Privacy Policy

1. Data protection at a glance

General information

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Confederation (Data Protection Act, FADP), every person is entitled to the protection of their privacy and to protection against the misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we endeavor to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing and use of data in accordance with the following description. This website can generally be visited without registration. Data such as pages accessed or names of accessed files, date and time are stored on the server for statistical purposes, without this data being directly related to your person. Insofar as personal data (for example name, address or email addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

2. Processing of personal data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing comprises any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, obtaining, deletion, retention, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. If and to the extent that the EU GDPR is applicable, we additionally process personal data on the following legal bases in conjunction with Article 6(1) GDPR:
(a) Processing of personal data with the consent of the data subject.
(b) Processing of personal data for the performance of a contract with the data subject as well as for carrying out corresponding pre-contractual measures.
(c) Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or under the applicable law of a country in which the GDPR applies in whole or in part.
(d) Processing of personal data to protect the vital interests of the data subject or of another natural person.
(f) Processing of personal data to safeguard the legitimate interests of us or of third parties, unless the fundamental freedoms and the rights and interests of the data subject prevail. Legitimate interests include in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for as long as is necessary for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict the processing accordingly.

Data collection on our website

The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter into a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you can report processing that you consider unlawful to the Federal Data Protection and Information Commissioner.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. For details, please refer to the privacy policy under “Right to restriction of processing”.

Analysis tools and third-party tools

When you visit our website, your browsing behavior may be statistically evaluated. This is done primarily with cookies and with so-called analysis programs. Some of these evaluations can be attributed to you; which these are and for what purpose they are carried out can be found in the sections on the individual services. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following privacy policy.
You can object to this analysis. We will inform you about the options for objecting in this privacy policy.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible..

Information on the responsible entity

The entity responsible for data processing on this website is:

Kern Studer AG
ERGO-line Workplace Systems
Managing Director: Urs Studer
Weberrütistrasse 9
CH - 8833 Samstagern

Telephone: +41 44 783 22 44
Email: info@ergo-line.ch

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

Representative in the European Union

As the controller is established outside the European Union (in Switzerland), we have designated the following representative in the European Union pursuant to Article 27 GDPR:

Kern Studer GmbH
Gewerbering Süd 12
97359 Schwarzach am Main
Germany

Data subjects and supervisory authorities may contact our representative in the European Union on all matters relating to data protection under the GDPR and to the exercise of your rights. This designation does not affect the responsibility of the controller named above.

Storage duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

Recipients of personal data

In the course of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfillment of a contract, if we are legally obliged to do so, if we have a legitimate interest in the disclosure or if another legal basis permits the disclosure of the data.

In our case, the recipients fall into the following categories:

• the service provider commissioned by us to maintain and further develop this website
• our hosting provider, which operates the website and the data received through it for us
• the provider of our content delivery network, via which images, fonts and program files are delivered
• providers of analysis and advertising services, insofar as you have consented to their use
• the provider of our security plugin
• authorities, insofar as we are legally obliged to provide information

Which companies these are in detail, what data they receive and for what purpose, can be found in the following sections of this privacy policy.

Not included in this list is the provider of the AI interface for the search function of this website. To this provider we transmit your search query and the content of our website found for it, but without your IP address, without a cookie and without any other identifier. Personal data only reaches it if you enter it yourself into the search field. You can find details in the section “Use of AI on the website”.

Disclosure of personal data abroad

Some of the service providers named in this privacy policy are based abroad or process personal data abroad. Disclosure abroad is permitted under Article 16 FADP if the recipient state has adequate data protection or if adequate protection is ensured in another way, in particular through standard contractual clauses.

The recipient states and the respective safeguard are:

• Germany – Hosting of this website as well as Leadinfo. Germany has adequate data protection under Annex 1 to the Data Protection Ordinance. Additional safeguards are not required.
• Slovenia – Content delivery network. Adequate data protection under Annex 1 to the Data Protection Ordinance. Since a content delivery network delivers content via distributed locations, the processing of the access data may also take place at another location of the provider.
• Ireland – Contractual partner of the Google services. Adequate data protection under Annex 1 to the Data Protection Ordinance.
• United States – Wordfence as well as the parent companies and data centers of the above-mentioned providers. Under Annex 1 to the Data Protection Ordinance, the United States is only considered adequate for organizations that are certified under the Swiss-US Data Privacy Framework. According to our review of August 2026, Google LLC is certified; in addition, we base these transfers additionally on standard contractual clauses. For Defiant Inc. (Wordfence), which has no certification, only the standard contractual clauses apply.

