Data protection declaration of SERTO

Thank you for your interest in our online presence. The protection of your personal data is very important to us. The data is collected in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). At this point we would therefore like to inform you about data protection in our company:

Which information do we collect from you?

Personal data for a good customer relationship with you
The object of data protection is personal data that enable a certain person to be identified. This includes, for example, information such as name, address and other postal addresses, e-mail addresses used for private and business purposes, telephone numbers and other contact information. You provide us with this data upon request in order to be able to use a specific service. We collect and store this information and use it as the basis for a good customer relationship with you.

Automatic information to make our website highly attractive
Once you contact us online and your web browser opens our website, we will receive and store certain information. We use so-called cookies and other logging methods to collect information such as the names of Internet domains and Internet hosts, IP addresses, the type of browser software and operating system used, and other access information on our website. These anonymous, non-personal data are used for trend analysis and statistics.

Where do we collect information from you?

Online Shop
With our Online Shop we offer you the possibility to process your requests and orders online easily and without complications. We need your personal data to ensure the processing of your request/order. 

     
CAD Library
In order to download data from our CAD Library, you will be asked to provide personal information. We need these for a flawless service and the provision of CAD data in the correct format for you.

     
Newsletter – Cleverreach
The addresses for sending our newsletter come from our customer file. If you no longer wish to receive our newsletter, please activate the corresponding unsubscribe link.
The newsletter is sent via the mail handling service, CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. The privacy policy of the mail handling service can be seen here: https://www.cleverreach.com/en/privacy-policy/. The mail handling service is used on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR in addition to a contract data processing agreement pursuant to Article 28(3)(1) GDPR.
The mail handling service may use the recipient’s data in pseudonymised form, i.e. without attributing them to any particular user, for the purpose of optimising or improving its own services, e.g. for the technical optimisation of the dispatch and presentation of the newsletter or for statistical purposes. However, the mail handling service shall not use the data of recipients of our newsletter in order to solicit them itself or pass on the data to any third party.

     
Making contact / Contact form
You have the opportunity to contact the SERTO Group via the contact options provided on our website and to submit a request. If you send us an enquiry via the contact form or email, the data you enter into the enquiry form/email, including the contact details you provide, will be stored by us so that the enquiry can be processed and any follow-up questions dealt with. We shall not share these data without your consent. Of course you can also send us confidential information. The e-mail address for whistleblowers (Compliance-Whistleblowing@serto.com) is available for this purpose.

  
Online application
In the context of online applications, we collect personal data about you. This information, which you provide to us voluntarily, will only be used by the respective personnel managers of the SERTO Group and exclusively in the context of the application process and for the purpose of processing your application. If your application is unsuccessful, this data will be deleted 6 months after completion of the application process. This does not apply only insofar as you have expressly agreed to a longer storage, this is necessary for the purpose of proof or if legal provisions oppose the deletion. We collect, process and use the data required for your application only with your express consent.

     
Google Analytics
Based on our legitimate interests (i.e. interest in analysing, optimising and operating our online presence within the meaning of Article 6(1)(f) GDPR), we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie regarding use of the website by users is usually transferred to a Google server in the USA and stored there.
Google uses this information on our behalf to analyse use of our website by users, to compile reports on activities within this website and to provide other services to us related to the use of this website and the Internet. As part of this process, pseudonymous usage profiles of users may be generated using the data processed.
We only use Google Analytics with IP anonymisation activated. This means that users’ IP addresses are first truncated by Google within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser is not merged with other data by Google. Users can prevent the storage of cookies via the relevant setting on their browser software; users can also prevent the collection of data generated by the cookie about your use of the website to Google as well as the processing of these data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout. You can find out additional information on data usage by Google, configuration options and opportunities to object in Google’s Privacy Policy (https://policies.google.com/privacy) as well as in the settings for the presentation of advertisements by Google. Personal data of users will be deleted or anonymised after 14 months.

     
Google Tag Manager
On our website we use the Google Tag Manager from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool with which the website tags are managed. Google Tag Manager does not collect any personal data. Further information on data processing by Google can be found in Google's privacy policy https://policies.google.com/privacy

Google Ads
Our website uses the online advertising programme „Google Ads“ from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). As part of Google Ads, we use the so-called conversion tracking. If you reach our website via a Google Ad, Google places a cookie on your end device. These cookies lose their validity after 30 days and are not used for personal identification. The information collected by the cookie helps us to analyse how users interact with our website. We find out the total number of users who clicked on our advert and were redirected to a specific page. We do not receive any personal data with which users can be directly identified.
The processing is carried out on the basis of Article 6(1)(a) GDPR), provided that you have given your consent via our cookie banner. You can revoke your consent at any time by adjusting the cookie settings on our website or deactivating the storage of cookies in your browser settings. Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.

