Privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your
personal data when you visit this website. Personal data is any
data that can identify you personally. Detailed information on data protection
can be found in the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. Their
contact details can be found in the “Controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example
by entering it in a contact form.

Other data is collected automatically or with your consent by our IT systems when
you visit the website. This is mainly technical data, such as your browser, operating
system or time of access. It is collected automatically when you enter this website.

What do we use your data for?

Some data is collected to ensure the website works correctly. Other data
may be used to analyse your usage behaviour.

What rights do you have regarding your data?

You have the right to obtain free information at any
time about the origin, recipients and purpose of your stored personal data.
You may also request correction or deletion. Consent to data processing
may be withdrawn at any time with future effect. In certain
circumstances you may request restriction of processing. You also have the
right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about this or any other data protection questions.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically
analysed, mainly using analytics programs.

Detailed information about these analytics programs is provided in the
privacy policy below.

2. Hosting

We host our website content with the following provider:

WIX

The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter “WIX”).

WIX is a tool for creating and hosting websites. When you
visit our website, WIX analyses user behaviour, visitor sources, visitors’ regions and
visitor numbers. WIX stores cookies in your browser that are necessary
to display the website and ensure security (necessary cookies).

Data collected through WIX may be stored on different servers
worldwide, including in the USA.

For details, see WIX’s privacy policy:
https://de.wix.com/about/privacy.

According to WIX, transfers to the USA and other third countries are based on
European Commission standard contractual clauses or comparable safeguards under Article 46 GDPR. Details:
https://de.wix.com/about/privacy-dpa-users.

The company is certified under the EU-US Data Privacy Framework (DPF), an
agreement between the European Union and the USA intended to ensure
compliance with European data protection standards when data is processed in the
USA. Each certified company undertakes to comply with these standards. Further information is
available from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participant-
detail?contact=true&id=a2zt0000000GnbGAAS&status=Active.

WIX is used on the basis of Article 6(1)(f) GDPR. We have a
legitimate interest in presenting our website as reliably as possible. Where consent
is requested, processing is based exclusively on Article 6(1)(a) GDPR and section 25(1) TDDDG
insofar as consent covers storing cookies or accessing information on the user’s device,
such as device fingerprinting, within the meaning of the TDDDG. Consent may
be withdrawn at any time.
The company is certified under the EU-US Data Privacy Framework (DPF). The
agreement between the European Union and the USA intended to ensure
compliance with European data protection standards when data is processed in the
USA. Each certified company undertakes to comply with these standards. Further information is
available from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participant-
detail?contact=true&id=a2zt0000000GnbGAAS&status=Active.

Processing on our behalf

We have entered into a data processing agreement for the
above service. This legally required agreement ensures the provider processes
visitors’ personal data only in accordance with our instructions
and in compliance with the GDPR.

3. General and mandatory information

Data protection

The operators of this website take the protection of your personal data very
seriously. We treat it confidentially and in accordance with statutory data protection rules
and this privacy policy.

Using this website involves the collection of various personal
data that can identify you personally. This policy explains what data
we collect, what we use it for, and how and for what
purposes this is done.

Please note that data transmission over the internet, for example by email,
may have security vulnerabilities. Complete protection against access by third parties is not
possible.

Controller

The controller responsible for data processing on this website is:

Schwarz -
Handwerk Bäriswilstrasse 14D
3322 Mattstetten
Phone: +41 79 444 02 60
Email: Info@schwarz-handwerk.ch

The controller is the natural or legal person who, alone or jointly with others,
determines the purposes and means of processing personal data, such as names or
email addresses.

Retention period

Unless this policy specifies a more particular retention period, we retain
your personal data until the processing purpose no longer applies. If
you submit a legitimate erasure request or withdraw consent, your
data will be deleted unless other lawful grounds justify retention, such as
tax or commercial retention requirements. In that case, deletion takes
place once those grounds cease to apply.

General information on the legal bases for data processing on this website

Where you have consented to processing, we process your
data under Article 6(1)(a) GDPR, or Article 9(2)(a) for special
categories under Article 9(1). Express consent to transfers to
third countries also provides a basis under Article 49(1)(a) GDPR.
If you consent to storing cookies or accessing information
on your device, such as through fingerprinting, section 25(1) TDDDG
additionally applies. Consent may be withdrawn at any time.
Data needed to perform a contract or pre-contractual measures
is processed under Article 6(1)(b) GDPR. Article 6(1)(c) applies
where processing is needed to fulfil a legal obligation. Processing
may also rely on our legitimate interest under Article 6(1)(f).
The legal bases applicable in each case are explained
in the following sections.

