This privacy policy applies to the processing of personal data by Vibraplast AG within the framework of the Swiss Data Protection Act and the General Data Protection Regulation (GDPR) of the European Union.

As soon as the Vibraplast AG website or the Vibraplast AG online store is visited, even without logging in, the website server automatically stores general technical information. In particular, this includes information on the browser type, the anonymized IP address of the device with which you access the website, the operating system used and the data of the Internet service provider.

When using the Vibraplast AG Online Shop with login/registration or when completing online forms and e-mail correspondence with Vibraplast AG, the registration data and all data entered by the user are also stored. When purchasing products or services, for example sound insulation or rubber products, we require personal data, depending on the product and purchase channel. This applies in particular when you place orders, take part in surveys, correspond with us online or offline via social media, blogs or other interactive media.

By submitting personal data or registering, you consent to the scope and use, processing and disclosure of your personal data in accordance with this privacy policy.

We process personal data in the following categories of processing in particular:

• In the management of clients for whom we provide or have provided services.
• When managing personal data that we have received indirectly from our customers when providing services. When managing the personal data of our employees and freelancers.
• When visiting our website 
• In other contractual relationships, e.g. as a supplier, service provider or consultant. For job applications.
• If we are obliged to do so for legal or regulatory reasons.
• When we exercise our due diligence or other legitimate interests, e.g. to avoid conflicts of interest, prevent money laundering or other risks, ensure data accuracy, check creditworthiness, ensure security or enforce our rights.

More detailed information can be found in the description of the respective categories of processing in section 4.

The personal data we process depends on your relationship with us and the purpose for which we process it. In addition to your contact details, we also process other information about you insofar as this is necessary in the context of our relationship.

We collect the following categories of personal data, which depend on the respective purpose and are processed accordingly:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. date of birth, nationality, marital status, profession, education, title, job title, passport / ID number, AHV number) for employees or freelancers.
• Risk assessment data (e.g. credit rating information, commercial register data)
• Financial information (e.g. data on bank details) Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
• Job application data (e.g. CV, references)
• Security and network data (e.g. visitor lists, access controls, network and mail scanners, telephone call lists)

Where permitted and necessary, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, Internet) or receive such data from our customers and their employees, from authorities and other third parties.

In order to provide you with targeted information about products and better advice, we use your data to continuously improve our services and maintain our business relationship with you. It also enables us to provide you with relevant marketing materials.

Your data may be passed on to affiliated companies for these purposes. We also commission service providers with technical and organizational tasks. These service providers are contractually obliged to process your data exclusively on our behalf and in accordance with our instructions - in compliance with strict security measures.

We only store personal data for the following purposes:

Collection of usage data on our website

No personal data is required to use our website. However, the server automatically collects certain user information that is temporarily stored in log files each time the website is accessed. This data cannot be directly assigned to a person and is used for the technical provision, stability and security of the website as well as the analysis and optimization of our online services.

Data collected includes, among other things:

• Technical information (IP address, device type, browser, UDI).
• User behavior (page clicks, link views, newsletter openings).

This data is processed on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. to improve quality, analyze user data, publicize our services).
• Consent (e.g. to the use of cookies).

Cookies are small text files that are automatically stored on your device when you visit our website or online store. They help us to make your use more efficient, functional and user-friendly. The aim is to adapt our offer to your needs in the best possible way.

Cookies are safe: they do not damage your hard disk or transmit personal data to us.

You can set your browser so that no cookies are stored or you are informed about every new cookie. Our digital offers can also be used without cookies, but with possible restrictions in functionality.

The use of Vibraplast AG's digital offerings is measured and evaluated by various technical systems - in particular third-party providers such as Google Analytics. These analyses can be anonymous or personalized. In some cases, the data collected is passed on to third parties for processing.

Google Analytics, a service provided by Google Inc., is the most widely used analysis tool. Data may be transferred to servers in the USA. You can object to the collection and processing of data by Google Analytics by setting an opt-out cookie: Google Analytics Opt-Out.

Vibraplast AG has no detailed knowledge of which data is collected in detail and whether it is passed on anonymously.

Our digital offerings are linked to external systems and functions of third parties, including plug-ins of social networks such as Facebook, Twitter and Google Plus. If you have a user account with these services, they may be able to track and analyze your use of our website.

Personal data such as IP address, browser settings and other parameters may be transmitted to these third-party providers and stored there.

We have no control over the use of this data by third parties and accept no responsibility or liability for this.

By registering on our website or in our online store, you have consented to us using your personal data for personalized advertising measures. This includes in particular the personalization of advertising by e-mail, such as our novum newsletter.

We only send newsletters and advertising e-mails if you have given us your consent or if there is a legal basis for doing so.

Our website may contain hyperlinks to external websites that are operated by third parties and are beyond our control. We accept no responsibility or liability for their content or data protection practices.

When you contact us (by telephone, e-mail or chat) or visit us, we process the necessary personal data. During visits, your contact details may be collected and stored for a certain period of time in order to protect our infrastructure and information.

We use Zoom, Microsoft Teams or Skype for online meetings, video conferences and webinars. In particular, the following data is processed:

• Contact information (name, address, telephone number, e-mail)
• Communication data (IP address, duration, channel)
• Recordings of conversations, if relevant Data uploaded or provided by users
• Professional information (function, employer, title)
• Time and reason for the visit

Legal bases for processing:

• Fulfillment of contractual obligations, including contract initiation and enforcement. 
• Safeguarding legitimate interests, e.g. for security, traceability and management of customer relationships.

