Privacy policy of Stempel Glatz AG

1. Overview and scope of application

This privacy policy provides information on how and for what purposes Stempel GLATZ AG (hereinafter also «we» or «Stempel Glatz») processes your personal data (hereinafter «you”), which you disclose to us or which we collect from you. This Privacy Policy is not exhaustive; in particular, contractual conditions for products and services (e.g. our General Terms and Conditions, Terms of Use, Conditions of Participation, etc.) may contain additional information on the processing of your personal data.

«Personal data» refers to all data and information relating to an identified or identifiable natural person.

2 Responsible party and contact person

The controller and contact person for your questions about data protection is

Stempel GLATZ AG
Industriestrasse 62
9443 Widnau

Telephone: +41 71 726 36 90
E-mail: marcel.frischknecht@stempelglatz.ch

If you have any questions about data protection, please contact our addresses above.

3 Data origin and data categories

As a matter of principle, we only process the personal data that we receive or collect from our customers, interested parties, business partners, event participants and website visitors in the course of our business activities. Where permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection register, commercial register, information system on public procurement (hereinafter «SIMAP»), media, Internet) or receive such data from other companies in the GLATZ Group, authorities or other third parties. If you provide us with personal data of other persons, we ask you to ensure that these persons are aware of this privacy policy and only provide us with their personal data if you have been authorized to do so and if the corresponding personal data is correct.

The personal data or categories of personal data processed by us include, depending on the case, in particular personal details and contact data (e.g. name, address, gender, telephone number and e-mail address); identification and background information (e.g. date of birth, language, customer number, job title, title, function); contract data that we receive or collect in connection with the initiation, conclusion and execution of contracts with you (e.g. services or products requested, used or purchased by you, as well as associated behavioral and transaction data); financial or transaction data (e.g. details of payment methods such as debit or credit cards, bank details, etc.). e.g. services or products requested, used or purchased by you as well as associated behavioral and transaction data); financial or transaction data (e.g. details of payment methods such as debit or credit cards, bank account details, etc.) or other payment transaction data, details of your payment order and details of the payee or beneficiary and the purpose of the payment); communication data (e.g. emails, correspondence, chat messages, social media posts, comments on websites, telephone conversations, video conferences, proof of identity, customer feedback and ratings and marginal data); documentation data or data from your contacts with third parties (e.g. consultation or conversation logs). documentation data or data from your contacts with third parties (e.g. consultation or meeting minutes, file notes, references); preference and marketing data (e.g. data on the use of our websites or other digital offerings, data in connection with the marketing of products and services, such as newsletter subscriptions/unsubscriptions, documents received and special activities personal preferences and interests); Public data that can be obtained about you (e.g. land register and commercial register data, data from the SIMAP and data and from the media and the Internet); data in connection with proceedings or investigations by authorities, official bodies, courts, organizations or other bodies; data for compliance with legal requirements, such as in connection with the fight against money laundering; image and sound recordings (e.g. photos, videos and sound recordings); data in connection with the processing of personal data (e.g. data from the SIMAP and data and from the media and the Internet). (e.g. photos, videos and audio recordings of events, recordings of video surveillance systems and recordings of telephone and video conference calls) and technical data (e.g. IP address and other device IDs, identification numbers assigned to your device by cookies and similar technologies).

4 Processing purposes and legal bases

4.1 General in the context of our business activities

We process your personal data primarily for those processing purposes that are necessary in connection with our business activities, the provision of our services and the offering of our products. In particular, we may process your personal data for the following purposes:

• to communicate with you, in particular to provide you with information or to process your requests
• to be able to authenticate and identify you, for customer service and customer care;
• for contract processing, in particular in connection with the initiation, conclusion and processing of contractual relationships. This includes all data processing that is necessary or expedient to conclude, execute and, if necessary, enforce a contract, such as processing to decide whether and how (e.g. with which payment options) we enter into a contract with you (including credit checks), to provide contractually agreed services, to invoice our services and generally for bookkeeping, processing job applications (e.g. managing and evaluating job applications), and to provide our services. e.g. managing and evaluating applications, conducting interviews including creating personality profiles, obtaining reference information), to enforce legal claims arising from contracts (debt collection, legal proceedings, etc.);
• to provide you with our products and services as well as our digital offerings (e.g. website, web store, mobile apps, etc.) and to evaluate and improve them
• to inform you about new developments (e.g. newsletters) or to provide you with other information about our products and services
• to organize events and invite you to them;
• for customer care and marketing purposes, e.g. to send you written and electronic communications and offers and to carry out marketing campaigns. These may be our own offers or offers from our partners. In some cases, we may also process your personal data automatically with the aim of evaluating certain personal aspects (profiling) or making a pre-selection when you enquire about a product or service. In particular, we may use profiling to provide you with targeted information about products or services (e.g. newsletters);
• to conduct customer surveys;
• in connection with accounting, the archiving of data and the management of our archives;
• when selling receivables, e.g. if we provide the purchaser with information about the reason for and amount of the receivable and, if applicable, the creditworthiness and behavior of the debtor;
• for security measures, in particular for IT and building security (e.g. access controls, visitor lists, prevention, defense against and clarification of cyber attacks and malware attacks, network and mail scanners, video surveillance, telephone recordings), as well as for the prevention and clarification of criminal offenses and other misconduct or for conducting internal investigations, evidence purposes, data analyses, evaluation of system-side recordings of the use of our systems (log data);
• in connection with corporate transactions or other acts under company law (e.g. due diligence, keeping share registers, etc.);
• for the assertion of legal claims and defense in connection with legal disputes and official proceedings in Switzerland and abroad, including the clarification of litigation prospects and other legal, economic and other issues;
• to comply with our legal and internal requirements and rules in Switzerland and abroad, including compliance with orders from a court or authority and clarifications regarding business partners;
• Reporting, namely disclosure to other group companies of Stempel GLATZ in Switzerland and abroad
• we may process your personal data for other purposes that are necessary to protect our legitimate interests.
• We process your personal data for the above-mentioned purposes, depending on the situation, in particular based on the following legal bases:
• the processing of personal data is necessary for the performance of a contract with you or pre-contractual measures;
• you have given your consent to the processing of personal data concerning you
• the processing of personal data is necessary for compliance with a legal obligation
• processing is necessary in order to protect the vital interests of the data subject or of another natural person; or
• We have a legitimate interest in the processing of personal data, whereby our legitimate interests may include the following interests in particular good customer service, maintaining contact and communication with customers, including outside of a contract; in advertising and marketing activities; to improve our products and services and develop new ones; in preventing, combating and investigating crime; in protecting customers, employees and other persons as well as our data, trade secrets and assets; in ensuring appropriate security (both physical and digital); in the guarantee and organization of business operations, including the operation and further development of websites and other systems; in corporate management and development; in the sale or purchase of companies, parts of companies and other assets; in the enforcement or defense of legal claims; in compliance with Swiss and foreign law and other rules applicable to us.

4.2 Contacting Stempel GLATZ

You can contact us via the e-mail addresses and telephone numbers provided by us, the contact form or by other means (e.g. handing over a business card). The personal data you send us will be stored by us and processed to deal with your inquiry. The legal basis for this personal data processing is your consent and our legitimate interest in processing your request.

If you contact us by e-mail, you authorize us to reply to you via the same channel. Please note that unencrypted e-mails are transmitted via the open Internet, which is why it cannot be ruled out that they can be viewed, accessed and manipulated by third parties. We exclude - to the extent permitted by law - any liability that you may incur, in particular as a result of incorrect transmission, falsification of content or disruption to the network (interruptions, overloading, illegal interventions, blocking).

Telephone and video conference calls with us may be recorded; we will inform you of this at the beginning of each call. If you do not want us to record such conversations, you have the option of terminating the conversation at any time and contacting us by other means (e.g. by email or post).