Insofar as we use standard contractual clauses, we use the version recognized by the Federal Data Protection and Information Commissioner with the adjustments for Switzerland. We check the certification status of the recipients at regular intervals.

Not listed is the AI interface for the search function of this website. We transmit your search query there without an IP address and without an identifier; a disclosure of personal data only takes place if you enter personal data into the search field yourself. In this case, the contractual partner is OpenAI Ireland Limited, based in Ireland. Since European data residency is activated for the interface, the processing takes place in the European Union; Ireland is listed in Annex 1 to the Data Protection Ordinance as a state with adequate data protection.
We would like to point out that in states without adequate data protection, a level of protection comparable to that of Switzerland and the European Union cannot be guaranteed and that authorities there in particular may access data under facilitated conditions.

Profiling

The analysis and advertising services used on this website evaluate your behavior and assign characteristics to you, such as presumed interests or membership of a target group or a company. This concerns in particular the identification of companies by Leadinfo. These evaluations constitute profiling within the meaning of Article 5(f) FADP. Insofar as this profiling is associated with a high risk to your personality, we base it on your express consent (Article 6(6) FADP).

These services are only loaded after you have consented via our consent banner. You can revoke your consent at any time with effect for the future via the “Manage cookies” link in the footer; the services will then no longer be loaded.

We do not make automated individual decisions within the meaning of Article 21 FADP that have a legal effect on you or significantly affect you.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient for this. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct advertising (Article 21 GDPR)

If data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Article 21(1) GDPR).

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Article 21(2) GDPR).

Your rights under Swiss data protection law

Under the Swiss Data Protection Act, you have the following rights vis-à-vis us:

• Information (Article 25 FADP): You can request information free of charge at any time as to whether and which personal data we process about you, for what purpose, how long we retain it, where it comes from and to whom we disclose it, if applicable.
• Data release and transfer (Article 28 FADP): You can request that we release to you, or transfer to third parties, the personal data that you have disclosed to us and that we process by automated means, in a common electronic format, insofar as this is possible with reasonable effort.
• Correction (Article 32(1) FADP): You can request at any time that we correct inaccurate personal data.
• Prohibition of processing or disclosure, deletion (Article 32(2) FADP): You can request that we refrain from a particular processing, do not disclose certain personal data to third parties, or delete or destroy personal data.
• Note of objection (Article 32(3) FADP): If neither the accuracy nor the inaccuracy of personal data can be established, you can request that we add a corresponding note.
• Revocation of consent: If you have consented to processing, you can revoke this consent at any time with effect for the future. The lawfulness of the processing carried out until then remains unaffected.

To exercise these rights, please contact the responsible entity named above. We may ask you for proof of identity to ensure that we provide information to the correct person. We will generally respond to your request within 30 days (Article 25(7) FADP).

Notification to the Federal Data Protection and Information Commissioner

If you are of the opinion that we violate Swiss data protection law when processing your personal data, you can report this to the Federal Data Protection and Information Commissioner (FDPIC):

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH - 3003 Bern
https://www.edoeb.admin.ch

We would like to point out that this is a notification pursuant to Article 49 FADP and not a complaint within the meaning of the GDPR. The FDPIC decides at its dutiful discretion whether to open an investigation; there is no entitlement to this. You can assert your claims against us independently through civil proceedings.

Right to lodge a complaint with a supervisory authority in the European Union

Insofar as the GDPR applies to processing, you additionally have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to data portability

Insofar as the GDPR applies to processing, you have the following right in addition to the above rights under Swiss law:

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, deletion and correction

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

Right to restriction of processing

This right also exists insofar as the GDPR applies to processing; Swiss data protection law does not contain a corresponding provision.

You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

4. Data collection on this website

External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host. This may primarily involve IP addresses, contact requests, application documents, meta and communication data, contact data, names, website accesses and other data generated via a website.

The external hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Article 6(1)(f) GDPR).

We use the following host:

Bieber IT GmbH
Brand: Host-Unlimited.de
Braunschweiger Strasse 22
38518 Gifhorn
Lower Saxony - Germany

The server of our host is located in Germany. Personal data that you disclose to us via this website – in particular contact requests, application documents and the automatically collected server log files – is therefore processed in Germany. This constitutes a disclosure of personal data abroad within the meaning of Article 16 FADP. Germany has adequate data protection under Annex 1 to the Data Protection Ordinance, so that no additional safeguards are required for this disclosure.

