Privacy policy
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Normrahmen AG, Bernstrasse 41, 3175 Flamatt, Switzerland, Tel.: +41 31 991 93 90, E-mail: info@normrahmen.ch. The controller responsible for the processing of personal data is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.
2) Data collection when visiting our website
2.1 When using our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- Used IP address (if applicable: in anonymised form)
No transfer or other use of the data takes place. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain longer on your end device and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find out the storage duration from the overview of the cookie settings in your web browser.
If personal data is also processed by individual cookies we use, processing is carried out either for the performance of the contract, in the event that consent has been given, or to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
When contacting us (e.g. via contact form or e-mail), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting and the associated technical administration. Your data will be deleted after your enquiry has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no legal retention obligations to the contrary.
5) Data processing when opening a customer account and for contract processing
Personal data is collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to our address. We store and use the data you provide for contract processing. After deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a justification by law.
6) Use of your data for direct advertising
6.1 Subscribing to our e-mail newsletter
By providing your personal data, you agree that we may use this data to send newsletters.
We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used exclusively for advertising communication via the newsletter. You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending us a message to this effect. After you have unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list, unless we can prove an overriding interest in further processing in the sense of Art. 31 para. 2 DSG or a justification by law.
6.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, such as those you have already purchased, from our range by e-mail. No separate consent from you is required for this. The data processing is in this respect solely based on our legitimate interest in personalised direct advertising. If you have initially objected to the use of your e-mail address for this purpose, we will not send any mailings. You have the right to object to the use of your e-mail address for the above-mentioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. For this, only transmission costs arise in accordance with the base rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately.
6.3 MailChimp
Our e-mail newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider so that they can manage the newsletter dispatch on our behalf.
With your express consent, the provider also performs statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent e-mails, which can measure open rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but not combined with other data sets.
You can revoke your consent to newsletter tracking at any time with future effect.
We have concluded an order processing contract with the provider, which ensures that the data of our website visitors is protected and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with the Swiss data protection level.
6.4 Advertising by postal mail
On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – if received as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation, and to use them for sending interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending us a message to that effect.
7) Data processing for order processing
7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If special service providers are used for order processing, we will expressly inform you about this below.
7.2 Transfer of personal data to shipping service providers
- Post CH
If delivery of the goods is carried out by the transport service provider Post CH (Schweizerische PostAG, Switzerland, Wankdorfallee 4, 3030 Bern), we will transfer your e-mail address to Post CH before delivery of the goods, for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise we will only transfer the recipient’s name and delivery address to Post CH for delivery. The transfer will only take place as far as it is necessary for the delivery of goods. In this case, prior coordination of a delivery date with Post CH or the transmission of status information about the delivery is not possible.
Consent can be revoked at any time with future effect from the controller named above or from the transport service provider Post CH.
7.3 Carrying out credit checks
- CRIF AG (Switzerland)
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. The personal data necessary for a credit check is transmitted to the following service provider:
CRIF AG (Switzerland)
Hagenholzstrasse 81
8050 Zurich
The credit information may contain probability values (“score values”). If score values are included in the result of the credit information, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. We use the result of the credit check regarding the statistical probability of payment default in order to decide on the conclusion, execution or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the controller or to the above-mentioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Use of social media: Videos
8.1 Use of Vimeo videos
Plugins of the video portal Vimeo by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA, are integrated on our website. When you access a page of our website containing such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can assign the visit to our website directly to your Vimeo account. If you interact with the plugins (such as pressing the start button for a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to directly associate the data collected via our website with your Vimeo account, you must log out of Vimeo before visiting our website.
For the purpose and scope of data collection and the further processing and use of data by Vimeo as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of Vimeo: https://vimeo.com
For Vimeo videos embedded on our site, the Google Analytics tracking tool from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo’s own tracking, to which we have no access and which cannot be influenced by us. Google Analytics uses so-called “cookies” for tracking, which are text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server, and may also be transmitted to Google LLC servers in the USA.
8.2 Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If playback of embedded YouTube videos is started, the provider “YouTube” sets cookies to collect information about user behaviour. According to “YouTube”, these cookies, among other purposes, record video statistics, improve user-friendliness, and prevent abusive behaviour. If you are logged in to Google, your data is assigned directly to your account when you click on a video. If you do not wish your data to be associated with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have a right to object to the creation of these user profiles, and to do so you must contact YouTube. When using YouTube, personal data may also be transmitted to Google LLC servers in the USA.
Regardless of whether embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.
More information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de
9) Web analytics services
Google Analytics 4
Google Analytics 4
This website uses Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits to exclude a direct personal reference.
