General
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified or become identifiable. As the operator of these pages, we are committed to informational self-determination and take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various items of personal data are collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done. Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not entirely possible.
1. Name and contact details of the controller
This privacy policy provides information on the processing of personal data on the website operator’s homepage.
Controller:
ABECO + Zumtech Drucklufttechnik AG
Müliweg 141
5078 Effingen
Switzerland
www.zumtech.ch
+41 56 460 03 90
2. Scope and purpose of the processing of personal data
2.1 Accessing the website
When this website www.zumtech.ch is accessed, the internet browser you use as a visitor automatically sends data to the server of this website, which is stored for a limited time in a log file. Until it is automatically deleted, the following data is stored without any further input from the visitor:
– IP address of the visitor’s device,
– date and time of access by the visitor,
– name and URL of the page accessed by the visitor,
– website from which the visitor reaches our website (referrer URL),
– browser and operating system of the visitor’s device and the name of the access provider used by the visitor.
The processing of this personal data is justified under Art. 6(1) sentence 1 lit. f GDPR. The company has a legitimate interest in data processing for the purpose of
• establishing the connection to the website quickly,
• enabling user-friendly use of the website,
• detecting and ensuring the security and stability of the systems and
• facilitating and improving the administration of the website.
The processing is expressly not carried out for the purpose of gaining insights into the person of the website visitor (profiling).
2.2 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
2.3 Contact form
Internet visitors can send messages to our company via an online contact form on the website. In order to receive a reply, at least a valid email address must be provided. All other information may be provided voluntarily by the person making the enquiry. By sending the message via the contact form, the visitor consents to the processing of the personal data transmitted. The data is processed exclusively for the purpose of handling and answering enquiries made via the contact form. This is done on the basis of voluntarily given consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. The personal data collected for the use of the contact form is automatically deleted as soon as the enquiry has been dealt with and there are no reasons for further retention (e.g. a subsequent order).
2.4 Newsletter
By registering for the newsletter, the visitor expressly consents to the processing of the personal data transmitted. To subscribe to the newsletter, the visitor only needs to enter an email address. The legal basis for processing the visitor’s personal data for the purpose of sending newsletters is consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal. You can unsubscribe using a special link at the end of the newsletter or by sending a corresponding message by email to info@zumtech.ch.
MailChimp
This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service that can be used, among other things, to organise and analyse the sending of newsletters. If you enter data for the purpose of receiving the newsletter (e.g. email address), it is stored on MailChimp’s servers in the USA. MailChimp is certified under the “EU-US-Privacy-Shield”. The “Privacy-Shield” is an agreement between the European Union (EU) and the USA intended to ensure compliance with European data protection standards in the USA. With the help of MailChimp, we can analyse our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you do not want analysis by MailChimp, you must unsubscribe from the newsletter.
Data processing is based on your consent (Art. 6(1) lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.
The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted from both our servers and MailChimp’s servers after you unsubscribe. Data stored by us for other purposes (e.g. email addresses for the members’ area) remains unaffected.
For further details, please refer to MailChimp’s privacy provisions at:
https://mailchimp.com/legal/terms/
Conclusion of a Data Processing Agreement
We have concluded a so-called “Data Processing Agreement” with MailChimp in which we oblige MailChimp to protect our customers’ data and not to pass it on to third parties. This agreement can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample- agreement/
2.5 Tidio Chat
When you use the chat function on our website, additional personal data is processed. The data processed includes technical connection data such as IP address, date, time, page visited and browser information, as well as enquiry-related information and voluntarily provided contact details such as name and email address.
This data is processed in order to analyse usage behaviour, to support visitors with technical or content-related questions and to optimise our content and services. The legal basis for this is your consent pursuant to Art. 6(1) lit. a GDPR.
Your data is passed on to our processor, Tidio LLC, based in San Francisco, USA, which is represented by Tidio Poland Sp. z o.o. in Poland. This may also involve a transfer of personal data to the USA. The data transfer is based on the adequacy decision of the European Commission (C(2023) 4745) pursuant to Art. 45 GDPR. Tidio undertakes to comply with the principles of the Data Privacy Framework (DPF) in order to ensure an adequate level of data protection.
We are available at any time for further information or if you have any questions about the processing of your data.
