Data Privacy Statement Of Schaffner Holding AG
For your Information on the handling and purpose of Collection, Processing and Use Of Personal Data
1. Controller and data protection officer
Within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of EU Member States as well as any other provisions regarding data protection law, the provider and controller of the collection and processing of your personal data on this website is:
Schaffner Holding AG
Please contact our data protection officer via:
Every data subject can contact our above-mentioned data protection officer directly in case of any questions and suggestions regarding data protection.
2. General information on personal data and their processing
2.1 How do we treat personal data?
Data protection plays a particularly important role in our company. We treat your personal data as confidential and in accordance with statutory data protection regulations and this Data Privacy Statement.
Using our web pages is generally possible without having to indicate any personal data. If a data subject wants to make use of special services (e.g. making contact using the contact form, newsletter subscription) on our website, however, processing personal data may become necessary.
If processing personal data is required and if there is no legal basis for such processing, e.g. fulfillment of a contract or fulfillment of a legal obligation, we will principally obtain the data subject’s consent. Furthermore, the personal data are always processed in conformity with the General Data Protection Regulation and with the country-specific data protection regulations applicable to our company.
2.2 Purpose of the Data Privacy Statement
By means of this Data Privacy Statement, we would like to inform the visitors of our website about the type, scope and purpose of the personal data collected, used and processed by us. In addition, we would like to inform you about your rights.
2.3 Technical and organizational measures
As the controller of the data processing we have implemented numerous technical and organizational measures in order to ensure complete protection (if possible) of the personal data processed via this web page. Our web pages as well as our blog have an SSL certificate integrated in order to increase their security. The SSL certificate is used to encrypt the data exchanged via HTTP. Nevertheless, internet-based data transmissions may principally have security gaps so that absolute protection cannot be guaranteed.
2.4 General information on the legal basis for the processing of personal data on our web pages
As far as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing.
If the processing of personal data is required in order to fulfill a contract with you, which is the case with processing, for instance, required for a delivery of goods or the provision of other services or return services, the processing is based on Art. 6 (1) lit. b GDPR. The same applies to such processing which is required to perform pre-contractual measures, for example in case of inquiries about our products or services.
If we are subject to a statutory obligation requiring the processing of personal data, for example in order to fulfill tax obligations, the processing is based on Art. 6 (1) lit. c GDPR.
In rare cases the processing of personal data might become necessary in order to protect vital interests of you or any other natural person. This would be the case, for instance, if a visitor was injured in our company and consequently his/her name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or another third party. Then the processing would be based on Art. 6 (1) lit. d GDPR.
2.5 Contact form
Our website comprises a contact form which you can use for fast electronic contacting. The following data are collected by using the contact form in order to respond to your concern and to contact you in this respect:
- Your e-mail address
- Phone Number
If you provide us with personal data, these data are disclosed by you on an explicitly voluntary basis. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing in this case. The data you enter in the contact form reach us in automated way in the form of an e-mail and will be deleted after the processing, unless the contact request results in a contract initiation or contract conclusion. In this case we can and must store your data on the basis of statutory periods. Your data will be treated as strictly confidential and will not be disclosed to any third parties, however they may be communicated to corporations and distributors of Schaffner group.
2.6 General information on data erasure and storage period
Your personal data will be erased or blocked as soon as the purpose of the storage no longer applies. However, storage may be further extended if this is provided by the European or national legislature in directives, laws or other regulations to which we are subject as a company.
3. Online marketing und digital communication with Hubspot
On our website and blog we use the HubSpot marketing automation software of the American company Hubspot Inc., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland (hereinafter referred to as “Hubspot”). Hubspot is an integrated software solution by which we cover different aspects of our digital marketing, sales and customer relation management. Furthermore we use the tool for analytical purposes of our web offer in order to optimize it and to offer you the best possible and user-friendly service.
Wir use Hubspot for:
- contacting us using the contact form
- subscription to the newsletter and sending the newsletter
- the content management for our blog impulse.schaffner.com
- the comments function on our blog as well as the subscription to a blog update
- reating landing pages which are used as part of an advertising campaign and contain interaction possibilities such as contacting or download of white papers
- social media linking and/or social media sharing
- evaluating the usage of our web pages (e.g. access, pages visited, dwelling time, etc.) as well as for evaluating the usage of our newsletter (opening rate, click rate, unsubscribe, etc.)
