Name and address of the controller
LOOP - Logistics Optimizer
A division of Rhenus Logistics AG
Wiesendamm 4
4019 Basel / Switzerland
+41 61 639 37 37 

Making available the website and generating log files

1. Anonymous data collection

In principle, you can use our websites without informing us who you are. We only learn about technical data like the name of your Internet service provider, the website from which you come and the corporate websites that you visit. This information is assessed with the date and time details for internal statistical purposes related to advertising, website analysis and for designing our websites to meet needs. You remain completely anonymous as a user in this process. No pseudonymised user profiles are generated.

2. The purpose and legal basis of data processing

The temporary storage of the IP address by the system is necessary in order to enable the website to be sent to the user’s computer. The user’s IP address must be stored for the duration of the session. The legal basis for temporarily storing the data is found in the Data Protection Act CH-FADP and EU-GDPR.

3. The length of time that data is stored

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was gathered. When gathering data to make available the website, deletion occurs once the session in question has ended.

4. Opportunity to object and to have the data removed

The logging of data for making available the website and storing data in log files is absolutely necessary to operate the Internet site. There is therefore no opportunity for the user to object to this.

Using Cookies

1. Description and scope of the data processing:

We make use of cookies to improve the quality of establishing the link with and the content of our website and to provide user-oriented navigation that is as smooth as possible. We make use of so-called session cookies that are restricted to the time of your visit to the website. They are used to determine which content is viewed from your PC while you continue to surf and they also play a role in increasing your security when surfing. Once you leave our website or do not click on it for a certain time, these short-term cookies are deleted again.

Cookies cannot do any damage to your PC. They do not cause any security risk in the sense of viruses or spying on your PC. You control how cookies are handled yourself. Please use the help function in your browser to allow, reject, view and delete them.

We make use of cookies in order to make our website more user-friendly. Some elements on our website require us to identify the browser making the request after you move from one site to another. The following data is therefore stored and transmitted in the cookies:

We also use cookies that enable an analysis of the surfing behaviour of users. The following data can be transmitted in this way: search terms that are entered

2. The purpose and legal basis of data processing:

The purpose of using absolutely necessary cookies (technically necessary cookies) is to enable the use of websites for the users. The legal basis for the processing of personal data using absolutely necessary cookies is the Data Protection Act CH-FADP and EU-GDPR.

Some functions of our website are not available without using cookies. It is essential for them that the browser is recognised again after a change of site. We need cookies for the following applications: to take over language settings

The user data collected through the cookies required for technical purposes is not used to draw up any user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies enable us to see how the website is being used and we are then able to continually optimise our services. The following analysis cookies are used:

The legal basis for the processing of personal data using non-technically necessary cookies (performance cookies) is the Data Protection Act CH-FADP and EU-GDPR (consent).

3. The length of time that data is stored and the opportunity to object and to have the data removed:

Cookies are stored on the user’s computer and are transmitted to our site by the latter. As a user, you therefore have full control over the use of cookies. By making changes to the settings in your Internet browser, you can deactivate or restrict the sending of cookies. Any cookies already stored can be deleted at any time. This can take place automatically too. If cookies are deactivated for our website, it may not be possible for you to make full use of all the functions available on the website.

Contact form 

1. Description and scope of managing the data:

There is a contact form on our website and it can be used to make contact electronically. If a user makes use of this facility, the data entered on the input form is sent to us and stored. This data involves:

First name
Last name
Email address
Name of the company
Country
Phone number
Free text
Time of the request
IP address

2. The purpose and legal basis of data processing:

Within the scope of your contacting us, we process your personal data on the basis of the following legal principles for the following purposes:

The processing of the personal data from the contact form or your email serves us solely to process the contact and in case of follow-up questions. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with the Data Protection Act CH-FADP and EU-GDPR, if your request is aimed at the conclusion of a contract.

The other personal data processed when the email is sent is used to prevent any misuse of the contact form and guarantee the security of our IT systems. The legal basis for the processing of personal data is the Data Protection Act CH-FADP and EU-GDPR.

3. The length of time that data is stored:

The data is deleted as soon as it is no longer required to achieve the purpose for which it was gathered. This is the case for any personal data from the input form in the contact form and the data that is sent by email when the relevant conversation with the user has been concluded. The conversation has been ended when the circumstances suggest that the facts of the case in question have been finally resolved.

