Source: https://www.wifag-polytype.com/data-protection/
Timestamp: 2019-04-23 10:59:24+00:00

Document:
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") in the context of the provision of our services and within our online offering and the websites, functions and content associated with it as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as "online offering"). With regard to the terms used, such as "processing" or "person responsible", we refer you to the definitions in Art. 4 of the EU General Data Protection Regulation (GDPR).
If we process data of users from the EU/EWG, the following legal bases of the GDPR apply in each case.
For the rest, we process the data on the basis of Swiss law. I.e. in this case the following explanations apply, but on the basis of Swiss law and not the GDPR standards mentioned.
The legal basis for the processing necessary for the performance of a task which is in the public interest or is carried out in the exercise of official authority entrusted to the data controller is Art. 6 para. 1 lit. e GDPR.
In particular, these measures include safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access to, inputting, forwarding, securing and separating the data. In addition, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data and the response to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this is done in the context of the use of third party services or disclosure or transfer of data to other persons or companies, this only occurs if it is done to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. I.e. the processing takes place e.g. on the basis of special guarantees, like the officially recognized statement of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or observance of officially recognized special contractual obligations.
Cookies" are small files that are stored on the user's computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user's visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. The content of a shopping basket in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as "permanent" or "persistent" and remain stored even after the browser has been closed. For example, the login status can be saved if users visit it after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. Third party cookies" are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if they are only the latter's cookies, they are referred to as "first party cookies").
We process the data of our contractual partners and interested parties as well as other clients, customers, or contractual partners (uniformly referred to as "contractual partners") in accordance with Art. 6 para. 1 lit. b. of the GDPR in order to provide them with our contractual or pre-contractual services. The data processed, the type, scope and purpose and the necessity of their processing are determined by the underlying contractual relationship.
We process data which are necessary for the justification and fulfilment of the contractual services and point out the necessity of their indication, if this is not evident for the contracting parties. Disclosure to external persons or companies shall only take place if it is necessary within the framework of a contract. When processing the data provided to us within the framework of an order, we act in accordance with the instructions of the client and the legal requirements.
Within the scope of using our online services, we can store the IP address and the time of the respective user action. The storage takes place on the basis of our justified interests, as well as the interests of the users in the protection from abuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims pursuant to Art. 6 Para. 1 lit. f. of the GDPR or there is a legal obligation to do so pursuant to Art. 6 Para. 1 lit. c. GDPR.
We process data in the context of administrative tasks as well as the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the scope of providing our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks which serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the data specified in these processing activities.
In order to run our business economically, to be able to recognise market trends, wishes of contractual partners and users, we analyse the data available to us on business transactions, contracts, enquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include contractual partners, interested parties, customers, visitors and users of our online services.
The analyses are carried out for the purpose of economic evaluations, marketing and market research. We can consider the profiles of registered users with information, e.g. on the services they have used. The analyses serve us to increase the user friendliness, the optimization of our offer and the business economy. The analyses serve us alone and are not disclosed externally unless they are anonymous analyses with summarized values.
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user's details are used to process the contact enquiry and to process it in accordance with Art. 6 Para. 1 lit. b. (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f GDPR (other inquiries). The data of the users can be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).
We, or our hosting provider, collect data about each access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests as defined in Art. 6 Para. 1 lit. f. GDPR data about each access to the server on which this service is located (so-called server log files). Access data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The processing of users' personal data is carried out on the basis of our legitimate interests in effective information for users and communication with users in accordance with Art. 6 Para. 1 lit. f. GDPR. If the users are asked by the respective providers for their consent to data processing (i.e. declare their consent e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Statement: policies.google.com/privacy, Opt-Out: adssettings.google.com/authenticated, Privacy Shield: www.privacyshield.gov/participant.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Statement www.linkedin.com/legal/privacy-policy, Opt-Out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: www.privacyshield.gov/participant.
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy Statement / Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
Within our online offer, we use content or service offers from third parties on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR) content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6