2.6 Processing of data (customer and contract data)
We collect, process and use personal data only to the extent necessary for establishing, structuring the content of or changing the legal relationship (inventory data). This is done on the basis of Art. 6(1) lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.
The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
3. Disclosure of data
Personal data is transferred to third parties if
• the data subject has expressly consented to this pursuant to Art. 6(1) sentence 1 lit. a GDPR,
• disclosure pursuant to Art. 6(1) sentence 1 lit. f GDPR is necessary for the assertion,
exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding legitimate interest in the non-disclosure of their data,
• there is a legal obligation for the data transfer pursuant to Art. 6(1) sentence 1 lit. c GDPR, and/or
• this is necessary pursuant to Art. 6(1) sentence 1 lit. b GDPR for the performance of a contractual relationship with the data subject.
In other cases, personal data is not passed on to third parties.
4. Cookies
Cookies are used on the website. These are data packets exchanged between the server of the company website and the visitor’s browser. They are stored by the devices used (PC, notebook, tablet, smartphone, etc.) when the website is visited. Cookies therefore cannot cause any damage to the devices used. In particular, they contain no viruses or other malware. The cookies store information relating to the specific device used. The company cannot under any circumstances gain direct knowledge of the identity of the website visitor from this. Most cookies are accepted by the browsers’ default settings. Browser settings can be configured so that cookies are either not accepted on the devices used or that a special notice is shown before a new cookie is created. Please note, however, that deactivating cookies may mean that not all functions of the website can be used to their best advantage.
Cookies are used to make the use of our company’s web offering more convenient. Session cookies, for example, can be used to track whether the visitor has already visited individual pages of the website. These session cookies are automatically deleted after leaving the website.
Temporary cookies are used to improve user-friendliness. They are stored on the visitor’s device for a temporary period. When the website is visited again, it is automatically recognised that the visitor has already accessed the site at an earlier point in time and which entries and settings were made, so that these do not have to be repeated.
Cookies are also used to analyse visits to the website for statistical purposes and for the purpose of improving the offering. These cookies make it possible to automatically recognise on a subsequent visit that the website has already been accessed by the visitor. The cookies are automatically deleted after a defined period. The data processed by cookies is justified for the above purposes in order to safeguard the legitimate interests of the company pursuant to Art. 6(1) sentence 1 lit. f GDPR.
5. Website analysis services, tracking
On our website we use the Google Analytics website analysis service; the legal basis for using the analysis tools is Art. 6(1) sentence 1 lit. f GDPR. Website analysis is in the legitimate interest of our company and serves to record page usage statistically in order to continuously improve our website and the range of our services. The analysis of your browsing behaviour is generally anonymous; browsing behaviour cannot be traced back to you.
Matomo (formerly Piwik)
This website uses the open-source web analytics service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before storage. Matomo cookies remain on your device until you delete them. The information generated by the cookie about the use of this website is not passed on to third parties. You can prevent cookies from being stored by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent.
If you do not agree to the storage and use of your data, you can deactivate storage and use here: https://matomo.org/docs/privacy/ In this case, an opt-out cookie is placed in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to check whether data entered on our websites (e.g. in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not
informed that an analysis is taking place. Data processing is based on Art. 6(1) lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM. For more information on Google reCAPTCHA and Google’s privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html
6. Other tools
YouTube
Our website uses plugins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy
Google Web Fonts
For the uniform display of fonts, this site uses so-called web fonts provided by Google. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts is used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. If your browser does not support web fonts, a
standard font from your computer is used. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. Google Maps is used in the interest of an appealing presentation of our online offerings and to make the places we indicate on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. Further information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/
7. Your rights as a data subject
Insofar as your personal data is processed when you visit our website, you have the following rights as a “data subject” within the meaning of the GDPR:
7.1 Access
You can request information from us as to whether personal data concerning you is processed by us. There is no right of access if providing the requested information would violate confidentiality obligations under other statutory obligations or if the information must be kept secret for other reasons, in particular because of an overriding legitimate interest of a third party. In derogation from this, there may be an obligation to provide the information if your interests outweigh the interest in confidentiality, particularly taking into account impending damage. The right of access is also excluded if the data is stored only because it may not be deleted due to statutory or contractual retention periods, or serves exclusively for data backup or data protection control purposes, provided that providing the information would require disproportionate effort and processing for other purposes is excluded by appropriate technical and organisational measures. If your right of access is not excluded in your case and your personal data is processed by us, you can request information from us on the following:
• purposes of processing,
• categories of personal data processed concerning you,
• recipients or categories of recipients to whom your
personal data is disclosed, in particular recipients in third countries, • if possible, the planned period for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
• the existence of a right to rectification or erasure or restriction of processing of personal data concerning you or a right to object to such processing,
• the existence of a right to lodge a complaint with a data protection supervisory authority,
• if the personal data was not collected from you as the data subject, the available information on the source of the data,
• where applicable, the existence of automated decision-making, including profiling, and meaningful information about the logic involved as well as
the scope and intended effects of automated decision-making,
• where applicable, in the case of transfer to recipients in third countries, if there is no decision by the EU Commission on the adequacy of the level of protection pursuant to Art. 45(3) GDPR, information on which appropriate safeguards pursuant to Art. 46(2) GDPR are provided for the protection of personal data.
