Privacy policy

This English version is a convenience translation. The German version prevails.

The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

rotatec GmbH

Daniel Stefan

Rütistrasse 6

9050 Appenzell

Phone: +41717882040

E-mail:

info@rotatec-gmbh.ch

Website: https://www.rotatec-swiss.com

General Notice

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Swiss Data Protection Act (DSG)), every person has the right to protection of their privacy as well as protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this Privacy Policy. The revised Swiss Data Protection Act (revDSG, in force since 1 September 2023) applies; where applicable, the EU GDPR applies in addition. You have the right to lodge a complaint with a supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC/EDÖB; in the EU: the competent data protection authority).

In cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data in accordance with the following description. This website can generally be visited without registration. In the process, data such as the pages accessed or the names of the files retrieved, as well as the date and time, are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or e-mail address, is collected on a voluntary basis wherever possible. No data is passed on to third parties without your consent.

Processing of Personal Data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the retention, disclosure, acquisition, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, insofar as and to the extent that the EU GDPR is applicable, we process personal data on the basis of the following legal bases in connection with Art. 6(1) GDPR:

Consent (Art. 6(1)(a) GDPR)

- The data subject has given consent to the processing of their personal data for one or more specific purposes.

Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR)

- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Legal obligation (Art. 6(1)(c) GDPR)

- Processing is necessary for compliance with a legal obligation to which the controller is subject.

Protection of vital interests (Art. 6(1)(d) GDPR)

- Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

Legitimate interests (Art. 6(1)(f) GDPR)

- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

Application procedure as a pre-contractual or contractual relationship (Art. 9(2)(b) GDPR)

- Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data, such as severe disability status or ethnic origin) are requested from applicants in the course of the application procedure so that the controller or the data subject can exercise the rights arising from employment law and the law on social security and social protection and fulfil their respective obligations in this regard, the processing of such data is carried out in accordance with Art. 9(2)(b) GDPR, in the case of the protection of vital interests of applicants or other persons in accordance with Art. 9(2)(c) GDPR, or for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnosis, for the provision of care or treatment in the health or social sector or for the management of systems and services in the health or social sector in accordance with Art. 9(2)(h) GDPR. In the case of a communication of special categories of data based on voluntary consent, their processing is carried out on the basis of Art. 9(2)(a) GDPR.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer retention obligations arising from statutory and other obligations to which we are subject, we restrict the processing accordingly.

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. If the legal basis is not stated in the Privacy Policy, the following applies: the legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; the legal basis for processing in order to perform our services and carry out contractual measures as well as to respond to enquiries is Art. 6(1)(b) GDPR; the legal basis for processing in order to comply with our legal obligations is Art. 6(1)(c) GDPR; and the legal basis for processing in order to safeguard our legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or of another natural person make the processing of personal data necessary, Art. 6(1)(d) GDPR serves as the legal basis.

Security Measures

In accordance with the statutory requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing as well as the varying likelihood and severity of the threat to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to it, its input, its disclosure, the safeguarding of its availability and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to threats to the data. We also take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design and by privacy-friendly default settings.

Transfer of Personal Data

In the course of our processing of personal data, the data may be transferred to, or disclosed to, other bodies, companies, legally independent organizational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the statutory requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Specifically, the following categories of recipients may receive data, insofar as this is necessary for the respective service:

- hosting and IT service providers for operating the website;

- our ERP system (SAP Business One) for processing the account, order, delivery and invoice;

- e-mail/SMTP service providers for sending confirmations, invoices and notifications;

- shipping service providers (e.g. Swiss Post, DPD) for delivering the goods;

- payment service providers, where a corresponding payment method is used;

- Google (server-side geocoding of dealer addresses for the map, without cookies/tracking; and, exclusively with your consent, Google Analytics for anonymised audience measurement).

Data Processing in Third Countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this is done only in accordance with the statutory requirements.

Subject to express consent or transfers required by contract or by law, we process the data only in third countries with a recognized level of data protection, on the basis of contractual obligations through so-called standard contractual clauses of the EU Commission, where certifications exist, or on the basis of binding internal data protection rules (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Privacy Policy for Cookies

This website uses exclusively technically necessary (essential) cookies and comparable storage techniques that are required for operation, e.g. to store the login/session status and your language and currency settings.

In addition, exclusively with your consent, we use Google Analytics (Google Ireland Ltd. / Google LLC) for anonymised audience measurement; this sets analytics cookies. Via our cookie banner you can accept or reject analytics. Without your consent, no analytics cookies are set and Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future (e.g. by deleting the cookies or the corresponding local-storage entry in your browser). Using Google Analytics may involve a transfer of data to the USA. You can block or delete cookies in your browser settings; however, this may limit the functionality of the shop.

