Privacy Statement

Oel-Brack AG, Rupperswilerstrasse 3, CH-5502 is the operator of the website www.midland.ch and the services offered on it, and is therefore responsible for the collection, processing and use of your personal data and the compatibility of data processing with applicable data protection law.

Your trust is important to us, which is why we take data protection seriously and ensure that appropriate security is provided. Of course, we observe the statutory provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

Please take note of the information below so that you know what personal data we collect from you and for what purposes we use it.

  1. Calling up our website

    Our servers save each access temporarily in a log file when you visit our website. As with every connection to a web server, the following technical data is recorded without your intervention and stored by us until it is automatically deleted after 12 months at the latest:

    • The IP address of the requesting computer
    • The name of the owner of the IP address range (usually your internet access provider)
    • The date and time of accessing
    • The website from which access occurred (referrer URL), possibly with the search term used
    • The name and URL of the file retrieved
    • The status code (e.g. error message)
    • The operating system of your computer
    • The browser you are using (type, version and language)
    • The transmission protocol used (e.g. HTTP/1.1) and
    • possibly your user name from a registration/authentication

    This data is collected and processed for the purpose of enabling use of our website (establishing a connection), ensuring system security and stability in the long term, enabling the optimisation of our website and for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 (1) f GDPR.

  2. Use of our contact form

    You have the option of using a contact form to get in touch with us. We require the following information for this purpose:

    • First and last name
    • Postal address (optional)
    • Email address
    • Phone number (optional)
    • Message

    We only use this data and a telephone number provided voluntarily by you to answer your contact request in the best possible and personalised manner. Processing of this data is therefore required within the meaning of Art. 6 (1) b GDPR to implement pre-contractual measures or is in our legitimate interest pursuant to Art. 6 (1) f GDPR.

  3. Opening a customer account

    You can order as a guest or open a customer account in order to place orders in the online shop. We collect the following data during registration for a customer account:

    • First and last name
    • Postal address
    • Date of birth
    • Email address
    • Password

    The data is collected for the purpose of providing the customer with password-protected direct access to the basic data we have stored. Customers can view their completed and outstanding open orders or manage or change their personal data.

    The legal basis for processing data for this purpose is the consent you have given pursuant to Art. 6 (1) a EU GDPR.

  4. Purchasing in the online shop

    If you wish to place orders in our online shop, we require the following data to process the contract:

    • First and last name
    • Billing address (and delivery address if different)
    • Details in the context of payment (depending on the selected payment method)
    • Login data such as the email address and password (for registered customers)

    Unless otherwise stated in this privacy statement, or where you have not given your separate consent, we shall only use the aforementioned data to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment.

    The legal basis for data processing for this purpose is fulfilment of a contract pursuant to Art. 6 (1) b EU GDPR.

  5. Disclosing data to third parties

    We only disclose your personal data to others if you have given your express consent, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims emanating from the contractual relationship.

    Furthermore, we disclose your data to third parties insofar as this is necessary in the context of use of the website and contract processing (including outside the website), namely processing of your bookings. This includes the respective transport service provider commissioned with shipping of the ordered goods. One service provider to whom the personal data collected via the website is disclosed or who has or can gain access to it is our web host METANET AG, Josefstrasse 218, CH-8005 Zurich. The website is hosted on servers in Switzerland. The data is disclosed for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Art. 6 (1) f EU GDPR.

    In circumstances where we make payment in advance (e.g. in the case of a purchase on account), we can obtain a credit report on the basis of mathematical/statistical methods from a credit agency in order to safeguard our legitimate interests. For this purpose, we transmit the personal data required for a credit check to the credit agency D&B Schweiz AG, Grossmattstrasse 9, CH-8902 Urdorf and use the information received on the statistical probability of a payment default to reach a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report can contain probability values (score values) that have been calculated on the basis of scientifically recognised mathematical/statistical methods and whose calculation includes address data. Your legitimate interests are taken into consideration in accordance with statutory provisions. For the purposes described above, our legitimate interest in data processing exists within the meaning of Art. 6 (1) f EU GDPR.

    Finally, in the event of payment by credit card on the website, we forward your credit card information to your credit card issuer and the credit card acquirer. If you decide to pay by credit card, you will be asked to enter all absolutely necessary information in each case. The legal basis for the disclosure of data is the fulfilment of a contract pursuant to Art. 6 (1) b EU GDPR. With regard to the processing of your credit card information by these third parties, please also read the general terms and conditions and the privacy statement of your credit card issuer.

  6. Transmission of data abroad

    We are entitled to transmit your personal data to third-party companies (contracted service providers) abroad for the purpose of the data processing described in this privacy statement. These third parties are obliged to ensure data protection to the same extent as us. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we shall contractually ensure that the protection of your personal data corresponds at all times to that in Switzerland or the EU.

