Privacy Policy

The protection of your personal data and the preservation of your privacy are important to us. You can expect us to manage your data sensitively and carefully and to ensure a high level of data security.

We are committed to managing your data responsibly. Consequently, we consider it a matter of course to comply with the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP) and any other applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) of the European Union (EU).

In this privacy policy, we inform you about the most important aspects of data processing in our company and the data protection rights to which you are entitled. This privacy policy covers the collection of personal data both online and offline, including personal data that we have received from various sources, e.g. from customers, suppliers, business partners, websites, apps, third-party social networks and events.

Personal data is information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address.

1 Contact us

The controller within the meaning of the data protection laws, in particular the FADP and the GDPR, as well as other data protection regulations is:

Kalkfabrik Netstal AG
Oberlanggüetli
CH-8754 Netstal
Schweiz
Telefon: +41 55 646 91 11
Mail: info(at)kfn.ch
www.kfn.ch

2 Scope and principles of data collection and processing of personal data

We collect, process and use your personal data for the following purposes:

2.1 Realization of business activities

As part of our business activities, we collect and process personal data in connection with

the initiation of business transactions,
the sale and distribution of our products and the provision of our services,
the processing of orders and contracts,
the management of customer relationships,
invoicing,
a visit to our production facilities,
answering questions and concerns,
information about our products and services and their marketing,
support in technical matters,
the evaluation and further development of services and products,
participation in surveys, organising events or promoting projects.

This personal data consists of:

contact details (e.g. first name and surname, address, e-mail address, mobile or other telephone numbers),
purchase and other transaction data,
payment information,
customer service information,
information on personal or professional interests,
experience with our products and services,
images, comments and other content that you make available to us,
information that we receive from third parties.

We collect and process your personal data based on:

your consent (e.g. by filling out contact or order forms),
to conclude and process contracts with our customers and business partners,
our legitimate interests, including gathering market intelligence, communicating with you, delivering and improving our products or services, managing customer, supplier and other relationships, or
for the fulfilment of legal obligations.

Personal data is also collected and processed during the application process. We may collect the following personal data as part of the application process:

contact information (e.g. name, address, e-mail address, telephone number),
professional information (e.g. CV, certificates, qualifications, references),
other information that you provide to us voluntarily (e.g. letter of application, references).

2.2 Visit our website

When you visit our website, our servers temporarily store every access in a log file, the so-called server log files. The following technical data is stored by us without any action on your part:

IP address of the requesting computer,
date and time of access/retrieval,
name and URL of the retrieved data,
your computer's operating system and the browser you are using (type, version, language),
browser settings,
device type (desktop, tablet, mobile),
website from which the access was made,
country from which our website is accessed,
name of your internet access provider,
time zone difference to Greenwich Mean Time (GMT),
content of the request (specific page),
access status/HTTP status code,
the amount of data transferred in each case,
last visited website,
language and version of the browser software,
activated browser plugins,
others.

This data is not stored together with your other personal data. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, but no later than 12 months after it is automatically deleted. In the case of the collection of your personal data for the provision of the website, this is the case when the respective session has ended.

The basis for the temporary storage of your personal data and the log files is our legitimate interest. The legitimate interest exists to

to enable the use of our website (connection establishment),
guarantee system security and stability in the long term,
to further improve our offer and our Internet presence,
collect statistical data,
to provide law enforcement authorities with the information necessary for prosecution in the event of an incident.

2.3 Contact us

You have the option of contacting us by e-mail on our website. In this case, the information provided in the e-mail, e.g. your e-mail address, the subject of your contact and your message, will be processed for the purpose of managing your enquiry and processing it.

The personal data transmitted by you will not be merged with other data.

The basis for processing your personal data is our legitimate interest in processing your enquiry. If the purpose of making contact is to fulfil a contract to which you are a party or to implement precontractual measures, this is an additional basis for processing your personal data.

Your personal data will be deleted as soon as your enquiry has been dealt with. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and the deletion does not conflict with any statutory retention obligations.

