Privacy policyAs of May 2018

The following data protection declaration applies to the use of this website www.hakagerodur.ch ("website") and the services offered via it. In the following, we inform you about the type, scope and purpose of the processing of personal data when using our website. Personal data is any data that relates or can be related to you personally, such as name, address, e-mail addresses, user behavior.

We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

The operator of this website and the person responsible for the processing of your personal data via this website is HakaGerodur AG, Mooswiesstrasse 67, CH-9201 Gossau SG, 51e30f8932e53ebd36206c8cb6

You can reach our data protection officer at sekretariat@hakagerodur.ch or at the postal address mentioned in Section 2 with the addition of "Datenschutzverantwortlicher".

As with any website, the provider of our website automatically and temporarily collects information in the server log files that are transmitted by the browser, unless this has been disabled by you. When you visit our website, the following technically necessary data is collected so that our website can be displayed and to ensure its stability and security:

• IP address of the requesting computer
• file request of the client
• the http response code
• the Internet page from which you are visiting us (referrer URL)
• the time of the server request
• browser type and version
• the operating system used by the requesting computer

A personal evaluation of this server log file data does not take place. If the aforementioned information contains personal data (in particular the IP address), it is collected on the legal basis of Art. 6 (1) lit. f DS-GVO. Our legitimate interest here is to ensure the proper functioning of our website. If you require further information regarding the balancing of interests to be carried out in accordance with Art. 6 (1) (f) DS-GVO, please contact us using the contact details provided in section 2. The collection of the aforementioned data is necessary for the provision of the functions of our website.

This website uses the technologies and tools described below. If you do not wish to use them, we will provide you with various options and settings for the respective tool to prevent their use.

This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google";). The use includes the operating mode "Universal Analytics". This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous UserID and thus to analyze the activities of a user across devices. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. However, since IP anonymization is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing a browser add-on (at https:/​­/​­tools.google.com/​­dlpage/​­gaoptout?hl=de). Opt-out cookies prevent the future collection of your data when visiting this website. To prevent the collection by Universal Analytics across different devices, you must perform the opt-out on all systems used.

The use of Google Analytics is based on our legitimate interest in a demand-oriented design, statistical analysis and the efficient promotion of our website. The legal basis is Art. 6 para. 1 lit. f DS-GVO.

We use the offer of Google Adwords (incl. Google Adwords Remarketing) to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We use this tool to display advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually lose their validity after 90 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the website of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

In addition to the cookies mentioned in sections 4.4 to 4.11, this website uses other cookies. Cookies are small text files that are stored locally in the cache of your browser. The cookies listed below are only used by us to ensure the performance or provision of the service you use in accordance with Art. 6 (1) lit. f DS-GVO. Our legitimate interest in the data processing is to optimize the website settings for the device you are using and to adapt the user interfaces. If you require further information regarding the balancing of interests to be carried out in accordance with Art. 6 (1) lit. f DS-GVO, please contact us using the contact details provided above. The following types of cookies, the scope and functionality of which are explained below, are used on this website:

• Transient cookies (see 4.12.2)
• Persistent cookies (see 4.12.3)

Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website.

On our website you have the opportunity to voluntarily submit data about yourself. We use this data, including personal data, for the following purposes:

We also use your data as described in more detail in this privacy policy for advertising purposes, in particular by post or in the form of e-mail newsletters or customer surveys or contact, for example, by SMS or by telephone. The legal basis for this is our legitimate interests according to Art. 6 para. 1 lit. f DS-GVO in advertising measures relevant to you. If you require further information regarding the balancing of interests to be carried out in accordance with Art. 6 (1) f DS-GVO, please contact us using the contact details provided above. You can object to the use of your data for advertising purposes at any time. Details on your right to object can be found under this privacy policy.

If we are required by local laws in individual countries to obtain your prior consent for the aforementioned advertising measures, we will of course do so. The legal basis for the processing of your data is then your consent (Art. 6 para. 1 lit. a DS-GVO). You can revoke your consent at any time. To do so, please contact us using the contact options above or follow the respective instructions in our advertising messages. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent. You are not obliged to provide us with your data for advertising purposes. However, without this data we are not able to send you advertising.