Recipients of personal data

In our business activities we work with various external
bodies, which may require personal data to be transferred
to them. We disclose personal data only where
necessary to perform a contract, legally required, for example to
tax authorities, justified by a legitimate interest under Article
6(1)(f) GDPR, or permitted by another legal basis.
Customer data is shared with processors only under a
valid processing agreement. Joint processing is covered by a
joint controllership agreement.

Withdrawal of consent to processing

Many processing operations require your express consent. You may withdraw it
at any time. Withdrawal does not affect the lawfulness of
processing carried out before withdrawal.

Right to object to collection in particular cases and to direct marketing (Article 21 GDPR)

WHERE PROCESSING IS BASED ON ARTICLE 6(1)(E)
OR (F) GDPR, YOU MAY OBJECT AT ANY
TIME ON GROUNDS RELATING TO YOUR PARTICULAR
SITUATION. THIS ALSO APPLIES TO PROFILING BASED
ON THOSE PROVISIONS. THE LEGAL BASIS IS
SET OUT IN THIS POLICY. IF YOU
OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA

UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS
OVERRIDING YOUR INTERESTS, RIGHTS AND FREEDOMS, OR
PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND
LEGAL CLAIMS (ARTICLE 21(1) GDPR).

IF YOUR DATA IS PROCESSED FOR
DIRECT MARKETING, YOU MAY OBJECT AT
ANY TIME. THIS ALSO APPLIES TO
PROFILING CONNECTED WITH SUCH MARKETING. IF
YOU OBJECT, YOUR DATA WILL NO LONGER
BE USED FOR DIRECT MARKETING (ARTICLE
21(2) GDPR).

Right to complain to the competent supervisory authority

In the event of GDPR infringements, data subjects may complain
to a supervisory authority, particularly in the member state of their habitual
residence, workplace or the alleged infringement. This right is without prejudice
to other administrative or judicial remedies.

Right to data portability

You may request data we process automatically based on consent or
a contract to be provided to you or a third party
in a commonly used, machine-readable format. Direct transfer to another
controller takes place only where technically feasible.

Access, correction and erasure

Under applicable law, you have the right at any time
to free information about your stored data, its origin,
recipients and processing purpose, and, where applicable, correction or erasure. Contact
us about this or any other personal data questions.

Right to restriction of processing

You may request restriction of processing of your personal data
by contacting us at any time. This right applies in the
following cases:

If you dispute the accuracy of stored data, we
generally need time to verify it. During verification
you may request restriction of processing.

If your data has been or is being processed unlawfully,
you may request restriction instead of erasure.

If we no longer need the data but
you require it to exercise, defend or establish legal
claims, you may request restriction instead of erasure.

If you object under Article 21(1) GDPR, your
interests must be balanced against ours. Until it
is established whose interests prevail, you may request
restriction.

Where processing is restricted, data may, apart from storage, be

processed only with your consent, to establish, exercise or
defend legal claims, protect another natural or legal person’s rights,
or for important public interest reasons of the European Union
or a member state.

SSL or TLS encryption

For security and to protect the transmission of confidential content, such as
orders or enquiries sent to us, this site uses SSL or TLS
encryption. An encrypted connection is indicated by the address changing from “http://”
to “https://” and the padlock symbol in the browser bar.

When SSL or TLS encryption is enabled, data you send to us cannot be
read by third parties.

Objection to advertising emails

We object to the use of contact details published in
the legal notice for sending advertising or information not expressly
requested. The operators expressly reserve the right to take legal action
against unsolicited advertising, including spam.

4. Data collection on this website

Our pages use cookies, small data packages that do
not damage your device. They are stored temporarily for
a session or persistently. Session cookies are deleted automatically
at the end of your visit. Persistent cookies remain
until you delete them or your browser deletes them automatically.

Cookies may come from us (first-party cookies) or
third-party companies. Third-party cookies enable certain external services
to be integrated into websites, for example payment processing.

Cookies perform different functions. Many are technically necessary for
functions such as the shopping cart or video display. Others
may be used to analyse user behaviour or
for advertising.

