Privacy Policy

1. Controller, Scope, Overview

1.1

The controller for the data processing described in this policy is H. Sigrist & Partner AG (hereinafter «S&P»), Lauchefeld 31, CH-9548 Matzingen TG, telephone +41 52 369 30 00.

1.2

The contact point for data protection matters is info@dosiersysteme.ch.

1.3

This policy applies to the website www.dosiersysteme.ch including the online shop operated on it, to the business relationship with customers, prospects and suppliers, to visits to the premises in Matzingen and to job applications. The online shop is aimed at customers in Switzerland.

1.4

It is addressed to natural persons, in particular to contact persons of customers and suppliers, to owners of sole proprietorships, to visitors to the website and to the premises, to participants in training courses and to applicants. The processing of data of the employees of S&P is not the subject of this policy.

1.5

S&P processes in particular contact and master data, contract, order and invoice data, information from enquiries and correspondence, technical information on equipment and processes, access and usage data of the website and the customer account, video recordings of the entrance area and of the goods handling area as well as application documents.

1.6

S&P receives this data from you directly or from third parties, in particular from customers and suppliers who name you as their contact person, as well as from contacts at trade fairs and from publicly accessible registers and directories.

1.7

The governing legislation is the Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (DPO). If S&P offers goods and services to persons who are located in the European Economic Area, or if S&P monitors their behaviour there, the General Data Protection Regulation of the European Union (GDPR) applies in addition; clause 13 applies to this.

1.8

Your rights and the way to exercise them are set out in clause 12.

2. Website, Orders and Customer Account

2.1

When the website is accessed, the server records technical information, in particular the IP address, the date and time of access, the pages and files accessed, the browser type, the operating system and the page visited before.

2.2

This information is used for the operation of the website, the security of the systems, troubleshooting and the prevention of misuse. Retention is governed by clause 11.

2.3

S&P processes information from contact forms, price enquiries and quotation requests submitted via the shopping basket in order to answer the enquiry and for the subsequent communication.

2.4

The website stores which products you have recently viewed and displays them to you again on other pages if you are logged in.

2.5

A customer account is activated only for companies, legal entities and persons acting commercially. For this purpose S&P checks every registration and processes the information provided on the company, on the activity and on the acting person.

2.6

S&P may refuse activation and block an existing account. S&P retains the records of such checks and blocks so that it can identify any renewed registration.

2.7

Logins to the customer account are recorded. These records serve security purposes and the allocation of orders to the account.

2.8

Mandatory fields are marked in the forms. Without this information, registration, order or enquiry cannot be processed.

3. Cookies, Consent and Services Used

3.1

The website uses cookies and comparable technologies.

3.2

The website requires technically necessary cookies, in particular for the session, login and shopping basket, to protect the forms against automated input and to store your consent decision. You can block or delete these cookies in your browser; however, essential parts of the website will then no longer work.

3.3

S&P uses services for statistics and marketing as well as embedded videos only after you have consented. The same applies to the wishlist as long as you are not logged in.

3.4

You can change your decision at any time via «Cookie settings» in the footer of every page. A withdrawal takes effect for the future.

3.5

S&P uses the following services on the website:

– bunny.net, BunnyWay d.o.o., Slovenia; delivery of images and other files; technically necessary; bunny.net receives your IP address in the process; as a rule, the request is answered by a data centre near you;

– Google Fonts, Google Ireland Limited, Ireland; delivery of the fonts; loaded each time a page is accessed; Google receives your IP address in the process; processing also in the United States;

– Google reCAPTCHA, Google Cloud EMEA Limited, Ireland; protection of the forms against automated input; technically necessary; on every page, Google receives your IP address as well as information on the browser, the device and the use of the page; processing also in the United States;

– Google Analytics, Google Ireland Limited, Ireland; evaluation of the use of the website in statistics; only with your consent; processing also in the United States;

– Google Tag Manager, Google Ireland Limited, Ireland; integration of statistics and marketing services; only with your consent; processing also in the United States;

– YouTube, Google Ireland Limited, Ireland; playback of embedded videos; only with your consent; processing also in the United States.