The personal data, which is also gathered during the sending procedure, is deleted after a period of seven days, at the very latest.

4. Recipients of the data:

In our contact form you can select the topic on which you would like to make an inquiry. Inquiries on the topic "General" are handled by the central specialist department. If necessary, we will forward your inquiry to the responsible Rhenus company for internal processing. This company will process the data you have provided in order to contact you regarding your inquiry.

Enquiries on all other topics are automatically forwarded for internal processing to the stored contact mail of the relevant Rhenus company and processed there. This company will process the data you have provided in order to contact you regarding your inquiry.

5. Opportunity to object and to have the data removed:

In the case of the Data Protection Act CH-FADP and EU-GDPR, you can object to the processing of your personal data at any time. Please note that in this case your request cannot be processed further. 

Data transfer to third parties

Google reCAPTCHA, Google Maps API). If you give your consent through our cookie banner, we will transfer the necessary data to the respective provider (e.g. your IP address).

If you consent to the activation of these services through our cookie banner, it cannot be ruled out that personal data will be transmitted to providers in countries outside the European Economic Area (EEA) which, from the point of view of the European Union ("EU"), do not ensure an "appropriate level of protection" for the processing of personal data in accordance with EU standards. Possible risks that cannot currently be ruled out are in particular:

- Your personal data could possibly be passed on to other third parties beyond the actual purpose (for example: use your data for advertising purposes.)

- You may not be able to sustainably assert or enforce your right to information toward the third-party provider.

- There is possibly a higher probability that incorrect data processing can occur, as the technical and organizational measures taken by third-party providers to protect personal data do not fully meet the requirements of the GDPR in terms of quantity and quality.

- The risk of data transmission to the USA is basically the relatively easy access to data by US authorities, as well as the fact that EU citizens do not have effective legal remedies against the extensive access rights of US authorities to personal data.

Please take this fact into account before you give your consent and thus allow your data to be transmitted.

For more information, please refer to our cookie banner.

The same applies to the social media profiles we operate when you visit our pages at the respective social media provider (Facebook, Instagram, LinkedIn).

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. The controller is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

Google Analytics has IP anonymisation enabled by default. Due to IP anonymisation, your IP address will be shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transferred by your browser as part of Google Analytics will not be merged with other Google data.

The following visitor data, which is not assigned to a person, can be collected:

Acquisition (= source of visitors, e.g. Google search, direct entry);
User behaviour (pages visited, bounce rate, links clicked);
Geographical data (country, region, city, language);
Technology (browser, device category mobile / desktop, screen resolution, device model, operating system).
We use Google Analytics 4 for the following purposes: tracking user behaviour in order to derive optimisation potential (ROI maximisation), reporting website performance, monitoring the success of campaigns. The legal basis is your consent pursuant to the Data Protection Act CH-FADP and EU-GDPR.

In addition, Google Analytics 4 is integrated via server-side tag management, i.e. the visitor data is not transferred directly to Google Analytics. The data is first transmitted to a so-called tagging server (via Google Cloud) in Germany and from there transferred to Google Analytics 4 in a controlled manner (i.e. no personal/demographic data).

Recipients of the data may be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR).;
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA;
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA:

For the USA, the European Commission adopted a news adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider to establish an appropriate level of data protection in those countries.

The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached occurs automatically once a month.

You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by not giving your consent to the setting of the cookie or downloading and installing the browser add-on to deactivate Google Analytics HERE.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

Youtube (incl. Google Fonts)

We embed YouTube videos on some of our websites. The operator is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about website visitors before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube establishes a connection to the Google DoubleClick network - regardless of whether you watch a video.

As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. Cookies remain on your device until you delete them. If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no influence.

YouTube uses Google Fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the uniform display of fonts. When you call up a page, your browser loads the required Google Fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of YouTube. These processing operations are only carried out after you have given your express consent in accordance with the Data Protection Act CH-FADP and EU-GDPR when you activate the YouTube video on our website. You can revoke your consent in the cookie settings at any time.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq.

