Privacy Policy

The protection of your personal data is important to us. You can expect us to handle your data sensitively and carefully and to ensure a high level of data security.

This data protection declaration applies to personal data that we have received from natural persons through various sources (customers, suppliers, business partners, websites, mobile apps, social media, etc.).

1. Contacts

1.1 Name and address of the responsible person

The person responsible in the meaning of the revised Swiss Federal Act on Data Protection (revFADP), the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states as well as other provisions of data protection law is:

BOLL Engineering AG
Jurastrasse 58
5430 Wettingen
Switzerland
Tel: +41 56 437 60 60
E-Mail: [javascript protected email address]
Website: www.boll.ch

Data Protection Officer: Martin Abt, [javascript protected email address]

2. Scope and purpose of the collection, processing and use of personal data

We process your personal data for the following purposes:

• Enquiries via the contact form
• Inquiries via other channels such as telephone, in writing, via employees or via partners/suppliers
• Within the framework of cooperation with customers, suppliers and partners
• During contract fulfilment, order processing and the pre-contract phase
• Support inquiries
• Optimization of the website (adaptation of the website to your needs)
• Newsletter subscription
• Creation of usage statistics
• Marketing purposes
• Defense and recording of hacking attacks
• Examination and processing of submitted job applications

2.1 Visiting the Website

When you visit our website, our servers temporarily store the following data in a log file, the so-called server log files.

• IP address of the requesting computer
• Date and time of access/retrieval
• Name and URL of the retrieved data
• Operating system of your computer and the browser you are using
• Country from which our website is accessed
• Name of your Internet access provider
• Time zone difference to Greenwich Mean Time (GMT)
• Contents of the request (concrete page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Last visited website
• Browser settings
• Language and version of the browser software
• Activated Browser Plugins

The legal basis for the temporary storage of personal data and log files is the legitimate interest. The legitimate interest exists to:

• Deliver the contents of our website correctly
• Optimise the content of our website and the advertising for it
• Further improve our offer and our internet presence
• Collect statistical data
• Provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack

2.2 Registration and Newsletter

You have the opportunity to register your company as a customer (reseller) with BOLL. When you register, you will also receive our newsletter. The following information (*mandatory) is required for registration:

• First name*
• Last name*
• Email address*
• Telephone number*
• Company*
• Function*
• URL*
• Address*
• Postal code*
• Place*
• Country*

The communication of fields marked as mandatory is necessary in order to serve you as a customer and to send you the newsletter. The voluntary provision of further data enables us to provide you with targeted information.

In addition, the following data is collected during registration:

• IP address of the calling computer
• Date and time of registration

We process this data on the basis of legitimate interests. We need it in order to be able to send you offers.

Legal basis for the processing of your personal data after registration is the existence of your consent. For the processing of your personal data, your consent will therefore be obtained during the registration process and reference will be made to this privacy policy.

You can unsubscribe from the newsletter at any time and revoke the consent you have given. You will find a link to cancel the newsletter in every newsletter. Alternatively, you can send your revocation to the following e-mail address [javascript protected email address].

2.3 Making contact

You have the possibility to contact us via our website. If you wish to contact us, the following information (*mandatory) is required. Further information is voluntary:

• Company
• Division
• First name
• Last name
• Adress
• Location
• County
• Email address*
• URL
• Telephone number
• Message

The communication of mandatory fields is used to process your requests. In order to provide you with targeted information, we also collect and process voluntarily provided information.

The legal basis for the processing of your personal data is the existence of our legitimate interest in this service. If the establishment of contact serves the fulfilment of a contract to which you are a contracting party or the implementation of pre-contractual measures, this is an additional legal basis for the processing of your personal data.

You can object to this data processing at any time. Please send your revocation to the following e-mail address: [javascript protected email address].

2.4 Marketing purposes

In addition to processing your personal data to process your purchase, we also use your data on the basis of legitimate interest for the following purposes:

• to contact you about your orders
• communicate about specific products or marketing activities
• to recommend products or services that may be of interest to you
• to provide you with critical information about your products

2.5 In connection with interested parties, customers, suppliers and service providers

In order to fulfil our contractual obligations, we process your inventory data (e.g. names and addresses as well as your contact data), the contractual data (e.g. services used, names of contact persons, payment information) with regard to our contractual obligations and services. By contractual obligations we also mean the continuous maintenance of the customer relationship.

The legal basis for the processing of your data is the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures.

If we store the data on the basis of a contractual relationship with you, this data will remain stored as long as the contractual relationship exists and at least as long as limitation periods for possible claims by us run or statutory or contractual storage obligations exist.