3.6

The consent dialogue shows which functions belong to which group. Depending on their purpose, the website's cookies remain stored until the end of your visit or for up to 30 days, those of Google Analytics for up to 2 years. As a rule, cookies that Google sets for reCAPTCHA and YouTube remain stored for up to 6 months. In the case of Google Fonts and YouTube, Google processes the data under its own responsibility; Google's privacy notices apply to this. The other providers process the data on behalf of S&P.

3.7

Clause 10 applies to disclosure abroad. Google LLC in the United States is certified under the Swiss-U.S. Data Privacy Framework.

4. Enquiries, Quotations, Contracts and Delivery

4.1

S&P processes your enquiry and the information transmitted with it for consultation and for the preparation of a quotation. This also includes technical information on medium, substrate, equipment and process.

4.2

For contracts and orders, S&P processes the information on order confirmation, delivery, invoicing and accounting.

4.3

For shipment and export, S&P processes the information on the consignee, on the notified contact person as well as consignment and customs data. Export handling is governed by clause 5.1 of the General Terms and Conditions.

4.4

Before an export, trained employees check manually whether business partners or goods are covered by sanctions and embargo provisions.

4.5

S&P processes contact data of suppliers and manufacturers for procurement, for the handling of orders and for the clarification of technical questions.

4.6

The recipients of the data are set out in clause 10.

5. Payment, Solvency, Reminders and Retention of Title

5.1

S&P offers purchase on account and payment in advance. Credit card and payment account data are not processed.

5.2

Before accepting an order and before a delivery, S&P may assess solvency. The basis is exclusively its own payment experience from the business relationship to date, which is recorded as a rating in the merchandise management system of S&P. S&P does not obtain information from credit reference agencies for this purpose.

5.3

If the assessment is negative, S&P may require payment in advance or security, or may reject the order. Such a decision is not taken exclusively on an automated basis; it is reviewed by a person.

5.4

In the event of non-payment, S&P processes the data for reminders, debt enforcement and legal proceedings. S&P does not involve a debt collection agency. Recipients may be debt enforcement and bankruptcy offices, courts and lawyers.

5.5

To secure outstanding claims, S&P has the retention of title under clause 17.2 of the General Terms and Conditions entered in the register of retention of title at the customer's domicile (art. 715 of the Swiss Civil Code). This register is open to public inspection. The entry is deleted after payment in full.

6. Service, Repair, Remote Maintenance, Training and Trials

6.1

For service assignments, S&P processes the information on contact persons, on access to and sign-in at the premises, the service reports including the signature, the time and expenses recorded as well as photographs of the installation situation.

6.2

On acceptance of a repair, S&P processes the information on the media and hazardous substances used as well as the confirmation of cleaning and decontamination under clause 11.6 of the General Terms and Conditions, including the name of the confirming person.

6.3

For remote maintenance and remote access, S&P processes access identifiers and session logs. In doing so, S&P accesses only the machine and process data necessary for rectifying the fault, such as travel geometries and control parameters. If these exceptionally contain personal data for which the customer is responsible, S&P acts on behalf of the customer and on the customer's instructions.

6.4

For training courses and instructions, S&P processes participant lists and the records of the instruction carried out.

6.5

For trials in the trial workshop, S&P processes the details of the person commissioning the trial as well as the trial records and reports.

6.6

Service reports, instruction and trial records serve at the same time as evidence in the event of liability. Their retention is governed by clause 11.

7. Advertising, Newsletter, Trade Fairs and Objection

7.1

S&P sends the newsletter only to persons who have registered for it and confirmed their registration via the link sent to them. S&P retains the record of the registration.

7.2

Every message contains an unsubscribe link. Unsubscribing is possible at any time and free of charge.

7.3

S&P does not measure whether a message is opened and which links are clicked.

7.4

S&P processes contacts from trade fairs and from conversations in order to support prospects and to allocate them in the customer system.

7.5

S&P publishes references, photographs of equipment and recordings from the trial workshop only with the customer's approval. If persons are identifiable, S&P obtains their consent.

