Data privacy
1. Processing of personal data
1.1. Visiting our website
Each time you access our website, the web server automatically stores a so-called server log file which includes, for example, the name of the accessed URL, the user’s IP address, the date and time of the access, the browser used, the volume of data transferred, the http status code and the requesting provider (access data), and documents the access.
This access data is evaluated exclusively for the purpose of ensuring problem-free operation of the site and improving our service. This serves the purpose of the protection of our overriding legitimate interests in the correct presentation of our service, based on a weighing of interests.
1.2. Hosting services of third-party providers
As part of contract processing on our behalf, third-party providers perform hosting services for us and services related to the presentation of the website, to which we pass on your data for that purpose. This serves the purpose of the protection of our overriding legitimate interests in the correct presentation of our offers and services, based on a weighing of interests.
1.3. Data collection and use for the performance of the contract
In the following cases we require personal data:
- in the event of an order/registration
- where our digital products are used
- when you subscribe for/unsubscribe from newsletters
- when you contact us
- to enable us to offer more convenience and security functions in our shops and on our websites
We collect personal data if you voluntarily provide us with it in the course of your order or registration, if you contact us (e.g. by contact form or e-mail) or if you open a customer account. Required fields are marked as such – in these cases we need the data without fail for the performance of the contract / in order to process the contact or to open the customer account, and without it the order, registration and/or the opening of the account cannot be completed / your message to us cannot be sent.
The respective input forms specify what data is collected. We use the data transmitted to us in this context for the performance of the contract and to process the relevant enquiries. We also process personal data belonging to you and other persons, insofar as it is permitted and we consider it to be expedient, for the following purposes, in which we (and from time to time also third parties) have a legitimate interest according to the purpose: (i) offering and developing our offers, services and websites, apps and further platforms on which we are present; (ii) reviewing and optimising procedures for needs analysis for the purpose of directly addressing customers and the collection of personal data from publicly accessible sources for customer acquisition; (iii) advertising and marketing (including carrying out events), provided that you have not objected to the use of your data (if we deliver advertising to you as an existing customer, you may object to this at any time; we will then enter you on a blocking list that prevents further advertising from being sent); (iv) the assertion of legal claims and defence in connection with legal disputes and official proceedings; (v) prevention and clarification of criminal offences or other misconduct (e.g. carrying out internal investigations, data analyses for the purpose of combating fraud); (vi) ensuring our operations, particularly IT, our websites, apps and further platforms; (vii) the purchase and sale of business units, companies or parts of companies and other corporate transactions and related transfer of personal data, as well as business management measures and for compliance with legal and regulatory obligations or internal regulations in this context.
Once the contract has been fully performed or a customer account has been deleted, the related data is restricted in terms of further processing and erased after the end of the retention periods provided for by tax and commercial laws, unless you have explicitly agreed to further use of your data or we reserve the right to further, legally permissible use of data, about which we inform you in this declaration. Your customer account can be deleted at any time either by sending a message to the contact details provided in section 8 or via a function in the customer account designated for that purpose.
We also reserve the right to use your first name, surname and postal address for our own advertising purposes, e.g. to send you interesting offers and information concerning our products by post. This serves the purpose of the protection of our overriding legitimate interests in presenting advertising messages to our customers, based on a weighing of interests.
The advertising is sent within the framework of contract processing carried out on our behalf by a service provider, to which we pass on your data for that purpose. You may object to the storage and use of your data for these purposes at any time by sending a message to the contact details provided in section 8.
2. Data transmission to third parties
Within the framework of our business activities and the purposes detailed in section 1.3, insofar as it is permissible and we consider it expedient we also disclose data to third parties, either because they process it for us or because they wish to use it for their own purposes. They include the following parties: (i) service providers used by us, including contract processors (e.g. IT providers, shipping companies or payment service providers, see below); (ii) retailers, suppliers, subcontractors and other business partners; (iii) domestic and foreign authorities, government bodies or courts; (iii) buyers of or parties interested in purchasing business units, companies or other parts of Wiegand; (iv) other parties in possible or actual legal proceedings; (v) other companies in the Wiegand Group. For the purpose of the performance of the contract we pass data on, in particular, to the shipping company commissioned to handle the delivery insofar as this is necessary for the delivery of ordered goods. If you select a payment service provider in the ordering process, we will pass on, for the purpose of processing payments, the payment data collected for that purpose, in particular to the payment service provider commissioned to handle the payment. In some cases the selected payment service providers also collect that data themselves, insofar as you set up an account directly with them. That data therefore falls within the exclusive area of responsibility, as defined by data protection laws, of the payment service providers.
