Configure safe

Pri­vacy policy

Based on Article 13 of the Swiss Fede­ral Con­sti­tu­tion and the data pro­tec­tion regu­la­ti­ons of the fede­ral govern­ment (Data Pro­tec­tion Act, DSG), every per­son has the right to pro­tec­tion of their pri­vacy and pro­tec­tion against misuse of their per­so­nal data. We com­ply with these regu­la­ti­ons. Per­so­nal data is trea­ted as strictly con­fi­den­tial and is neither sold nor pas­sed on to third par­ties.

Data pro­tec­tion has a par­ti­cu­larly high prio­rity for us. In prin­ci­ple, our web­site can be used wit­hout pro­vi­ding any per­so­nal data. Howe­ver, if a data sub­ject wants to use spe­cial com­pany ser­vices via our web­site, pro­ce­s­sing of per­so­nal data could become neces­sary. If the pro­ce­s­sing of per­so­nal data is neces­sary and there is no legal basis for such pro­ce­s­sing, we gene­rally obtain the con­sent of the per­son con­cer­ned.

The pro­ce­s­sing of per­so­nal data, such as the name, address, e‑mail address, or tele­phone num­ber of a data sub­ject is always in line with the Gene­ral Data Pro­tec­tion Regu­la­tion (GDPR), and in accordance with the coun­try-spe­ci­fic data pro­tec­tion regu­la­ti­ons that apply to us. By means of this data pro­tec­tion decla­ra­tion, our com­pany would like to inform the public about the type, scope and pur­pose of the per­so­nal data we coll­ect, use and pro­cess. Fur­ther­more, data sub­jects are infor­med of the rights to which they are entit­led by means of this data pro­tec­tion decla­ra­tion.

We have imple­men­ted num­e­rous tech­ni­cal and orga­nizatio­nal mea­su­res to ensure the most com­plete pro­tec­tion pos­si­ble for the per­so­nal data pro­ce­s­sed via this web­site. Nevert­hel­ess, Inter­net-based data trans­mis­si­ons can gene­rally have secu­rity gaps, so that abso­lute pro­tec­tion can­not be gua­ran­teed. For this rea­son, every per­son con­cer­ned is free to trans­mit per­so­nal data to us in alter­na­tive ways, for exam­ple by tele­phone.

The pro­tec­tion of your pri­vacy is important to us. WALDIS Tresore AG atta­ches great importance to com­pli­ance with the rele­vant data pro­tec­tion regu­la­ti­ons. We pro­cess your per­so­nal data in accordance with the pro­ce­s­sing prin­ci­ples set out in Art. 6 to 8 FADP. In this pri­vacy policy, we pro­vide you with com­pre­hen­sive infor­ma­tion about how we handle your per­so­nal data as a visi­tor to our web­site and explain your rights in con­nec­tion with the pro­ce­s­sing of per­so­nal data in our com­pany.

You will be infor­med about any rele­vant right of objec­tion in our chap­ter “VII. Your rights”.

A. Scope of appli­ca­tion

This pri­vacy policy applies to all pro­ce­s­sing acti­vi­ties in con­nec­tion with per­so­nal data:

  • Visi­ting our web­site
  • Cont­ac­ting us
  • Fil­ling out one of the cont­act forms
  • Management/updating of elec­tro­nic locks
  • Coo­kies
  • Social Media

 

We regu­late the pro­ce­s­sing of per­so­nal data of our employees exclu­si­vely within the frame­work of our employee con­tracts and with you as our cus­to­mer within the frame­work of our con­tracts.

Depen­ding on the data pro­ce­s­sing, in addi­tion to the appli­ca­ble Swiss law (Fede­ral Act on Data Pro­tec­tion (FADP) of 25 Sep­tem­ber 2020, SR 235.1), Euro­pean data pro­tec­tion law (Regu­la­tion (EU) 2016/679 (Gene­ral Data Pro­tec­tion Regu­la­tion)) may also or exclu­si­vely apply.

Lin­ked web­sites of other pro­vi­ders or web­sites that link to our web­site are not covered by this pri­vacy policy.

B. Cont­act details of the respon­si­ble per­sons

WALDIS Tresore AG
Hof­wi­sen­stra­sse 20
8153 Rüm­lang
E‑Mail: info@tresore.ch
Phone: +41 43 211 12 00

C. Cont­act details of the Swiss super­vi­sory aut­ho­rity

Eid­ge­nös­si­scher Daten­­­schutz- und Öffent­lich­keits­be­auf­trag­ter
Feld­egg­weg 1
CH — 3003 Bern
Phone: +41 58 462 43 95
Cont­act form: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt/kontaktformular_datenschutz.html

Depen­ding on your rela­ti­on­ship with us, we pro­cess dif­fe­rent per­so­nal data about you for dif­fe­rent pur­po­ses and based on dif­fe­rent legal bases.

A. Visi­ting our web­site

Data pro­ce­s­sing
When you visit our web­site, the brow­ser used on your device auto­ma­ti­cally sends infor­ma­tion to the ser­ver of our web­site. This infor­ma­tion is tem­po­r­a­rily stored in a so-cal­­led log file.

Per­so­nal data
The fol­lo­wing infor­ma­tion is coll­ec­ted wit­hout any action on your part and stored until it is auto­ma­ti­cally dele­ted:

  • IP address of the reque­st­ing com­pu­ter
  • Name of the owner of the IP address range (usually your Inter­net access pro­vi­der)
  • Date and time of access
  • Web­site from which the access was made (refer­rer URL), if appli­ca­ble with the search term used
  • Name and URL of the retrie­ved file
  • Sta­tus code (e.g. error mes­sage)
  • Amount of data sent in bytes
  • Ope­ra­ting system of your com­pu­ter
  • Trans­mis­sion pro­to­col used (e.g. http/1.1)
  • If appli­ca­ble, your user name from a registration/authentication
  • Brow­ser used (type, ver­sion and lan­guage).

 

Pur­pose
The data in que­stion is pro­ce­s­sed for the fol­lo­wing pur­po­ses

  • Ensu­ring a smooth con­nec­tion to the web­site
  • Ensu­ring a com­for­ta­ble use of our web­site
  • To ana­lyse system secu­rity and sta­bi­lity and for other admi­ni­stra­tive pur­po­ses
  • To improve and fur­ther deve­lop our business and ser­vices

 

Ser­vice pro­vi­der
Our web­site is hosted by Host­point AG, Neue Jonastra­sse 60, 8640 Rap­­per­s­­wil-Jona, Switz­er­land (“Host­point”) The host has access to the web­site and thus to your per­so­nal data in the event of sup­port.

Justi­fi­ca­tion rea­son
There is a legi­ti­mate inte­rest in the pro­ce­s­sing of your per­so­nal data pur­su­ant to Art. 6 para. 1 sen­tence 1 lit. f GDPR.