  7. Use of Your Data for Advertising Purposes

    1. Newsletter

      If you wish to receive the newsletter offered on our website, we require a valid email address from you. No further data is collected. Your email address will not be shared with other companies. You can revoke your consent to store the data, email address, and their use for sending the newsletter and for our own advertising purposes at any time. This website uses the services of CampaignMonitor (http://www.campaignmonitor.com) for sending newsletters. You can view CampaignMonitor's privacy policy here: http://www.campaignmonitor.com/privacy/. CampaignMonitor is used based on our legitimate interests according to Art. 6(1)(f) GDPR and a data processing agreement according to Art. 28(3) Sentence 1 GDPR. CampaignMonitor may use recipient data in pseudonymous form, i.e., without allocation to a user, for optimizing or improving its own services, e.g., for the technical optimization of newsletter delivery and presentation or for statistical purposes. However, CampaignMonitor does not use the data of our newsletter recipients to contact them directly or to share the data with third parties. If you do not want analysis by CampaignMonitor, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.

    2. Individual Advertising

      Information we receive from you helps us permanently improve your shopping experience and tailor it to be customer-friendly and individualized for you. The information you provide and automatically generated information are used to create advertising tailored to you and your interests. For this purpose, we use existing information such as email receipt and read confirmations, information about your computer and internet connection, operating system and platform, your order history, your service history, date and time of visiting the homepage, and products you have viewed. We use this information exclusively in pseudonymized form. Through the analysis and evaluation of this information, we are able to improve our website and internet offering, and thereby send you individual newsletters (if you are subscribed) that recommend products that you might actually be interested in. Our goal is to make our newsletters more useful and interesting for you.

    3. Contests and Surveys

      In contests, we use your data for the purpose of notifying winners and advertising our offers. Detailed information can be found in our participation conditions for the respective contest. For surveys, we use your data for market and opinion research. We use this data exclusively in anonymized form for statistical purposes and for market and opinion research by Oel-Brack AG. Your answers will not be shared or published with third parties. We do not store the responses from our surveys together with your email address or other personal data.

    4. Revocation of Consent for the Use of Your Data for Advertising Purposes

      You can revoke your consent for the use of your personal data for advertising purposes at any time, either entirely or for individual measures (newsletters, individual advertising, contests, and surveys). A notification in written form via email, fax, or mail to the contact information of the responsible entity listed in Section 1 is sufficient for the revocation. Naturally, you will also find an unsubscribe link in every newsletter and survey email.
  8. Cookies

    Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on the hard drive of your computer when you visit our website.

    We use cookies for purposes such as providing you with the shopping cart function across several web pages and to temporarily save your entries when a form on the website is filled out so that you do not have to repeat the entry when calling up another subpage. Cookies may also be used to identify you as a registered user after registering on the website without the need for you to log in again when you access another subpage.

    Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. The following pages contain explanations on how you can configure the processing of cookies in the most common browsers:

    Deactivating cookies may mean that you cannot use all the functions of our website.

  9. Tracking tools

    1. General information

      We use the Google Analytics web analysis service for the purpose of needs-based design and continuous optimisation of our website. Pseudonymised usage profiles are created and small text files that are stored on your computer (cookies) are used in this context. The information about your use of this website generated by the cookie is transmitted to the server of the provider of these services, stored there and processed for us. In addition to the data listed under 1, we may receive the following information as a consequence:

      • Navigation path taken by a visitor on the website
      • Length of stay on the website or subpage
      • The subpage on which the website is exited
      • The country, region or city from which accessing occurs
      • The end device (type, version, colour depth, resolution, width and height of the browser window)
      • Whether a returning or new visitor is involved.

      The information is used to evaluate use of the website, compile reports on website activities and provide other services related to website and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transmitted to third parties if this is required by law or if third parties process this data on behalf of us.

    2. Google Analytics

      Google Analytics is provided by Google Inc., an enterprise of the Alphabet Inc. holding company based in the United States. Google uses cookies. The information generated by the cookie about the use of the online offering by users is generally transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering, and to provide us with further services related to the use of this online offering and internet usage. Pseudonymous usage profiles of users can be created from the processed data. Before the data is transmitted to the provider, the IP address is shortened by activating IP anonymisation (anonymizeIP) on this website within the member states of the European Union or in other states party to the Agreement on the European Economic Area. The anonymised IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The full IP address is only transmitted to a Google server in the United States and shortened there in exceptional cases. In these cases, we ensure that Google Inc. maintains an adequate level of data protection through contractual guarantees. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user.

      You can find more information about the web analysis service used on the Google Analytics website. Instructions on how to prevent processing of your data by the web analysis service can be found at https://tools.google.com/dlpage/gaoptout?hl=en.