The recipients of data specified in this declaration are in some cases located within Germany, but may also be located anywhere in the world. You must expect, in particular, that your data will be transmitted to other countries in Europe and the USA, where the service providers that we use are located (e.g. [Microsoft], [Google] or [Salesforce]).
If a recipient is located in a country without adequate statutory data protection, we contractually obligate the recipient to comply with the applicable data protection rules (for that purpose we use the revised standard contractual clauses of the European Commission, which you can access here: https://eur-lex.Europe.eu/eli/dec_impl/2021/914/oj?), unless it is already subject to legally recognised regulations for ensuring data protection or we are able to invoke an exemption. In particular, an exemption may apply with regard to legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract requires such a disclosure, if you have consented or if the data is data which you have made generally available and you have not objected to processing thereof.
3. E-mail newsletter
3.1. E-mail advertising if you subscribe for the newsletter
If you subscribe to our newsletter, we use the relevant data to regularly deliver the newsletter in question.
You can unsubscribe from the newsletter at any time either by sending a message to the contact details specified in section 8 or via a link in the newsletter provided for that purpose. After you unsubscribe we will block your e-mail address, unless you have explicitly agreed to further use of your data or we reserve the right to further, legally permissible use of the data, about which we inform you in this declaration.
3.2. E-mail advertising without subscription to the newsletter and your right of objection
If we receive your e-mail address in connection with the sale of goods, training courses or services and you have not objected to this, we reserve the right to regularly send you offers by e-mail relating to similar products from our product range. This serves the purpose of the protection of our overriding legitimate interests in presenting advertising messages to our customers, based on a weighing of interests.
You may object to this use of your e-mail address at any time by sending a message to the contact details specified in section 8 or via a link in the in the advertising e-mail provided for that purpose. Those e-mails are sent within the framework of contract processing on our behalf by a service provider, to which we pass on the e-mail addresses for that purpose.
In the course of the sending of e-mails described in this section, the click behaviour in the e-mails is registered in order to later optimise the structure and content of the newsletter and so that we can better satisfy the requirements of all recipients for information. It is also determined whether and when an e-mail is opened.
4. Cookies and web analysis
4.1. Use of cookies
We use so-called cookies on various pages to make a visit to our website attractive and enable the use of certain functions, to display suitable products or for the purpose of market research.
This serves the purpose of the protection of our overriding legitimate interests in optimum presentation of our service, based on a weighing of interests. Cookies are small text files which are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on the user’s device and enable us to recognise the browser the next time you visit us (persistent cookies). The storage period is shown in the overview in the cookie settings of your web browser. By using our website you agree to cookies being installed by us and therefore to the collection, storage and use of personal usage data, including after the end of the browser session.
You may withdraw that consent at any time by blocking the acceptance of cookies in the browser default settings and erasing already installed cookies. However, if you refuse to accept cookies, the functionality of our website may be restricted. You may also set your browser such that you are informed about the installation of cookies and individually decide about their acceptance or generally block the acceptance of cookies for particular cases or particular websites. Each browser is different with regard to the way it manages cookie settings. You can find further information on cookies and their acceptance or rejection via the following links of the relevant browser providers:
Microsoft Edge™: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Safari™:https://support.apple.com/de-ch/guide/safari/sfri11471/mac
Chrome™:https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™:https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™:https://help.opera.com/de/latest/security-and-privacy/
4.2. Use of Google (Universal) Analytics for web analysis
We sometimes use Google Analytics or comparable services on our website. This is a service provided by third parties, which may be located in any country in the world (in the case of Google Analytics the provider is Google Ireland (with its registered office in Ireland); in this context Google Ireland is based on Google LLC (with its registered office in the USA) as the contract processor (both “Google”), www.google.com), which enables us to measure and analyse the use of the website (without any personal reference). For that purpose, permanent cookies are also used, which are installed by the service provider. We have configured the service such that visitors’ IP addresses are abbreviated by Google in Europe before being forwarded to the USA and as a result cannot be traced back. We have disabled the settings “Data forwarding” and “Signals”. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google will be able to draw inferences from that data regarding the identity of the visitors for its own purposes, create personal profiles and link that data to those persons’ Google accounts. If you have registered with the service provider yourself, the service provider will also be aware of you. The processing of your personal data is then carried out by the service provider at its own responsibility and in accordance with its privacy policy. The service provider only notifies us how our respective website is used (no information about you personally).
The recording of the data generated by the cookie relating to the use of the website (including your IP address) and the processing of that data by Google may be prevented with the browser plug-in available via the following link:tools.google.com/dlpage/gaoptout?hl=de.
If you click on that link, an opt-out cookie will be stored on the computer, which also prevents analysis by Google. However, that procedure must be repeated after each erasure of the cookies.