For detailed information on the scope of the data processing, the legal basis, the purpose, the storage period as well as possibilities of objection please refer to sections 3.1 to 3.6.
The contents of our web pages as well as your personal data which you provide, e.g. when using our contact form or subscribing to our newsletter, are stored on the servers of our software partner HubSpot.
Of course Hubspot also uses “cookies” which are saved on your computer and allow us to analyze your usage of the website. The information gathered (e.g. IP address, geographical location, type of browser, duration of the visit and pages viewed) is evaluated by Hubspot on our behalf so that we can generate reports on the visit and the pages viewed and can therefore improve our online presence. If you generally do not want Hubspot to record your activities on our website and our blog, you can deny it in the cookie message appearing during the first visit to our pages.
Any information gathered by us is subject to this Data Privacy Statement. HubSpot is certified under the terms of the "EU - U.S. Privacy Shield Frameworks" and is subject to the TRUSTe's Privacy Seal as well as "U.S. - Swiss Safe Harbor" framework. This means that any processing of personal data by certified companies in the non-European region conforms to European data protection standards.
More information on HubSpot’s data protection regulations can be found here.
More information by HubSpot regarding the EU data protection regulations can be found here.
More information on the cookies used by HubSpot can be found here.
3.1 Contact form on landing pages
Our product-specific landing pages comprise a contact form which you can use for fast electronic contacting. Art. 6 (1) lit. f GDPR (legitimate interest) is the legal basis for the processing of contact requests. For our legitimate interest in the processing is to communicate with you and to answer your inquiries in a fast way. If you provide us with your personal data using the contact form, these data are always disclosed on an explicitly voluntary basis. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing in this case. If we process your data in order to perform any pre-contractual measures, Art. 6 (1) lit. b GDPR is the legal basis.
The following data are collected when using the contact form:
- Your e-mail address as well as the inquiry are mandatory items in order that we can process it and send you an answer.
- Your surname, first name, form of address and the company name are optional fields. The information is voluntary and is used for a correct and optimal personal address.
Your personal data will exclusively be used to process the conversation and will not be passed on to any unauthorized third parties. The data are stored in our marketing automation tool Hubspot for such a long time until your inquiry or the issue concerned has finally been clarified. Then the data will be deleted, unless the contact request results in an initiation or conclusion of contract. In this case we can and must store your data on the basis of statutory periods. You always have the possibility to withdraw your consent to the processing of your data. All personal data stored in the context of contacting will immediately be deleted in this case.
3.2 Newsletter subscription and newsletter marketing
In the course of subscription and newsletter marketing we collect the following data from you.
Data gathered in the form:
- Form of address
- First name und last name
- E-mail addresse
- Declaration of consent
Technical data collected during the subscription:
- IP address
- Time of subscription and declaration of consent
- Web form used for the subscription
- Information on the double opt-in workflow
Further data that might be collected in the course of the newsletter marketing:
- Every newsletter contains a link to a preference page on which you can specify your interests (e.g. marketing information, events) in order that we can provide you with subject-relevant information.
In the context of the registration process we will obtain your consent to the processing of the data. If you register for our newsletter, you will receive a confirmation e-mail with a link directly after it. The link is used to verify your e-mail address. This process is called “double opt-in” (DOI) and protects both you and us against misuse of your e-mail address and helps to prove that the consent actually comes from the owner of the e-mail address used.
If you provide us with your personal data during the registration, these data are always disclosed on an explicitly voluntary basis. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing.
Your personal data will exclusively be used for regular dispatch of our newsletters and will not be passed on to any unauthorized third parties. The data will be stored in our marketing automation tool Hubspot for as long as the subscription is active. You always have the possibility to withdraw your consent to the processing of your data. Every newsletter contains an unsubscribe link. Furthermore you can always send an e-mail to email@example.com and inform us of your withdrawal. All personal data stored in the course of the newsletter subscription will immediately be deleted in the event of withdrawal of the consent to data processing and simultaneous application for erasure of data.