2.4 Job applications

When you apply for a job with us, we process the personal data that we receive from you as part of the application process. In addition to your personal details, education, work experience and skills, this includes the usual correspondence data such as postal address, e-mail address and telephone number. In addition, all documents submitted by you in connection with the application, such as a letter of motivation, CV and references, will be processed. Applicants can also voluntari-ly provide us with additional information. This data will only be stored, analysed, processed or for-warded internally as part of your application. It may also be processed for statistical purposes (e.g. reporting). In this case, it is not possible to draw conclusions about individual persons.

Processing may also be conducted electronically. This is particularly the case if you send us the relevant application documents electronically, for example by e-mail.

Your applicant data is stored separately from the other user data and is not merged with it.

Your applicant data will be processed to fulfil our precontractual or contractual obligations as part of the application process. If we conclude an employment contract with you, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

If the application procedure ends without employment, your personal data will be stored for 12 months for documentation purposes and then deleted, unless you have given us your consent to use your data for further application procedures with us and, if necessary, to contact you again.

The basis for processing your personal data is our legitimate interest in processing your application. If the processing of the application data serves the fulfilment of a contract to which you are/will be a party or the implementation of precontractual measures, this is an additional basis.

You can withdraw your application at any time. Please send your objection to the person named as the contact person in the job advertisement or to the e-mail address info@kfn.ch. In this case, we will not examine your application any further and will return the documents to you.

If you apply for a job with us, we will process your personal data to assess your application. The following data is collected about you during the application process:

address*
first name and surname*
street*
postcode*
place*
nationality*
residence permit*
e-mail address*
telephone
current function*
possible entry date*
photo*
details of professional experience and training (certificates and CV)*
letter of motivation*

The applicant data marked as mandatory fields (*mandatory) is required to allocate the application and to be able to contact you regarding your application and check the prospects of success of your application. This data will only be stored, analysed, processed or forwarded internally as part of your application. It may also be processed for statistical purposes (e.g. reporting). In this case, it is not possible to draw conclusions about individual persons.

2.5 Registration

You can register on our website to use additional functions on the site (e.g. downloading technical data sheets, safety data sheets, certificates or other publications). We use the data entered for this purpose only for the purpose of using the respective offer for which you have registered. This also includes online-supported communication with you. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse your registration.

The basis for processing your personal data is the existence of your consent. Your consent is therefore obtained for the processing of your personal data as part of the registration process and reference is made to this privacy policy. If the registration serves the fulfilment of a contract to which you are a party or the implementation of precontractual measures, this is an additional basis for the processing of your personal data.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

2.6 Marketing purposes

We also use your personal data based on our legitimate interest for the following purposes:

to maintain the customer relationship with you,
to constantly improve your shopping experience and make it customer-friendly and personalised for you,
to discuss your orders with you,
to communicate about specific products or marketing campaigns,
and to recommend products or services that may be of interest to you.

If you do not wish this, you can object to the processing of your personal data for the purpose of direct marketing at any time. If you object, we will no longer process your personal data for this purpose. Please send your objection to the following e-mail address: info@kfn.ch.

2.7 Downloads

If you wish to download technical data sheets, we require your e-mail address. We need this information to determine which corporate customers are interested in which data and which data is relevant to them.

If you would like to download publications, we require the following information: company, surname, first name, street, postcode, town/city and e-mail address. This information is important for us so that we can send you the documents by post. The information will also be used for subsequent marketing purposes.

2.8 Provision of contractual services

To fulfil our precontractual and contractual obligations, we process your inventory and contract data (e.g. services used, subject matter of the contract, contractual communication, names of contact persons). The data processed in this context, the type, scope, purpose and necessity of its processing are determined by the underlying contractual relationship.

The personal data processed includes master data (e.g. name, address, etc.), contact data (e.g. e-mail address, telephone number, etc.), contract data (e.g. services used, subject matter of the contract, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history, etc.).

The data is deleted when it is no longer required for the fulfilment of contractual or statutory duties of care and for dealing with any warranty and comparable obligations, whereby the necessity of retaining the data is reviewed at irregular intervals. Otherwise, the statutory retention obligations apply.

2.9 Administration, financial accounting, office organisation, contact management

We process data in accordance with data protection regulations in the context of administrative tasks and the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process as part of the provision of our contractual services. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organisation and archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data regarding contractual services and contractual communication corresponds to the information specified in these processing activities.

We disclose or transmit data to the tax authorities, consultants, such as tax advisors or Auditors, as well as other fee centres and payment service providers.

