has been opened and which links the recipient possibly clicked on. Technical information is also recorded at that time (e.g. the time of access, the IP address, type of browser and operating system). This information cannot be allocated to the respective newsletter recipient. Their sole purpose is the performance of statistical analyses of newsletter campaigns. The results of such analyses can be used to tailor future newsletters to the interests of their recipients more effectively.

If you do not want to permit an analysis by MailChimp, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.

The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

Conclusion of a data processing agreement

We have concluded a data processing agreement with MailChimp, in which we commit MailChimp to protect the data of our customers and not to pass it on to third parties.

For more details, please consult the Data Privacy Policies of MailChimp at: https://mailchimp.com/legal/terms/.

Execution of a contract data processing agreement

We have executed a so-called “Data Processing Agreement” with MailChimp, in which we mandate that MailChimp undertakes to protect the data of our customers and to refrain from sharing it with third parties.

10. Custom Services

Job Applications

We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment

Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is based exclusively on your express agreement (Art. 6 para. 1 lit. a GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.