In this privacy policy, we, Koster AG Holzwelten, explain how we collect and otherwise process personal data. This is not an exhaustive description; specific circumstances may be governed by other privacy policies or general terms and conditions. Personal data refers to all information that relates to an identified or identifiable person.
If you provide us with personal data of other persons (e.g. family members, data of colleagues), please ensure that these persons are aware of this privacy policy and only share their personal data with us if you are permitted to do so and if the data is correct.
Responsible for the data processing described here is Koster AG Holzwelten, Bächigenstrasse 12, 9212 Arnegg, Switzerland. If you have data protection concerns, you can contact us at: Koster AG Holzwelten, Bächigenstrasse 12, 9212 Arnegg, datenschutz@holzwelten.ch
We primarily process personal data that we receive in the course of our business relationships with our customers, suppliers and other business partners, or that we collect from users when operating our websites and other applications.
Where permitted, we also obtain certain data from publicly accessible sources (e.g. debt registers, land registers, commercial registers, press, internet) or receive such data from other companies, authorities and other third parties. The categories of personal data we receive about you from third parties include in particular information from public registers, information obtained in connection with official and court proceedings, information relating to your professional functions and activities, information about you in correspondence and meetings with third parties, credit reports, and data in connection with the use of the website (e.g. IP address, MAC address, device and settings information, cookies, date and time of visit, pages and content accessed, functions used, referring website, location data).
We use the personal data we collect primarily to conclude and execute our contracts with our customers and business partners, particularly in connection with the delivery of our products to our customers and the purchase of products and services from our suppliers and subcontractors, and to comply with our legal obligations at home and abroad.
In addition, we process personal data for the following purposes in which we (and sometimes third parties) have a legitimate interest:
Where you have given us consent to process your personal data for specific purposes, we process your data within the framework of and based on this consent. Consent given may be revoked at any time, although this has no effect on data processing that has already taken place.
We typically use "cookies" and similar technologies on our websites that can identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored by your web browser on your computer or mobile device when you visit our website. When you visit this website again, we can recognise you, even if we do not know who you are.
We use permanent cookies so that you can save user settings (e.g. language), so that we can better understand how you use our offerings and content, and so that we can show you customised offerings. If you block cookies, some functionalities may no longer work.
We use Google Analytics or similar services on our websites. This is a service provided by third parties (in the case of Google Analytics, it is Google Ireland (based in Ireland), which relies on Google LLC (based in the USA) as a data processor), with which we can measure and evaluate the use of the website (not on a personal basis). Permanent cookies set by the service provider are also used for this purpose.
We have configured the service so that the IP addresses of visitors are truncated by Google in Europe before being forwarded to the USA and therefore cannot be traced. We have turned off the "Data Sharing" and "Signals" settings.
Google Analytics is only activated after your explicit consent via the cookie banner (Consent Mode). You can prevent data collection by Google Analytics by declining the cookie banner or disabling cookies in your browser.
We may also use so-called plug-ins from social networks such as Facebook, LinkedIn, YouTube or Instagram on our websites. This is visible to you in each case (typically via corresponding symbols). If you activate them (by clicking), the operators of the respective social networks may register that you are on our website and where, and may use this information for their own purposes. The processing of your personal data is then the responsibility of the respective operator in accordance with their privacy policy. We do not receive any information about you from them.
We process personal data of applicants only insofar as this is necessary for conducting the application process. All data relating to your person that you submit with your application will be stored by us.
Within Koster AG Holzwelten, only those who need personal data for the processing purpose can access it (e.g. Human Resources, potential supervisors). Disclosure to third parties does not take place.
Personal data of unsuccessful applicants will be deleted/destroyed no later than six months after the position has been filled. With consent for further use for other positions, personal data will be stored for two years from the date of application.
In the course of our business activities and for the purposes set out in Section 3, we may also disclose personal data to third parties where permitted and appropriate, whether because they process it on our behalf. These recipients are partly domestic but may be anywhere in the world.
If a recipient is in a country without adequate legal data protection, we contractually obligate the recipient to comply with applicable data protection (using the revised Standard Contractual Clauses of the European Commission), unless they are already subject to a legally recognised set of rules to ensure data protection and we cannot rely on an exception provision.
We process and store your personal data for as long as necessary to fulfil our contractual and legal obligations or otherwise for the purposes pursued by the processing, i.e. for example for the duration of the entire business relationship (from initiation, execution to termination of a contract) and beyond in accordance with statutory retention and documentation obligations.
Once your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymised where possible. For operational data (e.g. system logs), shorter retention periods of twelve months or less generally apply.
We take appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse, such as the issuance of directives, training, IT and network security solutions, encryption of data carriers and transmissions.
In the context of our business relationship, you must provide the personal data necessary for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations (you generally have no legal obligation to provide us with data). Without this data, we will generally not be able to conclude or execute a contract with you (or the entity or person you represent). The website also cannot be used if certain information to ensure data traffic (such as IP address) is not disclosed.
We partly process your personal data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in particular to provide you with targeted information and advice about products. We use evaluation tools that enable us to communicate and advertise in a needs-based manner, including market and opinion research.
Within the framework of the data protection law applicable to you and insofar as provided therein, you have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, in particular that for direct marketing purposes, profiling for direct advertising and other legitimate interests in processing, as well as the right to have certain personal data handed over for transfer to another body (so-called data portability).
Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to retain or process certain data, have an overriding interest in doing so, or need them to assert claims.
The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your ID, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in Section 1.
Every data subject also has the right to enforce their claims in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).
We may adjust this privacy policy at any time without prior notice. The current version published on our website shall apply. If the privacy policy is part of an agreement with you, we will inform you of the change by email or other suitable means in the event of an update.