We also store information on suppliers, event organisers and other business partners based on our business interests, e.g. for the purpose of contacting them afterwards.

We store most of this companyrelated data in accordance with the statutory retention obligations.

3 Video surveillance

We use video surveillance for the purpose of our legitimate interests:

ensuring general safety in buildings and infrastructure,
the protection of premises, buildings, persons and property,
the prevention of criminal offences and the preservation of evidence in the event of criminal offences as well as the detection and prevention of operational disruptions (fire protection, safety at the workplace). The recordings collected are not used for the purpose of monitoring the activities conducted by employees.

We process the following data in connection with video recordings:

Image recordings from video cameras,
Technical information and marginal data, e.g. location of the camera, place and time of recording.

Video cameras are installed in particular in the areas of visitor and employee entrances to our buildings, at the entrances to the car parks and delivery zones, and at emergency exits. No audio recordings are made. A pictogram at the entrances to the site (north and south) indicates that recording is taking place. Recording is always continuous at all locations (24/7).

We use Reolink software for video surveillance. The data is physically stored on our internal servers, which can only be accessed via VPN or app using two-factor authentication. The recordings are only accessible to a small number of security officers in our organisation. They are temporarily stored for a maximum of fourteen (14) days and automatically deleted after this period unless they are required for special needs in connection with investigative activities or other requirements prescribed by law or authorised activities such as for the work of the police or judiciary.

In individual cases and as required, we may transfer data from video surveillance to competent authorities and courts (e.g. law enforcement authorities for the preservation of evidence or for security police purposes), employees, witnesses or victims (as part of the enforcement of claims), insurance companies (for the settlement of insurance claims) and other third parties (e.g. lawyers, experts). Data will only be passed on if we are legally obliged or authorised to do so or if this is necessary to protect our interests.

We may use third parties as service providers for the operation and maintenance of our video systems. Service providers are carefully selected and monitored, and the corresponding data protection agreements are concluded.

There is no transfer of data to third countries.

In accordance with the applicable data protection law and if the conditions are met, you have the rights set out in the following section 13.

4 Cookies

4.1 What are cookies?

We use cookies on our website based on our legitimate interests. Cookies are small text files that are placed and stored on your end device with the help of the browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. By using cookies, we can provide you with more user-friendly services that would not be possible without cookies.

By means of a cookie, the information and offers on our website can be optimised in your interest. Cookies enable us to recognise visitors to our website. The purpose of this recognition is to make it easier for you to use our website. For example, you do not have to re-enter your access data each time you visit our website because this is taken over by our website and the cookie stored on your end device.

4.2 What data is stored in the cookies?

A variety of information can be stored in the cookies we use, including personal data such as IP address, location, language setting, operating system, browser details, page views, website references, timestamps and much more.

Only pseudonymised data is stored. When the cookie is activated, it is assigned an identification number. Your personal data is not assigned to this identification number. Your name, IP address or similar data that would allow the cookie to be directly assigned to you are not stored in the cookie.

4.3 What types of cookies do we use?

4.3.1 Temporary cookies

We use temporary cookies. These are automatically deleted when you log out or close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the web session. This allows your computer to be recognised when you return to the website.

4.3.2 Persistent/permanent cookies

In addition, we use persistent cookies that are stored on your computer beyond the respective usage process. When you visit us again, we automatically recognise that you have already visited us and which entries and settings you prefer. These cookies are stored on your hard drive and delete themselves after the specified time. Thanks to these files, it is possible, for example, to display information on the site that is specifically tailored to your interests.

4.3.3 Non-personal cookies

Non-personal cookies do not transmit any personal data to us. For example, statistics cookies. They help us to understand how visitors interact with the website by collecting and reporting information anonymously.

4.3.4 Preference cookies

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.

4.3.5 Performance cookies

We use performance cookies to collect information about how you use our services. This helps us to improve our services. For example, we may use these cookies to determine whether you have accessed a particular page.

4.3.6 Cookies from third-party providers

We also use functions of some web analysis services that help us to make our Internet offer and the website more interesting for you. Therefore, when you visit our website, cookies from partner companies are also stored on your hard drive (so-called third-party cookies). Further information on the use of third-party cookies can be found in the "Analysis tools" section (see section 5 below).