Neces­sity
This infor­ma­tion is neces­sary for the func­tio­ning of the web­site.

Reten­tion period
At the end of your ses­sion, the ses­sion coo­kies are dele­ted, but we retain the log file in accordance with legal requi­re­ments.

B. Cont­ac­ting us

Data pro­ce­s­sing
On our web­site, we offer you the oppor­tu­nity to cont­act us directly by e‑mail or tele­phone. The rea­son for cont­ac­ting us may be que­sti­ons about boo­kings, payments and invoices, tech­ni­cal que­sti­ons or que­sti­ons on other topics or even feed­back.

Per­so­nal data
The fol­lo­wing per­so­nal data may be coll­ec­ted:

  • First name and sur­name, com­pany
  • Your e‑mail or tele­phone num­ber
  • Infor­ma­tion that you pro­vide in wri­ting or ver­bally

 

Pur­pose
The data in que­stion is pro­ce­s­sed for the fol­lo­wing pur­po­ses:

  • Ans­we­ring your enquiry
  • Cont­ac­ting you

 

Ser­vice pro­vi­ders
We use the fol­lo­wing soft­ware and ser­vice pro­vi­ders to pro­cess your enquiry by email or tele­phone:

  • Our email system runs via Micro­soft Out­look from Micro­soft Ire­land Ope­ra­ti­ons Ltd (“Micro­soft”), South County Busi-ness Park, One Micro­soft Place, D18P521, Leo­pard­stown, Ire­land, and is ope­ra­ted via a Micro­soft Exch­ange Ser­ver. When an e‑mail is sent, Micro­soft has access to the sen­der and the con­tent of the mes­sage.
  • Our tele­phone system is ope­ra­ted by e.e.com elek­tro­an­la­gen ag, Her­ti­stra­sse 29, 8304 Wal­li­sel­len, in con­junc­tion with the MiVoice Office 400 tele­phone soft­ware from Mitel Net­works Cor­po­ra­tion (“Mitel”) 350 Leg­get Drive, Ottawa, Onta­rio, Canada. Mitel has access to your tele­phone num­ber through the call trans­fer and records parts of the call as part of the “Voice over IP” (VOIP) pro­cess so that the con­tent of the call is not lost in the event of an inter­rup­tion.

 

You can find more infor­ma­tion on the hand­ling of per­so­nal data in the respec­tive data pri­vacy state­ments of the ser­vice pro­vi­ders:
Micro­soft: https://privacy.microsoft.com/de-de/privacystatement
Mitel: https://www.mitel.com/legal/policies

Legal basis
This data pro­ce­s­sing is car­ried out on the basis of con­trac­tual or pre­con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 sen­tence 1 lit. b GDPR.

Neces­sity
This pro­ce­s­sing acti­vity is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fers to third count­ries
Due to the use of MS Office, your per­so­nal data is also pro­ce­s­sed by Micro­soft through the parent com­pany in the USA. Micro­soft Corp. is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Micro­soft in the USA wit­hout the need for addi­tio­nal gua­ran­tees.

Due to the use of MiVoice Office 400, your per­so­nal data will be pro­ce­s­sed by Mitel Net­works Copo­ra­tion in Canada. Canada is listed as a coun­try with ade­quate data pro­tec­tion in Annex 1 to the Ordi­nance of 31 August 2022 on Data Pro­tec­tion (Data Pro­tec­tion Ordi­nance, DPO; SR 235.11), which is why your per­so­nal data can be trans­fer­red to Mitel in Canada wit­hout the need for addi­tio­nal gua­ran­tees.

Reten­tion period
We are sub­ject to a sta­tu­tory reten­tion period of 10 years for the sto­rage of business records. In order to pro­vide ongo­ing and addi­tio­nal ser­vice, we may retain our cus­to­mers’ data bey­ond this period.

C. Various cont­act forms

Data pro­ce­s­sing
We offer you the oppor­tu­nity to cont­act us via forms on our web­site for a wide range of con­cerns. You can use the cont­act form to send us your gene­ral enquiry or use the spe­ci­fic forms to book your appoint­ment with us, give us feed­back or request sup­port. Your com­ple­ted form will be sent to our e‑mail address info@tresore.ch.
We use the fol­lo­wing soft­ware and ser­vice pro­vi­ders to pro­cess your enquiry via the cont­act form:
— Our email system runs via Micro­soft Out­look from Micro­soft Ire­land Ope­ra­ti­ons Ltd (“Micro­soft”), South County Business Park, One Micro­soft Place, D18P521, Leo­pard­stown, Ire­land, and is ope­ra­ted via a Micro­soft Exch­ange Ser­ver. When an e‑mail is sent, Micro­soft has access to the sen­der and the con­tent of the mes­sage.

Per­so­nal data
The fol­lo­wing infor­ma­tion must be pro­vi­ded:

  • First name and sur­name
  • Com­pany name
  • Valid e‑mail address
  • Tele­phone num­ber
  • Mes­sage / Feed­back / Eva­lua­tion
  • Type of pro­blem (sup­port form only)
  • Desi­red show­room (online appoint­ment boo­king only)
  • Desi­red date and time (online appoint­ment boo­king only)
  • Various details about the pro­duct and ser­vice (eva­lua­tion form only)

 

Pur­pose
The data in que­stion is pro­ce­s­sed for the fol­lo­wing pur­po­ses:

  • Ans­we­ring your enquiry
  • Cont­ac­ting you

 

Legal basis
This data pro­ce­s­sing is car­ried out on the basis of con­trac­tual or pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 sen­tence 1 lit. b GDPR. The pro­vi­sion of your data is vol­un­t­ary.

Neces­sity
This pro­ce­s­sing acti­vity is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Due to the use of MS Office, your per­so­nal data is also pro­ce­s­sed by Micro­soft through the parent com­pany in the USA. Micro­soft Corp. is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Micro­soft in the USA wit­hout the need for addi­tio­nal gua­ran­tees.

Reten­tion period
The data stored for the pur­pose of ans­we­ring your enquiry and cont­ac­ting you will be dele­ted after pro­ce­s­sing has been com­ple­ted, unless we are legally obli­ged to retain the data for 5 or 10 years.

D. Pro­ce­s­sing of cus­to­mer orders

Data pro­ce­s­sing
We use the Sel­ect­Line system from Sel­ect­Line Soft­ware AG, Achs­len­stra­sse 15, 9016 St. Gal­len, Switz­er­land, to pro­cess our cus­to­mer orders. As soon as we have recei­ved your order, your data is ente­red into our system and pro­ce­s­sed in our pro­ject and pro­duc­tion depart­ment or our logi­stics depart­ment. The Sel­ect­Line system is used for admi­ni­stra­tion, finan­cial accoun­ting, order pro­ce­s­sing, archi­ving of data and orga­ni­sa­tion of our pro­duc­tion and deli­veries and is hosted on our own ser­vers. You can find fur­ther infor­ma­tion on data pro­tec­tion at Sel­ect­Line Soft­ware AG at: https://www.selectline.ch/de/impressum.html

Your payment is recor­ded via our e‑banking system. Your per­so­nal data is then sup­ple­men­ted by your payment infor­ma­tion in our system.