7.6

S&P operates presences on LinkedIn, Facebook and Instagram. There S&P processes the posts, comments and messages that you address to S&P.

7.7

If the platforms create aggregated statistics from visits to the presences of S&P, S&P is jointly responsible for this with the platform operator. These statistics do not allow any conclusions to be drawn about a specific person. How the platforms process personal data beyond this for their own purposes is determined by them alone; their own privacy notices apply to this. S&P has no access to the data that the platforms hold about you.

7.8

You may object to the processing of your data for advertising purposes at any time and without giving reasons. S&P then ceases the processing for this purpose. A notice to info@dosiersysteme.ch is sufficient.

8. Visits to the Premises and Video Surveillance

8.1

Visitors sign in at reception. In doing so, S&P processes the name, the company and the time of the visit.

8.2

S&P monitors the entrance area and the goods handling area outside business hours with video cameras. Other areas and the remaining outdoor grounds are not monitored.

8.3

The purpose of the surveillance is the protection of property, goods and equipment as well as the clarification of theft and damage to property.

8.4

Surveillance of the conduct of employees at the workplace does not take place.

8.5

The recordings are continuously overwritten and deleted after 14 days at the latest. This duration ensures that an incident can still be clarified during the company holidays.

8.6

Only the management may view the recordings. In the event of an incident, S&P passes recordings on to the police, criminal prosecution authorities and the insurer.

8.7

S&P displays notices of the video surveillance at the monitored areas.

9. Job Applications

9.1

Applications should be sent to info@dosiersysteme.ch. For the procedure, S&P processes the documents submitted, the information from interviews and the assessment of suitability.

9.2

S&P obtains information from previous employers and from referees only with your prior consent.

9.3

S&P does not request information on health, religion, political opinion or trade union membership. Such information is not necessary for the assessment of suitability.

9.4

If no employment relationship comes about, S&P deletes or destroys the documents within 6 months after conclusion of the procedure.

9.5

Longer retention for later vacancies takes place only with your consent and lasts at most 2 years. You may withdraw the consent at any time.

9.6

Clauses 9.1 to 9.5 also apply to unsolicited applications.

10. Recipients, Disclosure Abroad and Data Security

10.1

Recipients are in particular:

– providers of information technology, hosting and cloud services for the website and merchandise management; the website is hosted in Germany;

– Microsoft Ireland Operations Limited for e-mail and data storage in Microsoft 365;

– transport, logistics and customs service providers;

– the fiduciary firm entrusted with the bookkeeping, and banks;

– debt enforcement offices, courts and authorities as well as lawyers;

– manufacturers and upstream suppliers in support and warranty cases;

– the provider of the newsletter distribution service;

– the providers named in clause 3.

10.2

Service providers who process personal data on behalf of S&P are contractually bound by the instructions of S&P and subject to the same confidentiality and security requirements.

10.3

Personal data may also be processed outside Switzerland, in particular in states of the European Economic Area, in the United Kingdom and in the United States. In the case of deliveries of goods, the relevant country of destination is added.

10.4

If the recipient state has an adequate level of data protection recognised by the Federal Council, the disclosure is based on this. For the United States, this applies only to recipients certified under the Swiss-U.S. Data Privacy Framework. Otherwise S&P safeguards the protection with appropriate guarantees, as a rule with standard data protection clauses.

10.5

In the case of deliveries of goods to states without a recognised adequate level of data protection, the disclosure is based on the statutory exception according to which the disclosure is necessary for the performance of the contract.

10.6

S&P protects the personal data processed with appropriate technical and organisational measures, in particular with access rights by function, encrypted transmission, secured data storage, ongoing updating of the systems used and regular data backup. Absolute security against attacks by third parties and against failures of the systems used does not exist and is not warranted.

11. Retention and Deletion

11.1

S&P retains business books, contracts, invoices and business correspondence for 10 years (art. 958f of the Swiss Code of Obligations).

11.2

S&P retains documents that serve as evidence in the event of liability, in particular service reports, instruction and trial records, for 10 years from the performance.

11.3

S&P deletes short-lived data earlier: server log data after 3 months, data on individual visitors in Google Analytics after 14 months at the latest, video recordings after 14 days, remote maintenance logs after 12 months.

