Privacy Policy
1) Introduction and contact details of the data controller
1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.
1.2 The data controller for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Normrahmen AG, Bernstrasse 41, 3175 Flamatt, Switzerland, Tel.: +41 31 991 93 90, Email: info@normrahmen.ch. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 When you use our website for information purposes only – i.e. if you do not register or otherwise provide us with information – we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website we visited
- Date and time at the time of access
- Amount of data sent in bytes
- Source/link from which you arrived at the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
The data will not be passed on or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete evidence of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser address bar.
3) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), whilst others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
Where personal data is also processed by individual cookies used by us, such processing takes place either for the performance of the contract, in the event that consent has been given, or in accordance with our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective design of the site visit.
You can configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact us
Personal data is collected when you contact us (e.g. via the contact form or by email). The data collected via the contact form is specified on the form itself. This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. Your data will be deleted once your enquiry has been fully processed. This is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that there are no legal obligations to retain the data.
5) Data processing when opening a customer account and for contract fulfilment
Personal data is collected and processed when you provide it to us for the purpose of fulfilling a contract or when opening a customer account. The data collected is specified in the relevant input forms. You may delete your customer account at any time by sending a message to our address. We store and use the data you provide for the purpose of contract fulfilment. Following the deletion of your customer account, your data will be blocked in accordance with retention periods under tax and commercial law and deleted once these periods have expired, unless we can demonstrate an overriding interest in further processing within the meaning of Article 31(2) of the Data Protection Act or a legal justification.
6) Use of your data for direct marketing
6.1 Subscription to our email newsletter
By providing your personal details, you agree that we may use this information to send you newsletters.
We store your IP address, as provided by your Internet Service Provider (ISP), along with the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending you promotional communications via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a message to that effect. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless we can demonstrate an overriding interest in further processing within the meaning of Article 31(2) of the Data Protection Act or a legal justification.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers via email for goods or services from our range that are similar to those you have already purchased. We do not need to obtain separate consent from you for this. Data processing in this regard is carried out solely on the basis of our legitimate interest in personalised direct marketing. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by notifying the data controller named at the beginning. You will only incur transmission costs in accordance with standard rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
6.3 MailChimp
Our email newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when subscribing to the newsletter to this provider so that they can handle the dispatch of the newsletter on our behalf.
Subject to your express consent, the provider also carries out a statistical conversion tracking of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter’s content. In doing so, device data (e.g. time of access, IP address, browser type and operating system) is also collected and analyzed, but is not combined with other data sets.
You may withdraw your consent to newsletter tracking at any time with future effect.
We have entered into a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses issued by the Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.
6.4 Advertising by post
On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first name and surname, your postal address and - insofar as we have received this additional information from you within the context of the contractual relationship - your title, academic degree, year of birth and your professional, sector or business designation, and to use this information to send you interesting offers and information about our products by post.
You may object to the storage and use of your data for this purpose at any time by sending us a message to that effect.
7) Data processing for order fulfilment
7.1 The personal data we collect is passed on to the delivery carrier as part of order fulfillment, to the extent necessary for delivering the goods. We pass on your payment details to the designated bank as part of payment processing, to the extent necessary for processing the payment. Where specific service providers are used for order processing, we will provide explicit information on this below.
7.2 Disclosure of personal data to delivery service providers
- Post CH
If the goods are delivered by the carrier Post CH (Schweizerische Post AG, Switzerland, Wankdorfallee 4, 3030 Bern), we will pass on your email address to Post CH prior to delivery for the purpose of arranging a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process.-Otherwise, for the purpose of delivery, we will only pass on the recipient’s name and the delivery address to Post CH. This information is only passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date in advance with Post CH or to receive updates on the status of the delivery.
Consent may be withdrawn at any time with future effect by contacting the data controller named above or the transport service provider Post CH.
7.3 Conducting credit checks
- CRIF AG (Switzerland)
Should we provide goods on credit (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical and statistical methods in order to safeguard our legitimate interest in determining our customers’ solvency. We will pass on the personal data required for a credit check to the following service provider:
CRIF AG (Switzerland)
Hagenholzstrasse 81
8050 Zurich
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised, mathematical-statistical method. The calculation of the score values includes, amongst other things but not exclusively, address data. We use the result of the credit assessment regarding the statistical probability of default for the purpose of deciding on the establishment, performance or termination of a contractual relationship.
You may object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data where this is necessary for the contractual processing of payments.
8) Use of social media: videos
8.1 Using Vimeo videos
Our online store incorporates plugins from the video portal Vimeo, operated by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. When you visit a page in our store that contains such a plugin, your browser establishes a direct connection to Vimeo’s servers. The content of the plugin is transmitted directly from Vimeo to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the relevant page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly link your visit to our website to your Vimeo account. If you interact with the plugins (such as by pressing the play button on a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to directly link the data collected via our website to your Vimeo account, you must log out of Vimeo before visiting our website.
