Privacy Policy

1. Data protection at a glance

General information

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Confederation (Federal Act on Data Protection, FADP), every person is entitled to protection of their privacy and to protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we endeavor to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission on the Internet (for example communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data in accordance with the description below. This website can generally be visited without registration. Data such as accessed pages or names of accessed files, date and time are stored on the server for statistical purposes without these data being directly related to your person. Insofar as personal data (for example name, address or email addresses) are collected on our pages, this is always done on a voluntary basis where possible. These data will not be passed on to third parties without your explicit consent.

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

2. Processing of personal data

Personal data are all information relating to an identified or identifiable person. A data subject is a person whose personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, retention, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. If and insofar as the EU GDPR is applicable, we also process personal data on the following legal bases in conjunction with Article 6 (1) GDPR:
lit. a) Processing of personal data with the consent of the data subject.
lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding precontractual measures.
lit. c) Processing of personal data to fulfill a legal obligation to which we are subject under applicable EU law or under the law of a country in which the GDPR is wholly or partially applicable.
lit. d) Processing of personal data to protect vital interests of the data subject or another natural person.
lit. f) Processing of personal data to safeguard our legitimate interests or those of third parties, provided that the fundamental freedoms and rights and interests of the data subject do not prevail. Legitimate interests include in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

Data collection on our website

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

Your data are collected, on the one hand, when you provide them to us. This may include, for example, data that you enter in a contact form. Other data are automatically collected by our IT systems when you visit the website. These are primarily technical data (for example Internet browser, operating system or time of page access). The collection of these data occurs automatically as soon as you enter our website.

What do we use your data for?

Some of the data are collected to ensure the error free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of these data. For this purpose and for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Details can be found in the privacy policy under Right to restriction of processing.

Analysis tools and tools from third party providers

When visiting our website, your browsing behavior may be statistically evaluated. This is mainly done with cookies and with so called analysis programs. The analysis of your browsing behavior is generally anonymous. The browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.
You can object to this analysis. We will inform you about the objection options in this privacy policy.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (for example communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible..

Information on the responsible entity

The responsible entity for data processing on this website is:

Kern Studer AG
ERGO line Workplace Systems
Managing Director: Urs Studer
Weberruetistrasse 9
CH 8833 Samstagern

Telephone: +41 44 783 22 44
Email: info@ergo-line.ch

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (for example names, email addresses or similar).

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time. An informal notification by email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Article 21 GDPR)

If data processing is carried out on the basis of Article 6 paragraph 1 letter e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims (objection pursuant to Article 21 paragraph 1 GDPR).

If your personal data are processed for the purpose of direct advertising, you have the right at any time to object to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Article 21 paragraph 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the state data protection officer of the federal state in which our company has its registered office. A list of the data protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion and correction

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of these data. For this purpose and for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need them for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Article 21 paragraph 1 GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may only be processed, apart from their storage, with your consent or for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or of a Member State.

4. Data collection on this website

Cookies

The Internet pages use so called cookies in part. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so called session cookies. They are automatically deleted after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions requested by you (for example shopping cart function) are stored on the basis of Article 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in storing cookies for the technically error free and optimized provision of its services. Insofar as other cookies (for example cookies for analyzing your browsing behavior) are stored, these are treated separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data are not merged with other data sources.

The collection of these data is based on Article 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in the technically error free presentation and optimization of its website. For this purpose, server log files must be collected.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form including the contact details you provide there will be stored by us for the purpose of processing the inquiry and in case of follow up questions. We will not pass on these data without your consent.

The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Article 6 paragraph 1 letter a GDPR). You can revoke this consent at any time. An informal notification by email to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (for example after your inquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

Inquiry by email, telephone or telefax

If you contact us by email, telephone or telefax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on these data without your consent.

The processing of these data is based on Article 6 paragraph 1 letter b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Article 6 paragraph 1 letter f GDPR) or on your consent (Article 6 paragraph 1 letter a GDPR) if this was requested. Consent can be revoked at any time.

The data you send to us via contact inquiries remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (for example after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only insofar as they are necessary for the establishment, content design or modification of the legal relationship (inventory data). This is done on the basis of Article 6 paragraph 1 letter b GDPR, which permits the processing of data for the fulfillment of a contract or precontractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill it.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Customer account

We set up a password protected direct access to the inventory data stored with us (customer account) for each customer who registers accordingly. You undertake to treat the personal access data confidentially and not to make them accessible to unauthorized third parties. We cannot accept liability for passwords that are misused unless we are responsible for the misuse.