3.3 Comments function
Our blog comprises a comments function by which you can comment posts. Using this comments function requires you to enter your e-mail address. Any further information such as name and first name and website are voluntary data. Entering an e-mail address is necessary in order that any possible objections to your comments in the blog can be forwarded to you and you can be asked to give an opinion on them. If you enter your name and/or first name in your comment, they will be published. Your e-mail address as well as any further voluntary information and the time of creation of the comment are stored in Hubspot, are not passed on to any unauthorized third parties and are only processed for the purpose of the comments function.
We reserve the right to delete any comments with abusive, intimidating or racist contents.
If you provide us with your personal data when using the comments function, these data are always disclosed on an explicitly voluntary basis. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing.
The data will be stored in our marketing automation tool Hubspot until you withdraw the consent to processing. You always have the possibility to withdraw your consent to the processing of your data. All personal data stored in the context of the comments function will immediately be deleted in case of withdrawal. This requires that all your comments in our blog are also deleted.
3.4 Blog updates
You can register for a blog update with your e-mail address. This means that we send you an e-mail as soon as a new post appears at impulse.schaffner.com. If you register for a blog update, you will receive a confirmation e-mail with a link. The link is used to verify your e-mail address. This process is called “double opt-in” (DOI) and protects both you and us against misuse of your e-mail address and helps to prove that the consent actually comes from the owner of the e-mail address used.
If you provide us with your personal data by subscribing to the blog update, these data are always disclosed on an explicitly voluntary basis. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing.
Your e-mail address as well as any further voluntary information and the time of registration is not passed on to any third parties and is only processed for the purpose of information on a new post.
You always have the possibility to withdraw your consent to the processing of your data via e-mail to us. We will store your data in Hubspot until withdrawal. In the event of withdrawal of the consent to data processing and simultaneous application for erasure of data, your personal data will immediately be deleted.
3.5 Analytical data and reporting
Using Hubspot we can carry out the following analytical collections and evaluations, among other things:
- the activity on our web pages and our blog
- number of page views and dwelling time of the website visitor
- click path of the respective visitor
- downloads of files provided via the website
- visits to landing pages
- opening rates of e-mails from newsletters and campaigns
By using the website you declare your consent to the collection of analytical data. You can always unsubscribe from the Hubspot tracking using the “DO NOT TRACK” button in the cookie message.
3.6 Hubspot logfiles
Whenever calling up websites/landing pages created using Hubspot, Hubspot automatically generates so-called logfiles. Among other things, the logfiles can contain the following information: IP address, browser, operating system, internet provider, pages visited, etc. The collection of data serves to optimize the pages, to ensure the security of the web pages as well as to create general statistics on the use of pages created with Hubspot. The data collected automatically are linked with personal data stored in Hubspot. The legal basis for the storage of the data in logfiles is Art. 6 (1) lit. f GDPR. The data will be deleted after 180 days and during this period, only authenticated IT personnel of Hubspot has access to the logfiles.
Cookies are small text files that are stored on your computer. Cookies are used by us to recognize you automatically the next time you visit our web page. Cookies do not cause any damage on your computer and do not contain any viruses. Cookies serve to make our offer securer, more user-friendly and more effective. Furthermore cookies allow us to analyse the use of the website.
You can distinguish between first-party cookies and third-party cookies. First-party cookies are those set for our website. All other cookies are third-party cookies. Our web pages use both first-party and third-party cookies.
Not all cookies collect personal data.
Among others, the following personal data can be collected by cookies:
- IP address
- Login information
Among others, the following non-personal data can be collected by cookies:
- browser language
- session information
Most of the cookies used by us are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. Furthermore we use analytical cookies. They are used to monitor the anonymized user behavior on the website, e.g. to record the number of visits per page. The data collected will exclusively be used to optimize the performance and design of this website. These cookies are third-party cookies (e.g. Google Analytics). However, the data are collected in anonymized form and are exclusively used by us.
If you principally do not want cookies to be used, you can view and delete the stored cookies in your browser settings and can generally control the handling of cookies. For more detailed information on this please refer to the help function of your browser or the manufacturer of your browser. It cannot be ruled out, however, that important parts of our web pages and the services offered there will no longer work faultlessly if you do not permit any cookies.
The legal basis for the processing of personal data by technically required cookies is Art. 6 (1) lit. f GDPR. The legal basis for the processing of personal data by cookies not technically required (analytical cookies) is Art. 6 (1) lit. a GDPR.