We may pass on your per­so­nal data to payment, trans­port, cons­truc­tion, archi­tec­ture, gene­ral or crane com­pa­nies for the exe­cu­tion and rea­li­sa­tion of pro­jects. We may for­ward your data to aut­ho­ri­ties and courts to obtain aut­ho­ri­sa­tion or simi­lar or to pro­tect our and your inte­rests and legal claims.

Per­so­nal data
We pro­cess the fol­lo­wing data to ful­fil your order:

  • Sur­name, first name
  • Your address
  • Tele­phone num­ber
  • e‑mail address
  • Payment infor­ma­tion
  • Order or order infor­ma­tion

Pur­pose
The pur­pose of pro­ce­s­sing your data is to pro­cess and deli­ver your order and to enforce any legal claims.

Legal basis
This data pro­ce­s­sing is car­ried out on the basis of con­trac­tual or pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 sen­tence 1 lit. b GDPR. The pro­vi­sion of your data is vol­un­t­ary.
Neces­sity
Data pro­ce­s­sing is neces­sary for the pro­ce­s­sing of your order.

Reten­tion period
For business docu­ments, we are sub­ject to a sta­tu­tory reten­tion period for your data in accordance with Art. 958 f. OR of 10 years.

E. Management/ updating of elec­tro­nic locks

Data pro­ce­s­sing
Our safes are equip­ped with lock soft­ware from dor­ma­kaba Schweiz AG, Müh­le­bühl­stra­sse 2386 Wet­zikon, Switz­er­land (“dor­ma­kaba”). By con­nec­ting our safes to a LAN con­nec­tion using the dor­ma­kaba soft­ware, it is pos­si­ble to manage various safes and locks cen­trally. You can find more infor­ma­tion on this in dor­ma­ka­ba’s pri­vacy policy at: www.dormakaba.com/ch-de/datenschutz

Per­so­nal data
We pro­cess the same data for this pur­pose as when pro­ce­s­sing an order (see sec­tion D above). We do not have access to your safe code by name.

Pur­pose
The pur­pose of using elec­tro­nic locks from third-party pro­vi­ders and updating and mana­ging them is to opti­mise the secu­rity of the safe and pro­vide a modern secu­rity solu­tion.

Legal basis
This data pro­ce­s­sing is car­ried out on the basis of con­trac­tual or pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 sen­tence 1 lit. b GDPR.

Neces­sity
Data pro­ce­s­sing is not neces­sary for the pro­vi­sion of our ser­vices as a safe depo­sit box pro­vi­der.

Reten­tion period
For business docu­ments, we are sub­ject to a sta­tu­tory reten­tion period for your data in accordance with Art. 958 f. OR of 10 years.

F. Coo­kies

1. Gene­ral

Data pro­ce­s­sing
We use coo­kies on our web­site. These are small files that your brow­ser auto­ma­ti­cally crea­tes and that are stored on your end device (lap­top, tablet, smart­phone, etc.) when you visit our web­site.

Per­so­nal data
A coo­kie does not always mean that we can iden­tify you.

Pur­pose
The use of coo­kies ser­ves to sta­tis­ti­cally record the use of our web­site and to eva­luate it for the pur­pose of opti­mi­sa­tion and user-fri­en­d­­li­­ness.

Legal basis
We pro­cess tech­ni­cally neces­sary coo­kies based on our over­ri­ding pri­vate inte­rest. We only pro­cess coo­kies that are not tech­ni­cally neces­sary if we are aut­ho­ri­sed to do so in accordance with Art. Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR if we have obtai­ned your con­sent vol­un­t­a­rily.

Neces­sity
Coo­kies are auto­ma­ti­cally accepted in the default set­tings of most Inter­net brow­sers. If you do not wish to store coo­kies from our web­sites on your device, you can con­fi­gure your brow­ser set­tings so that you receive a war­ning before cer­tain coo­kies are stored.
Please note that the par­tial or com­plete deac­ti­va­tion of coo­kies may result in you not being able to use all the func­tions of our web­sites.

Sto­rage period
Coo­kies have dif­fe­rent sto­rage peri­ods. If they are third-party coo­kies, we have no influence on the sto­rage period.

2. Tech­ni­cally neces­sary coo­kies

Data pro­ce­s­sing
We use a log­ging coo­kie to save your per­so­nal user set­tings regar­ding coo­kies on our web­site.
Per­so­nal data No per­so­nal data is pro­ce­s­sed. Only the cur­rent sta­tus of your sel­ec­ted coo­kie set­ting is saved.

Pur­pose
The pro­ce­s­sing is car­ried out to re-iden­tify your per­so­nal coo­kie set­tings on our web­site.

Legal basis
The pro­ce­s­sing is based on our over­ri­ding inte­rest in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. f GDPR.

Neces­sity
This coo­kie is neces­sary for the func­tion­a­lity of the web­site.

Sto­rage period
The coo­kie is auto­ma­ti­cally dele­ted from your system after 12 months.

3. Google Tag Mana­ger

Data pro­ce­s­sing
We use the Google Tag Mana­ger (“GTM”) from Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land on our web­site. GTM is a tag manage­ment system that inte­gra­tes tags in a stan­dar­di­sed man­ner via a user inter­face. Tags are short sec­tions of source code that can track acti­vi­ties and access other systems in order to cen­trally con­trol when cer­tain systems are trig­ge­red. Google Ana­ly­tics, Google Mar­ke­ting Plat­forms (Dou­ble Click and Google Ana­ly­tics) and Google Ads Remar­ke­ting are inte­gra­ted into GTM. This means that GTM is merely an inter­face bet­ween the web­site and the ana­ly­tics soft­ware. You can pre­vent the set­ting of tags in the coo­kie or domain set­tings at any time. Fur­ther infor­ma­tion on these systems and their data pro­ce­s­sing can be found in the fol­lo­wing sec­tions.

Per­so­nal data
GTM ensu­res the acti­va­tion of other tools, which in turn coll­ect per­so­nal data. Depen­ding on the inte­gra­ted tool, GTM coll­ects IP addres­ses of web­site visi­tors and pas­ses them on to the ana­ly­sis pro­gram­mes. You will find more infor­ma­tion on the indi­vi­dual data pro­ce­s­sing ope­ra­ti­ons in the fol­lo­wing sec­tions.