Legal bases: performance of a contract (Art. 6(1)(b) GDPR) and legitimate interests in the secure and functional operation of the online shop (Art. 6(1)(f) GDPR); for audience measurement via Google Analytics, your consent (Art. 6(1)(a) GDPR).

Privacy Policy for SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

This data cannot be attributed to specific persons. This data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.

Third-Party Services

The dealer map is rendered by us (no Google Maps embed). To determine the coordinates of dealer addresses, we use Google's geocoding service exclusively on the server side; no cookies are set on your device and no user-related tracking takes place. For anonymised audience measurement we use Google Analytics — exclusively after your consent via the cookie banner (see the "Privacy Policy for Cookies" section). Without consent, this service is not loaded.

Privacy Policy for the Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Rights of Data Subjects

Right to Confirmation

Every data subject has the right to request confirmation from the operator of the website as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you may contact the responsible body at any time.

Right of Access

Every person affected by the processing of personal data has the right to obtain from the operator of this website, free of charge and at any time, information about the personal data stored about them and a copy of this information. Furthermore, information may, where applicable, be provided on the following:

the purposes of the processing

the categories of personal data being processed

the recipients to whom the personal data has been or will be disclosed

where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period

the existence of a right to request rectification or erasure of the personal data concerning them, or restriction of processing by the controller, or of a right to object to such processing

the existence of a right to lodge a complaint with a supervisory authority

where the personal data is not collected from the data subject: any available information as to the source of the data

Furthermore, the data subject has the right to obtain information as to whether personal data has been transferred to a third country or to an international organization. Where this is the case, the data subject also has the right to obtain information about the appropriate safeguards relating to the transfer.

If you wish to exercise this right of access, you may contact the responsible body at any time.

Right to Rectification

Every person affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.

If you wish to exercise this right to rectification, you may contact the responsible body at any time.

Right to Erasure (Right to Be Forgotten)

Every person affected by the processing of personal data has the right to request from the controller of this website that the personal data concerning them be erased without delay, where one of the following grounds applies and insofar as the processing is not necessary:

The personal data was collected or otherwise processed for purposes for which it is no longer necessary

The data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing

The data subject objects to the processing on grounds relating to their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling

The personal data was processed unlawfully

The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject

The personal data was collected in relation to information society services offered directly to a child

If one of the above grounds applies and you wish to arrange for the erasure of personal data stored by the operator of this website, you may contact the responsible body at any time. The responsible body will arrange for the erasure request to be complied with without delay.

Right to Restriction of Processing

Every person affected by the processing of personal data has the right to request from the controller of this website the restriction of processing where one of the following conditions applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data

The processing is unlawful, the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead

The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims

The data subject has objected to the processing on grounds relating to their particular situation and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject

If one of the above conditions applies and you wish to request the restriction of personal data stored by the operator of this website, you may contact the responsible body at any time. The responsible body will arrange for the restriction of processing.

Right to Data Portability

Every person affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right, where the legal requirements are met, to have this data transmitted to another controller.

Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another controller, where this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

To assert the right to data portability, you may contact the responsible body at any time.

Right to Object

Every person affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.

In the event of an objection, the operator of this website will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing serves the establishment, exercise or defence of legal claims.

To exercise the right to object, you may contact the responsible body directly.

Right to Withdraw Consent under Data Protection Law

Every person affected by the processing of personal data has the right to withdraw consent given to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact the responsible body at any time.

Privacy Policy for Objection to Advertising E-mails

We hereby object to the use of contact data published in the context of the legal notice obligation for the purpose of sending advertising and information materials that have not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

Paid Services

For the provision of paid services, we request additional data, such as payment details, in order to be able to execute your order or your engagement. We store this data in our systems until the statutory retention periods have expired.

Copyrights

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or to the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of any files.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and possibly to damages.

General Disclaimer

All information on our website has been carefully checked. We make every effort to ensure that the information we provide is up to date, correct and complete. Nevertheless, the occurrence of errors cannot be entirely ruled out, which means that we cannot guarantee the completeness, correctness and currency of information, including information of a journalistic or editorial nature. Liability claims arising from damage of a material or immaterial nature caused by the use of the information provided are excluded, unless there is demonstrably intentional or grossly negligent fault.

The publisher may, at its own discretion and without notice, change or delete texts and is not obliged to update the content of this website. Use of, or access to, this website is at the visitor's own risk. The publisher, its clients or partners are not responsible for damage, such as direct, indirect, incidental, consequential damage or damage to be specifically determined in advance, allegedly caused by visiting this website, and consequently assume no liability for such damage.

The publisher likewise assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher thus expressly distances itself from all third-party content that may be relevant under criminal or liability law or that violates common decency.

Changes

We may amend this Privacy Policy at any time without prior notice. The current version published on our website applies. Insofar as the Privacy Policy forms part of an agreement with you, we will inform you of the change by e-mail or in another suitable manner in the event of an update.

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization named at the beginning of this Privacy Policy.