    3. Google Maps

      This website uses the Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes, and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google Privacy Policy. In the Privacy Center, you can also change your personal privacy settings. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

    4. Google Webfonts

      To display our content correctly and visually appealing across different browsers, we use script libraries and font libraries such as Google Webfonts (https://www.google.com/webfonts/) on this website. Google Webfonts are transferred to your browser's cache to prevent multiple loading. If the browser does not support Google Webfonts or restricts access, content will be displayed in a standard font. Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – currently unclear for what purposes – that the operators of such libraries may collect data. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

    5. Google Re/Marketing Services

      We use marketing and remarketing services ("Google Marketing Services") from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, based on our legitimate interests (i.e., interest in analyzing, optimizing, and operating our online offering within the meaning of Article 6(1)(f) GDPR). Google is certified under the Privacy Shield agreement, providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Marketing Services allow us to display targeted advertisements for and on our website to show users only ads that potentially match their interests. For example, if a user is shown ads for products they have shown interest in on other websites, this is called "remarketing." For these purposes, when our website and other websites with active Google Marketing Services are accessed, Google immediately executes code from Google and integrates so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") into the website. With their help, an individual cookie, i.e., a small file, is stored on the user's device (instead of cookies, comparable technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites the user has visited, which content they are interested in, and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online offering. The user's IP address is also recorded, but within the framework of Google Analytics, we inform that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. The IP address is not merged with user data within other Google offers. The information mentioned above may also be linked by Google with information from other sources. If the user subsequently visits other websites, they may be shown ads tailored to their interests. User data is processed pseudonymously within Google Marketing Services. This means that Google does not store and process the name or email address of users but processes the relevant data cookie-related within pseudonymous user profiles. This means that ads are not managed and displayed for a specifically identified person from Google's perspective but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA. Google Marketing Services we use include, among others, the online advertising program "Google Ads." In the case of Google Ads, each Ads customer receives a different "conversion cookie." Therefore, cookies cannot be tracked through the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. We may also use Google AdSense to integrate third-party ads. AdSense uses cookies that enable Google and its partner websites to display ads based on users' visits to this website or other websites on the Internet. Furthermore, we can use the "Google Tag Manager" to integrate and manage Google Analytics and marketing services into our website. For more information on Google's use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads, and Google's privacy policy is available at https://www.google.com/policies/privacy. If you wish to object to interest-based advertising through Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.

    6. Google Conversion Tracking

      Furthermore, we use the so-called Conversion Tracking as part of the use of the Google Ads service. When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer/device. These cookies expire after 30 days, do not contain personal data, and are therefore not used for personal identification. The information obtained through the use of conversion cookies is used to create conversion statistics for Ads customers who have opted for conversion tracking. The legal basis for this data processing is Article 6(1)(a) GDPR. You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that in this case, you may not be able to use all the functions of our services to their full extent. In addition, you can deactivate interest-based ads on Google as well as interest-based Google ads on the web (within the Google Display Network) in your browser by activating the "Off" button at www.google.de/settings/ads or by making the deactivation at www.aboutads.info/choices/. For more information on your options in this regard and Google's data protection, please visit www.google.de/intl/de/policies/privacy/?fg=1. You can revoke your consent at any time in our preference center.
  10. Social media plugins

    We have integrated the social media buttons of the following companies on our website. You can recognise the plugins by the fact that they are marked with the corresponding logo.

    • Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA)
    • Instagram LLC (Represented by Kevin Systrom and Mike Krieger - 1601 Willow Rd - Menlo Park CA 94025 - USA)
    • Twitter Inc. (795 Folsom St. - Suite 600 - San Francisco - CA 94107 - USA)
    • Google Plus/Google Inc. (1600 Amphitheatre Parkway - Mountain View - CA 94043 - USA)
    • Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA
    • XING AG (Gänsemarkt 43 - 20354 Hamburg - Germany)
    • LinkedIn Ireland Unlimited Company (Wilton Place - Dublin 2 - Ireland)
    • Vimeo Inc. (555 West 18th Street - New York - New York 10011 - USA)
    1. Twitter

      Within our online offer, functions and contents of the service Twitter, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can announce their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Twitter platform, Twitter can assign the call-up of the above-mentioned content and functions to the user's profile there. Twitter is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy policy: https://twitter.com/en/privacy, Opt-Out: https://twitter.com/personalization.

    2. Xing

      Within our online offer, functions and contents of the service Xing, offered by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Xing platform, Xing can assign the call-up of the above-mentioned content and functions to the user's profile there. Xing privacy policy: https://www.xing.com/app/share?op=data_protection.

    3. Linkedin

      Within our online offer, functions and contents of the service LinkedIn, offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the LinkedIn platform, LinkedIn can assign the call-up of the above-mentioned content and functions to the user's profile there. Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy.. LinkedIn is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active . Privacy policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

    4. Pinterest

      Within our online offer, functions and contents of the service Pinterest, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can announce their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Pinterest platform, Pinterest can assign the call of the above-mentioned content and functions to the user's profile there. Pinterest privacy policy: https://about.pinterest.com/de/privacy-policy.