Pur­pose
We pro­cess your per­so­nal data for mar­ke­ting and ana­ly­sis pur­po­ses. We eva­luate your user beha­viour, carry out con­ver­sion track­ing, com­pile sta­tis­tics and opti­mise our adver­ti­sing chan­nels and approa­ches.

Legal basis
The pro­ce­s­sing of your per­so­nal data takes place with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.

Neces­sity
This pro­ce­s­sing acti­vity is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Your per­so­nal data is gene­rally pro­ce­s­sed by Google Ire­land Limi­ted in Ire­land. Howe­ver, per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google LLC is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data may be trans­fer­red to Google LLC in the USA wit­hout any fur­ther gua­ran­tees being requi­red. You can find Goo­g­le’s pri­vacy policy here: https://policies.google.com/privacy?hl=en

Sto­rage period
Your data is stored on the end device for up to two years, unless it is rene­wed.
You can find out more about the reten­tion period in Goo­g­le’s pri­vacy policy: https://policies.google.com/privacy#inforetaining

4. Dou­ble Click

Data pro­ce­s­sing
We use Google Mar­ke­ting Plat­forms (“Dou­ble Click”) to show you tar­ge­ted adverts and adver­ti­se­ments on various web­sites for our pro­ducts (“Con­ver­sion Track­ing”). Your sur­fing beha­viour is eva­lua­ted by the per­ma­nent coo­kies stored, which allows indi­vi­dual adver­ti­sing to be dis­played. This ser­vice is pro­vi­ded by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

Per­so­nal data
The fol­lo­wing per­so­nal data is pro­ce­s­sed:

  • Click path
  • Coo­kie IDs
  • IP address
  • Num­ber of visits/users
  • tran­sac­tions
  • Usage data

Pur­pose
We pro­cess your per­so­nal data for mar­ke­ting and ana­ly­sis pur­po­ses. We eva­luate your user beha­vior, carry out con­ver­sion track­ing, com­pile sta­tis­tics and opti­mize our adver­ti­sing chan­nels and approa­ches.

Legal basis
Your per­so­nal data is pro­ce­s­sed with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.

Neces­sity
This pro­ce­s­sing acti­vity is not neces­sary for the func­tion­a­lity of the web­site.
Data trans­fer to third count­ries Your per­so­nal data is gene­rally pro­ce­s­sed by Google Ire­land Limi­ted in Ire­land. Howe­ver, per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google LLC is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data may be trans­fer­red to Google LLC in the USA wit­hout any fur­ther gua­ran­tees being requi­red. You can find Goo­g­le’s pri­vacy policy here: https://policies.google.com/privacy?hl=en

Sto­rage period
Your data is stored on the end device for up to two years, unless it is rene­wed.
You can find out more about the reten­tion period in Goo­g­le’s pri­vacy policy: https://policies.google.com/privacy#inforetaining

5. Google Ads

Data pro­ce­s­sing
The data con­trol­ler has inte­gra­ted Google Ads from Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land, on this web­site. Google Ads is an inter­net adver­ti­sing ser­vice that allows adver­ti­sers to place ads both in Goo­g­le’s search engine results and in the Google adver­ti­sing net­work. Google Ads allows an adver­ti­ser to pre-define cer­tain key­words that will be used to dis­play an ad in Goo­g­le’s search engine results only when the user uses the search engine to retrieve a key­­­word-rele­­vant search result. In the Google adver­ti­sing net­work, the ads are dis­tri­bu­ted on rele­vant web­sites using an auto­ma­tic algo­rithm and taking into account the pre­viously defi­ned key­words.

Per­so­nal data
Con­ver­sion coo­kies are used to store per­so­nal data, such as the web­sites visi­ted by the data sub­ject. A ran­domly gene­ra­ted user ID is crea­ted in the pro­cess. Based on this ID, Google can reco­gnize the user across dif­fe­rent web­sites and dis­play per­so­na­li­zed adver­ti­sing. Each time our web­site is visi­ted, per­so­nal data, inclu­ding the IP address of the inter­net con­nec­tion used by the data sub­ject, brow­ser and device type and acti­vi­ties are the­r­e­fore trans­mit­ted to Google in the USA.

Pur­pose
The pur­pose of Google Ads is to pro­mote our web­site by dis­play­ing inte­­rest-rele­­vant adver­ti­sing on the web­sites of third-party com­pa­nies and in the search engine results of the Google search engine and by dis­play­ing third-party adver­ti­sing on our web­site.

Legal basis
The data pro­ce­s­sing takes place with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.

Neces­sity
The data men­tio­ned is not neces­sary for the web­site func­tion­a­lity.
Data trans­fer to third count­ries Your data will be pro­ce­s­sed by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google LLC is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Google in the USA wit­hout any addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Google Ana­ly­tics hand­les user data in Goo­g­le’s pri­vacy policy at: https://support.google.com/analytics/answer/6004245?hl=de

Reten­tion period
The reten­tion period is based on the infor­ma­tion in Goo­g­le’s pri­vacy policy, available at https://policies.google.com/privacy?hl=de#inforetaining

6. Google Ana­ly­tics 4

Data pro­ce­s­sing
We use Google Ana­ly­tics on our web­site, a web ana­ly­tics ser­vice pro­vi­ded by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land (“Google”).
Coo­kies are used to create pseud­ony­mous user pro­files. The data is stored on the end device, anony­mi­zed and eva­lua­ted in the form of sta­tis­tics.
With Google Ads remar­ke­ting (GA Audi­ence), visi­tors to our web­site are added to lists that we can use to cont­act you again as a poten­tial cus­to­mer. As a user on the remar­ke­ting lists, we can place tar­ge­ted ads for you.

Per­so­nal data
The fol­lo­wing data is pro­ce­s­sed in con­nec­tion with the Google Ana­ly­tics web ana­ly­sis ser­vice:

  • Mas­ked IP address of the reque­st­ing com­pu­ter
  • Click path
  • Date and time of access
  • Web­site from which access is made (refer­rer URL)
  • Brow­ser type and brow­ser ver­sion
  • IP addres­ses in excep­tio­nal cases
  • Num­ber of visits/users
  • Sta­tis­tics on the ses­sion

Exten­sion of demo­gra­phic cha­rac­te­ri­stics and inte­rests:

  • Age: 18–24, 25–34, 35–44, 45–54, 55–64, 65+
  • Gen­der: Male, Female
  • Cate­go­ries of com­mon inte­rests
  • Seg­ments with ready-to-buy tar­get groups
  • Other cate­go­ries that pro­vide the most spe­ci­fic view of user

Three per­ma­nent coo­kies from Google Ana­ly­tics are used for this pur­pose (_gat, _gid, _ga), which are auto­ma­ti­cally dele­ted after a defi­ned period of time. Howe­ver, these coo­kies are only used with your con­sent via the coo­kie ban­ner.
Please note that on this web­site Google Ana­ly­tics has been exten­ded by the code “gat._anonymizeIp();” in order to ensure anony­mi­zed coll­ec­tion of IP addres­ses (so-cal­­led IP mas­king). If anony­mization is active, Google shor­tens IP addres­ses within Switz­er­land, which is why no con­clu­si­ons can be drawn about your iden­tity. Only in excep­tio­nal cases is the full IP address trans­mit­ted to a Google ser­ver in the USA and trun­ca­ted there.

