Our collection and processing of personal data is carried out in accordance with the legal provisions of the Data Protection Act. The legal bases are specified in Art. 13 para. 1 of the Data Protection Act (FADP) or in Art. 6 para. 1 lit. b and f of the GDPR.

Information about the controller (the company)
Swiss-Grinders GmbH
Lochershaus 18
8581 Schocherswil
Switzerland

Mobile: +41 78 644 59 49
E-mail: info@swiss-grinders.ch

Data protection supervisor
If you have any questions about data protection, please contact our data protection officer at

E-mail: info@swiss-grinders.ch or at the following postal address:
Swiss-Grinders GmbH
Lochershaus 18
8581 Schocherswil, Switzerland

Processing of your personal data – purposes and legal bases

Data processing on the Company's website

Log files

When our website is accessed, log files are recorded and stored for 14 days. Such log files are automatically transmitted by your browser to us or the service provider of the website.
This data is as follows:
• Browser type and version
• Referrer URL (from which website you came across us)
• Hostname of the accessing computer
• Operating system used
• Time of the server request
• IP address

This data serves to ensure a technically flawless website and is therefore collected on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the error-free presentation of our online presence and the optimisation of the website that may be necessary as a result.

Cookies that cannot be classified as necessary will ask for your consent beforehand. Our legal basis for setting technically necessary cookies is based on our legitimate interest (in accordance with Article 6 (1) (f) of the General Data Protection Regulation) to improve the functionality of our website. Session cookies are deleted when you close your internet browser. Contact enquiries / contact option If you contact us (e.g. telephone or e-mail), we will store the data you provide for the purpose of processing the enquiry and in the event of follow-up questions. The processing of this data is carried out on the basis of Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a) GDPR) by implied conduct with the contact. The data you transmit to us will remain with us until you ask us to delete it, revoke your consent to its storage or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Google Fonts
To display external fonts, we have dynamically integrated Google Fonts on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC based in the USA, hereinafter referred to as "Google".
We integrate the fonts on the basis of Art. 6 para. 1 lit f. Our legitimate interest lies in the uniform, optimized and economical operation of our websites. The dynamic integration of the fonts means that network connections to Google servers are established when our websites are accessed in order to reload the fonts. For technical reasons, your IP address, among other things, will be transmitted to Google. Since Google has its headquarters in the USA and a large part of its servers are located there, data transfers also take place outside the EU. There is no adequacy decision by the EU Commission for the USA, as it cannot be guaranteed that you will exercise your rights due to the legal situation there.

in accordance with the GDPR. The transmission of your IP address as personal data therefore carries a risk that cannot be completely minimized even by our concluded EU standard contractual clauses with Google. Google holds under
https://adssettings.google.com/authenticated (for registered users),
https://adssettings.google.com/ (for non-registered users) and
https://policies.google.com/privacy
provides further information on how the Group handles collected data and what options are granted to you to prevent the use of data.

https://policies.google.com/privacy

YouTube
We have an account on YouTube and use the platform to communicate with customers, applicants and interested parties. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. To illustrate and promote our products, you will find YouTube videos on our pages that have been directly embedded. A connection to YouTube only takes place after you have actively given your consent to data processing by YouTube, either via our consent management tool or by clicking on the overlay of a video.

The legal basis is therefore your consent in accordance with Art. 6 (1) (a) GDPR. In this way, we ensure that no data processing takes place by YouTube when you simply visit our pages with embedded videos. The YouTube videos on our website are implemented using "Extended Data Protection Mode". According to Google, the "Extended Privacy Mode" allows the videos to be played without cookies, which is intended to achieve an increased standard of data protection. Nevertheless, when you access YouTube videos, at least your IP address, the exact time and the Internet address on which the video is embedded are collected. In addition, when a video is played, connections are established to other Google addresses, which we have no influence on. In particular, we cannot prevent Google from further processing the information collected in this way for profiling and using it for its own purposes. If you have a Google Account and are signed in to that account when you view a video, Google will link the information it collects to your account. You can prevent this merging of information by signing out of your Google Account beforehand. In the settings of your Google account, you can also make further configurations, for example, not to have your YouTube history permanently saved. Please note that when using YouTube, user data may be processed outside the European Union, in particular in the USA. YouTube is a joint controller with us with regard to the data that YouTube shares with us as a company. This can result in increased risks for users, for example if access to user data is made more difficult. We do not have access to this user data. Responsibility lies solely with YouTube. YouTube clarifies in its own privacy policy about the explicit processing and disclosure of your information:

LinkedIn
We have a company page on the LinkedIn career platform. The platform is provided by LinkedIn Ireland Unlimited Company in Ireland, a subsidiary of LinkedIn Corporation based in the USA. There we can inform about news in our company, present ourselves and get in direct contact with interested parties and business partners. LinkedIn also makes it possible to use interactive functions such as sharing or commenting on posts or writing direct messages to us. If you use or access our LinkedIn company page, personal data will be processed by us and by LinkedIn. This data includes, but is not limited to, personal information and the user's IP address. We are joint controllers within the meaning of the GDPR. LinkedIn describes in its privacy policy how the provider processes personal data and how you can exercise your rights in this regard: https://www.linkedin.com/legal/privacy–policyPlease note that it is not excluded that the processing of your data is also carried out by LinkedIn Corporation based in the USA. As the operator of our company page on LinkedIn, we receive information from the platform about statistical evaluations that relate to the views of our company page. If you are not logged in to your LinkedIn profile, the data is anonymized so that we cannot draw any conclusions about individual site visitors. However, the statistics help us to continuously improve our corporate image and make it more attractive. If you access our company page and are logged into your LinkedIn user account, we can track the access to our page through your user account. If you do not wish to do so, you can log out of your user account before accessing our company page. If you use interactive LinkedIn functions as a logged in user, these activities are linked to your user account and are processed by LinkedIn. We have no influence on the functionality or visibility of your activities. As a company, we process personal data on the basis of our legitimate interest in analyzing, communicating, selling and promoting our products and services (Art. 6 para. 1 lit. f GDPR). In some cases, the user's consent may also be given in accordance with Art. 6 (1) (a) GDPR. The user can revoke this consent to the platform operator at any time (Art. 7 para. 3 GDPR). If you contact us via LinkedIn (e.g. through a direct message), we process the information received from you for the purpose of answering your request on the basis of Art. 6 (1) (f) GDPR. Depending on the request, Art. 6 (1) (b) GDPR may also serve as a legal basis if, for example, you are interested in a position in our company and the measures are therefore pre-contractual measures. As soon as we have answered your request and there are no legal retention obligations, we will delete your data.

LinkedIn Privacy Policy

Linking social media via graphics or text link
When we include links to social networks such as Facebook, Instagram, etc. on our website, this is done solely as part of our marketing strategy and to provide an easy connection to our social media presences. Please note that we cannot assume any responsibility for data protection and data processing on the social media platforms concerned. Only by clicking on the relevant graphic or a link to a social media profile or account will you leave our website and be redirected to the relevant platform. Data processing is then carried out exclusively by the operators of the platforms. Please read the privacy policy of the social networks concerned to find out about the data processing and your privacy rights in this regard. Please note that we have no control over the processing of your personal data by the operators of the social networks. If you have any concerns about data processing on these platforms, we recommend that you contact the operator of the platform directly or adjust the settings in your user account accordingly in order to exercise your data protection rights.

The following social networks are integrated into our site by linking:

YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a
Subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View,
CA 94043 USA
Privacy Policy: https://policies.google.com/privacy

LinkedIn
LinkedIn Ireland Unlimited Company, Ireland, (subsidiary of LinkedIn
Corporation based in the USA)
Privacy Policy: LinkedIn Privacy Policy

Data processing in the company
We process personal data on the basis of the data protection regulations of the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG) and, if applicable, the state data protection laws of the individual federal states. The data of the following groups of persons are processed by the relevant persons in the company for the performance of tasks.
In detail, this means:

• Customer and prospective customer data will be used for the implementation and support of the contractual relationship or the pre-contractual relationship as well as
   Contact requests and communication on the basis of Art. 6 para. 1 sentence 1
   letter b) GDPR and Art. 6 para. 1 sentence 1 letter c) GDPR.
  • personal data of our suppliers and service providers and their
     employees will be involved in initiating and carrying out our
     contractual relationships on the basis of Art. 6 para. 1 sentence 1 letter b) GDPR
     GER and Art. 6 para. 1 sentence 1 letter c) GDPR.
  • Employee data are used for the justification, implementation and
     termination of employment relationships (Art. 88 GDPR, §
     26 BDSG).

Scope and scope: This privacy policy is based on the provisions of the Swiss Data Protection Act (FADP) and the EU General Data Protection Regulation (GDPR). It applies to you and your personal data.

Subject to the limits provided for by applicable law, you have the following rights:

If we process your personal data, you have the following rights as a data subject: a right to information about the processed data and a copy, • a right to rectification if we process incorrect data about you, • a right to erasure, unless exceptions still apply as to why we still store the data, for example

Retention obligations or limitation periods
• a right to restriction of processing,
• a right to revoke consent to data processing at any time,
• a right to object to processing carried out in the public interest or in the case of legitimate interest,
• a right to data portability,

• a right to lodge a complaint with a data protection supervisory authority if you believe that we are not processing your data properly. You can contact the data protection authority of your place of residence.
  Automated decision-making
  There is no automatic decision-making or profiling.