Product recommendations by email

As a customer of Kern Studer AG, you regularly receive product recommendations from us by email. We use your data for advertising purposes with the aim of providing you with information about products from our range that may interest you based on your last purchases with us. We use email advertising only to the extent permitted by law or insofar as you have expressly authorized us to do so.

If you no longer wish to receive product recommendations or any advertising messages from us at all, you can object at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form (for example email, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every product recommendation email.

Newsletter and individualized advertising for you

If you no longer wish to receive newsletters or any advertising messages from us at all, you can object at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form (for example email, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every newsletter.

Information that we receive from you helps us to continuously improve your shopping experience and to design it in a customer friendly and individualized way. These information are used to design advertising tailored to you and your interests. For this purpose, we use existing information such as receipt and reading confirmations of emails, information about computers and Internet connection, operating system and platform, your order history, your service history, date and time of visits to the homepage and products that you have viewed.

We use these information exclusively in pseudonymized form. Through the analysis and evaluation of these information, we are able to improve our website and our Internet offering and thereby send you individualized advertising, meaning advertising that recommends products to you that you may actually be interested in. Our goal is to make our advertising more useful and interesting for you. Therefore, the evaluation and analysis of the pseudonymized data collected from you help us to ensure that we do not send you random advertising, but advertising such as newsletters and product recommendations that actually correspond to your areas of interest.

5. Analysis tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out independent analyses. It merely serves to manage and deploy the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transmitted to Googles parent company in the United States.

The use of Google Tag Manager is based on Article 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent was requested, processing is carried out exclusively on the basis of Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG insofar as the consent includes the storage of cookies or access to information on the users end device (for example device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified under the EU US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In this process, the website operator receives various usage data such as page views, length of stay, operating systems used and origin of the user. These data are assigned to the respective end device of the user. Assignment to a user ID does not take place.

Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks, among other things. In addition, Google Analytics uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (for example cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG. Consent can be revoked at any time.

The transfer of data to the United States is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

The company is certified under the EU US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Analytics IP anonymization is activated. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and Internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on the handling of user data by Google Analytics can be found in Googles privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing on behalf

We have concluded a contract for commissioned data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Matomo

This website uses the open source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This enables us, among other things, to determine when which page views were made and from which region they originate. In addition, we collect various log files (for example IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (for example clicks, purchases or similar).

The use of this analysis tool is based on Article 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent was requested, processing is carried out exclusively on the basis of Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG insofar as the consent includes the storage of cookies or access to information on the users end device (for example device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

IP anonymization

When analyzing with Matomo, we use IP anonymization. In this process, your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

Cookie free analysis

We have configured Matomo so that Matomo does not store cookies in your browser.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remain with us and are not passed on.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available at Google (for example location data and interests) (audience targeting). As the website operator, we can evaluate these data quantitatively by, for example, analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent pursuant to Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG. Consent can be revoked at any time.

The transfer of data to the United States is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified under the EU US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

6. Plugins and tools

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).

Wordfence serves to protect our website from unwanted access or malicious cyber attacks. For this purpose, our website establishes a permanent connection to the servers of Wordfence so that Wordfence can compare its databases with the accesses made on our website and block them if necessary.

The use of Wordfence is based on Article 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in the most effective protection possible of its website against cyber attacks. If a corresponding consent was requested, processing is carried out exclusively on the basis of Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG insofar as the consent includes the storage of cookies or access to information on the users end device (for example device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The transfer of data to the United States is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Data processing agreement

We have concluded a data processing agreement for the use of the above mentioned service. This is a contract required under data protection law that ensures that this service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the United States and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offerings and an easy findability of the places specified by us on the website. This constitutes a legitimate interest within the meaning of Article 6 paragraph 1 letter f GDPR.

More information on the handling of user data can be found in the privacy policy at https://policies.google.com/privacy?hl=de&gl=ch

7. Adjustment of the privacy policy

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be published on the website. Changes apply from the time of their publication on our website. We therefore recommend that you visit this page regularly to inform yourself about any updates that may have been made.

Status: 15 November 2025