Privacy Statement

Purpose of the Privacy statement

This data protection statement relates to the handling of personal data of individuals pursuant to the Swiss Data Protection Act [Datenschutzgesetz, DSG] by SCHILLER AG, Altgasse 68, 6341 Baar, Switzerland, (hereinafter “SCHILLER”, “we” or “us”).

Note that other privacy policies or general terms and conditions, conditions of participation, and similar documents may govern specific data privacy topics.

We may change this privacy statement at any time without notice. You can always find the current version on our website.

Basis of data processing
We process personal data based on different legal bases:

• On the basis of incoming or initiated contractual relationships;
• If necessary for the protection of legitimate interests of SCHILLER;
• To fulfil legal obligations; as well as
• Where appropriate, on the basis of consent.

Data controller and contact details

The controller of the data processing described in this privacy statement is SCHILLER AG, unless we inform you otherwise in certain cases. You can notify us of any data protection-related concerns using the following contact details:

SCHILLER AG
Altgasse 68
6341 Baar
Switzerland
Tel: +41 41 766 42 42
E-Mail: info@schiller.ch

Purposes of the data processing

SCHILLER processes personal data of individuals concerned (the “data subjects”) for the following purposes:

• For contract initiation, in particular for quotation and negotiation purposes (on the legal basis of incoming or initiated contractual relationships if the contract is with the data subject, otherwise on the basis of our legitimate interest to negotiate and conclude business contracts);
• For the fulfilment of contractual obligations as well as for the use of contractual rights from concluded contracts, in particular for the shipment of ordered products, for the processing of customer inquiries, for collection purposes, etc. (on the legal basis of incoming or initiated contractual relationships if the contract is with the data subject, otherwise on the basis of our legitimate interest to ensure proper performance of our contracts);
• For correspondence relating to contractual relationships or on the initiative of the data subjects (on the legal basis of incoming or initiated contractual relationships if the contract is with the data subject, otherwise on the basis of our legitimate interest to ensure proper performance of our contracts);
• To handle job applications within our recruiting processes (on the legal basis of incoming or initiated contractual relationships with the applicant as data subject, otherwise on the basis of our legitimate interest to hire qualified personnel);
• For accounting and archiving as well as for the fulfilment of legal requirements (on the legal basis of compliance with legal obligations);
• To operate the SCHILLER website (on the basis of our legitimate interest to present the goods and services we offer to (potential) customers);
• For advertising purposes and marketing measures, in particular for newsletter distribution, whereby a separate consent may be obtained in accordance with applicable laws (on the basis of such consent if given, otherwise on the basis of our legitimate interest to present the goods and services we offer to (potential) customers).

Categories of personal data concerned

To present the right information to you on this website we process the following data that are provided to us by your website browser:

• The address of the web page on this website you visit;
• The address of the web page you visited immediately before, if any (the “referrer”);
• Date and time of your visit;
• Properties of your device, particularly its operating system, the browser you use and your browser’s display window size; and
• Your device’s IP address on the internet.

To identify you as a website user we may also use unique identifiers as described below in our declaration on the use of cookies and plugins.

Rights of the data subjects

In connection with the processing of personal data, the data subjects have the following rights. Please note that the existence and scope of these rights may vary depending on specific applicable data protection legislation:

• Information: Data subjects have the right to learn from SCHILLER whether and/or which personal data concerning them are being processed. For this purpose, requests for information may be made.
• Correction: If personal data are incorrect, the data subjects have the right to demand correction.
• Objection: If the processing of personal data is based on the legitimate interests of SCHILLER, the data subjects may object to this processing of their personal data on grounds relating to their particular situation. We may continue to process the data despite the objection if we have compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where the data subject objects to processing for direct marketing purposes, we shall no longer process the personal data for such purposes. Processing based on other legal grounds is unaffected by objections.
• Withdrawal of consent: If the processing of the personal data is based on the consent of the data subject, the data subject may withdraw that consent at any time. Processing based on other grounds remains unaffected by revocation of consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Restriction: Under certain conditions, the data subject may demand the restriction of the processing of his or her personal data. This applies, for example, if the accuracy of the data are contested by the data subject, for a period enabling us to verify the accuracy of the personal data. Please keep in mind that this may limit or even make impossible the provision of services by SCHILLER.
• Data portability: Depending on the applicable data protection law, the personal data provided to us by the data subject may be reclaimed in a structured, commonly used and machine-readable format and –reused or transferred to another controller, provided this does not adversely affect the rights and freedoms of others.
• Erasure: The data subject has a legal right to obtain erasure of personal data concerning him or her in particular if the data are no longer necessary for the purpose for which they were collected or otherwise processed. In any case, the continued use for legal reasons as well as the assertion, exercise and defence of legal claims remains reserved.
• Complaints: Data subjects have the right to lodge a complaint with a supervisory authority.

Other recipients of personal data

SCHILLER may use external service providers as data processors. Typical examples are distribution partners, external IT service providers, external consultants or external commercial service providers. In addition, the transfer of personal data within the SCHILLER Group is possible to the extent permitted by applicable statutory laws.

In addition, the disclosure of personal data to public authorities is reserved for legal reasons or for the enforcement and prosecution of legal claims.

Place of the data processing

We may share data with persons, authorities, organizations, companies, or other entities abroad. In particular, we may transfer personal data to all countries in which SCHILLER is represented by affiliates, branches, or other offices and representatives, as well as to the countries in which our service providers process personal data.

If a data recipient is in a country without adequate statutory data protection, we oblige the recipient contractually in order to provide appropriate safeguard for the personal data being processed. For this purpose, we may use the revised standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj, unless the Recipient is already subject to a legally recognized set of rules that ensure appropriate safeguard..

Duration of storage of personal data

We process and retain your data for as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, processing to the termination of an agreement) and beyond that under the statutory retention and documentation obligations. In this context, we may retain personal data for the period during which claims may be asserted against our company and to the extent that we are otherwise required to do so by law or legitimate business interests so require (for example, for evidence and documentation purposes). As soon as your data are no longer required for the above-mentioned purposes, they will be deleted or anonymized as a matter of principle and to the extent possible. For operational data (for example, system records, and logs), shorter retention periods of twelve months or less  generally apply.

Data Security

We take appropriate technical and organizational security measures to protect your data from unauthorized access and misuse. We already take the protection of personal data into account during the design or choice of hardware, software, or processes using appropriate technical and organizational measures. Furthermore, we ensure data protection-friendly default settings.

Obligation to Provide Personal Data

In the course of our business relationship, you must provide those personal data that are necessary for the start and performance of a business relationship and the fulfillment of the associated contractual obligations (you generally do not have a statutory obligation to provide us with data). Without these necessary data, we will generally not be able to enter into or perform an agreement with you (or with the entity or person you represent).

Cookies, Google Analytics and plugins

This website uses cookies and Google Analytics as well as various social media plugins. For more information, please refer to the detail of our declaration on the use of cookies and plugins.

Contact

For inquiries in connection with the processing of personal data as well as for the exercise of rights we are gladly available to the data subjects at info@schiller.ch. We endeavour to process incoming requests in a timely manner.