For more information on the handling of user data, please visit https://www.google.de/intl/de/policies/privacy. Information on how to change your privacy settings at Google can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

Google Maps (incl. Google Fonts)

Our website uses Google Maps to visually display geographical information. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). By integrating Google Maps, a direct connection is established between Google’s servers and your browser. This enables Google Maps to be displayed. By integrating and using Google Maps, your IP address as well as information on the use of the maps is transmitted to Google. In addition, Google processes the search terms you enter on the Google Maps map as well as your current location, provided you have granted your express consent via the Google Maps application. Moreover, Google Maps embeds Google Fonts. These are fonts from Google. To display Google Fonts on the Google Maps map, a connection is also established from your browser to the Google server. Your IP address is transmitted to Google in this process.

The legal basis for processing of the personal data is your consent according to the Data Protection Act CH-FADP and EU-GDP. You can revoke your consent for the future at any time by deselecting the corresponding category in the cookie banner. You can find the “Cookie settings” at the bottom of the footer on this website.

For detailed information on data processing by Google refer to Google’s privacy policy: http://www.google.com/privacypolicy.html. The additional Terms of Use for Google Maps/Google Earth also apply.

Cloudflare

1. Description and scope of managing the data

Our pages use features of Cloudflare. Provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. We have concluded a corresponding agreement with Cloudflare based on the Data Protection Act CH-FADP and EU-GDPR.

A Content Delivery Network (CDN), as provided by Cloudflare, is nothing more than a network of servers connected via the Internet. Cloudflare has distributed such servers around the world to bring web pages to your screen faster. Cloudflare makes copies of our website and places them on their own servers. When you visit our website, you will automatically be connected to Cloudflare's nearby servers which deliver the data. This way the loading time is significantly reduced.

We process your data when you access or use our domains, networks, websites, application programming interfaces and applications, or if you are authorized Cloudflare users for teams, such as our employees, agents or contractors. The information processed may include, but is not limited to, IP addresses, system configuration information and other information about traffic to and from our websites, devices, applications and/or networks (collectively, "Log Information").

In addition, Cloudflare stores server and network activity data, as well as observations and analysis collected by Cloudflare in the course of providing the Services (collectively, "Operational Metrics"). Examples of Operational Metrics include service availability and service availability metrics, request volumes, failure rates, cache rates, and IP threat assessments. Cloudflare uses and processes end-user log data to fulfill its obligations under our agreement.

2. The purpose and legal basis of data processing

We use Cloudflare to increase the speed of our website while reducing latency and thus improving/optimizing the user experience. The data processing is based on our legitimate interest (Data Protection Act CH-FADP and EU-GDPR).

3. The length of time that data is stored

In general, Cloudflare stores user-level data for domains in the Free, Pro and Business versions for less than 24 hours. For Enterprise domains that have Cloudflare Logs (formerly Enterprise LogShare or ELS) enabled, data can be stored for up to 7 days. However, if IP addresses trigger security alerts during Cloudflare, exceptions to the above retention period may occur.

For more details on Cloudflare's privacy policy, please see the following link: https://www.cloudflare.com/de-de/privacypolicy/

Sprout Social

Functions of the Sprout Social service are integrated within our website. These functions are offered by Sprout Social, Inc, 131 S. Dearborn St., Ste. 700, Chicago, IL 60603, USA. This is a tool for evaluating social media activities, which displays messages and posts from our social media pages for the benefit of clarity, effectiveness and response. Accordingly, the legal basis is the Data Protection Act CH-FADP and EU-GDPR. Only data is collected that you send to our social media site through your messages or posts and are also directly visible to us on our social media site, as well as data that is collected by the operator of the social media platform. You can find out what these are from the respective operator's data protection information.

Wallis.IO

Our website uses social media plugins or widgets from Walls.io. When these plugins are used, the IP address and cookie information are transmitted to Walls.io. Walls.io is operated by "Walls.io GmbH in Vienna, Austria. IP address and cookie information are sent to walls.io's servers in Austria and Germany and logged there for technical reasons. This logging is simply a technical necessity to enable the functionality of the social media plugin or widget. This data is not passed on to third parties and is deleted after a maximum of 60 days. We have no influence on the scope of the data that the social network collects with the help of this plugin. Please refer to the data protection information of the respective social network for more information.