5. Integration of third-party services and contents
Our web offer uses Google Analytics. This is a service for the analysis of accesses to websites of Google Inc. (“Google”) and allows us to improve our web offer. Cookies (see above) allow us to analyse your use of our web offer. The information obtained using a cookie (IP address, access time, access duration) are transmitted to a Google server in the USA and stored there. The evaluation of your activities on our internet presence is transmitted to us in the form of reports. Google might pass the information obtained on to third-parties if prescribed by law or if third-parties process these data on behalf of Google. The Google tracking codes of our internet presence use the function “_anonymizedIp()”, consequently IP addresses are only processed in shortened form in order to exclude any possible direct personal references to you. You can inhibit the installation of the cookies of Google Analytics also by the respective setting of your browser software yourself. In this case, however, it may happen that you cannot entirely use all the functions of our web offer. Browser extensions such as tools.google.com/dlpage/gaoptout can also be used to deactivate and control Google Analytics. By using our web offer you declare your consent to the processing by Google of data collected about you. Click here to be excluded from the Google Analytics measurement.
Click here to be excluded from the Google Analytics measurement.
Use of Google Maps:
On our page we use the component “Google Maps” by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”).
Whenever calling up the “Google Maps” component, Google sets a cookie in order to process user settings and data for displaying the page on which the “Google Maps” component is integrated. This cookie is usually not erased by closing the browser but expires after a certain period, provided you do not manually delete it before.
If you disagree with this processing of your data, you have the possibility to deactivate the service of “Google Maps” and to prevent the transmission of data to Google in this way. For this purpose you have to deactivate the Java Script function in your browser. We would like to point out that you cannot use “Google Maps” in this case or only to a limited extent.
In order to display the font of some contents (third-party plug-ins), this page uses so-called web fonts. They are provided by Google (https://fonts.google.com/). For this purpose, your browser loads the required web font in the browser cache when calling up our website. This is necessary for your browser to display an optically improved representation of our texts. If your browser does not support this function, a standard font of your computer is used to display the page. Further information on Google Fonts can be found here.
General information on the subject of data privacy with Google can be found at: policies.google.com/privacy
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA serves to check whether the data input on our websites (e.g. in a contact form) is carried out by a person or an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor by means of various characteristics. This analysis starts automatically as soon as the website visitor accesses the website. For the analysis, reCAPTCHA evaluates certain information (e.g. IP address, dwelling time of the website visitor on the website or mouse movements effected by the user). The data acquired during the analysis are passed on to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not made aware that an analysis is taking place. The data processing is based on Art. 6 (1) lit. f GDPR. The website owner has a legitimate interest in protecting their web offers against abusive automated spying and against SPAM.
Further information on Google reCAPTCHA as well as the data privacy statement of Google can be found at the following links: www.google.com/intl/de/policies/privacy/and www.google.com/recaptcha/intro/android.html.
Our website links to our Facebook appearance as well as to our profiles on Twitter, Google+, LinkedIn and Xing. By linking to the respective pages using the icons, no data are transferred to Facebook, Twitter, Google+, LinkedIn or Xing.
We would like to point out that you use our Facebook, Twitter, Google+, LinkedIn and Xing pages as well as their functions on your own responsibility. This particularly applies to the use of interactive functions (e.g. commenting, sharing, rating). We would like to make you aware that the data collected about you in this context will be processed by Facebook Ltd., Twitter Inc., Google LLC, LinkedIn Inc. and Xing SE and in this context might be transmitted to countries outside the European Union.
Which information Facebook, Twitter, Google, LinkedIn or Xing receive and how it is used is described by the providers in general form in their data usage policies. There you can also find information about contact possibilities as well as the setting options for advertisements.
Here you can view the data usage policies:
Our website uses the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. Normally your IP address is already sent to YouTube and Cookies are installed on your computer when you call up a page with embedded videos.
However, we have integrated our YouTube videos with the extended data privacy mode (in this case YouTube always also contacts the Double Klick service by Google, but according to Google’s data privacy statement personal data are not evaluated here). In this way, YouTube does no longer store information about the visitors unless they watch the video. If you click the video, your IP address is transmitted to YouTube and YouTube gets to know that you watched the video. If you are logged in with YouTube, this information is also assigned to your user account (you can prevent this by logging out from YouTube before calling up the video).