4.3 Contact form

You can contact us using the contact form provided on our website. To use the contact form, you must enter your name, your e-mail address and a message text. This and any optional information you have provided will be stored by us and processed in order to deal with your request.

4.4 Newsletter

We use your e-mail address and other contact details to send you the newsletter. If you have already used a service from Stempel GLATZ, we can also send you information about similar services from us without your specific consent to send you the newsletter.

The newsletter is sent by the mailing service provider rapidmail, Freiburg im Breisgau, Germany. The privacy policy and further information about rapidmail can be found here: rapidmail.

You can unsubscribe from the newsletter by clicking on the link provided in every newsletter e-mail, by e-mail or by writing to our addresses given in Section 2.

4.5 Applications

You can submit your application for a position with us by post or by e-mail. The application documents and all personal data disclosed to us will be treated as strictly confidential, will not be disclosed to third parties and will only be processed for the purpose of processing your application for employment with us. Without your consent to the contrary, your application dossier will either be returned to you or deleted/destroyed after the application process has been completed, unless it is subject to a statutory retention obligation. If an employment relationship is established, the application dossier will be included in the personnel dossier. The legal basis for the processing of your data is your consent, the fulfillment of the contract with you and our legitimate interests.

4.6 When visiting our website

Our website collects a range of user information each time it is accessed, which is stored in the server log files.The information collected includes the IP address, the date and time of access, the time zone difference to the GMT time zone, the name and URL of the file accessed, the website from which access is made, the browser used and the operating system used.The collection of this information or data is technically necessary in order to display our website to you and to ensure its stability and security.This information is also collected in order to improve the website and analyze its use.

4.6.1 Cookies and other third-party services

Our website may use so-called cookies.

Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system or mobile device.The cookie contains a characteristic string of characters that enables the browser or mobile device to be uniquely identified when the website is called up again.

The purpose of using cookies is on the one hand to enable and simplify the use of our website for you. Some functions of our website cannot be offered without the use of cookies (so-called technically necessary cookies). On the other hand, we also use cookies/tools to analyze user behavior on our website, namely to measure reach and for marketing purposes.

Other services are third-party services integrated on our website, which may result in your data being disclosed to the third-party provider when you use our website or these other services (e.g. social media plug-ins, Google Maps, YouTube, etc.).

4.6.1.1 Technically necessary cookies

Technically necessary cookies are required for our website to function.

Therefore, these cookies cannot be switched off in our systems.

They usually record important actions, such as the number of requests made, editing your privacy settings or filling out forms. You can block these cookies in your browser, but some parts of our website may then no longer function.

The legal basis for data processing when using technically necessary cookies is our legitimate interest, which lies primarily in ensuring the functionality and improvement of our websites

4.6.1.2 Analytical and marketing cookies and third-party services

Analytical cookies enable us to analyze visitor behavior and traffic sources so that we can measure the performance of our website and improve the user experience.

They help us to recognize how popular which pages are and show how visitors move around our website.

Marketing cookies allow us to deliver advertising that is relevant to you. These cookies can remember that you have visited our website and share this information with other companies, including other advertisers.

Specifically, we use the following analytics and marketing cookies and third-party services:

Cookie/Service	Provider and Privacy Policy
Google Analytics	Google Ireland Ltd (hereinafter “Google”)

You can object to the use of cookies, for example (i) by selecting the appropriate settings in your browser, (ii) by using appropriate cookie blocker software (e.g. ghostery etc.), (iii) by using add-ons for your browser (e.g. “NoScript” etc.) or (iv) by downloading and installing the browser plug-in available under this link regarding cookies from Google.

The legal basis for data processing when using analysis and marketing cookies is our legitimate interest and your consent.

4.6.2 Plug-ins from third-party providers

We may use the third-party plug-ins listed in the table below on our website.