Concludis

The Rhenus Group takes the protection of your personal data very seriously. We would, therefore, like to let you know about the details of our Privacy Policy which we always adhere to during an application process.

What information is stored?
When you send us your online application, it is automatically read and filed in our application management system. All documents sent with your application (cover letter, CV, diplomas and other certificates) and all the information contained in these documents are also stored in this system.

If you hand in your application in person or send it to us by post, it is first digitized and then also filed in our application management system. The original documents are returned to you immediately.

What are the collected personal data used for?

The processing of your personal data may only be carried out lawfully, in accordance with the Data Protection Act CH-FADP and EU-GDPR. We process your data in accordance with the Data Protection Act CH-FADP and EU-GDPR. You have given your consent of the data obtained for you for one or more specific purposes.

The processing is necessary to protect the legitimate interests of the controller or a third party, pursuant to the Data Protection Act CH-FADP and EU-GDPR, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, override, in particular if the data subject, is a child.

Your application documents and the personal data contained therein will be used exclusively for the respective application process and the associated company of the Rhenus Group, according to your selection (to be indicated in the application form below), for decision-making in the application process.

All persons directly involved in the application process (HR departments, specialist departments, works councils) have access to your documents.

How do we ensure your data is secure?
Our application management system is operated by a contractor in accordance with the rules and regulations of the Rhenus Group and hosted on a server in Germany. Your data is automatically sent to the Rhenus Group in encrypted form (SSL encryption). The latest technology is always used to keep your data secure.

How long do we store your data?

After completion of the application process, your documents will be archived for another 90 days and then automatically and completely deleted. You will receive a corresponding confirmation of this by e-mail.

What does inclusion in the applicant pool mean?

Inclusion in the Rhenus Group applicant pool is voluntary and, if applicable, is by separate invitation. If you decide to join our applicant pool, your personal data may be viewed by decision-makers at the Rhenus Group for the purpose of possible job placements. Your data will not be passed on to third parties outside the Rhenus Group.

The retention period in the applicant pool is initially 180 days. After that, you will receive an e-mail from us with an extension option. If you do not confirm this within 14 days, your data will be duly deleted.

What happens in the case of parallel application procedures within the Rhenus Group?

If you have applied for several positions within the Rhenus Group at the same time, the departments for which you are participating in an application process will become aware of this.

The same applies if you apply for another vacancy within the Rhenus Group after a rejection within the retention period of your documents of 90 days.

Updating the data protection declaration

We are entitled to update or change this data protection declaration at any time and without prior notice. The existing level of data protection will, of course, be maintained. In the event of a change to the data protection provisions, we will inform you of this immediately by e-mail.

Flipsnack

We use "Flipsnack" on our website. This is a service to graphically embed PDF files. The processing company is Flipsnack LLC, 2701Troy Center Dr Suite 255, Troy, Michigan, 48084. The data processing purpose of Flipsnack is to display PDF brochures. Data is collected through technologies such as cookies and iFrame. These are placed in the browser. The following (personal) data is collected by or through the use of this service: Log data (browser, operating system, device type, IP address, chat activity, date, time & duration of access, referrer URL, page views, search terms, location, clicks). The legal basis for the processing of personal data is the Data Protection Act CH-FADP and EU-GDPR. The data is stored until it is no longer needed for processing. Details on the handling of personal data by Flipsnack can be found at:
https://www.flipsnack.com/legal-information/privacy-policy.html

Google Servicess und Google Adwords Conversion

This website uses functions of the service "Google Ads" (formerly Google AdWords), a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads enables us to draw attention to our attractive offers with the help of advertising media on external websites. This enables us to determine how successful individual advertising measures are. These advertising media are delivered by Google via so-called "AdServers". For this purpose, we use so-called AdServer cookies, which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC.

These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies allow Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. According to our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is the possibility that Google learns your IP address and stores it.

The legal basis for the processing is your consent pursuant to the Data Protection Act CH-FADP and EU-GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

In the context of processing by Google Ads, data may be transmitted to the USA. The following recipients may be, among others, Google LLC. and Alphabet Inc. The security of the transmission is secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR.

For more information about data processing by Google, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=en.