4.4 How can you prevent the use of cookies or delete cookies?

Most Internet browsers accept cookies automatically. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you can allow the acceptance of cookies for certain cases only in individual cases or generally exclude them. You can also activate the automatic deletion of cookies when you close your browser. In addition, cookies that have already been set can be deleted at any time via an Internet browser or other software programmes. This is possible in all common Internet browsers.

You can use the following links to find out about this option for the most commonly used browsers:

However, the complete deactivation of cookies may mean that you cannot use all the functions of our website to their full extent.

5 Analysis and marketing/tracking tools

We use various website analysis and tracking services on our website, which we explain in more detail below. We will also show you how you can prevent these services from analysing your usage behaviour on our website. If we ask for your consent to the use of the data provider services, the legal basis for this form of data processing is your consent. If we do not obtain your consent, your personal data will be processed based on our legitimate interests (i.e. for optimisation and marketing purposes and the interest-based design of our website).

5.1 Google services

On our website we use assorted services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your habitual residence in the European Economic Area (EEA) or in Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"):

Google Analytics,
Google Analytics Remarketing,
Google Ads and Google Conversion Tracking,
Google Tag Manager.

Further information on the individual specific Google services that we use on our websites can be found below.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable your use of our website to be analysed. The information thus generated about your use of our website may be transmitted to a Google server in the USA and stored there.

We use tools provided by Google which, according to Google, may process personal data in countries where Google or Google's subcontractors maintain facilities (Google Ads Data Processing Terms - Subprocessor Information). Google promises to ensure an adequate level of data protection by relying on the EU standard contractual clauses (Google Legal Frameworks for Data Transfers).

You can find more information in Google's privacy policy under Google Privacy Policy. You can find information on Google's privacy settings under Google Privacy and Terms.

You can find information on Google's privacy settings under Google Safety Center.

5.1.1 Google Analytics

We use the web analysis service Google Analytics 4 to analyse our website and its visitors and for marketing and advertising purposes. In this context, pseudonymised user profiles are created and cookies are used to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The following information may be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. This information may also be transmitted to third parties if this is required by law or if third parties process this data on our behalf. We do not merge the IP address transmitted by your browser as part of Google Analytics with other Google data.

We only use Google Analytics 4 with activated IP anonymisation. This means that your IP address is masked by Google within the EEA or in Switzerland. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and masked there.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. You can also prevent the collection and transmission of the data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at under Google Analytics Opt-out Browser Add-on. An opt-out cookie will be set to prevent the future collection of your data when you visit our website. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

Google Analytics 4 provides for user and event data to be stored for 2 months by default. The maximum retention period is 14 months.

You can find more information on terms of use and data protection under Google Analytics Terms of Service or under Google Privacy Policy.

5.1.2 Google Analytics Remarketing

We also use the functions of Google Analytics Remarketing. This makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account. To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by turning off personalised advertising in your Google Account under Google Sign in. For instructions on how to opt out, see Google My Ad Center Help.

Google Analytics 4 provides for user and event data to be stored for 2 months by default. The maximum retention period is 18 months.

You can find more information on terms of use and data protection under Google Analytics Terms of Service or under Google Privacy Policy.

5.1.3 Google Ads and Google Conversion Tracking

Google Ads places a cookie on your computer ("conversion cookie") if you have reached our website via a Google advert. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain of our websites and the cookie has not yet expired, we and Google can recognise that you clicked on the ad and were redirected to our website. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers.

The information collected with the help of the conversion cookie is used by Google to create conversion statistics for Ads customers who have opted for conversion tracking. These statistics tell us the total number of users who have clicked on our adverts and which of our websites were subsequently accessed by the respective user (so-called conversion tracking). We do not receive any information with which you can be personally identified.

Based on the information collected, categories relevant to your interests are assigned to your browser. These categories are used to display interest-based advertising.

We use the data about you acquired with the conversion cookie for the following purposes:

remarketing,
target groups with common interests,
user-defined target groups with common interests,
ready-to-buy target groups,
similar target groups,
demographic and geographical focus,
dynamic remarketing,
user lists.

By using Google Ads, we reach users who have already visited our website. This allows us to present our adverts to target groups who are already interested in our products or services.