Pur­pose
We use Google Ana­ly­tics to ana­lyze errors and to con­ti­nuously improve the offer on our web­sites by means of sta­tis­ti­cal eva­lua­tion.

Legal basis
The data pro­ce­s­sing takes place with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.

Neces­sity
This pro­ce­s­sing acti­vity is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Your data will be pro­ce­s­sed by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google LLC is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Google LLC in the USA wit­hout any addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Google Ana­ly­tics hand­les user data in Goo­g­le’s pri­vacy policy at: https://support.google.com/analytics/answer/6004245?hl=de

Sto­rage period
Your data is stored on the end device for up to 14 months.

7. Inte­gra­tion of Insta­gram

Data pro­ce­s­sing
We ope­rate our own public Insta­gram page through which you can com­mu­ni­cate with us. For this pur­pose, we use the social media chan­nel Insta­gram from Meta Plat­forms Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dub­lin 2, Ire­land. We have our own Insta­gram pro­file under the name wal­dis­sa­fes. We have also pla­ced Insta­gram social media but­tons on our web­site so that you can easily link to our Insta­gram pro­file.
Your data will only be pro­ce­s­sed when you click on the Insta­gram social media but­ton, click on embedded images or cont­act us on Insta­gram. The data coll­ec­ted is also anony­mi­zed and then used in the form of sta­tis­tics. A reco­gnizable mar­ker is also set.
We are joint con­trol­lers with Meta Plat­forms Ire­land Ltd. in accordance with Art. 26 GDPR, but only with regard to the coll­ec­tion and trans­mis­sion of data. Meta Plat­forms Ire­land Ltd. is solely respon­si­ble for the sub­se­quent pro­ce­s­sing of the infor­ma­tion by Meta.
We have con­clu­ded a joint con­trol­ler­ship agree­ment to deter­mine the respec­tive respon­si­bi­li­ties for ful­fil­ling the obli­ga­ti­ons under the GDPR. Accor­din­gly, we are respon­si­ble for informing the users of our web­site, while Meta is respon­si­ble for ful­fil­ling requests regar­ding the rights of data sub­jects in accordance with Art. 15 to 21 GDPR. Howe­ver, within the frame­work of joint respon­si­bi­lity, you can in prin­ci­ple assert your data sub­ject rights against each of the joint con­trol­lers.
Meta pro­ce­s­ses the per­so­nal data in accordance with its data pro­tec­tion prin­ci­ples and decla­ra­ti­ons. Fur­ther infor­ma­tion on how Meta pro­ce­s­ses per­so­nal data can be found in Meta’s pri­vacy policy at
https://help.instagram.com/155833707900388

Per­so­nal data
If you cont­act us or click on the Insta­gram but­ton, the fol­lo­wing infor­ma­tion will be coll­ec­ted from you

  • User name or first and last name
  • Pos­si­bly pic­ture, data that you send us in the course of cont­ac­ting us
  • IP address, con­nec­tion data, brow­ser data and data about the con­tent acce­s­sed When you click on the media but­ton

By clicking on the but­ton, you will be redi­rec­ted to the pro­vi­der’s web­site. We have no influence on the pro­ce­s­sing of per­so­nal data on third-party web­sites.

Pur­pose
The Insta­gram social media but­ton is used to struc­ture our web­site and is used to place other web con­tent on our web­site. If you cont­act us via Insta­gram, we will pro­cess the data for the pur­pose of respon­ding to your request.

Legal basis
The data pro­ce­s­sing via the click on the social media but­tons is car­ried out with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.
If you cont­act us via our Insta­gram pro­file, we pro­cess your data to ful­fill the con­tract or to take pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 lit. b GDPR and on the basis of our legi­ti­mate inte­rest in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 lit. f GDPR to pro­vide a com­mu­ni­ca­tion option.

Neces­sity
The data men­tio­ned is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Your data will be pro­ce­s­sed by Meta Plat­forms Ire­land Ltd. Per­so­nal data may also be trans­fer­red to the US parent com­pany Meta Plat­forms Inc. Meta Plat­forms Inc. is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Meta in the USA wit­hout any fur­ther addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Meta hand­les user data in Meta’s pri­vacy policy at
https://help.instagram.com/155833707900388?cms_id=155833707900388

Sto­rage period
The coo­kies set are stored on the end device for up to 10 years. Data pro­ce­s­sed in con­nec­tion with your cont­act via our Insta­gram pro­file will be dele­ted after 1 year, unless we have a reten­tion obli­ga­tion of 5 or 10 years for the com­mu­ni­ca­tion.

8. Inte­gra­tion of Face­book

Data pro­ce­s­sing
We ope­rate our own public Face­book page through which you can com­mu­ni­cate with us. For this pur­pose, we use the Face­book social media chan­nel of Meta Plat­forms Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dub­lin 2, Ire­land. We have our own Face­book pro­file under the name Waldis Tresore. We have also pla­ced social media but­tons from Face­book on our web­site so that you can easily link to our Face­book pro­file
Your data will only be pro­ce­s­sed when you click on the Face­book social media but­ton, click on embedded images or cont­act us on Insta­gram. The data coll­ec­ted is also anony­mi­zed and then used in the form of sta­tis­tics. A reco­gnizable mar­ker is also set.
We are joint con­trol­lers with Meta Plat­forms Ire­land Ltd. in accordance with Art. 26 GDPR, but only with regard to the coll­ec­tion and trans­mis­sion of data. Meta Plat­forms Ire­land Ltd. is solely respon­si­ble for the sub­se­quent pro­ce­s­sing of the infor­ma­tion by Meta.
We have con­clu­ded a joint con­trol­ler­ship agree­ment to deter­mine the respec­tive respon­si­bi­li­ties for ful­fil­ling the obli­ga­ti­ons under the GDPR. Accor­din­gly, we are respon­si­ble for informing the users of our web­site, while Meta is respon­si­ble for ful­fil­ling requests regar­ding the rights of data sub­jects in accordance with Art. 15 to 21 GDPR. Howe­ver, within the frame­work of joint respon­si­bi­lity, you can in prin­ci­ple assert your data sub­ject rights against each of the joint con­trol­lers.
Meta pro­ce­s­ses the per­so­nal data in accordance with its data pro­tec­tion prin­ci­ples and decla­ra­ti­ons. For more infor­ma­tion on how Meta pro­ce­s­ses per­so­nal data, please refer to Insta­gram’s pri­vacy policy at
https://www.facebook.com/about/privacyshield

Per­so­nal data
If you cont­act us, the fol­lo­wing infor­ma­tion will be coll­ec­ted from you

  • User name or first and last name
  • Pos­si­ble pic­ture, data that you send us when you cont­act us.
  • IP address, con­nec­tion data, brow­ser data and data on the con­tent acce­s­sed When you click on the social media but­ton

By clicking on the but­ton, you will be redi­rec­ted to the pro­vi­der’s web­site. We have no influence on the pro­ce­s­sing of per­so­nal data on third-party web­sites.