11.4

S&P processes data that is based on consent, in particular for the newsletter and for the retention of application documents, until withdrawal.

11.5

Longer retention is reserved insofar as it is necessary for the enforcement or defence of legal claims.

11.6

After expiry of the period, S&P deletes or anonymises the data.

12. Your Rights

12.1

You may request information as to whether and which personal data S&P processes about you.

12.2

You may have incorrect data corrected.

12.3

You may request the deletion or destruction of your data.

12.4

You may request that a specific processing operation or a disclosure to third parties not take place, and you may request that a notice of dispute be added.

12.5

You may request the release of the data that you have disclosed to S&P, or its transfer to another body.

12.6

You may withdraw a consent given at any time with effect for the future.

12.7

Clause 7.8 applies to the objection to advertising.

12.8

Please contact info@dosiersysteme.ch for this. S&P handles your request free of charge and as a rule within 30 days. You do not have to give reasons.

12.9

S&P may request proof of your identity before it provides information or releases data.

12.10

S&P may refuse, restrict or defer the information under clause 12.1 as well as the release or transfer under clause 12.5 if a law provides for this, if overriding interests of third parties require it, if the request is manifestly unfounded or vexatious or if overriding own interests require it and S&P does not disclose the data concerned to third parties.

12.11

S&P may refuse a correction under clause 12.2 only insofar as a statutory provision prohibits the change.

12.12

Against the deletion under clause 12.3 and the request under clause 12.4, S&P may invoke a statutory retention obligation under clause 11 or an overriding interest in the enforcement or defence of legal claims.

12.13

You may contact the Federal Data Protection and Information Commissioner (FDPIC).

13. Additional Information for Persons in the European Economic Area

13.1

This clause applies insofar as the GDPR is applicable to processing. For processing that is linked to a person's presence in Switzerland, in particular the registration of visits and the video surveillance under clause 8, Swiss data protection law applies alone.

13.2

S&P bases the processing on the performance of the contract insofar as you are a party to the contract yourself, as well as on pre-contractual measures at your request.

13.3

S&P bases the processing on legitimate interests in the support of contact persons of its corporate customers and suppliers, in the maintenance of the customer system, in the operation of the website including the services under clause 3.5 that run without your consent, in the security of the systems, in the prevention of misuse, in the assessment of solvency, in advertising to existing customers, in the enforcement of legal claims as well as in the retention under Swiss law.

13.4

S&P bases the processing on your consent in the case of the services and functions under clause 3.3 as well as in the case of the newsletter.

13.5

S&P bases the processing on a legal obligation insofar as such an obligation exists under the law of the Union or of a member state.

13.6

In addition to the rights under clause 12, you may request the restriction of processing.

13.7

Right to object under art. 21 GDPR: you may object at any time, on grounds relating to your particular situation, to processing that S&P bases on a legitimate interest under clause 13.3. S&P then no longer processes this data, unless S&P demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. If the processing is directed at direct marketing, you may object at any time and without giving reasons; S&P then ceases the processing for this purpose in any case.

13.8

You may lodge a complaint with the supervisory authority competent for you, in particular at your place of residence, at your place of work or at the place of the alleged infringement.

13.9

For disclosure to states outside the European Economic Area, S&P relies on adequacy decisions of the European Commission, for example for Switzerland, and for the United States on the recipient's certification under the EU-U.S. Data Privacy Framework. Where there is no such decision, S&P uses standard data protection clauses of the European Commission or, in the case of deliveries of goods, relies on the disclosure being necessary for the performance of the contract. You may request a copy of the guarantees from the contact point under clause 1.2.

14. Changes, Version and Governing Language

14.1

S&P may amend this policy if the data processing, the services used or the legal requirements change.

14.2

The version published at www.dosiersysteme.ch/datenschutz at any given time is the governing one.

14.3

The German version of this policy is governing. Translations are provided for information only.

14.4

For contracts with S&P, the General Terms and Conditions apply in addition.

H. Sigrist & Partner AG

Matzingen, 1 October 2026