5. Google AdWords and Analytics Remarketing
Via Google AdWords we advertise for this website in the Google search results and on websites of third parties. For that purpose, when you visit our website the so-called Google Remarketing cookie is installed, which automatically enables interest-based advertising by way of a pseudonymous cookie ID and on the basis of the pages you have visited. This serves the purpose of the protection of our overriding legitimate interests in optimum marketing of our website, based on a weighing of interests.
Further data processing will only occur insofar as you have agreed with respect to Google to your web and app browser history being linked by Google to your Google account and information from your Google account being used for the personalisation of advertisements that you see on the Internet. If, in that case, you are logged into Google when you visit our website, Google uses your data together with Google Analytics data in order to create and define target group lists for cross-device remarketing. For that purpose your personal data will be temporarily linked by Google with Google Analytics data in order to create target groups.
You may deactivate the remarketing cookie via https://support.google.com/ads/answer/7395996. In addition, you may find out about the installation of cookies from the Digital Advertising Alliance (www.aboutads.info) and carry out settings in that respect.
You can access further information on Google Remarketing as well as Google’s privacy policy at: https://policies.google.com/technologies/ads.
6. Embedded YouTube videos
YouTube videos are embedded on some of our web pages. The operator of the relevant plug-in is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit a page with the YouTube plug-in, a connection will be created with YouTube servers. YouTube will be notified which pages you visit. If you are logged into your YouTube account, YouTube will be able to personally attribute your surfing behaviour to you. You can prevent this by previously logging out of your YouTube account.
If you start a YouTube video, the provider installs cookies which collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad programme, such cookies will not be installed even if you watch YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.
You can find further information on data protection at YouTube in the provider’s privacy policy at: https://policies.google.com/privacy?hl=de&gl=de.
7. Hyperlinks to other websites
Some of our Internet services contain links to other websites and to social networks (e.g. Facebook, XING, LinkedIn, Twitter/X). We do not monitor those websites and are not responsible either for their content or for their handling of personal data.
8. Rights, information and contacts
The controller for the processing of personal data and the point of contact for information and issues related to recorded personal data and processing thereof, data rectification, objections to data collection and data retention as well as requests for data erasure is:
Wiegand AG
Schlosserstrasse 5
8180 Bülach
Switzerland
Tel.: +41 44 872 74 74
E-mail: wiegand@wiegand.ch
You can submit an application for the erasure of your personal data in the Wiegand account area. The competent data protection supervisory authority for Switzerland is: the Federal Data Protection and Information Commissioner (der Eidgenössische Datenschutz- und Öffentlichkeitsbeauftragte – EDÖB): www.edoeb.admin.ch
9. Your rights
Insofar as you have granted us consent to process your personal data for particular purposes (for example upon subscribing to receive email newsletters), we process your personal data within the limits of and based on that consent, insofar as we have no other legal basis and require one. Granted consent may be withdrawn at any time. However, this will not affect data processing which has already occurred.
Under the data protection laws applicable for you and insofar as such a right is provided for by them, you have the right to information, rectification, erasure and restriction of the data processing and also to object to our data processing, particularly processing for the purposes of direct marketing, profiling conducted for direct advertising and other legitimate interests in the processing, as well as the right to be provided with certain personal data for the purpose of transfer to another body (so-called data portability). However, please note that we reserve the right to assert the restrictions provided by law, for example if we are obliged to retain or process certain data, have an overriding interest in this (insofar as we are able to invoke that fact) or need the data for the assertion of claims. If costs arise for you, we shall inform you in advance. We have already informed you about the possibility of withdrawing your consent in the first part of this section 9. Please note that the exercise of these rights may conflict with contractual arrangements and this may have consequences, for example premature termination of the contract or resulting costs. In such a situation we shall inform you in advance, where this is not already contractually regulated.
As a rule, a precondition for the exercise of such rights is that you provide unequivocal proof of your identity (e.g. by way of a copy of an ID document, insofar as your identity is not otherwise clear / cannot be verified). For the purpose of exercising your rights, you may contact us at the address specified in section 8.
10. SSL encryption
This website uses SSL encryption for reasons related to security and to protect the transfer of confidential content, for example enquiries that you send us as the site operator. You can recognise an encrypted connection in that the address line of the browser changes from “http://” to “https://” or by the padlock symbol in your browser line. If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
11. Retention period and erasure
We retain personal data for the period to which the data subject has consented and as long as it is required for the implementation of the relevant legal relationship and/or legally required. The personal data is then erased, by optimal and adequate technical means.
12. Amendments to this privacy policy
We may adjust this privacy policy at any time without advance notice. The current version published on our website applies. Insofar as this privacy policy is part of an agreement with you, in the event of an update we shall inform you about the amendment by e-mail or other suitable means.
Bülach, January 2024