7.2 Rectification and completion
If you find that we hold incorrect personal data about you, you can request that we correct this incorrect data without delay. If personal data concerning you is incomplete, you can request that it be completed.
7.3 Erasure
You have a right to erasure (“right to be forgotten”) unless the processing is necessary for exercising the right to freedom of expression, the right to information or for compliance with a legal obligation or for the performance of a task carried out in the public interest, and one of the following grounds applies:
• The personal data is no longer necessary for the purposes for which it was processed.
• The sole legal basis for the processing was your consent, which you have withdrawn.
• You have objected to the processing of your personal data that we have made public. You have objected to the processing of personal data not made public by us and there are no overriding legitimate grounds for the processing.
• Your personal data has been processed unlawfully.
• The erasure of the personal data is necessary to comply with a legal obligation to which we are subject.
There is no right to erasure if, in the case of lawful non-automated data processing, erasure is not possible or only possible with disproportionate effort due to the special nature of storage and your interest in erasure is low. In this case, restriction of processing replaces erasure.
7.4 Restriction of processing
You can request that we restrict processing if one of the following grounds applies:
• You dispute the accuracy of the personal data. In this case, restriction can be requested for a period that enables us to verify the accuracy of the data.
• The processing is unlawful and you request the restriction of the use of your personal data instead of erasure.
• We no longer need your personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims.
• You have objected pursuant to Art. 21(1) GDPR. Restriction of processing can be requested as long as it has not yet been determined whether our legitimate grounds override your grounds.
Restriction of processing means that the personal data is processed only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we are obliged to inform you of this.
7.5 Data portability
You have a right to data portability if the processing is based on your consent (Art. 6(1) sentence 1 lit. a or Art. 9(2) lit. a GDPR) or on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data portability includes the following rights, provided that this does not adversely affect the rights and freedoms of other persons: you can request that we provide the personal data you have provided to us in a structured, commonly used and machine-readable format. You have the right to transmit this data to another controller without hindrance from us. Where technically feasible, you can request that we transmit your personal data directly to another controller.
7.6 Objection
If the processing is based on Art. 6(1) sentence 1 lit. e GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or on Art. 6(1) sentence 1 lit. f GDPR (legitimate interest of the controller or a third party), you have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation. This also applies to profiling based on Art. 6(1) sentence 1 lit. e or lit. f GDPR. After you have exercised the right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
You can object at any time to the processing of personal data concerning you for direct marketing purposes. This also applies to profiling associated with such direct marketing. After you have exercised this right to object, we will no longer use the personal data concerned for direct marketing purposes. You can notify us of your objection informally by telephone, by email, where applicable by fax or to our company’s postal address listed at the beginning of this privacy policy.
7.7 Withdrawal of consent
You have the right to withdraw any consent given at any time with effect for the future. The withdrawal of consent can be notified informally by telephone, by email, where applicable by fax or to our postal address. The withdrawal does not affect the lawfulness of the data processing carried out on the basis of the consent until the withdrawal was received. After receipt of the withdrawal, data processing based exclusively on your consent will be discontinued.
7.8 Complaint
If you consider that the processing of personal data concerning you is unlawful, you can lodge a complaint with a data protection supervisory authority responsible for the place of your residence or workplace or for the place of the alleged infringement. The relevant addresses can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
8. Status and updating of this privacy policy
This privacy policy is dated 25 May 2018. We reserve the right to update the privacy policy in due course in order to improve data protection and/or to adapt it to changes in official practice or case law.