Unless another legal basis is specified, cookies necessary
for electronic communication, requested functions such as the cart,
or website optimisation such as audience measurement are stored
under Article 6(1)(f) GDPR. The operator has a legitimate
interest in necessary cookies for technically error-free, optimised services.
Where consent is requested for cookies and comparable
recognition technologies, processing is based exclusively on that consent
(Article 6(1)(a) GDPR and section 25(1) TDDDG), which may
be withdrawn at any time.

You can configure your browser to notify you about
cookies, allow them individually, reject them in particular cases
or generally, and delete them automatically when closing

the browser. Disabling cookies may limit website functionality.

This privacy policy explains which cookies and
services are used.

Contact form

If you send us an enquiry through the contact form,
we store the information provided, including contact details, to handle the
enquiry and any follow-up questions. We do not share it without
your consent.

These data are processed under Article 6(1)(b) GDPR if
your enquiry relates to contract performance or pre-contractual
measures. Otherwise processing relies on our legitimate interest in
efficiently handling enquiries (Article 6(1)(f)) or your consent (Article
6(1)(a)), if requested. Consent may be withdrawn at any
time.

Data entered in the form remains with us until you
request deletion, withdraw consent to storage, or the storage purpose no longer
applies, for example once your enquiry is resolved. Mandatory legal
provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we store and process
your enquiry and all associated personal data, such as name and enquiry, to
handle your request. We do not share this data without your consent.

Data sent through contact enquiries remains with us until you request
request deletion, withdraw consent to storage, or the storage purpose no longer
deletion, for example after your request has been resolved. Mandatory legal
provisions, particularly statutory retention periods, remain unaffected.

5. Social media

Instagram

This website includes Instagram features provided by Meta Platforms
Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established
between your device and the Instagram server, giving Instagram information about your
visit.

If you are logged into Instagram, clicking the Instagram button lets

you link website content to your profile. Instagram can then associate your
visit with your account. As website operator, we have no knowledge of
the content of transmitted data or its use by Instagram.

This service is used based on your consent under Article 6(1)(a) GDPR and section 25(1)
TDDDG. Consent may be withdrawn at any time.

To the extent this tool collects personal data on
our website and forwards it to Facebook or Instagram,
we and Meta Platforms Ireland Limited, 4
Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,
are joint controllers (Article 26 GDPR). This responsibility is
limited to collection and forwarding, excluding subsequent processing by
Facebook or Instagram. Our joint obligations are set
out in an agreement available here:
https://www.facebook.com/legal/controller_addendum. Under this agreement we are responsible for privacy
information and compliant implementation of the tool on
our website. Facebook is responsible for the security of
Facebook and Instagram products. You may exercise rights regarding
data processed there, such as access requests, directly with
Facebook. If you exercise them with us, we must
forward them to Facebook.

Transfers to the USA rely on European Commission standard contractual
clauses. Details:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://privacycenter.instagram.com/policy/ and
https://de-de.facebook.com/help/566994660333381.

Further information is available in Instagram’s privacy policy:
https://privacycenter.instagram.com/policy/.

6. Newsletter

Newsletter data

To receive the newsletter offered on the website, we need your
email address and information allowing us to verify you own it
and consent to receiving the newsletter. No other data is
collected except voluntarily. We use this data only to send the requested
information and do not disclose it to third parties.

Newsletter registration data is processed exclusively based on consent (Article 6(1)(a)
GDPR). You may withdraw consent to storing the data and email
address and using it for the newsletter at any time,
for example via the unsubscribe link. Withdrawal does not affect the

lawfulness of processing already carried out.

Data provided for the newsletter is retained by us or the
provider until you unsubscribe and then removed from the mailing
list after cancellation or when the purpose no longer applies. We
reserve the right to delete or block addresses at our
discretion under our legitimate interest pursuant to Article 6(1)(f) GDPR.

Data stored for other purposes remains unaffected.

After you unsubscribe, your email address may be retained by
us or the provider on a blocklist where necessary to
prevent future mailings. Blocklist data is used only for that purpose
and is not combined with other data. This serves both
your interest and ours in complying with newsletter rules (legitimate interest
under Article 6(1)(f) GDPR). Blocklist storage has no time limit. You
may object if your interests outweigh our legitimate interest.

Source:
https://www.e-recht24.de

Privacy policy

Phone

+41 79 444 02 60

Email

info@schwarz-handwerk.ch

Follow us