We use the so-called two-click solution, whereby no personal data is initially passed on to the providers of the plug-ins when you visit our website. The plug-in provider only receives the information that you have visited our website if you click on the marked plug-in field and thereby activate it. In addition, the data specified in section 4.6 of this privacy policy will be transmitted. The legal basis for the processing of your data in connection with third-party plug-ins is our legitimate interest in enabling our users to use these plug-ins.

We have no influence on the data collected and data processing procedures of the plug-in providers. These are subject to the respective privacy policies of the third-party providers. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers, which are provided below.

Plug-in	Provider and Privacy Policy
Facebook	Meta Platforms Ireland Limited

5 Disclosure of personal data to recipients and abroad

5.1 Disclosure of personal data to recipients

In addition to the data disclosures expressly mentioned in this privacy policy, we may disclose personal data to the following categories of recipients, insofar as permitted:

• other group companies of Stempel GLATZ;
• Providers to whom we have outsourced certain services (e.g. IT and hosting providers, advertising and marketing services, accounting, debt collection services, photographers, etc.) as well as other suppliers and subcontractors;
• Payment service providers (e.g. banks, debit and credit card providers, TWINT, etc.);
• Consulting service providers (e.g. tax advisors, legal advisors and representatives, management consultants);
• Auditors;
• business partners;
• Authorized representatives;
• Insurance companies, social insurance companies;
• Third-party providers of software applications that are used by customers or end customers in connection with our services or products;
• Credit reference agencies that store this data for credit rating information;
• Third parties who collect data about you via websites;
• prospective buyers or investors in the case of corporate transactions or other corporate actions
• parties in potential or actual legal proceedings or legal disputes
•  domestic and foreign authorities, official bodies or courts.

5.2 Disclosure of personal data abroad

In principle, we process your personal data in Switzerland and Austria. However, in exceptional cases (e.g. when using certain service providers or certain software applications), your personal data may also be transferred to other countries, primarily to the member states of the European Union and the European Economic Area (EEA), but in some cases also to other countries worldwide, in particular to the USA (primarily in connection with cookies, social media plug-ins and other third-party software applications).

If we transfer data to a country without adequate legal data protection, we ensure an adequate level of protection as provided for by law by using appropriate contracts (namely on the basis of the so-called standard contractual clauses of the European Commission) or rely on the legal exceptions of consent, contract execution, the establishment, exercise or enforcement of legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of the data subjects. Nevertheless, we would like to point out that data transmitted abroad is no longer protected by Swiss law and that foreign laws and official orders may require this data to be passed on to authorities and other third parties.

6 Retention period

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing or as long as there is another legal basis (e.g. statutory retention periods). We retain personal data that we hold on the basis of a contractual relationship with you for at least as long as the contractual relationship exists and limitation periods for possible claims by us run or contractual retention obligations exist. As soon as your personal data is no longer required for the above-mentioned purposes, it will generally and as far as possible be passively set, deleted or anonymized.

7. your rights

You have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing as well as to the disclosure of certain personal data for the purpose of transfer to another body (so-called data portability) within the scope of the data protection law applicable to you and insofar as provided for therein. Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or need it to assert claims. If you incur costs, we will inform you in advance.

If data processing is based on your consent, you can withdraw your consent at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by providing a copy of your ID if your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1 of this privacy policy.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

8. Data security

We take appropriate security measures of a technical and organizational nature to protect the security of your personal data, in particular to protect it against unauthorized or unlawful processing and to counteract the risk of loss, unintentional modification, unwanted disclosure or unauthorized access. Like all companies, however, we cannot rule out data security breaches with absolute certainty, as certain residual risks are unavoidable. As part of our security measures, we use firewalls, logging and encryption in particular, have authorization concepts and have implemented other protective measures to ensure that personal data is protected as completely as possible.

9 Amendments to this privacy policy

We expressly reserve the right to amend this Privacy Policy at any time. If such amendments are made, we will immediately publish the amended privacy policy on our website. The privacy policy published on our website shall apply in each case.