The information is transmitted to Google servers and processed there. Transmission to Google LLC based in the USA is also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and shortened is not merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the used end device, only takes place if you have given us your express consent for this.
Without your consent, the use of Google Analytics 4 does not take place during your website visit. You can revoke your consent for the future at any time. To exercise your right of withdrawal, please deactivate this service using the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further legal notices regarding Google Analytics 4 can be found at https://business.safety.google
Demographic characteristics
Google Analytics 4 uses the special function “demographic characteristics” and can use it to create statistics that provide information on the age, gender, and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. The data collected, however, cannot be assigned to a specific person and is deleted after it has been stored for two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalised ads and your devices are linked to your Google account, Google can, subject to your consent to the use of Google Analytics, analyse your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalised advertising” function in your Google account settings. Follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4, created an account on this website and log in with this account on different devices, your activities, including conversions, can be analysed across devices.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with the Swiss data protection level.
10) Tools and miscellaneous
10.1 Cookie consent tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users as an interactive user interface when visiting the website, where consents for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all consent-requiring cookies/services are only loaded if the respective user provides consent by ticking a box. This ensures that such cookies are only set on the respective user’s end device in the event of consent being given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this case.
If, in individual cases, personal data (such as the IP address) are processed for the purpose of storing, assigning or logging cookie settings, this is based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Furthermore, as controllers, we are under the legal obligation to make the use of technically unnecessary cookies dependent on user consent.
Further information about the operator and settings options for the cookie consent tool can be found directly in the relevant user interface on our website.
10.2 Job applications by e-mail
On our website, we publish currently vacant positions in a separate section to which interested parties can apply by e-mail to the contact address provided.
Inclusion in the application process requires that applicants provide us, together with their application by e-mail, with all personal data required for a well-founded and informed assessment and selection.
Required information includes general information about the person (name, address, a telephone or electronic contact option) as well as performance-specific proof of the qualifications necessary for the position. If applicable, health-related information is also required, which must receive particular consideration under labor and social law to protect the interests of the applicant.
The components an application must include for it to be considered in individual cases and the form in which these components must be transmitted by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the provided e-mail contact address, the applicant’s data is stored by us and evaluated exclusively for the purpose of processing the application. For questions arising during processing, we use, at our discretion, either the e-mail address provided by the applicant with the application or a telephone number provided.
Legal basis for this processing is the progress of the application procedure as initiation of employment contracts.
If, in the context of the application process, special categories of personal data (e.g. health data, such as data on disability) are requested from applicants, processing is carried out so that we can exercise our rights arising from employment law and social security and social protection law and fulfil our related obligations.
Cumulatively or alternatively, the special data categories may also be processed for preventive health care or occupational medicine purposes, for the assessment of the applicant’s fitness for work, medical diagnostics, care or treatment in the health or social sector, or for the management of systems and services in the health or social sector.
If, in the course of the evaluation described above, the applicant is not selected or an applicant withdraws their application prematurely, their data transmitted by e-mail and all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months after corresponding notification. This period is based on our legitimate interest in answering any follow-up questions relating to the application and in fulfilling our obligations to provide evidence under the regulations on equal treatment of applicants, if necessary.
In the event of a successful application, the data provided will be further processed for the purpose of implementing the employment relationship.
10.3 Doofinder
To make visiting our website attractive and to present you with better search results more quickly, we use the doofinder search function. This serves to safeguard our legitimate prevailing interest in an optimized presentation of our offering in the context of a balance of interests. The operator of the site is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain.
To use doofinder’s search function, the browser you are using must connect to doofinder’s servers. In this process, doofinder becomes aware that our website has been accessed via your IP address.
For more information about Doofinder Search, see https://www.doofinder.com
11) Rights of the data subject
The applicable data protection law grants you the following rights as a data subject with respect to the controller regarding the processing of your personal data (rights of access and intervention), with reference to the legal basis set forth for the respective requirements for exercise:
- Right of access under Art. 25 DSG
- Right to data release or transmission under Art. 28 DSG
- Right to rectification under Art. 32 para. 1 DSG
12) Duration of storage of personal data
The duration of the storage of personal data is determined based on the respective legal basis, processing purpose and – if applicable – also the relevant statutory retention period (e.g. retention periods under the law of obligations).
When processing personal data based on explicit consent, the data in question will be stored until you revoke your consent.
If there are statutory retention periods for data, this data will be retained for the legally required duration.
Otherwise, personal data is processed as long as you do not expressly prohibit further processing, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a justification by law.