You can generally prevent the storage of cookies by deactivating the storage of cookies in your browser. You also have the option of objecting to interest-based advertising by Google Ads by changing the relevant settings under Google My Ad Center Help.

Google uses segments with self-collected data to assign users to Google accounts, add users to data segments, create similar target group segments, deliver dynamic adverts and ensure that Google Ads campaigns comply with Google guidelines.

The data is usually stored for 30 days and can be stored for a maximum of 540 days.

Further information on the terms of use and data protection of Google Ads can be found under Google Advertising.

5.1.4 Google Tag Manager

We also use Google Tag Manager to integrate and manage Google analytics and marketing services on our website. Google Tag Manager is a solution with which we can manage website tags via an interface.

The Google Tag Manager itself, which implements the tags, is a cookie less domain and processes personal data because it transmits the user's IP address to Google. However, the tool triggers other tags, which in turn may collect personal data. Google Tag Manager itself, however, does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. Further information can be found in the guidelines for this service under Google Tag Manager Terms of Service.

Further information on the use of data for marketing purposes by Google can be found on Google Advertising. Google's privacy policy is available under Google Privacy Policy.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google Ad Settings.

5.2 LinkedIn Insight Tags

We use the LinkedIn Insight Tag, an analysis and tracking tool from LinkedIn Inc, 1000 W. Maude Avenue Sunnyvale, CA 94085, USA, or if you have your habitual residence in the EEA or in Switzerland, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

The LinkedIn Insight tag is used for the purpose of enabling detailed campaign reports and obtaining information about visitors to our website and thus our advertising and marketing interests. As a LinkedIn marketing solutions customer, we use the LinkedIn Insight tag to track conversions, retarget our website visitors and gain additional information about the LinkedIn members who view our adverts.

The LinkedIn Insight tag enables the collection of data on members' visits to our website, including URL, referrer URL, IP address, device and browser characteristics and timestamp. This data is encrypted, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not pass on any personal data to us, but only provides aggregated reports on the website target group and ad performance. LinkedIn also offers retargeting for website visitors so that we can use this data to display targeted advertising outside our website without identifying the member.

Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings under LinkedIn Manage Cookie Preferences.

Further information on data protection on LinkedIn can be found under LinkedIn Privacy Policy.

5.3 LinkedIn Conversion Tracking

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer), we use the analysis and conversion tracking technology of LinkedIn Corporation 1000 W. Maude Avenue Sunnyvale, CA 94085, USA, or if you have your habitual residence in the EEA or in Switzerland, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

With the aforementioned LinkedIn technology, you can be shown more relevant adverts based on your interests. We also receive aggregated and anonymous reports from LinkedIn about advertising activities and information about how you interact with our website. To do this, LinkedIn uses a JavaScript code (Insight tag), which in turn places a cookie in your web browser or uses a pixel.

The LinkedIn Insight tag is used to collect data about the use of our website, including URL, referrer URL, IP address, device and browser properties (user agent) and timestamp. The data collected via the LinkedIn Insight tag is encrypted, the IP addresses are shortened, and the members' direct IDs are removed within seven days to pseudonymise the data. This remaining pseudonymised data is then deleted within 90 days. LinkedIn does not share any personal data with the owner of the website, but only provides summarised reports on the website target group and display performance.

You can prevent the storage of cookies by selecting the appropriate settings in your browser. Alternatively, you can specifically object to LinkedIn conversion tracking ("opt-out") by clicking on the "Opt-out on LinkedIn" field (for LinkedIn members) or "Opt-out" (for other users) under LinkedIn Opt-out Cookie.

To ensure an adequate level of data protection when transferring personal data to the USA, we have concluded the so-called EU standard contractual clauses with LinkedIn as suitable guarantees.

Further information on data protection at LinkedIn can be found under LinkedIn Privacy Policy.

5.4 LinkedIn Ads

We use LinkedIn Insight Ads, a service provided by LinkedIn Corporation 1000 W. Maude Avenue Sunnyvale, CA 94085, USA, or if you have your habitual residence in the EEA or in Switzerland, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

LinkedIn Ads stores and processes information about your user behaviour on our website. Among other things, LinkedIn Ads uses cookies for this purpose, which are stored locally in the cache of your web browser on your end device, and which enable your use of our website to be analysed.

