Privacy Policy
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Normrahmen AG, Bernstrasse 41, 3175 Flamatt, Switzerland, Tel.: +41 31 991 93 90, E-Mail: info@normrahmen.ch. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 When you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the site
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser line.
3) Cookies
We use so-called cookies on various pages to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
Some cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website).
We may work with advertising partners who help us to make our online offering more interesting for you. For this purpose, if you visit our website, cookies from partner companies are also stored on your hard drive (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected within the following paragraphs.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers under the following links:
Microsoft Edge: https://support.microsoft.com
Firefox: https://support.mozilla.org
Chrome: http://support.google.com
Safari: https://support.apple.com
Opera: https://help.opera.com
Please note that if cookies are not accepted, the functionality of our website may be restricted.
4) Contacting us
When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is used exclusively for the purpose of answering your enquiry or for contacting you and the associated technical administration. Your data will be deleted after your enquiry has been conclusively processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account and for contract processing
Personal data is collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to our address. We store and use the data you provide to process the contract. After deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless we can prove an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or legal justification.
6) Use of your data for direct advertising
6.1 Subscription to our email newsletter
By providing your personal data, you consent to us using this data to send newsletters.
We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used exclusively for advertising purposes by way of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending us a corresponding message. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless we can prove an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.
6.2 Sending the email newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers by e-mail for similar goods or services from our range to those you have already purchased. For this, we do not need to obtain separate consent from you. Data processing in this respect is based solely on our legitimate interest in personalised direct advertising. If you initially objected to the use of your e-mail address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
6.3 MailChimp
Our e-mail newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider so that they can send the newsletter on our behalf.
With your express consent, the provider also carries out a statistical evaluation of the success of newsletter campaigns by means of web beacons or pixel counters in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but not merged with other data sources.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider refers to standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with the Swiss level of data protection.
6.4 Advertising by letter post
On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you in the course of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation and to use them to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending us a message.
7) Data processing for order handling
7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If special service providers are used for order processing, we will inform you explicitly below.
7.2 Transfer of personal data to shipping service providers
- Post CH
If the goods are delivered by the transport service provider Post CH (Schweizerische Post AG, Switzerland, Wankdorfallee 4, 3030 Bern), we will pass on your e-mail address to Post CH before delivery of the goods for the purpose of coordinating a delivery date or delivery notification, provided that you have given your express consent for this in the order process. Otherwise, we will only pass on the name of the recipient and the delivery address to Post CH for the purpose of delivery. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with Post CH in advance or to transmit status information on the shipment's delivery.
Consent can be revoked at any time with effect for the future from the controller named above or from the transport service provider Post CH.
7.3 Carrying out credit checks
- CRIF AG (Switzerland)
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check to the following service provider:
CRIF AG (Switzerland)
Hagenholzstrasse 81
8050 Zurich
The credit report may contain probability values ("score values"). If score values are included in the result of the credit report, they are based on a scientifically recognised, mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. We use the result of the credit check in relation to the statistical probability of non-payment to decide whether to establish, implement or terminate a contractual relationship.
You can object to this processing of your data at any time by sending a message to the controller or to the above-mentioned credit agency. However, we may still be authorised to process your personal data if this is necessary for contractual payment processing.
8) Use of social media: videos
8.1 Use of Vimeo videos
Plugins from the video portal Vimeo of Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA, are integrated on our website. If you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a server of Vimeo in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (e.g. by pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
For the purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this respect and setting options for protecting your privacy, please refer to Vimeo's privacy policy: https://vimeo.com
For Vimeo videos embedded on our site, the Google Analytics tracking tool from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking, to which we have no access and which we cannot influence. Google Analytics uses so-called “cookies” for tracking, which are text files stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server, which may also be transferred to the servers of Google LLC. in the USA.
8.2 Use of YouTube videos
This website uses the YouTube embedding function for the display and playback of videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used, which, according to the provider, only starts to store user information when the video(s) are played. When you start playing embedded YouTube videos, the provider “YouTube” uses cookies to collect information about user behaviour. According to “YouTube”, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged into Google and click on a video, your data will be assigned directly to your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to these user profiles being created, but you must contact YouTube to exercise this right. When YouTube is used, personal data may also be transferred to the servers of Google LLC. in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.
