1) Explanation of the function
Information about our company and the services we offer can be found in particular at www.schaerer.com together with the associated sub-domains and sub-pages. When you visit our website, your personal data may be processed.
We would like to point out that you are free to decide whether you wish to provide us with your data. However, if and to the extent that you do not provide us with the necessary data for a particular service, you will not be able to use the service in question, or not in full. We use the data exclusively to provide you with the service you have requested.
2) Provision of the websites
A) Purpose of the processing
We create the content of our websites with Storyblok, host them with AWS and deliver them with the help of Cloudflare's CDN. Usage data is collected in the process. The temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems.
B) Scope of the processing
We may collect, store and process the following categories of personal data when you use the website for information purposes or access its content:
Date and time of access
IP address
Host name of the accessing computer
Website from which the website was accessed
Websites accessed via the website
Visited page on our website
Protocols and status code
Amount of data transferred
Information about the browser type and version used
Operating system
UserAgent
Protocol data (directory protection user, referrer, host name accessed)
The IP addresses are stored anonymously. All user data is removed during anonymization.
C) Legal basis
The data is processed on the basis of Art. 6 para. 1 letter f GDPR (legitimate interest).
D) Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The anonymized IP addresses are stored for 60 days. Information on the directory protection user used is anonymized after one day. Error logs, which record incorrect page views, are deleted after seven days. Access via FTP is logged with anonymized information on the user name and IP address and stored for 60 days.
E) Recipients of the data
We use various services to provide the websites, which are therefore recipients of the data.
Amazon Web Services (AWS)
We use Amazon Web Services (AWS) as the hosting provider for our websites.
Registered office: Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg
Website: https://aws.amazon.com/
Data protection information: https://aws.amazon.com/privacy/
Information on compliance with the GDPR: https://aws.amazon.com/compliance/gdpr-center/
Cloudflare
We use Cloudflare's global cloud platform as a Cloud Delivery Network (CDN) and Web Application Firewall (WAF). This makes the website more secure while improving the performance and reliability of its critical internet properties.
Registered office: Cloudflare Inc, 101 Townsend St San Francisco, CA, 94107, USA
Data protection information: https://www.cloudflare.com/privacypolicy/
Cookie information: https://www.cloudflare.com/cookie-policy/
Storyblok
We use the SaaS-based Storyblok and its affiliates' SaaS-based headless content management system (including the Storyblok APIs and documentation) and the Digital Experience Platform (DXP) with a visual editor to upload, manage and publish content using the Storyblok APIs.
Registered office: Storyblok Solutions GmbH, FN 608512x, ATU79663909, Loquaiplatz 12/1, 1060 Vienna, Austria
Data protection information: https://www.storyblok.com/legal/privacy-policy
3) One Trust Cookie Consent
A) Purpose of the processing
We use the consent management tool from OneTrust to manage your consent to the processing of personal data on our website. The consent management tool is used for the purpose of:
Managing and documenting your consent to data processing
Compliance with the legal requirements of the General Data Protection Regulation (GDPR)
Ensuring transparent and comprehensible data processing
Optimizing the user experience on our website
B) Scope of the processing
The following data is processed:
Information on consent (yes/no)
Time of the consent
IP address
Browser information
Device information
Websites visited
The WebBeacon cdn.cookielaw.org is set. It is mandatory for consent management and is used in connection with cookies to obtain the website visitor's unambiguous consent.
C) Legal basis
We process this data on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).
D) Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
E) Recipients of the data
The data collected is passed on to our service provider OneTrust, which supports us in managing the consents. OneTrust receives the above-mentioned data as a processor.
Registered office: OneTrust LLC1200 Abernathy Rd, Suite 600, Atlanta, Georgia 30328, USA
Website: https://www.onetrust.com/de
Data protection information: https://www.onetrust.com/de/privacy-notice/
4) Contact forms
A) Purpose of the processing
The purpose of the processing is to enable you to contact us if you have any questions about our products and services so that we can provide you with assistance if necessary and make you offers for our products.
B) Scope of the processing
When you use the contact form, the categories of data transmitted are processed:
Personal & contact data
Address data
order & product data, if applicable
and the time of transmission
as well as any voluntarily provided data on location and telephone data
processed.
C) Legal basis
We process this data on the basis of Art. 6 para. 1 lit. b to initiate or fulfill a contract.
D) Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the contact form, this is usually the case after it has been sent to us. However, it may be stored for up to ten years due to legal obligations. As a rule, the storage period is three years.
