data security

Privacy Policy

Introduction

This privacy policy informs you about how we process your personal information when you use our web pages.

Responsible

Kalkfabrik Netstal AG
Oberlanggüetli
CH-8754 Netstal
Schweiz
Telephone: +41 55 646 91 11
Telefax: +41 55 646 92 66
e-mail: info(at)kfn.ch
www.kfn.ch

Your right to be informed

Based on Article 15 of the EU General Data Protection Regulation (GDPR) you have the right to get a confirmation from us whether we process your personal information. If that is the case, you have a right to be informed about this personal information and the further rights specified in Article 15 of the GDPR.

Your right to correct data

Based on Article 16 of the GDPR you have the right to demand the immediate correction of erroneous personal information relating to you. Paying respect to the reasons for processing your personal data, you also have the right to demand the completion of any incomplete personal data, for instance by using a supplementary statement.

Your right to have data deleted

You have the right to demand the immediate deletion of personal information relating to you. We are obliged to delete personal information immediately as soon as the relevant conditions set out in Article 17 of the GDPR are met. For the details, please refer to Article 17 of the GDPR.

Your right to restrict the processing

In accordance with Article 18 of the GDPR, you have the right to demand the restriction of the processing of your personal data if the conditions stated in that article are met.

Your right to transfer your data

In accordance with Article 20 of the GDPR you have the right to receive the personal information relating to you in a structured, current and machine-readable format. You also have the right to transfer these data to another person or entity responsible without hindrance by us, as long as this transfer is based on a consent in accordance with Article 6 section 1 a) of the GDPR or Article 9 section 2 a) of the GDPR or on a contract based on Article 6 section 1 b) of the GDPR and when the processing of the data is done through automatic procedures.

Your right to object

According to Article 21 of the GDPR you have the right to object to the processing of personal information relating to you that is based on point e or f of Article 6 section 1 of the GDPR. The same is true for profiling performed based on these rules.

If we process personal information relating to you for direct marketing purposes, you have the right to object to the use of personal information relating to you for the purpose of direct marketing. The same is true for profiling related to such direct marketing activities.

If you wish to make use of your right to object, please contact the person responsible under the contacts specified above or use one of the other channels of contact we offer you to let us know you wish to exercise your right. If you have any questions about this, please also contact us.

Your right to lodge a complaint with a supervisory authority

According to Article 77 of the DGPR you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy.

This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Your right to revoke your consent

If we process personal information based on a consent, you have the right to revoke your consent at any time without prejudice to the legality of the processing that took place before you filed your revocation.

Server-Log-Files

Visit of our web site

If you visit our web site, the company we entrusted with running our web site will process and save technical information about the device you use for that purpose (operating system, screen resolution and other, non-personal information) and the browser you use (version, language settings), but especially the public IP-address you use when visiting our web site, as well as date and time of your access.

The IP address is a unique numerical address that your device uses when sending data to and/or receiving data from the internet. Generally, neither we nor our service provider know who is behind an IP address, unless you provide us with data when using our web site, enabling us to identify you. Additionally, judicial proceedings initiated against a user may lead to the identification of him or her, for example when the user tried to attack our web site and we find out his or her identity in the course of preliminary proceedings by the judicial authorities. So, generally, you do not need to worry that we are able to relate your IP address to you personally.

Our service provider does not relate the data processed to individuals, but for statistical purposes, so we are able to determine what devices with what settings are used for visiting our web site. These statistical data help us to optimize our web site when necessary, and they do not include personal information.

Legal basis for the creation of these statistics is Article 6 section 1 letter f of the GDPR. The IP address is also used to enable you to technically retrieve and use our web site and to detect and defend attacks against our service provider or our web site.

Unfortunately, attacks on those who run websites or on their users are a common feature. These attacks aim at prohibiting the access, data espionage, the spreading of malware (such as computer viruses) and other unlawful aims. These attacks would, were they successful, inhibit the proper functioning of the data center of our service provider, the use of our web site or its functions and the safety of the users of our web site.
The processing of IP addresses, including the access time, is done to defy such attacks. Using the services of our service provider, we have a legitimate interest to ensure the functionality of our web site and to fend off unlawful attacks against us and the users of our website. Legal basis for the processing is Article 6 section 1 letter f of the GDPR.
The IP addresses saved will be deleted (by anonymization) once they are no longer necessary to detect or defend an attack.

Cookies

We use web site cookies and comparable technologies (local storage) for our web site, to ensure the technical functioning of our web site, to understand, how users use our web site and to store pre-settings made by the user in its browser.

A cookie is a small text file that is stored on your device by your browser when you access our web site. When you return to our web site at a later point in time, we can read the cookies again.

Cookies are stored for various lengths of time. You have the possibility to change the settings of your browser, telling it what cookies to accept. However, this may lead to our website not properly functioning. Also, you can delete cookies by yourself any time. If you do not, we can set a length of time the cookie will be stored in your device. There are so-called session cookies and permanent cookies. Session cookies will be deleted by your browser once you leave our web page or close the browser. Permanent cookies will be stored for the length of time we set when we store the cookie on your device.