Pur­pose
The Face­book social media but­ton ser­ves to struc­ture our web­site and is used to place other web con­tent on our web­site. If you cont­act us via Face­book, we will pro­cess the data for the pur­pose of respon­ding to your request.

Legal basis
The data pro­ce­s­sing via the click on the social media but­tons is car­ried out with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.
If you cont­act us via our Face­book pro­file, we pro­cess your data to ful­fill the con­tract or to take pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a FADP or Art. 6 para. 1 lit. b GDPR and on the basis of our legi­ti­mate inte­rest in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 lit. f GDPR to pro­vide a com­mu­ni­ca­tion option.

Neces­sity
The afo­re­men­tio­ned data is not neces­sary for the func­tion­a­lity of the web­site.
Data trans­fer to third count­ries Your data will be pro­ce­s­sed by Meta Plat­forms Ire­land Ltd (Meta). Per­so­nal data may also be trans­fer­red to the US parent com­pany Meta Plat­forms Inc. Meta Plat­forms Inc. is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Meta in the USA wit­hout any fur­ther addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Meta hand­les user data in Meta’s pri­vacy policy at: https://www.facebook.com/about/privacyshield

Sto­rage period
The coo­kies set are stored on the end device for up to 10 years. Data pro­ce­s­sed in con­nec­tion with your cont­act via our Face­book pro­file will be dele­ted after 1 year, unless we are requi­red to retain the com­mu­ni­ca­tion for 5 or 10 years.

9. Inte­gra­tion of Lin­ke­dIn

Data pro­ce­s­sing
We ope­rate our own public Lin­ke­dIn pre­sence through which you can com­mu­ni­cate with us. We use the social media chan­nel Lin­ke­dIn Ire­land Unli­mi­ted Com­pany, Wil­ton Plaza, Gard­ner House, Dub­lin 2, Ire­land. We have our own Lin­ke­dIn pro­file under the name WALDIS Tresore AG. We have also pla­ced social media but­tons from Lin­ke­dIn on our web­site so that you can easily link to our Lin­ke­dIn pro­file
Your data will only be pro­ce­s­sed when you click on the Lin­ke­dIn social media but­ton, click on embedded images or cont­act us on Lin­ke­dIn. The data coll­ec­ted is also anony­mi­zed and then used in the form of sta­tis­tics. A reco­gnizable mar­ker is also set.

Per­so­nal data
If you cont­act us, the fol­lo­wing infor­ma­tion will be coll­ec­ted from you:

  • User beha­vior
  • IP address
  • Con­nec­tion data
  • Device and brow­ser infor­ma­tion
  • Data about the con­tent acce­s­sed when clicking on social media but­tons
    • User name or first and last name
    • Pos­si­bly image, data that you send us in the con­text of cont­ac­ting us

By clicking on the social media but­ton, you will be redi­rec­ted to the pro­vi­der’s web­site. We have no influence on the pro­ce­s­sing of per­so­nal data on third-party web­sites.
You can find more infor­ma­tion about Lin­ke­dIn’s data pro­ce­s­sing at: https://www.linkedin.com/legal/privacy-policy

Pur­pose
The social plug-ins serve to struc­ture our web­site and are used to place other web con­tent on our web­site. If you cont­act us via Lin­ke­dIn, we will pro­cess the data for the pur­pose of respon­ding to your request.

Legal basis
The data pro­ce­s­sing via the click on the social media but­tons is car­ried out with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given via the coo­kie ban­ner.
If you cont­act us via our Lin­ke­dIn pro­file, we pro­cess your data to ful­fill the con­tract or to carry out pre-con­trac­tual mea­su­res in accordance with Art. 31 para. 2 lit. a DSG or Art. 6 para. 1 lit. b DSGVO and on the basis of our legi­ti­mate inte­rest in accordance with Art. 31 para. 1 DSG or Art. 6 para. 1 lit. f DSGVO to pro­vide a com­mu­ni­ca­tion option

Neces­sity
The data men­tio­ned is not neces­sary for the func­tion­a­lity of the web­site.
Data trans­fer to third count­ries Lin­ke­dIn Ire­land Unli­mi­ted also shares data with its affi­lia­ted com­pa­nies such as Lin­ke­dIn Cor­po­ra­tion (USA), Lin­ke­dIn Sin­ga­pore and Micro­soft Cor­po­ra­tion (USA) in accordance with its pri­vacy policy and is not a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works and it is also other­wise pos­si­ble that Lin­ke­dIn may trans­fer data to third count­ries. The­r­e­fore, your data may be sub­ject to a level of data pro­tec­tion during data trans­fer that is not com­pa­ra­ble to that in Switz­er­land or the EU. If you con­sent to the pro­ce­s­sing by Lin­ke­dIn, you the­r­e­fore also con­sent to your per­so­nal data being trans­fer­red to inse­cure third count­ries in accordance with Art. 17 FADP and Art. 49 para. 1 lit. a GDPR.

Sto­rage period
The coo­kies set are stored on the end device for up to 10 years. Data pro­ce­s­sed in con­nec­tion with your cont­act via our Lin­ke­dIn pro­file will be dele­ted after 1 year, unless we have a reten­tion obli­ga­tion of 5 or 10 years for the com­mu­ni­ca­tion.

10. Inte­gra­tion of You­Tube

Data pro­ce­s­sing
In order to make our web­site more inte­re­st­ing for you, we inte­grate video com­pon­ents from You­Tube on our web­site. We also ope­rate a You­Tube chan­nel under the name @WaldisTresoreAG The data from You­Tube is pro­ce­s­sed by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
Accor­ding to You­Tube, your data — in par­ti­cu­lar which of our web­sites you have visi­ted and device-spe­ci­­fic infor­ma­tion inclu­ding the IP address — is only trans­mit­ted to the You­Tube ser­ver in the USA in “exten­ded data pro­tec­tion mode” when you watch the video.
If you are log­ged in to You­Tube at the same time, this infor­ma­tion will be assi­gned to your You­Tube mem­ber account. You can pre­vent this by log­ging out of your mem­ber account before visi­ting our web­site.
Fur­ther infor­ma­tion about You­Tube can be found at https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/

Per­so­nal data
If the data sub­ject is log­ged in to You­Tube at the same time, You­Tube reco­gnizes which spe­ci­fic sub­page of our web­site the data sub­ject is visi­ting when a sub­page con­tai­ning a You­Tube video is acce­s­sed. This infor­ma­tion is coll­ec­ted by You­Tube and Google and assi­gned to the respec­tive You­Tube account of the data sub­ject

Pur­pose
Our inte­rest lies in the smooth inte­gra­tion of the videos and the appe­al­ing design of our web­site.