The mail logs for sending e-mails from the web environment are anonymized after one day and then stored for 60 days. Mail logs for sending via our mail server are deleted after four weeks. The retention period is necessary to ensure the functionality of the mail services and to combat spam.
E) Recipient of the data
Cloudflare Turnstile
Mechanisms are integrated into the forms on the website to prevent us from receiving spam requests. We use the Turnstile service from the provider Cloudflare for this purpose. The spam protection is either visible as a captcha or happens in the background without user interaction. Turnstile receives the above-mentioned data as a processor.
Registered office: Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA
Website: https://www.cloudflare.com/de-de/application-services/products/turnstile/
Data protection information: https://www.cloudflare.com/de-de/privacypolicy/
Sendgrid
Incoming contact form inquiries are sent to us by email. We use the Sendgrid service from the provider Twilio to send the emails. Sendgrid receives the above-mentioned data as a processor.
Registered office: Twilio Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland
Website: https://sendgrid.com/en-us
Data protection information: https://www.twilio.com/en-us/legal/privacy
5) Newsletter
A) Purpose of the processing
We offer the subscription to our newsletter. The purpose of the processing is to send you the newsletter and to inform you about current products, services and promotions.
B) Scope of the processing
When you subscribe to our newsletter, we process the following newsletter data
IP address (shortened - a personal reference can be established)
Page from which the page was requested (so-called referrer URL)
Date and time of access
Information about the browser type and version used
Your name
E-mail address
Date and time of registration and confirmation
When sending the newsletter, we evaluate your usage behavior. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the above-mentioned data and the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this.
C) Legal basis
The data is processed on the basis of Art. 6 para. 1 lit. a GDPR (consent). When you register for our newsletter, you consent to the processing of your personal data. We use the so-called double opt-in procedure for this. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter.
D) Revocation
You can object to receiving the newsletter at any time by clicking on the separate unsubscribe link provided in every email or by informing us via another contact channel. Tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.
E) Storage period
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the newsletter, this is the case when you unsubscribe from the newsletter. The information is stored for as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. The data may be stored for up to three years after unsubscribing due to the obligation to provide evidence.
F) Recipient of the data
The Maileon tool from xQueue is used to process the newsletter mailing. XQueue GmbH receives the above-mentioned data as a processor.
Registered office: XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach, Germany
Website: https://maileon.com/de/
Data protection information: https://maileon.com/de/datenschutz/
6) Integration of videos
A) Purpose of the processing
On our website, we sometimes embed videos from the YouTube service in order to make our content clearer and to provide you with additional information in audiovisual form. This serves to improve the user experience and the attractive presentation of our online offering. Another part of the videos is provided directly by our website without third-party providers.
B) Scope of the processing
When you visit a page with an embedded YouTube video, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Technical information such as the screen resolution, the browser used or the operating system may also be transmitted. If you are logged into your YouTube or Google account, YouTube can assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube or Google account before visiting our website. The integration usually takes place in extended data protection mode, which, according to YouTube, means that no cookies are initially set to analyze usage behavior - unless you actively watch the video.
C) Legal basis
The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have consented to this via our consent management. No YouTube video will be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking on a YouTube video.
D) Revocation
You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie.
E) Storage duration
The specific storage duration of the data processed by YouTube is the responsibility of YouTube or Google. We have no influence on the duration of storage. Further information can be found in Google's privacy policy.
F) Recipient of the data
The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Art. 46 GDPR.
Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: https://www.youtube.com/
Data protection information: https://policies.google.com/privacy?hl=de
7) Integration of an interactive map
A) Purpose of the processing
We use the map service Google Maps to provide you with an interactive map and to enable you to use the map function conveniently. This makes it easier to find our locations and the locations of our partner companies.
B) Scope of the processing
When you access a sub-page in which Google Maps is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google servers and stored there. Google may use this data to create user profiles.
C) Legal basis
The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have consented to this via our consent management. Google Maps will not be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking within the location finder.
D) Revocation
You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie.
E) Storage period
The specific storage period of the processed data is determined by Google. We have no influence on how long the collected data is stored. Further information on data storage can be found in Google's privacy policy.
F) Recipient of the data
The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA, among other places. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Art. 46 GDPR.
Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: https://www.google.de/maps/
Data protection information: https://policies.google.com/privacy?hl=de
8) Links to external websites
If we provide links to websites of other organizations, the data protection notices of those organizations apply. You will not be informed separately when you leave our website, but you will recognize it by the fact that the links open in a new window and by the changing domain in the address bar of your browser.