Bunny.net CDN

We use the content delivery network Bunny.net. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (hereinafter “Bunny.net CDN”).

Bunny.net CDN is a distributed content delivery network. Images, fonts as well as program and design files of this website are delivered via the subdomain cdn.ergo-line.ch. The information transfer between your browser and our website is technically routed via the content delivery network. This allows us to increase the availability and performance of our website. In doing so, the CDN collects your IP address.

This content is required for the display of the website and is therefore already loaded before consent is given. The use of Bunny.net CDN is based on our legitimate interest in the most error-free and secure provision of our web offering (Article 6(1)(f) GDPR).

You can find further information on Bunny.net CDN here: https://bunny.net/privacy/.

Cookies

The websites partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. storing your selection in the consent banner) are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your browsing behavior) are stored, these are dealt with separately in this privacy policy and are only set after your consent.
On this website we distinguish between our own cookies (first-party cookies), which are set by us, and third-party cookies, which originate from the services named in this privacy policy.

For obtaining and managing your consent, we use a consent banner developed by ourselves. It distinguishes the categories technically necessary cookies, analysis and marketing. Technically necessary cookies are set without consent; cookies in the analysis and marketing categories are only set after you have consented to the respective category. We store your selection so that the banner takes your decision into account on further visits.

You can adjust or revoke your consent at any time with effect for the future by calling up the “Manage cookies” link in the footer.

The storage duration of the cookies set by the consent-requiring services is, as far as we are aware:

• Google Analytics: up to 90 days
• Leadinfo: up to 12 months

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• hostname of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website – for this purpose the server log files must be collected.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Via the contact form, we collect your first and last name, your email address and, if you provide it, your telephone number. In addition, there is the nature of your request and your message. If you would like a telephone callback, we additionally collect the appointment you request. To protect against automated submissions, a simple arithmetic task must be solved; no data is transmitted to third parties in the process.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. An informal notification by email to us is sufficient for this. The lawfulness of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form remains with us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Use of AI on the website

We use artificial intelligence exclusively in the search function of this website. When you make a search query, it is transmitted together with the content of our website found for it to an AI service, which generates a short summary of the search results from this. There are no further AI-supported functions on this website.

To create these summaries, we use an interface of OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (hereinafter “OpenAI”). Access to this interface runs via a service provider commissioned by us to maintain this website. This provider acts as a processor for us, with OpenAI as its sub-processor.

The transmission takes place exclusively from our server. Your browser does not establish a connection to OpenAI, your IP address is not transmitted to OpenAI, and no cookies are set or information is read from your device for this purpose. The search query is transmitted without a user identifier and cannot be attributed to any person by OpenAI. Personal data therefore only reaches OpenAI if you enter it yourself into the search field.

We cache the generated summaries for up to 300 hours in order to be able to answer recurring search queries more quickly. The associated search query is stored as an assignment key. No further logging of your search queries takes place.

Since the search field is a free input field, we ask you not to enter any personal data there.

The use of this function is based on Article 6(1)(f) GDPR. We have a legitimate interest in offering the visitors of our website a fast and comprehensible preparation of the search results.

According to the provider, data transmitted via this interface is not used to train the underlying AI models. European data residency is activated for this interface; the processing therefore takes place in data centers within the European Union. Ireland has adequate data protection under Annex 1 to the Data Protection Ordinance.

You can find further information in OpenAI’s privacy policy at https://openai.com/policies/privacy-policy/.

Request by email, telephone or fax

If you contact us by email, telephone or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you send us via contact inquiries remains with us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool with which we can integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It only serves to manage and deliver the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. Insofar as corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR. The consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Server-side tagging

We integrate the analysis and advertising services used on this website via a server-side tagging process. For this purpose, we operate our own server container under the subdomain dt.ergo-line.ch. This is operated on the infrastructure of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With server-side tagging, the data from your browser is not transmitted directly to the providers of the integrated services, but first to this server container. From there, it is forwarded to the respective services. As a result, the collected data is processed before it leaves our system, and we can control the scope of the disclosure. Which data the individual services collect and for what purpose can be found in the following sections.

Server-side tagging is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in reliable measurement and in being able to control the disclosure of data to third parties. For the services integrated via the server container, the legal basis named in the respective section applies; insofar as consent is named there, the data is only collected and forwarded after it has been granted.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent, operating systems used and origin of the user. This data is assigned to the respective end device of the user. An assignment to a user ID does not take place.