We use cookies for these purposes:

  • Cookies for which there is a technical need, as they have to be employed for some functions of our web site (e. g. to determine whether you have logged in). Without these cookies some features could not be offered.
  • Functional cookies that are used in the technical execution of functions you wish to use.
  • Analytical cookies meant to analyze your usage. For details, please refer to “reports”.
  • Cookies from third parties. Cookies from third parties are stored by third parties, whose functions we include in our website to offer certain functions. They can also be used to analyze user behavior.

For details, please refer to “reports”.

Most browsers used by our users allow you to determine which cookies can be stored. You can thus delete (certain) cookies again. If you limit the storage of cookies on certain web sites or prohibit the use of third party web sites, this may lead to you no longer being able to use all features of our website without limitations.

On these pages you will find information on how to change the cookie settings of the most common browsers:

Newsletter

If you subscribe to our e-mail newsletter, the data you provided will be used in the assembly and the sending of the newsletter as well as in to furnish proof that you did sign up for our newsletter.
Legal basis for this processing is Article 6 section 1 letter a of the GDPR. For you to receive our newsletter, you have to click on the confirmation link we send you in our verification e-mail upon registration, so that we are able to document your consent. Once you have clicked on the respective link, we process the public IP address of the device the click originated from as well as date and time of the click. We process these data to be able to prove that you confirmed the receiving of our e-mail newsletter. Legal basis for this processing is Article 6 section 1 letter f of the GDPR. Our legitimate interest for this is the fulfillment of the legal proof obligations we have concerning your subscription.

You can withdraw your consent at any time by unsubscribing from our newsletter. You will find a link to this purpose at the end of each newsletter. We will delete your data upon your unsubscribing from the newsletter. The data we need to prove that you consented into receiving our newsletter will be deleted upon termination of the limitation period for the respective burden of proof.

For our newsletter we use an external service provider acting on our behalf as a processor.
This processor is Mailweaver, c/o Arcmedia AG. This company has its legal domicile in Switzerland.

Contacts

If you send us a message via one of the channels we offer you, we will use the data you provide us for the processing of your request. Legal basis for this processing is our legitimate interest in answering your request according to Article 6 Section 1 letter f of the GDPR. If you request deals with entering into a contract with us, an additional legal basis for the processing of your data is found in Article 6 Section 1 letter b of the GDPR. The data will be deleted once your request is answered or otherwise dealt with. If we are legally obliged to store the data for a longer period of time, it will be deleted once the legally prescribed storage period is over.

Job seeker applications

We are glad that you have taken an interest in us and apply for an open position in our company or have done so already. With the following, we would like to inform you about the processing of your personal information relating to your application.

We process the data you provide us with your application to determine how fit you are for the open position (or, as may be, other open position in our company) and to facilitate the application procedure.

Legal basis for the processing of your personal information is the assumption of our legitimate interest based on Article 6 Section 1 letter f of the GDPR. Our interest is to carry through an application procedure and, if necessary, the enforcement of or the defense against legal claims.
Should the application procedure lead to the position being offered to you, your data will be transferred from the applicants’ data system into our personnel data system.
Generally, only the staff members responsible for carrying through the application procedure have access to your data.

Embedding of Google Maps

This web site uses the services offered by Google Maps. This enables us to offer you interactive maps directly on our web site and to enable you to comfortably use the map function.

When you visit our web site, Google will receive the information that you have visited the relevant sub-page of our web site. Additionally, the data mentioned above in this privacy policy will be transferred. This will be done irrespective of whether Google offers you a user account that you are logged into, or whether you do not have such an account. If you are logged into your Google account, your data will be connected with your account directly. If you do not wish that your data is thus related to your account, you will have to log out of your Google account before activating the button. Google saves your data as a usage profiles and uses them for advertising and market research purposes and/or for tailoring its own web site to your needs. Such profiling is done (even for users that are not logged in) primarily to tailor advertisements to your needs and to inform other users of the social network about your activities on our web site. You have the right to object to the creation of such user profiles, you will need to turn to Google to exercise that right, however.

Further information about the purpose and the breadth of the data collection and its processing by the plug-in-provider can be found in the privacy policies of the provider. There, you will also further information about your rights in that context and about settings you may set to protect your digital privacy. Check https://policies.google.com/privacy?hl=en&gl=en. Google process your personal information in the USA, too, and has committed itself to the EU-US Privacy Shield, check https://www.privacyshield.gov/EU-US-Framework.

Analysis tool of Google Analytics

We use, if need be through the Google Tag Manager, the services of Google Analytics, a service of Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as a commissioned data processor.

As a commissioned data processor, Google uses a so-called “Cookie” for this. This is a small text file which is stored on your device by your browser. With this cookie, Google gets information about the web sites you visited and additionally, this specific information: type and version of browser, operating system used, technical information about the operating system and the browser as well as the public IP-address of your device.