3. Disclosure to third parties

We will only disclose your personal data if you have expressly consented to this, if we are required to do so by law, if this is necessary for the use of the website or for the possible provision of services requested by you, or if this is necessary for the performance of the contract or pre-contractual measures.

We disclose your personal data to the following categories of recipients:

• service provider
• suppliers
• partner companies
• companies for credit checks and debt collection partners (only company data, no personal data)
• logistics partner
• authorities

The use of the data passed on to third parties is strictly limited to the contractually agreed purposes. You are obliged to maintain your privacy to the same extent as we do. They are also obliged to process your personal data in accordance with our instructions and to comply with EU data protection standards.

Other third-party service providers are explicitly mentioned in this data protection declaration, e.g. in the sections "Cookies", "Web Analysis Tools" and "Recruiting".

Your details are stored in our Enterprise Resource Planning ("ERP System") or comparable inquiry organization. We use a local ERP system based on our legitimate interests (efficient and fast processing of user enquiries). The data is stored at BOLL and does not leave the internal network. Services from the cloud are deliberately omitted for security reasons. If we use subcontractors to provide our services, we will take appropriate legal precautions and take appropriate technical and organizational measures to ensure the protection of your personal data in accordance with the relevant legal provisions.

4. Deletion

We will delete your data if you request us to do so at [javascript protected email address] and if we have no legal or contractual obligation to store or otherwise safeguard this data.

5. Cookies

We use so-called cookies on the basis of the legitimate interests on our website. These are small text files that are stored on your end device with the help of the browser. When you call up a website, a cookie can be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Only pseudonymous data is stored in the cookies we use. When the cookie is activated, it is assigned an identification number. Your personal data will not be assigned to this identification number. Your name, your IP address or similar data, which would enable a direct assignment of the cookie to you, are not stored in the cookie.

We use temporary cookies. These store a so-called session ID with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to the website. We use this type of cookie to ensure the operation and functionality of our website.

In addition, we use permanent cookies, which are used on your computer beyond the respective usage process. During a further visit, it is then automatically recognised that you have already visited us and which inputs and settings you prefer. These cookies (life span 1 month to 10 years) are stored on your hard disk and delete themselves after the given time automatically.

Furthermore, we make use of some advertising partners who help to make the Internet offer and the web pages more interesting for you. Therefore, when you visit the website, cookies from partner companies are also stored on your hard drive (so-called third-party cookies).

Information on the use of cookies from third parties can be found in the "Analysis Tools" section.

Accepting cookies is not a prerequisite for visiting our websites, but it is for logging into protected areas (online shop, support accounts, etc.).

Most Internet browsers automatically accept cookies. If you do not wish this, you can set up your browser so that it informs you when cookies are set and you only allow this in individual cases. You can also set your browser so that no cookies are stored on your computer or you receive a warning when a new cookie arrives. For example, some browsers allow you to accept first-party cookies but block third-party cookies.

In addition, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. The general rejection of cookies can be explained via the settings of your web browser.

6. Pixels, local storage and similar technologies

We also use other technologies such as tracking pixels and local storage. We use these technologies, for example, to determine which features are most popular, to create a more personalized user experience, and to display user-relevant advertisements.

Tracking pixels (also known as clear GIFs, web beacons or pixel tags) are small code-units installed in or on a web page, mobile app or advertisement. These tracking pixels may retrieve certain information about your browser and device, such as operating system, browser type, device type and version, referring Web page, Web page visited, IP address, and other similar information.

Local storage is an industry standard technology that enables a Web site or mobile app to store and retrieve information on an individual's computer, mobile phone, or other device.

7. Analysis tools

Our website uses features of the following web analytics services:

• Google Analytics

7.1 Google Analytics

Based on our legitimate interests, we use Google Analytics, a web analytics service provided by Google Inc. ("Google") (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google uses cookies.

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

For EU countries, we only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.

You can prevent the collection and transmission to Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en) An Opt-Out-Cookie is set, which prevents the future collection of your data with the visit of this web page. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

You will find further information on terms of use and data protection at https://www.google.com/analytics/terms/de.html bzw. unter https://policies.google.com/?hl=en&gl=de respectively. We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to guarantee an anonymous recording of IP addresses (so-called IP masking).

8. Social plugins

We use social plugins on our website. Plugins are small programs or program packages with which software can be adapted and extended according to your own needs. Many programs such as graphics programs, media players or Internet browsers support in their basic version the functions that the normal user needs.