In principle, your personal data will only be passed on without your express prior consent in the cases listed below:

FOR REASONS OF LAW ENFORCEMENT

‎
If it is necessary to clarify unlawful use of our services or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of terms of use or other agreements. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines and the tax authorities.

The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims, Art. 6 (1) lit. f DS-GVO. If you require further information regarding the balancing of interests to be carried out pursuant to Art. 6 (1) lit. f DSGVO, please contact us using the contact options provided above.

Data Processor

‎
We rely on contractually affiliated third-party companies and external service providers ("data processors") to provide the services. In such cases, personal data is passed on to these order processors to enable them to continue processing. Personal data is also transferred to other companies of the HakaGerodur Group. These processors are carefully selected by us and regularly checked. The processors may only use the data for the purposes specified by us and are also contractually bound by us to treat your data exclusively in accordance with this data protection declaration and the applicable data protection laws.

In particular, we use the following processors:

• Other shareholders of the HakaGerodur Group for the purpose of centralized customer management and order processing.
• Logistics service providers for the purpose of shipping products you have ordered from us, marketing materials or other items to you
• Payment service providers for processing any payments from you to us or vice versa
• Service providers for assembly work or after-sales services
• IT service providers for the provision of software and hardware and for carrying out maintenance work.

The transfer of data to processors takes place on the basis of Art. 28 (1) DS-GVO, alternatively on the basis of our legitimate interest in the economic and technical benefits associated with the use of specialized processors 6 and the fact that your rights and interests in the protection of your personal data do not prevail, Art. 6 (1) lit. f DS-GVO. If you require further information regarding the balancing of interests to be carried out pursuant to Art. 6 (1) lit. f DS-GVO, please contact us using the contact options provided above.

With respect to your personal data processed by us, you have the rights described below. To enforce your rights, please send your written request to us at the contact details provided above or to the following e-mail address: sekretariat@hakagerodur.ch

RIGHT TO INFORMATION

‎
You have the right to receive from us at any time upon request information about the data processed by us, personal data concerning you within the scope of Art. 15 DS-GVO.

RIGHT OF RECTIFICATION OR ERASURE

You have the right to demand that we delete the personal data concerning you under the conditions described in Art. 17 DS-GVO. These conditions provide in particular for a right to erasure if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed. An exercise of this right is restricted according to Art. 17 (3) DSGVO in particular if we need your data to fulfill a legal obligation or to enforce legal claims.

RIGHT TO RESTRICT PROCESSING
You have the right to demand that we restrict processing in accordance with Art. 18 DS-GVO. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the duration that the verification of the accuracy requires, as well as in the event that you request restricted processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer necessary for the purposes pursued by us, but you need them to assert, exercise or defend legal claims, as well as if the successful exercise of an objection is still disputed between us and you. If the processing of your data has been restricted accordingly, it may only be processed in exceptional cases, for example if you have consented to this or if this is necessary to enforce legal claims.

RIGHT TO OPPOSE PROCESSING

‎
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out, inter alia, on the basis of Article 6(1)(e) or (f) DS-GVO, in accordance with Article 21 DS-GVO. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

RIGHT TO DATA TRANSFERABILITY

‎
You have the right to receive from us the personal data concerning you that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 DS-GVO. Among other things, this requires that the data processing is based on your consent and that it is carried out with the help of automated processes.

RIGHT TO COMPLAIN TO THE COMPETENT DATA PROTECTION SUPERVISORY AUTHORITY

‎‎‎‎
You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that 7 the processing of personal data relating to you violates applicable data protection law. The supervisory authority responsible for us is the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH - 3003 Bern.

In general, we delete or anonymize your personal data as soon as they are no longer required for the purposes for which we have collected or used them in accordance with the above paragraphs. If data must be retained for legal reasons, it will be blocked. The data will then no longer be available for further use. If you would like more information about our deletion and storage periods, please contact the responsible person named in section 2 using the contact details provided there.

Processing of your personal data for purposes other than those described above will only take place if permitted by law or if you have consented to the changed purpose of the data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes prior to further processing and provide you with all other relevant information.

We do not use automated processing to make a decision - including profiling.