    5. Instagram

      Within our online offer, functions and contents of the service Instagram, offered by Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park, CA 94025, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the call of the above-mentioned content and functions to the user's profile there. Instagram privacy policy: https://help.instagram.com/155833707900388/?helpref=hc_fnav&bc[0]=Instagram Help&bc[1]=Privacy%20and%20Security.

    6. Vimeo

      Within our online offer, functions and contents of the service Vimeo, offered by Vimeo Inc., 555 West 18th Street New York, New York 10011, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking of the content, the authors of the content or subscribe to our contributions. If the users are members of the Vimeo platform, Instgram can assign the call-up of the above-mentioned content and functions to the user's profile there. Vimeo privacy policy: https://vimeo.com/privacy.

    7. YouTube

      Functions and contents of the YouTube service, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, can be integrated within our online offer. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the YouTube platform, YouTube can assign the call-up of the above-mentioned content and functions to the user's profile there. Google privacy policy: https://policies.google.com/?hl=en&gl=en.

    8. Facebook Pixel, Custom Audiences and Facebook Conversion

      Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used due to our legitimate interests in the analysis, optimisation and economic operation of our online offer and for these purposes.

      Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

      With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion").

      The processing of the data by Facebook takes place within the framework of Facebook's data use policy. Accordingly, general information on the display of Facebook ads, in Facebook's data usage policy: https://www.facebook.com/policy.php. Specific information and details on the Facebook Pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

      You can opt-out of the Facebook Pixel's collection and use of your data to display Facebook Ads. To set which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

      You can further object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

  11. Information on data transmissions to the United States

    For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that US authorities have surveillance measures in place in the United States that generally enable the storing of all personal data of all persons whose data has been transmitted from Switzerland to the United States. This occurs without differentiation, restriction or exception based on the respective goal and with no objective criteria that enable access to the data by the US authorities and its later use to be restricted to very specific, strictly limited purposes that would justify the access to this data and intervention related to its use. We would also like to point out that there are no means of legal remedy in the United States for data subjects from Switzerland that would enable them to gain access to their data and request its rectification or erasure, and that there is no effective judicial protection against the general access rights of US authorities. We explicitly point out this legal and factual situation in order to enable users to make an informed decision concerning the provision of consent to the use of their data.

    We would like to point out to users residing in a member state of the EU that the United States does not have an adequate level of data protection from the perspective of the European Union, based among other things on the issues mentioned in this section. Insofar as we have explained in this privacy statement that recipients of data (e.g. Google) are based in the United States, we shall endeavour to ensure by means of contractual arrangements with these companies or certification of these companies under the EU - US or Swiss - US Privacy Shield framework that your data is adequately protected by our partners.

  12. Right to information, rectification, erasure, restriction of processing and right to data portability

    You have the right to obtain information on personal data stored by us that relates to you upon request. In addition to this, you have the right to request the rectification of inaccurate data or the erasure of your personal data, provided the data concerned is not subject to a legal retention obligation or permit that allows us to process the data.

    You also have the right to request that the data you provided us with be returned to you (right to data portability). On request, we shall also pass the data on to a third party of your choice. You have the right to receive the data in a standard file format.

    You can contact us regarding the aforementioned purposes via the email address [info@oelbrack.ch]. We may, at our own discretion, request proof of identity to process your requests.

  13. Data security

    We take appropriate technical and organisational security measures to protect your personal data stored by us against manipulation, partial or complete loss and unauthorised accessing by third parties. Our security measures are continuously improved in line with technological developments. However, we cannot guarantee absolute security.

    You should always handle your access data with the utmost confidentiality and close the browser window when you have finished communicating with us, especially if you share the computer with others.

    We also take internal data protection within the company very seriously. Our employees and the service providers engaged by us are under a contractual obligation to maintain confidentiality and comply with data protection regulations.

  14. Retention of data

    We only store personal data for as long as it is necessary to use the tracking and analysis services mentioned above and for further processing within the scope of our legitimate interest. We store contract data for longer, as this is an obligation under statutory retention requirements. Retention obligations that oblige us to retain data arise from accounting and fiscal regulations. According to these regulations, business communications, concluded contracts and accounting documents must be retained for up to 10 years. If we no longer need this data to provide services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

  15. Right to complain to a data protection supervisory authority

    You have the right to lodge a complaint with a data protection supervisory authority at any time.

  16. Changes to the Privacy Policy

    This privacy policy may be updated over time, particularly if we change our data processing practices or if new regulations become applicable. In general, the privacy policy in effect at the start of the relevant data processing applies to each specific processing activity.

Status: [14.09.2023]