On our website we have included links to our social media profiles on the following social networks:

• Twitter, 1355 Market St #900, San Francisco, CA 94103, USA
• Youtube, a service operated by Google Inc., 1600 Amphitheatre, Parkway, Mountain View, CA 94043, USA

When you link to one of our social media profiles, a direct connection is established between your browser and the server of the social network in question. This gives the network the information that your IP address is used to visit our website and to access the link. If you link to a network while logged into your account on that network, the content on our site may be linked to your network profile, which means that the network can directly associate your visit to our site with your user account, thus providing us with your personal information such as name, email, location, friends list and profile picture. This information enables us to provide certain features on the pages. If you wish to prevent this, you should log out before clicking on the corresponding links. In any case, an assignment takes place when you log into the relevant network after activating the link.

If you are logged into a social network via your user account while visiting our website, the respective provider can also assign the visit to the page to your user account. If you interact with a plug-in, the corresponding information is also transmitted directly to a server of the respective provider in the USA and stored there. The information is also published via your user account in the respective social network and displayed there to your contacts.

Even if you are not logged into the plugin providers during your visit to our website, the data collected by the plugins can possibly be assigned to your respective user account. A plug-in sets a cookie with an identifier each time you access the website. Since your browser sends this cookie with every connection to a server of the respective provider without being asked, the social networks could in principle use it to create a profile of which website the user belonging to this identifier has visited. If necessary, it would then be possible to assign this identifier to a person again later - for example when logging in later to the provider.

In addition, you can select the "Block third-party cookies" function in your browser settings so that your browser does not send any cookies to the respective server of the social network. With this setting, however, not only the plug-ins may no longer work under certain circumstances, but also other cross-page functions of other providers.

Further information on the purpose and scope of data collection and the further processing and use of your personal data can be found in the data protection notices of the respective providers. There you will also find further information on your rights in this regard and setting options to protect your privacy and your right to object to the creation of user profiles:

https://policies.google.com/privacy?hl=en&gl=de

9. Recruiting

Our company works with the e-recruiting solution of Ostendis AG, CH-5706 Boniswil (UID: CHE-102.097.261), which is responsible for data storage in relation to application documents and offers processes for processing this data in the sense of commissioned data processing. Personal data are neither analysed in detail by machine (profiling) nor are automated data processing procedures used for decision-making (matching). Further information and the Ostendis AG data protection guidelines can be found at www.ostendis.com.

The data is stored by Ostendis AG in a data center of the Swiss company Datawire AG (www.datawire.ch) in Steinhausen, Switzerland on the Ostendis AG's own infrastructure.

10. Your rights as a data subject

In principle, you are entitled to the rights to information, correction, deletion, restriction, data transferability, objection and revocation with regard to your personal data.

If you have any questions, suggestions or requests, please contact [javascript protected email address].

11. Use of the website by minors

The websites are aimed at an adult audience. It is forbidden for minors, in particular children under the age of 16, to transmit personal data about themselves to us or to register for a service. If we discover that such data has been transmitted to us, it will be deleted from our database. The parent (or legal guardian) of the child may contact us to request deletion or unsubscription. We need a copy of an official document that identifies you as a parent or guardian.

12. Data security

We take technical and organisational security precautions to protect your personal data against manipulation, loss, destruction or access by unauthorised persons and to guarantee the protection of your rights and compliance with the applicable data protection regulations.

The measures taken should guarantee the confidentiality and integrity of your data and ensure the availability and resilience of our systems and services when processing your data in the long term. You should also ensure the rapid restoration of the availability of your data and access to it in the event of a physical or technical incident.

Our security measures also include encryption of your data. When your data is transferred to us, it is encrypted by Transport Layer Security (TLS) / HTTPS. All information that you enter online is transmitted via an encrypted transmission channel. This means that this information cannot be viewed by unauthorised third parties at any time.

Our data processing and security measures are continuously improved in line with technological developments.

We also take our own internal data protection very seriously. Our employees and the service companies commissioned by us are bound to secrecy and to compliance with data protection regulations. Moreover, they are only granted access to personal data to the extent necessary.

13. Links to websites of other providers

Our websites may contain links to websites of other providers which are not covered by this data protection declaration. After clicking on such a link, we no longer have any influence on the processing of any data transferred to third parties by clicking on the link (such as the IP address or the URL on which the link is located), since the behaviour of third parties is naturally beyond our control. We cannot therefore accept any responsibility for the processing of your data by third parties. Insofar as the collection, processing or use of personal data is associated with the use of the websites of other providers, please observe the data protection information of the respective providers.

14. Changes of the data security explanation

This Privacy Policy may be amended or modified by the company at any time. All changes and additions are at the sole discretion of the company.