Legal basis
The data pro­ce­s­sing takes place with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR, which you have given by clicking on the You­Tube but­ton.

Neces­sity
The data men­tio­ned is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Ihre Daten wer­den dabei von Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Irland, bear­bei­tet. Dabei kön­nen Per­so­nen­da­ten auch an die US-Mut­ter­­ge­­sel­l­­schaft Google LLC über­tra­gen wer­den. Google LLC ist Teil­neh­me­rin des EU‑U.S. uns Swiss‑U.S. Data Pri­vacy Frame­works. Somit kön­nen Ihre Per­so­nen­da­ten an Google in die USA über­mit­telt wer­den, ohne dass wei­tere zusätz­li­che Garan­tien erfor­der­lich sind. Mehr Infor­ma­tio­nen zum Umgang mit Nut­zer­da­ten bei Google Ana­ly­tics fin­den Sie in der Daten­schutz­er­klä­rung von Google unter: https://support.google.com/analytics/answer/6004245?hl=de

Reten­tion period
The sto­rage period is based on the infor­ma­tion in Goo­g­le’s data pro­tec­tion decla­ra­tion, available at https://policies.google.com/privacy?hl=de#inforetaining

11. Inte­gra­tion of Google Maps

Data pro­ce­s­sing
On our web­site we use Google Maps (API) from Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Google Maps is a web ser­vice for dis­play­ing inter­ac­tive (land) maps in order to visua­lize geo­gra­phi­cal infor­ma­tion. Using this ser­vice will show you our loca­tion and make it easier for you to find us.

Per­so­nal data
Infor­ma­tion about your use of our web­site (such as your IP address) will only be trans­mit­ted to Google ser­vers in the USA and stored there after you have given your con­sent via the coo­kie ban­ner. This takes place regard­less of whe­ther Google pro­vi­des a user account through which you are log­ged in or whe­ther no user account exists. If you are log­ged in to Google, your data will be assi­gned directly to your account. If you do not wish your data to be asso­cia­ted with your Google pro­file, you must log out before acti­vat­ing the but­ton. Google stores your data (even for users who are not log­ged in) as usage pro­files and ana­ly­zes them.
You can find the Google Maps pri­vacy policy here: https://policies.google.com/privacy?hl=de&gl=de

Pur­pose
The pur­pose of inte­gra­ting Google Maps directly on our web­site is to make it easier to find our business pre­mi­ses and to sim­plify cont­act with the cus­to­mer. For Google, data pro­ce­s­sing ser­ves the pur­pose of dis­play­ing per­so­na­li­zed adver­ti­sing, mar­ket rese­arch and/or needs-based design of its web­site. We have no influence on the pro­ce­s­sing of per­so­nal data on third-party web­sites.

Legal basis
The pro­ce­s­sing is car­ried out with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR.

Neces­sity
The data men­tio­ned is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Your data will be pro­ce­s­sed by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Google LLC in the USA wit­hout any addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Google Ana­ly­tics hand­les user data in Goo­g­le’s pri­vacy policy at: https://support.google.com/analytics/answer/6004245?hl=de

Reten­tion period
The reten­tion period is based on the infor­ma­tion on the dif­fe­rent types of data in Goo­g­le’s pri­vacy policy, available at https://policies.google.com/privacy?hl=de&gl=de#inforetaining

12. Inte­gra­tion of Google Fonts

Data pro­ce­s­sing
Our web­site uses a font from Google Fonts, a font ser­vice ope­ra­ted by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

Per­so­nal data
Each time this web­site is acce­s­sed, files are loa­ded from a Google ser­ver to dis­play the texts in a spe­ci­fic font. Your IP address may be trans­mit­ted to a Google ser­ver and stored as part of the usual web­log.

Pur­pose
The pur­pose of this data pro­ce­s­sing is the cor­rect dis­play of the text on the web­site.

Legal basis
The pro­ce­s­sing is car­ried out with your express con­sent in accordance with Art. 31 para. 1 FADP or Art. 6 para. 1 sen­tence 1 lit. a GDPR.

Neces­sity
The data men­tio­ned is not neces­sary for the func­tion­a­lity of the web­site.

Data trans­fer to third count­ries
Your data will be pro­ce­s­sed by Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Per­so­nal data may also be trans­fer­red to the US parent com­pany Google LLC. Google LLC is a par­ti­ci­pant in the EU‑U.S. and Swiss‑U.S. Data Pri­vacy Frame­works. This means that your per­so­nal data can be trans­fer­red to Google in the USA wit­hout any addi­tio­nal gua­ran­tees being requi­red. You can find more infor­ma­tion on how Google Ana­ly­tics hand­les user data in Goo­g­le’s pri­vacy policy at: https://support.google.com/analytics/answer/6004245?hl=de

Reten­tion period
The sto­rage period is based on the infor­ma­tion in Goo­g­le’s data pro­tec­tion decla­ra­tion, available at https://policies.google.com/privacy?hl=de#inforetaining

Data pro­ce­s­sing
Your per­so­nal data will not be trans­fer­red to third par­ties for pur­po­ses other than those listed or to con­trac­tors other than those listed and their sub­con­trac­tors.
Third par­ties are tech­no­logy pro­vi­ders for the opti­mal ope­ra­tion of the web­sites and social media pre­sen­ces and for the pro­vi­sion of the ser­vices listed above.

Data pro­ce­s­sing
There is no dis­clo­sure to third count­ries wit­hout an ade­quate level of data pro­tec­tion or only under the con­trac­tual obli­ga­tion to com­ply with an ade­quate level of data pro­tec­tion (EU stan­dard clau­ses).

Per­so­nal data is only trans­fer­red to third count­ries if the data pro­tec­tion requi­re­ments of Art. 6 FADP or Art. 44 et seq. GDPR are met.

A third coun­try is a coun­try out­side Switz­er­land or the Euro­pean Eco­no­mic Area (EEA) in which Swiss data pro­tec­tion law or the Euro­pean GDPR is not directly appli­ca­ble. A third coun­try is con­side­red unsafe if, accor­ding to the FDPIC or the EU Com­mis­sion, the coun­try does not have an ade­quate level of data pro­tec­tion.