For information on the purpose and scope of data collection, as well as the further processing and use of data by Vimeo, and your rights and settings options regarding the protection of your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com
For Vimeo videos embedded on our site, the Google Analytics tracking tool provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo’s own tracking system, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called “cookies” for tracking; these are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server and stored there; this may also involve transmission to the servers of Google LLC in the USA.
8.2 Using YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended privacy mode is used here, which, according to the provider, only initiates the storage of user information once the video(s) is/are played. When playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behaviour. According to YouTube, these are used, amongst other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles, in which case you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.
Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de
9) Web analytics services
Google Analytics 4
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last few digits to prevent direct personal identification.
The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other data held by Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent to do so.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You may withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service using the “Cookie-Consent-Tool” provided on the website.
We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information regarding Google Analytics 4 can be found at https://business.safety.google
Demographic characteristics
Google Analytics 4 uses the special ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is achieved by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the function "Personalised ads" in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the function "UserIDs" can be used on this website. If you have consented to the use of Google Analytics 4, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analysed across devices.
For the transfer of data to the USA, the provider relies on standard contractual clauses issued by the Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with Swiss data protection standards.
10) Tools and Miscellaneous
10.1 Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the site in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted by ticking the relevant boxes. When using the tool, all cookies/services requiring consent are only loaded if the respective user grants the relevant consent by ticking the appropriate boxes. This ensures that such cookies are only set on the user’s device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this context.
Should the processing of personal data (such as the IP address) nevertheless occur in individual cases for the purpose of storing, assigning or logging cookie settings, this is carried out on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.
Furthermore, as the data controller, we are subject to a legal obligation to make the use of technically non-essential cookies subject to the user’s consent.
Further information about the operator and the settings available for the cookie consent tool can be found directly in the relevant user interface on our website.
10.2 Applications for job vacancies by email
On our website, we advertise current vacancies in a separate section, and interested candidates can apply by emailing the contact address provided.
In order to be included in the application process, applicants must provide us, together with their application via email, with all personal data necessary for a sound and informed assessment and selection.
The required details include general personal information (name, address, telephone or email contact details) as well as evidence of the specific qualifications required for the post. Where applicable, health-related information may also be required, which, in the interests of social protection, must be given special consideration under labour and social security law in relation to the applicant.
The specific requirements regarding the content of an application and the format in which it must be submitted by email can be found in the relevant job advertisement.
Upon receipt of the application sent using the email contact address provided, we will store the applicant’s data and process it solely for the purpose of handling the application. For any queries arising during the processing of the application, we will, at our discretion, use either the email address provided by the applicant with their application or a telephone number provided.
The legal basis for this processing is the application process as a preliminary step towards an employment contract.
Where, as part of the application process, special categories of personal data (e.g. health data such as information regarding severe disability status) are requested from applicants, the processing is carried out so that we may exercise the rights arising from labour law and the law on social security and social protection, and fulfil our obligations in this regard.
In addition, or alternatively, the processing of special categories of data may also be carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector.
If, following the assessment described above, the applicant is not selected or if an applicant withdraws their application prematurely, their data submitted via email and all electronic correspondence, including the original application email, will be deleted after a corresponding notification has been sent, at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, where necessary, in being able to fulfil our obligations to provide evidence under the regulations on the equal treatment of applicants.
If your application is successful, the data provided will be further processed for the purposes of the employment relationship.
10.3 Doofinder
To enhance the appeal of our website and deliver improved search results more quickly, we use the search functionality provided by DooFinder. This serves to protect our overriding legitimate interest, as determined by a balancing of interests, in optimising the presentation of our website. The operator of the website is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain.
In order to use the doofinder search function, the browser you are using must connect to the doofinder servers. This enables doofinder to determine that our website has been accessed via your IP address.
Further information on the Doofinder search can be found at https://www.doofinder.com
11) Rights of the data subject
Under applicable data protection law, you have the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:
- Right of access pursuant to Art. 25 of the Data Protection Act
- Right to data access or portability pursuant to Art. 28 of the Data Protection Act
- Right to rectification pursuant to Art. 32(1) of the Data Protection Act
12) Retention period for personal data
The duration of the retention of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. retention periods under the Swiss Code of Obligations).
When processing personal data on the basis of explicit consent, the data concerned will be retained until you withdraw your consent.
Where statutory retention periods for data apply, such data will be retained for the duration prescribed by law.
Furthermore, personal data will be processed for as long as you do not expressly object to such processing, unless we can demonstrate an overriding interest in further processing within the meaning of Article 31(2) of the Data Protection Act or a legal justification.