Google Tag Manager

This website uses functions of the service "Google Tag Manager" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. The Google Tag Manager is an organizational tool that allows us to integrate and manage website tags centrally and via a user interface. We have concluded an order processing agreement with Google. The Google Tag Manager is an auxiliary service and itself processes personal data only for technically necessary purposes. The Google Tag Manager does not store any data itself. This takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. Please note that American authorities, such as intelligence agencies, could possibly gain access to personal data due to American laws. You can find more information about the Google Tag Manager in the Privacy policy of Google: https://policies.google.com/privacy?hl=en&gl=de

Google Doubleclick

This website uses functions of Google DoubleClick. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

DoubleClick is used to show you interest-based ads across the Google advertising network. In order to be able to show users interest-based advertising, DoubleClick must recognize the respective viewer and be able to assign the websites they have visited, clicks and other information on user behavior to them. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting). Google DoubleClick uses a special cookie script. This draws among other things on:

the number of page views,
the surfing behavior of users on the site,
the IP address of the user,
previously visited pages and
for searching for used keywords.
The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned. If you have a Google account, the search engine associates the data obtained with the information available in the Google account.

As part of processing by Google, data may be transmitted to the USA. The following recipients may include Google LLC. and Alphabet Inc. The level of data protection in the USA is currently not equivalent to that in the EU. This is due in particular to far-reaching official access rights to personal data processed by companies and insufficient legal protection options for data subjects. The security of the transmission is secured by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a security level that corresponds to the Data Protection Act CH-FADP and EU-GDPR.

Processing takes place exclusively on the basis of Athe Data Protection Act CH-FADP and EU-GDPR. You can revoke your consent at any time with effect for the future. For more information on how to object to the ads displayed by Google, please see https://policies.google.com/technologies/ads?hl=en.

Onetrust CMP

We use the cookie management platform called OneTrust on our website to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data protection regulations. The provider is OneTrust Technology Limited (hereinafter "OneTrust"), 82 St John St, Farringdon , London EC1M 4JN, United Kingdom (UK).

By integrating a JavaScript code, a banner is displayed to users when the page is accessed, which gives the user the option of giving or rejecting their consent to the setting of cookies for individual purposes or individual functions of our website. The tool blocks the setting of all cookies that require consent until the respective user gives their consent. This ensures that cookies that require consent are only set on the user's end device if there is a legal basis. So that OneTrust can individually record and log the consent settings made by the user, the following user information is collected by the tool when our website is accessed:

IP address (only temporarily to display the correct banner depending on the access location);
The user's respective consent settings, whereby we cannot trace which natural person is behind the user.
OneTrust is used to obtain the legally required consent for the use of cookies. The legal basis is the Data Protection Act CH-FADP and EU-GDPR. We have concluded an order processing contract with OneTrust. This is a contract required by data protection law, which ensures that One Trust only processes the personal data of our website visitors according to our instructions and in compliance with the Data Protection Act CH-FADP and EU-GDPR. We would like to point out that your data may be transferred to the USA. The data collected is stored until you ask us to delete it or delete the OneTrust cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Details on the data processing of OneTrust cookies can be found in the OneTrust data protection declaration at https://www.onetrust.com/privacy/.

The rights of data subject

1. Right of access:

You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing has taken place, you can request information from us about the following:

(1) the purposes for which the personal data is being processed;

(2) the categories of personal data that are being processed;

(3) the recipients or the categories of recipients to whom the personal data related to you has been disclosed or is still being disclosed;

(4) the planned time span for storing the personal data related to you or, if specific details on this are not possible, the criteria for determining the time span for storage;

(5) the existence of any right to correct or delete the personal data related to you, a right to restrict the processing of the data by the controller or a right to object to this processing of data;

(6) the existence of a right to make a complaint to a supervisory authority;

(7) all the information that is available about the origin of the data, if the personal data is not being gathered from the person involved;

You can receive a free copy of your data from us. If you are interested in further copies, we reserve the right to charge you for the additional copies.

2. Right to rectification:

You have the right to have the controller correct and/or complete any data, if the personal data that is being processed and concerns you is incorrect or incomplete. The controller must make the correction immediately.