Furthermore, with Google Analytics we can record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission in the version recognized for Switzerland. You can find details here: https://business.safety.google/adscontrollerterms/sccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Analytics IP anonymization is activated. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can find more information on the handling of user data with Google Analytics in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have concluded a contract for order processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. Plugins and Tools

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).

Wordfence serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the accesses made on our website and block them if necessary.

The use of Wordfence is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. Insofar as corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission in the version recognized for Switzerland. You can find details here: https://www.wordfence.com/help/general-data-protection-regulation/.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data protection law that guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Leadinfo

We have integrated Leadinfo on this website. The provider is Leadinfo / Team.Blue GmbH, Bunsenstr. 19, 40215 Düsseldorf (hereinafter “Leadinfo”).

Leadinfo enables us to record the visits of members of other companies to our website. For this purpose, the IP address of the website visitor is compared with the company IP addresses stored in Leadinfo’s company database. If this is the IP address of a company, this visit and the user behavior are recorded. According to the provider, IP addresses that are not present in Leadinfo’s database are immediately deleted again, so that website visits by private individuals are ignored.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR. The consent can be revoked at any time. Leadinfo sets two cookies on your device; these are not required for the operation of the website and are only set after your consent.

You can find further details in the provider’s privacy policy at https://www.leadinfo.com/de/datenschutz/.

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is only loaded on our website after you have given your consent via our consent banner. As long as no consent has been given, only a placeholder with a corresponding notice is displayed instead of the map; you can activate Google Maps if you wish using the button shown there. The same applies to other embedded content delivered via Google services on our website, for example the 360° tour of our showroom. Only with your consent is a connection to Google's servers established.

In order to use the features of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA and stored there. Google Maps may record, among other things, your interaction with the maps, your location data and your search behavior. After activation of the service, the provider of this site has no influence over this data transfer.

The use of Google Maps is based on your consent pursuant to Article 6(1)(a) GDPR. Consent can be revoked at any time by clicking the "Manage cookies" link in the footer and adjusting your selection.

The transfer of data to the USA is based on the European Commission's standard contractual clauses in the version recognized for Switzerland. You can find details here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

You can find more information on how user data is handled in Google's privacy policy: https://policies.google.com/privacy?hl=en.

7. Custom Services

Handling applicant data

We offer you the opportunity to apply to us (e.g. by email, by post or via our online application form). In the following, we inform you about the scope, purpose and use of your personal data collected in the course of the application process. We assure you that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other statutory provisions and that your data is treated in strict confidence.

Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary for deciding on the establishment of an employment relationship. Under Article 328b CO (Swiss Code of Obligations), we may only process data that concerns your suitability for the position or is necessary for the performance of the employment contract; we adhere to this framework. The processing takes place in direct connection with the initiation of an employment relationship and is thus justified under Article 31(2)(a) FADP. Insofar as the GDPR applies, the processing is based on Article 6(1)(b) GDPR (contract initiation) and – if you have given consent – on Article 6(1)(a) GDPR. The consent can be revoked at any time. Within our company, your personal data is only passed on to persons who are involved in processing your application.

Via our online application form, we collect your salutation, your first and last name, your email address and your telephone number as well as the application documents you upload, your salary expectations and any remarks. To protect against automated submissions, a simple arithmetic task must be solved here too; no data is transmitted to third parties in the process.

Application documents often contain information that is considered particularly sensitive personal data under Article 5(c) FADP – such as information on health, religious affiliation or a disability. Insofar as you transmit such information to us, we process it exclusively within the scope of the application procedure. The processing is justified by the direct connection with the initiation of an employment relationship; otherwise, we base it on your express consent. You are not obliged to provide such information; we ask you to provide only the information in your documents that is necessary for the application.

If the application is successful, the data you have submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship.

Retention period of the data

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have transmitted on the basis of our legitimate interests (Article 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular for evidence purposes in the event of a legal dispute. If it is apparent that the data will be required after expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further retention no longer applies.

Longer retention may also take place if you have given corresponding consent (Article 6(1)(a) GDPR) or if statutory retention obligations preclude deletion.

8. Amendment of this privacy policy

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be published on the website. Changes apply from their publication on our website. We therefore recommend that you visit this page regularly to inform yourself about any updates that may have been made.

Last updated: 20 August 2026