We use LinkedIn Ads for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. In this case, you may not be able to use all the functions of our website to their full extent.

You can also prevent the collection of the aforementioned information by LinkedIn by setting an opt-out cookie on one of the websites linked below:

If you delete your cookies, you must set a new opt-out cookie.

Further information on data protection at LinkedIn can be found under LinkedIn Privacy Policy.

6 Other services

We also use other services on our website and apps, which we explain in more detail below. We will also show you how you can prevent data processing. If we ask you for your consent to use the data provider services, the legal basis for this form of data processing is your consent. If we do not obtain your consent, your personal data will be processed based on our legitimate interests (i.e. for optimisation and marketing purposes and the interest-based design of our website).

6.1 Google Maps

This website uses the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your habitual residence in the EEA or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purposes of customising its services, advertising and market research. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish this to happen, you must log out beforehand. If you do not agree to the processing of your data, you have the option of deactivating the Google Maps service and thus preventing the transmission of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use Google Maps, or only to a limited extent.

Your personal data is processed based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our website).

As far as personal data is processed in the USA, we would like to point out that Google is certified under the Trans-Atlantic Data Privacy Framework and thus offers a guarantee of compliance with data protection laws of the EU.

Further information on the terms of use and data protection of Google Maps can be found under Google Maps/Google Earth Additional Terms of Service or under Google Privacy Policy.

6.2 Mailweaver

They use the Mailweaver software provided by Mailweaver c/o Arcmedia AG, Winkelriedstrasse 37, 6003 Lucerne, Switzerland, to send our newsletter. Arcmedia's servers are located in certified and secure data centres in Switzerland.

You can view the data protection provisions of the dispatch service provider under Privacy Policy Mailweaver (German only).

If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter.

7 Pixels, local storage and similar technologies

Based on our legitimate interest, we also use other technologies such as tracking pixels and local storage. We use these technologies, for example, to check which functions are particularly popular, to create a more personalised user experience and to place user-relevant advertising.

Tracking pixels (also known as clear GIFs, web beacons or pixel tags) are small pieces of code that are installed in or on a website, mobile app or advert. These tracking pixels may request certain information about your browser and device, such as operating system, browser type, device type and version, referring website, website visited, IP address and other similar information.

8 Social media presence

We maintain social media profiles and currently link to the following social networks:

The data you enter on our social media profiles will be published by the social media platform and will not be used or processed by us for any other purpose at any time. However, we reserve the right to delete content should this be necessary. We may communicate with you via the social media platform. This is based on your and our legitimate interest in communicating with each other in this way.

Please be aware that the operator of the social media platform uses web tracking methods. Web tracking, over which we have no influence, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider:

Meta Privacy Center (Facebook, Instagram),
Google Privacy Policy (YouTube),
LinkedIn Privacy Policy (LinkedIn).

9 Disclosure of personal data

We treat your personal data confidentially and only pass it on if you have expressly consented to this, if we are legally obliged or authorised to do so (e.g. as part of commissioned data processing) or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your personal data to third parties if this is necessary or expedient in the context of the use of the website or for the possible provision of the services requested by you (also outside the website).

We disclose your personal data - in addition to the recipients already mentioned - to the following categories of recipients:

group companies (see imprint),
business partners,
service operators,
commercial partners, such as licensees and distributors,
company for credit assessment,
logistics partners,
subcontractors,
collection partners,
service companies,
call centres,
market research companies (after ordering to evaluate the products),
marketing services,
authorities,
customer relationship managers (CRM).

It is understood that the legal regulations on the transfer of personal data to third parties are complied with. If we use processors to provide our services, we take suitable legal precautions and appropriate technical and organisational measures to ensure the protection of your personal data in accordance with the relevant statutory provisions.

If the level of data protection in a country in which the data is processed does not correspond to the applicable data protection provisions, we ensure that the protection of your personal data always corresponds to that in the EEA or in Switzerland. We ensure this in particular by concluding so-called standard protection clauses of the EU Commission with the companies concerned and/or by the existence of recognised certifications or binding internal data protection regulations at the companies concerned and/or by the existence of other guarantees that comply with the applicable law.