You can submit your application by post or by e-mail to the address given on our website. Your application documents and personal data will be treated in strict confidence, will not be passed on to third parties and will only be used to process your application.

Without your consent, your application dossier will either be returned after completion of the procedure or - provided there is no legal obligation to retain it - deleted or destroyed.

Processed data:

• Contact information (name, address, telephone number, e-mail) 
• Personal details (profession, function, employer, title) 
• Application documents (letter of motivation, CV, certificates, diplomas, photos) 
• Assessment information (personnel consultant assessments, references, assessments)

Legal basis:

• Legitimate interests (e.g. recruitment of new employees)
• Consent
• Performance of a contract (or initiation of a contract)

If we conclude a contract with you for the provision of a service, we process your personal data or that of your employees. We need this data for communication and for the use of your services. It may also be used to check for conflicts of interest or to minimize risks (e.g. money laundering, sanctions).

Processed data:

• Contact information (name, address, telephone number, e-mail) 
• Personal details (profession, function, employer, title)
• Financial information (e.g. bank details)

Rechtsgrundlagen: 

• Abschluss oder Abwicklung eines Vertrags, inkl. Vertragsanbahnung und Durchsetzung. 
• Wahrung berechtigter Interessen, z. B. zur Vermeidung von Interessenkonflikten, zum Schutz des Unternehmens und zur Durchsetzung von Rechtsansprüchen.

If you take part in an event organized by us, we collect personal data for planning, implementation and follow-up. We also use your data to inform you about future events. Photos or videos may be taken during the event and published internally or externally.

Processed data:

• Contact information (name, address, telephone number, e-mail) 
• Personal details (profession, function, employer, eating habits)
• Pictures or videos
• Payment information (bank details)

Legal bases: 

• Performance of a contract (e.g. participation in the event). 
• Safeguarding legitimate interests (e.g. event implementation, dissemination of information, efficient organization). 
• Consent (e.g. for marketing purposes or publication of image material).

We only pass on your personal data to third parties if it is necessary for the provision of our services, if the third parties provide a service for us, if we are obliged to do so by law or by the authorities or if there is an overriding interest in passing it on. In addition, data is passed on if you have given us your consent or if you have requested us to do so.

Not all personal data is transmitted in encrypted form as standard. Unless expressly agreed otherwise with you, the transmission will be unencrypted.

Possible recipients of personal data:

• Service providers (e.g. IT service providers, hosting providers, consultants, lawyers, insurance companies)
• Authorities, state institutions and courts, if required by law or contract

For service providers who process personal data on our behalf, we conclude contracts that ensure data protection. Most of our service providers are located in Switzerland or the EU/EEA. In some cases, such as with Google Analytics, data may also be transferred to the USA or other countries outside the EEA. If this is necessary, the transfer will be based on the EU standard contractual clauses or other suitable instruments to ensure data protection.

We process and store your personal data for as long as is necessary to fulfill our contractual and legal obligations or for the purposes pursued. This means, for example, that we may retain your data throughout the entire business relationship (from the initiation to the termination of a contract) and may also retain it after termination of the contract due to statutory retention and documentation obligations.

Personal data may also be retained for the duration of the statutory limitation period if claims could be asserted against our company or if legal obligations or legitimate business interests require this (e.g. for evidence and documentation purposes).

As soon as the personal data is no longer required for these purposes, it is generally deleted or anonymized, insofar as this is possible. Shorter retention periods of generally twelve months or less apply to operational data (e.g. system protocols, logs).

We take appropriate technical and organizational measures to protect your personal data from unauthorized access and misuse. These include issuing instructions and training, the use of IT and network security solutions, access controls and restrictions and the encryption of data carriers and transmissions. In addition, we use pseudonymization and regular checks to ensure the security of your data.

You have the following rights in connection with our processing of personal data:

• Right to information about the personal data we have stored about you, the purpose of processing, the origin and recipients or categories of recipients to whom personal data is disclosed
• Right to rectification if your data is incorrect or incomplete
• Right to restrict the processing of your personal data
• Right to request the deletion of the processed personal data
• Right to data portability
• Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons
• Right to lodge a complaint with a competent supervisory authority, if provided for by law

To assert these rights, please contact us at the address given in the “Basic information” section. Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or need it to assert claims. If you incur costs, we will inform you in advance.

As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of the business relationship and for the fulfillment of the associated contractual obligations. Without this data, we will not be able to conclude or execute a contract with you (or the entity or person you represent). It will also not be possible to use the website if certain information to secure data traffic (such as IP address) is not disclosed.

The information published on the Vibraplast AG website is provided for personal use and for information purposes only. No guarantee is given for the correctness, completeness, accuracy, reliability or up-to-dateness of the information. Vibraplast AG accepts no liability for material or immaterial damage arising from the use or non-use of the information on the website. Furthermore, any liability for technical faults and misuse of the connection is rejected. All offers are non-binding. Vibraplast AG expressly reserves the right to change, supplement or delete parts of the website or the entire website without prior notice or to cease publication temporarily or permanently.

The implementation of new technologies or data protection provisions may make it necessary to amend or revise these. You will be informed of any significant changes to the data protection provisions by means of a notice after logging into your user account or by e-mail. The current data protection provisions can be viewed at any time on our website.

Vibraplast AG's Privacy Policy and the General Terms and Conditions are governed exclusively by Swiss substantive law, to the exclusion of the conflict of laws provisions of Switzerland and your place of residence. Unless mandatory statutory provisions to the contrary exist, the place of jurisdiction for all disputes in connection with these General Terms and Conditions shall be Switzerland.

Vibraplast AG / Urs Dutly / Chairman of the Board of Directors

September 01, 2023