For data trans­fers bet­ween the EU and the USA and bet­ween Switz­er­land and the USA, US com­pa­nies have the option of par­ti­ci­pa­ting in the Data Pri­vacy Frame­work. This frame­work ensu­res GDPR- or DSG-com­pli­ant data trans­fer to the USA and cor­re­spon­din­gly com­pli­ant data pro­ce­s­sing, in which all rights under EU law or Swiss law of the data sub­ject can be safe­guarded. Whe­ther the spe­ci­fic data pro­ces­sor in the USA par­ti­ci­pa­tes in this frame­work can be cla­ri­fied on the web­site: https://www.dataprivacyframework.gov/s/. In addi­tion, you will find fur­ther infor­ma­tion on the pro­ce­s­sing of user data in the spe­ci­fic data pro­tec­tion decla­ra­ti­ons of the data pro­ces­sor. In this data pro­tec­tion infor­ma­tion, we inform you when and how we trans­fer per­so­nal data to the USA or other inse­cure third count­ries.

Data pro­ce­s­sing
We take appro­priate mea­su­res to ensure that your per­so­nal data can­not be viewed or sto­len by third par­ties wit­hout aut­ho­rization. In par­ti­cu­lar, we take appro­priate tech­ni­cal (e.g. fire­wall, pass­word pro­tec­tion, SSL encryp­tion, etc.) and orga­nizatio­nal (e.g. rest­ric­tion of aut­ho­ri­zed per­sons, trai­ning of aut­ho­ri­zed per­sons, etc.) mea­su­res to ensure that only aut­ho­ri­zed per­sons have access to this data. Our data pro­ce­s­sing and secu­rity mea­su­res are con­ti­nuously impro­ved in line with tech­no­lo­gi­cal deve­lo­p­ments.

Per­so­nal data
Per­so­nal data is any infor­ma­tion rela­ting to an iden­ti­fied or iden­ti­fia­ble natu­ral per­son, inclu­ding name, address, tele­phone num­ber or e‑mail or IP address.

Pur­pose
We use SSL encryp­tion for secu­rity rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as the requests you send to us as the site ope­ra­tor. You can reco­gnize an encrypted con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser line.
If SSL encryp­tion is acti­va­ted, the data you trans­mit to us can­not be read by third par­ties.

Data pro­ce­s­sing
We will retain your per­so­nal data for as long as we deem neces­sary or appro­priate to com­ply with appli­ca­ble laws or for as long as it is neces­sary for the pur­po­ses for which it was coll­ec­ted. We delete your per­so­nal data as soon as it is no lon­ger requi­red and in any case after the legally pre­scri­bed maxi­mum reten­tion period of 5 or 10 years. Data that is no lon­ger requi­red and for which there is no legal obli­ga­tion to retain it will be destroyed once the pur­pose and justi­fi­ca­tion no lon­ger apply.

Per­so­nal data
In detail, we store your data for the fol­lo­wing period:
We retain data that we pro­cess by law for the sta­tu­tory reten­tion period, for exam­ple if requi­red by labor, social secu­rity or tax law or the Ordi­nance on Business Records;
Data that we require for the per­for­mance of a con­tract is retai­ned for at least the dura­tion of the con­tract and for a maxi­mum of 10 years the­re­af­ter, unless we require the data to assert our rights;
Data that we pro­cess to pro­tect our legi­ti­mate inte­rests will be retai­ned for a maxi­mum of ten years after the end of the con­trac­tual rela­ti­on­ship, unless we need the data to assert our rights.

As a data sub­ject, you may assert various claims against us in accordance with the appli­ca­ble natio­nal and inter­na­tio­nal law.

We may pro­cess your per­so­nal data again to ful­fill these claims.

Depen­ding on the appli­ca­ble law, data sub­jects may assert the fol­lo­wing rights:

  • To request infor­ma­tion about your per­so­nal data pro­ce­s­sed by us. In par­ti­cu­lar, infor­ma­tion pur­su­ant to Art. 25 FADP or Art. 15 GDPR may con­tain infor­ma­tion
    • about the pur­po­ses of pro­ce­s­sing
    • the cate­gory of per­so­nal data
    • the cate­go­ries of reci­pi­ents to whom your data has been or will be dis­c­lo­sed
    • the plan­ned sto­rage period
    • the exi­stence of a right to rec­ti­fi­ca­tion, era­sure,
    • rest­ric­tion of pro­ce­s­sing or objec­tion
    • the exi­stence of a right to lodge a com­plaint
    • the ori­gin of your data if it was not coll­ec­ted by us
      the exi­stence of auto­ma­ted decis­ion-making, inclu­ding pro­fil­ing and, where appli­ca­ble, meaningful infor­ma­tion about its details
  • to imme­dia­tely request the cor­rec­tion of incor­rect or incom­plete per­so­nal data stored by us (Art. 6 para. 5 FADP and Art. 16 GDPR);
  • to demand the rest­ric­tion of the pro­ce­s­sing of your per­so­nal data if the accu­racy of the data is dis­pu­ted by you, the pro­ce­s­sing is unlawful, but you refuse to delete it and we no lon­ger need the data, but you need it to assert, exer­cise or defend legal claims or you have objec­ted to the pro­ce­s­sing in accordance with Art. 21 GDPR (Art. 32 para. 4 FADP or Art. 18 GDPR);
  • to receive your per­so­nal data that you have pro­vi­ded to us in a struc­tu­red, com­monly used and machine-rea­da­ble for­mat or to request that it be trans­mit­ted to ano­ther con­trol­ler (Art. 20 GDPR)
  • to request the dele­tion of your per­so­nal data stored by us, unless the pro­ce­s­sing is neces­sary to exer­cise the right to free­dom of expres­sion and infor­ma­tion, to ful­fill a legal obli­ga­tion, for rea­sons of public inte­rest or to assert, exer­cise or defend legal claims (Art. 32 para. 2 lit. c DSG or Art. 17 GDPR);
  • to with­draw your con­sent once given to us at any time. As a result, we may no lon­ger con­ti­nue the data pro­ce­s­sing that was based on this con­sent in the future (Art. 30 para. 2 lit. b FADP and Art. 7 para. 3 GDPR);
  • object to the pro­ce­s­sing if your per­so­nal data is pro­ce­s­sed on the basis of legi­ti­mate inte­rests in accordance with Art. 6 para. 1 sen­tence 1 lit. f GDPR (Art. 21 GDPR) and if there are rea­sons for this ari­sing from your par­ti­cu­lar situa­tion or if the objec­tion is direc­ted against direct adver­ti­sing. In the lat­ter case, you have a gene­ral right to object, which will be imple­men­ted by us wit­hout spe­ci­fy­ing a par­ti­cu­lar situa­tion;
  • to lodge a com­plaint with a super­vi­sory aut­ho­rity (see above) (Art. 49 FADP or Art. 77 GDPR).

We reserve the right to change this pri­vacy policy at any time or to adapt it to new pro­ce­s­sing methods. The cur­rent pri­vacy policy can be acce­s­sed at any time at www.tresore.ch/datenschutz.