We use Google Analytics in a way that your IP address is only used in an anonymized way. According to Google, this anonymization is performed in an EU or EEA member state. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. According to Google, the anonymization is done before the IP address is first stored on a permanent data storage medium. For details, please refer to Google’s privacy policy, to be found under https://support.google.com/analytics/answer/6004245?hl=en.

Google Analytics does not allow us to create usage statistics for our web site in a way that can be traced back to individual users nor to use demographic data about the visitors of our web sites and their usage behavior. Furthermore, statistics will created that allow us to better understand how our web site is found, to improve our search engine optimization and our advertising tactic. This processing is done following our legitimate interest to improve our web site as well as our advertising tactic (legal basis being Article 6 Section 1 letter f of the GDPR).

Please refer to the information found under https://tools.google.com/dlpage/gaoptout?hl=en about how to object to the use of Google Analytics.

As an alternative to an add-on to your browser or within your browser on mobile devices, please click on this  link to inhibit the tracking via Google Analytics on this web site for the future (this opt-out will work only when you use this browser and only for this domain). This will store an opt-out-cookie on your device. If you delete your cookies for this browser, you will have to click on this  link again.

Google is a member of the PrivacyShield convention and has entered into a commissioned data processing agreement with us as relates to Google Analytics.

Google-Re/Marketing-Services

Based on our legitimate interests (such as our interest in analyzing and optimizing and efficient running of our online services in the meaning of Article 6 Section 1 letter f of the GDPR) the marketing and remarketing services („Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“). Google is certified under the Privacy Shield Convention and thus offers a guarantee that European data protection is adhered to. (check
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Marketing Services allow us to publish advertisements for our web site and on our web site itself to greater effect, to present our users only such advertisements that potentially meet their interests. If, for example, a user is shown advertisements for products he has shown an interest in on other web sites, this is referred to as “Remarketing”. To these ends, Google itself executes a code when users visit our web site and other web sites on which Google Marketing Services are active, and so-called (Re-)Marketing Tags (invisible graphics or a code, also referred to as “web beacons”) are embedded in the web site. With their help, an individual cookie, i. e. a small file, is stored on the users’ device (instead of cookies, other, similar technologies may be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file will record which web sites the user visits, his interests and the offers he has clicked on, as well as technical information on browser and operating system, referring web sites, time spent on web sites and other data on the use of online offers. Also, the IP address of the user is tracked, however, we let it know in the framework of Google Analytics that the IP addresses of users residing in EU or EEA member states are to be truncated and only in exceptional cases transferred to a Google server in the USA in their entirety to be truncated there. The IP address will not be combined with user data for other Google services. Google can combine the aforementioned information with information from other sources. If the user subsequently visits other web sites, advertisements that relate to his interests can be shown to him or her. In the context of the Google Marketing Services, user data is processed pseudonymously. This means that Google will not save and process the name and the e-mail-address of the user, but will process the relevant data relating to a cookie inside of pseudonymized user profiles. This means that according to Google’s view, the advertisements are not managed on behalf of and shown to a concrete, identified person, but for the owner of the cookie, whoever that cookie owner may be. This is not valid if a user has specifically allowed Google to process these data without pseudonymization. The information collected by Google Marketing Services will be transferred to Google and will be stored on Google servers in the USA. Google Marketing Services include the online advertisements service “Google Ads”, inter alia. In the case of Google Ads, each Ads client will receive a unique “Conversion Cookie”. Thus, cookies cannot be traced by the web sites of Ads clients. The information gathered using the cookies are used to create conversion statistics for Ads clients that have opted for conversion tracking. The Ads clients will learn about the total number of users that have clicked on their advertisement and have been led to a site that included a conversion tracking tag. They will, however, not be given information with which users can be identified personally. We may use the Google Marketing Service “AdSense” to embed advertisements of third parties. AdSense uses cookies that enable Google and its partner web sites to show advertisements based on the visits of users on this web site and/or of other web sites in the internet. Additionally, we may use the “Google Tag Manager” to embed and to manage Google’s analytical and marketing services in our web site. Further information on the information used for marketing purposes by google can be found on this overview site: www.google.com/policies/technologies/ads, the privacy policy of Google can be found under www.google.com/policies/privacy. If you would like to object to interest-based advertising through Google Marketing Services, you can use the settings and opt-out-possibilities provided by Google: www.google.com/ads/preferences.

Use of the SalesViewer technology

On this web site, we use the SalesViewer® technology of the SalesViewer® GmbH for marketing, market research and optimizing purposes to collect and store data. Based on these data, user profiles using a pseudonym can be created. For this, so called tracking scripts are used to collect company-related data. The data used by these technologies will not be used to personally identify the user of the web site and will not be combined with personal information about the identity of the pseudonym bar explicit consent of the person concerned. You can object to the future collection and storage of data if you visit this web site: https://www.salesviewer.com/opt-out  to inhibit the tracing by SalesViewer® on this web site for the future. For this, an opt-out cookie for this web site will be stored on your device. If you delete the cookies of your browser, you will have to click on the link again.