3. Right to restriction of processing:

You may demand restrictions on the processing of the personal data related to you in the following situations:

(1) if you dispute the correctness of the personal data related to you for a period that enables the controller to check the correctness of the personal data;

(2) if the processing of the data is illegal and you reject any deletion of your personal data and demand that restrictions are placed on the use of your personal data instead;

(3) if the controller no longer requires the personal data for the purposes of processing it, but you require it to assert, exercise or defend legal claims; or

(4) if you have lodged an objection to the processing according to the Data Protection Act CH-FADP and EU-GDPR and it is not yet clear whether the legitimate reasons presented by the controller override your reasons.

4. Right to erasure:

You may demand from the controller that the personal data related to you is deleted immediately and the controller shall be obliged to delete this data immediately if one of the following reasons applies:

(1) the personal data related to you is no longer required for the purposes for which it was gathered or processed in some other way;

(2) you withdraw your consent, on which the processing of the data was based according to the Data Protection Act CH-FADP and EU-GDPR, and there is no other legal basis for processing the data;

(3) you lodge an objection against any processing of the data according to the Data Protection Act CH-FADP and EU-GDPR and there are no overriding legitimate reasons for the processing of the data or you lodge an objection to the processing of the data according to the Data Protection Act CH-FADP and EU-GDPR;

(4) the personal data related to you has been processed illegally;

(5) the deletion of the personal data related to you is necessary to fulfil a legal obligation according to the laws of the Union or the law of the member states, to which the controller is subject;

(6) the personal data related to you was gathered in relation to information society services according to the Data Protection Act CH-FADP and EU-GDPR.

a) Exceptions

There is no right to have the data deleted if the processing of the data is required:

(1) to exercise the right of free expression and information;

(2) to meet a legal obligation, which requires the processing of the data according to the laws of the Union or the member states, to which the controller is subject, or to perform a task that is of public interest or takes place in connection with exercising any state authority that has been transferred to the controller;

(3) for reasons of public interest in the field of public health according to the Data Protection Act CH-FADP and EU-GDPR;

(4) for archiving purposes that are in the public interest, scientific or historical research purposes or for statistical purposes according to the Data Protection Act CH-FADP and EU-GDPR, if the right cited in paragraph a) will probably make the achievement of the goals of this processing of data impossible or will serious impair it; or

(5) to assert, exercise or defend legal claims.

5. Right to data portability:

You have the right to receive the personal data related to you, which you have made available to the controller, in a structured, conventional and machine-readable format. You also have the right to transfer this data to a different controller without any obstruction by the first controller, to which the personal data was made available, if

(1) the processing of the data is based on consent in line with the Data Protection Act CH-FADP and EU-GDPR and

(2) the processing of the data takes place using automated procedures.

When exercising this right, you also have the right to ensure that the personal data related to you is directly transferred from one controller to a different controller, if this is technically feasible. The freedoms and rights of other persons may not be impaired by this process.

The right to data portability shall not apply to any processing of personal data that is necessary to perform a task that is in the public interest or takes place in connection with exercising any state authority that has been transferred to the controller.

6. The right to object:

You have the right to lodge an objection at any time to the processing of the personal data related to you, if this takes place according to the Data Protection Act CH-FADP and EU-GDPR, for reasons arising from your particular situation; this shall also apply to any profiling supported by these stipulations. In this case we will no longer process your data. The latter does not apply if we can prove that there are compelling reasons for processing worthy of protection which outweigh your interests or if we need your data to assert, exercise or defend legal claims.

If the personal data related to you is processed to provide direct marketing, you have the right to lodge an objection to the processing of the personal data related to you for the purpose of this kind of advertising at any time; this shall also apply to profiling, if it is connected to this kind of direct marketing. If you object to the processing of the data for the purposes of direct marketing, the personal data related to you will no longer be processed for these purposes.

7. The right to cancel the declaration of consent under data protection law:

You have the right to cancel your declaration of consent provided under data protection law at any time. By cancelling your consent, the legitimacy of the processing of the data that was performed on the basis of your consent until your cancellation shall not be affected.

8. The right to lodge a complaint to a supervisory authority:

Regardless of any different administrative law or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your place of residence, your place of work or the place of the alleged breach, if you believe that the processing of the personal data related to you breaches the Data Protection Act CH-FADP and EU-GDPR.