We do not have any notice of and influence on the collection and use of your data by Youtube then possible. More detailed information can be found in the data privacy statement of YouTube Furthermore we would like to refer to our overall description in this Data Privacy Statement for the general handling of and the deactivation of cookies.
For sending the newsletter as well as for displaying the latest Schaffner news on the website we use the service of EQS (EQS Group AG, Schochenmühlestr. 4, 6340 Baar, Switzerland).
By subscribing to our newsletter you declare your consent to the receipt and the procedures described. Art. 6 (1) lit. a GDPR serves as a legal basis for the processing. In Schaffner’s account at EQS the sending of newsletters is tracked. Among other things it is ascertained whether an e-mail is opened, a link is clicked or a download is effected. If a download is effected or a link is clicked, the recipient’s country can be localized via the IP address, provided that the information is available. The data remain stored for as long as the newsletter subscription is active. Every newsletter contains an unsubscribe link. Furthermore you can always send an e-mail to firstname.lastname@example.org and inform us of your withdrawal. All personal data stored in the course of the newsletter subscription will immediately be deleted in the event of withdrawal of the consent to data processing and simultaneous application for erasure of data.
Investis Share Chart
ZIn order to display the course of the Schaffner share, we have integrated the service “Investis Share Chart” (Investis Ltd., 24 Fashion Street, London E1 6PX) per iFrame. Art. 6 (1) lit. f GDPR serves as a legal basis for the processing of personal data.
When calling up the pages in which the iFrame is integrated, the following cookies are set:
- AWSELB: Technically required cookie which is deleted after the session.
- incap_ses: Technically required cookie to maintain the session, which is deleted after closing the browser window.
- nlbi: Technically required cookie to call up the service, which is deleted after closing the browser window.
- visid_incap_: Persistent cookie which identifies the visitor of the website. The cookie will be deleted after 12 months.
Our web pages may contain hyperlinks to other websites which are not operated by us. We do not monitor these websites and do not assume any responsibility for their contents nor their treatment of personal data.
Whenever calling up our page, our hosting partner Webstyle gathers automated protocols (so-called logfiles). The access data include, among others:
- website visited
- date and time of the website visit
- amount of data transferred
- message about successful retrieval
- browser type
- website visitor’s operating system
- referrer URL (page visited before)
- IP address
The temporary storage of the IP address by the system is necessary in order to allow for a delivery of our web pages to your computer. For this purpose, the IP address must be stored at least for the duration of the session. Furthermore the data in the logfiles help us to optimize our web pages and to ensure the security of our web pages. Logfiles are not used to evaluate the website visitors’ behavior, not used for any marketing purposes and not linked with any other data collected by us about you. In the event of cyber attachs or of unlawful use, the storage of IP addresses allows for the criminal prosecution as via the provider the IP addresses can be assigned to a user who can then be identified. For this reason, the logfiles are stored by our hosting partner Webstyle GmbH, Burgdorf, for 6 months and will then be deleted.
The fundamental legal basis for the storage of the data in logfiles is Art. 6 (1) lit. f GDPR. The acquisition of data in order to provide the web pages and the storage of data in logfiles is stringently required for the operation of our internet presence. Therefore you do not have the possibility to object.
8. Your right of access, to erasure, blocking, data portability, objection, to lodge a complaint
At any time you have the right granted by the European legislative and regulatory authority:
- to gratuitous access to your personal data stored, their origin and recipients or categories of recipients to whom the data have been disclosed or will be disclosed, the purpose of the data processing, the storage period or, if that is not possible, the criteria used to determine that period, as well as information on whether your personal data have been transferred to a third country or international organization. Where this is the case, you have the right to get information on the appropriate guarantees related to the transfer.
- to rectification, completion or immediate erasure of your data
- to restriction of processing
- not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you
- to lodge a complaint with a supervisory authority
- Furthermore you can withdraw your consent to the collection and storage of data at any time with future effect.
- On your request we can deliver the personal data stored about you in a commonly used format or transmit them to another controller.
Notification and making contact with us
If you have any questions regarding the data protection regulation or your data stored please do not hesitate to contact us via:
last amended on: May 2018