- Name and address of the controller
- General information concerning data processing
- Scope of processing of personal data
- Legal basis for processing personal data
- Data erasure and duration of storage
- Third party services
- Host provider
- Collection of personal data when our website is visited
- Google Maps
- Registration form, email contact and online shopping
- Description and scope of data processing
- Duration of storage
- Ability to object to processing and to remove data stored
- Rights of the data subject
- DSG (Swiss Federal Act on Data Protection), GDPR
- Additional information concerning data protection on our website
- Analytical tools
- Social media
- SSL encryption
1. Name and address of the controller
The controller for the purposes of the Swiss Federal Act on Data Protection (DSG) and other national data protection law is:
Denecke + Leuzinger AG
Telephone +41 (0)55 647 42 42
2. General information concerning data processing
A brief summary of what we do and what we do not do with your personal data:
- We process general personal data concerning you, e.g. name and contact details
- We process personal data that you provide to us
- We process personal data that we collect in relation to you
- We use your personal data for marketing and advertising purposes
- We process personal data concerning you that we obtain from third parties
- We use your personal data for the purpose of developing and improving products and services
- We do not sell your personal data
- We do not use your personal data for any purposes other than in relation to core services
- We do not share your personal data with other companies that are able to decide how to use the data
2.2. Scope of processing of personal data
As a general rule, our users’ personal data are only collected and used by us where this is necessary in order to provide a properly functioning website and for our content and services. This only occurs with the consent of the user. The only exception to this is where data processing is permitted by law and it is not possible to obtain consent in advance due to practical reasons.
2.3. Legal bases for processing personal data
The Swiss Federal Act on Data Protection (DSG) and as the case may be the EU General Data Protection Regulation (GDPR) constitute the legal basis for the processing of personal data by us.
2.4. Data erasure and duration of storage
Where the purpose for which data have been stored no longer applies, the data subject’s personal data are erased. Storage may continue if permitted under national or European law. Where personal data must be stored to take steps prior to entering into a contract or for the performance of a contract, blockage or erasure may be delayed notwithstanding the expiry of the storage period.
3. Third party services
3.1. Host provider
The website of Denecke + Leuzinger AG is hosted on the servers of lavitto ag in Netstal, Switzerland. www.lavitto.ch
Please be aware that the transmission of data over the internet may as a general matter entail security vulnerabilities. It is not possible to achieve comprehensive protection against third party access.
3.2. Collection of personal data when our website is visited
If the website is used purely for information purposes, i.e. if you do not register or transfer any other information to us, we only collect personal data that your browser transmits to our servers. If you would like to view our website, we collect the following data, which is technically necessary for us in order to display our website and to guarantee stability and security:
- IP address
- request date and time
- time zone difference with Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- the relevant quantity of data transferred
- the website from which the request was made
- operating system and surface
- language and version of the browser software
The IP addresses contained in these logs are without exception anonymised after seven days, although normally on a daily basis. Logs may be retained for longer than seven days, depending upon technical requirements.
3.3. Google Maps
4. Registration form, email contact and using the online shop
4.1. Description and scope of data processing
The “Availability check” function on our website offers the option of ordering products in our online shop. If you would like to place an order in our online shop, you will need to register with us using your personal data in order to conclude a contract. Information that is absolutely essential for the performance of the contract is specifically marked; the provision of other information is optional. We process the data provided by you in order to fulfil your order.
If you wish, you can set up a customer account so that we can save your data for future purchases. If you set up an account under “Customer log in[TR2] ”, the data entered by you will be stored unless and until instructed otherwise. You can arrange for all other data, including your user account, to be erased by us. Please contact us should you wish to do so.
However, you can also send us a normal email through the “Contact” page without registering under “Availability check”, which we will receive via the program Microsoft® Outlook®. Alternatively, you can also get in touch directly by writing to any of our email addresses. Should you do so, the user’s personal data transmitted along with the email will be stored. No data are shared with third parties in relation to the above.
4.2. Duration of storage
We are obliged under commercial and tax law to store your address, payment data and order data for a period of ten years. Email conversations between users and Denecke + Leuzinger AG and other personal data (such as email addresses) are stored by our email program and archived. They are definitively erased at regular intervals whenever emails are deleted.
4.3. Ability to object to processing and to remove data stored
Users may withdraw their consent to the processing of personal data at any time. This may be done by contacting us in writing via email or ordinary post. All personal data stored in relation to the contact will be erased in the event that content is withdrawn or of an objection.
5. Rights of the data subject
5.1. DSG / GDPR
For more detailed information concerning the rights of data subjects, please refer to the Swiss Federal Act on Data Protection (DSG) and as the case may be the General Data Protection Regulation (GDPR). All relevant information can be found there, including amongst other things:
- right of access
- right to rectification
- right to restriction of processing
- right to erasure
- right to information
- right to data portability
- right to object
- right to withdraw consent under data protection law
- right to lodge a complaint with a supervisory authority
5.2. Additional information concerning data protection on our website
The website of Denecke + Leuzinger AG (including the online shopping option) does not use any personal cookies. Only system cookies, which do not incorporate any personal element, are used on a temporary basis. Cookies are small text files that are saved on your end device. Your browser accesses these files. These cookies are necessary in order to enable your browser to be recognised at a later stage during your visit after clicking between pages. Standard browsers offer the option of adjusting the settings so as to refuse all cookies. There is no guarantee that you will be able to access all functions on this website without any restrictions if you configure your settings in this manner.
5.2.2 Analytical tools
Google Analytics is not used by Denecke + Leuzinger AG. No other form of statistical analysis occurs.
5.2.4. Social media
Denecke + Leuzinger AG does not use any social media functions such as e.g. LinkedIn or XING.
5.2.5 SSL encryption
SSL encryption is used for security reasons and in order to protect transfers of confidential data. This means that third parties cannot read any data that are transmitted to us. You can recognise SSL encryption from the padlock symbol in the browser line as well as the fact that the browser’s address line switches from “http://” to “https://”.