Youtube
We integrate the videos of the platform "Youtube" of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We would like to point out that we have embedded the videos in extended data protection mode. According to Youtube, this prevents the playback of a video in this mode of the embedded player from being used for the personalisation of surfing on Youtube. Youtube is of part of Google and is subject to the privacy policy and principles of Google. Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy

Google Maps
We integrate the maps of the service "Google Maps". Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the European area. Processed data may include in particular IP addresses and location data of users, which are,however, not collected without their consent (generally given via their mobile device settings). The data may be processed in the USA. Privacy Policy: https://policies.google.com/privacy, Opt-Out: http://tools.google.com/dlpage/gaoptout

Permaleads
The Internet offers of serto.com and www.exmar.de use a corresponding web analysis tool for the analysis of user behavior and the identification of the IP address of companies for marketing purposes. The use of this service means that data on user behavior (e.g. IP address, time of access, user behavior, browser request, etc.) is transmitted directly to the analysis server and made available for exclusive use for www.serto.com or www.exmar.de. The data collected is treated as strictly confidential and is neither sold nor passed on to third parties. If you no longer wish to be identified in future, please send an e-mail to optout@permagroup.ch

Privacy Policy for SSL encryption
This website uses SSL encryption for reasons of security and to protect the transmission of confidential content, such as the enquiries that you send to us as the site operator. You can identify an encrypted connection from the padlock symbol in your browser bar and the fact that the ‘http://’ in the address bar changes to ‘https://’. If SSL encryption is enabled, the data you send to us cannot be read by third parties. We regularly check whether the encryption algorithms we use comply with current standards. We use the protocols TLS 1.2 and TLS 1.3 (preferred).

     
Collection of access data and log files
On the basis of our legitimate interests within the meaning of Article 6(1)(f) GDPR, we, or our hosting provider, collect data each time the server on which this service is located is accessed (so-called server log files). The access data include the name of the website visited, the file, date and time of the visit, volume of data transferred, notification of successful data retrieval, the browser type and version, the user’s operating system, the referrer URL (the website visited before), the IP address and the requesting provider.
For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data that must be stored for longer as evidence are exempt from deletion until the relevant incident has been conclusively resolved.

Passwords

• All passwords are stored encrypted and we have no access to them.

• Please note that you are responsible for protecting your password.

Which data protection principles do we have?

• Primarily we use your personal information to answer your inquiries and to process your orders.

• To protect your personal information, we use reliable procedures and protect them with particular care. They are transmitted to us by digital security systems and technical measures (e.g. firewalls, encryption technologies). Our websites are protected by technical measures against damage, destruction or unauthorized access.

• Under certain circumstances, we use your personal information for sales promotion measures within the SERTO Group and at responsible sales organizations (representatives). We will not pass on your personal data to third parties without your consent. We reserve the right to disclose your data, e.g. in case of legal inquiries or to protect our property.

• The use of contact data published in the context of the legal notices obligation by third parties for sending unsolicited advertising and information materials is hereby expressly excluded. The operators of the site reserve the right to take legal action in the event that unsolicited advertising material, such as spam e-mail, is received.

What are your rights (right of information and right of withdrawal)?

• Upon request, you will receive information free of charge as to whether personal data about you has been processed and, if applicable, which personal data about you has been stored.

• Unless your request conflicts with a legal obligation to store data (e.g. data retention), you have the right to have incorrect data corrected and your personal data deleted (for the future).

• You can object to the processing of your data at any time. We will no longer process your personal data in the event of an objection, unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or if the processing of the data serves to assert, exercise or defend legal claims.

• You have the right to revoke your consent to a data processing at any time without giving reasons for the future.

• If you wish to revoke your consent under data protection law, request information about the personal data stored about you or wish to exercise your right to correct or delete this data, please contact SERTO AG in writing at the address SERTO AG, Langfeldstrasse 117, CH-8500 Frauenfeld or by e-mail at info-ch[at]serto.com

Are personal data of minors under the age of 16 processed?

The SERTO Group does not knowingly collect, process and use any personal data of minors under the age of 16, unless the legal representatives (e.g. parents) consent in writing to the storage and collection of such data. In such cases, the SERTO Group will inform the legal representatives about which personal data are to be used for which purpose. Furthermore, it will inform the legal representatives that they can revoke their consent at any time and prohibit the further collection, processing and use of the data.

Who is the responsible party for the processing?

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in force in the member states of the European Union and other provisions regarding data protection is:

SERTO Group
Langfeldstrasse 117
CH-8500 Frauenfeld

Phone: +41 52 368 11 11
E-Mail: info-ch@serto.com
Website: www.serto.com

Changes to this Data Protection Declaration

The SERTO Group reserves the right to amend or supplement this data protection declaration without prior notice. In no event will your rights under this Privacy Policy be restricted without your express consent. If there are changes or additions, you will find the current version of the data protection declaration here.

Disclaimer

As a provider, we are responsible for the content published by us in accordance with the general legal provisions. The contents of our websites are created and updated to the best of our knowledge and belief. We do not guarantee that the information provided is complete, correct and always up-to-date. This also applies to all links to which this website refers directly or indirectly. We are not responsible for the content of an external site reached by such a link.
We reserve the right to make changes or additions to the information provided, without prior notice.