Further information on data protection at “YouTube” can be found in the provider's privacy policy at: https://www.google.de
9) Web analytics services
Google Analytics 4
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables us to analyse your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text modules that are stored on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is truncated by Google by the last digits in order to exclude direct personal reference.
The information is transmitted to and processed on Google servers. Transmission to Google LLC, based in the USA, is also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics 4 and truncated will not be merged with other Google data. Data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic features
Google Analytics 4 uses the special “demographic features” function and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after having been stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalised advertising and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics, analyse your user behaviour across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalised advertising" function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analysed across devices.
For the transfer of data to the USA, the provider refers to standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with the Swiss level of data protection.
10) Tools and miscellaneous
10.1 Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain effective user consents for consent-required cookies and cookie-based applications. The “Cookie Consent Tool” is displayed to users as an interactive user interface when the page is accessed, on which consents for certain cookies and/or cookie-based applications can be granted by ticking the relevant box. By using the tool, all consent-requiring cookies/services are only loaded if the respective user gives the corresponding consent by ticking the relevant box. Thus, it is ensured that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
Should personal data (such as the IP address) be processed in individual cases for the purposes of storing, assigning or logging cookie settings, this is done on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and, therefore, in legally compliant design of our online presence.
Furthermore, as responsible parties, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
10.2 Applications for job postings via e-mail
We advertise currently vacant positions on our website in a separate section, for which interested parties can apply via e-mail to the contact address provided.
Inclusion in the application process requires that applicants provide us with all the personal data required for a well-founded and informed assessment and selection together with the application by e-mail.
The required details include general information about the person (name, address, a telephone or electronic contact option) as well as supporting evidence of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labour and social law in the interests of the applicant's social protection.
The components that an application must contain in order to be considered in each individual case and the form in which these components must be submitted by e-mail can be found in the relevant job posting.
After receipt of the application sent using the given e-mail contact address, the applicant's data will be stored by us and used exclusively for the purpose of processing the application. For any queries arising during processing, we may, at our discretion, use either the e-mail address provided by the applicant with the application or a telephone number provided.
The legal basis for this processing is the application process as pre-contractual initiation of an employment relationship.
If, as part of the application process, special categories of personal data (e.g. health data such as information about severe disability) are requested from applicants, the processing is carried out so that we can exercise the rights arising from employment law and social security and social protection legislation and fulfil our obligations in this regard.
Cumulatively or alternatively, the processing of the special categories of data may also be for the purposes of preventive health care or occupational medicine, for the assessment of the applicant’s ability to work, for medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
If, in the course of the above evaluation, the applicant is not selected or if an applicant withdraws the application prematurely, the data transmitted by e-mail and all electronic correspondence, including the original application email, will be deleted after a corresponding notification at the latest after 6 months. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, fulfil our obligations to provide evidence under the provisions on equal treatment of applicants.
In the event of a successful application, the data provided will continue to be processed for the purposes of carrying out the employment relationship.
10.3 Doofinder
To make visiting our website attractive and to present you with better search results more quickly, we use the search function from doofinder. This serves to protect our overriding legitimate interest within the framework of a balancing of interests in an optimised presentation of our offer. The operator of the pages is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain.
To use the doofinder search function, the browser you use must connect to the servers of doofinder. As a result, doofinder will know that our website was accessed via your IP address.
Further information on the Doofinder search can be found at https://www.doofinder.com
11) Rights of the data subject
The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights to information and intervention), whereby reference is made to the legal basis stated for the respective exercise requirements:
- Right to information pursuant to Art. 25 DSG
- Right to data disclosure or transfer pursuant to Art. 28 DSG
- Right to rectification pursuant to Art. 32 para. 1 DSG
12) Duration of storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if applicable – additionally on the basis of the respective statutory retention period (e.g. retention periods under the law of obligations).
If personal data is processed on the basis of explicit consent, the data concerned will be stored until you withdraw your consent.
If there are statutory retention periods for data, this data will be retained for the period stipulated by law.
Otherwise, personal data will be processed for as long as you do not expressly prohibit the processing, unless we can prove an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.