10 Storage duration

Unless expressly stated in this privacy policy, we process and store your personal data only for as long as is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e. e.g. for the duration of the entire business relationship (from the initiation, processing to the termination of a contract and the warranty period as well as a subsequent support phase) and beyond that in accordance with the statutory retention and documentation periods. It is also possible that personal data will be stored for the period in which claims can be asserted against us and as far as we are otherwise legally obliged to do so, or legitimate business interests require this (e.g. for evidence and documentation purposes).

As soon as your personal data is no longer required for the above-mentioned purposes or a prescribed retention period expires, your personal data will be deleted or blocked as far as possible.

In addition, we will delete your personal data if you request us to do so at info@kfn.ch and we have no legal or contractual obligation to retain or otherwise safeguard this data.

11 Data security

We have taken technical and organisational security precautions to protect your personal data against manipulation, loss, destruction, or access by unauthorised persons. The measures taken are intended to ensure the confidentiality and integrity of your personal data as well as the availability and resilience of our systems and services when processing your personal data in the long term. They also ensure the rapid restoration of the availability of your personal data and access to it in the event of a physical or technical incident.

Our security measures also include the encryption of your personal data. All information that you enter online is transmitted via an encrypted transmission path (e.g. encryption using SSL/TLS). This means that this information cannot be viewed by unauthorised third parties at any time.

Our security measures are continuously improved in line with technological developments. We also take our own internal data protection seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with data protection regulations. Furthermore, they are only granted access to your personal data to the extent necessary.

12 Links to other websites

Our website may contain links to other websites that are not operated by us and to which this privacy policy does not extend. After clicking on the link, we no longer have any influence on the processing of any data transmitted to third parties (such as the IP address or the URL), as the behaviour of third parties is naturally beyond our control. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, it is unreasonable to expect us to permanently monitor and check the content of linked pages without specific indications of a legal infringement. If we become aware of any legal infringements, such links will be removed immediately.

13 Your rights

13.1 Right to information

You have the right to request information from us as to whether we process your personal data and, if so, which personal data we process.

13.2 Right to rectification

You have the right to request the correction of your incorrect personal data and, if necessary, the completion of incomplete personal data in our systems.

13.3 Right to cancellation

You have the right to request that your personal data be deleted, for example if the data is no longer required for the purposes pursued. However, if we are obliged or authorised to retain your personal data due to legal or contractual obligations, we can therefore only restrict or block your personal data to the extent necessary in these cases.

13.4 Right to restriction of processing

Under certain circumstances, you have the right to demand that we restrict the processing of your personal data.

13.5 Right to data portability

If applicable, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer of this data to a third party. If you request the direct transfer of personal data to another controller, this will only take place if it is technically feasible.

13.6 Right of objection

You have the right to object to the processing of your personal data at any time in accordance with the legal requirements. In particular, you have the right to object to the processing of your personal data for the purpose of direct marketing.

13.7 Revocation of consent

You have the right to withdraw your consent to the processing of your personal data at any time, in principle with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

13.8 Right of appeal

Depending on the applicable data protection legislation, you may have the right to lodge a complaint with a competent data protection authority.

Please note that exceptions apply to these rights. In particular, we may have to continue processing and storing your personal data to fulfil a contract with you, to protect our own legitimate interests such as the assertion, exercise or defence of legal claims, or to comply with legal obligations. To the extent permitted by law, we may therefore refuse your data protection-related requests, e.g. requests for information and erasure, or only comply with them to a limited extent.

For questions in connection with our data protection policy and for information regarding your rights and how to assert them, you can contact us using the contact details provided in section 1 of this privacy policy. If necessary, we reserve the right to request your identification in an appropriate manner for the processing of enquiries.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, you can also lodge a complaint with the supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

Please contact webmaster@edoeb.admin.ch or the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH-3003 Bern, if you have any questions, suggestions or requests.

14 Changes to the privacy policy

We expressly reserve the right to amend and supplement this privacy policy at any time and at our own discretion.

The current version is as of December 2023.

This text is a translation only. The original German version is authoritative and published on https://www.kfn.ch/datenschutz/.

Diese Cookie-Richtlinie wurde erstellt und aktualisiert von der Firma CookieFirst.com.

Diese Cookie-Tabelle wurde erstellt und aktualisiert von der CookieFirst Plattform zur Verwaltung von Einwilligungen.