This privacy policy applies to the processing of personal data by Vibraplast AG within the scope of the Swiss Federal Act on Data Protection (FADP) and the European Union's General Data Protection Regulation (GDPR).

It contains the most important information about

• which data the website operator processes,
• why this data is needed,
• how this data is protected,
• what benefits you can derive from this data processing, and
• how you can object to the processing.

The website operator is Vibraplast AG, CHE-107.086.109, Wittenwilerstrasse 25, 8355 Aadorf.

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. New technologies and the constant development of this website may necessitate changes to this privacy policy. We therefore recommend that you review the privacy policy at regular intervals.

Definitions of the terms used (e.g., “personal data” or “processing”) can be found in Art. 5 lit. a–d of the DSG or in Art. 4 of the GDPR.

Unless otherwise specified in individual cases, Urs Dutly is responsible for the data processing described here.

Requests regarding data protection can be sent to us by letter or email, enclosing a copy of the user's ID or passport for identification purposes:

Vibraplast AG
Wittenwilerstrasse 25
8355 Aadorf
CH-Switzerland

phone: +41 52 368 00 48
e-mail: urs.dutly@vibraplast.ch

As soon as you visit the Vibraplast AG website or the Vibraplast AG online shop, even without registering, the website server automatically stores general technical information. This includes, in particular, information about the browser type, the anonymized IP address of the device you are using to access the website, the operating system used, and data about your Internet service provider.

When using the Vibraplast AG online shop with login or registration, when filling out online forms, and when communicating with Vibraplast AG via email, the registration data and all data entered by the user are also stored. When purchasing products or services, such as sound insulation or rubber products, we require personal information depending on the product and purchase channel. This applies in particular when you place orders, participate in surveys, correspond with us online or offline, or contact us via social media, blogs, or other interactive media.

By submitting personal data or registering, you consent to the scope, use, processing, and disclosure of your personal data in accordance with this privacy policy.

We process personal data in particular in the following categories of processing:

• in the management of customers for whom we provide or have provided services
• in the management of personal data that we have indirectly received from our customers in the course of providing services
• in the management of personal data of our employees and freelancers
• when visiting our website
• in other contractual relationships, e.g., as a supplier, service provider, or consultant
• in applications
• if we are required to do so for legal or regulatory reasons
• when we exercise our due diligence obligations or other legitimate interests, e.g. to avoid conflicts of interest, prevent money laundering or other risks, ensure data accuracy, check creditworthiness, ensure security, or enforce our rights

More detailed information can be found in the description of the respective categories of processing in section 4.

The personal data we process depends on your relationship with us and the purpose for which we process it. In addition to your contact details, we also process other information about you to the extent necessary within the scope of our relationship.

We collect the following categories of personal data, which depend on the respective purpose and are processed accordingly:

• Contact information (e.g., last name, first name, address, phone number, email)
• Personal information (e.g., date of birth, nationality, marital status, occupation, education, title, job title, passport or ID number, social security number) for employees or freelancers
• Risk assessment data (e.g., credit rating information, commercial register data)
• Financial information (e.g., bank account details)
• Website data (e.g., IP address, device information (UDI), browser information, website usage such as analysis and use of plugins, etc.)
• Application documents (e.g., resume, job references)
• Security and network data (e.g., visitor lists, access controls, network and mail scanners, telephone call logs)

To the extent permitted and necessary, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registers, commercial registers, the press, the Internet) or receive such data from our customers and their employees, from authorities, and from other third parties.

We have technical and organizational security procedures in place to safeguard the security of your personal data and to protect your session data and personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure, or access.

However, you should always be aware that the transmission of information via the Internet and other electronic means involves certain security risks and that we cannot guarantee the security of information transmitted in this way.

The connection to our servers is secured with 256-bit SSL encryption. Customer data is backed up regularly and checked using a data backup process. Security measures are continuously adapted in line with technical developments.

In order to provide you with specific information about products and better advise you, we use your data to continuously improve our services and maintain our business relationship with you. It also enables us to provide you with relevant marketing materials.

Your data may be passed on to affiliated companies for these purposes. We also commission service providers to perform technical and organizational tasks. These service providers are contractually obliged to process your data exclusively on our behalf and in accordance with our specifications, and to comply with strict security measures.

We store personal data solely for the following purposes:

• Management of our customers, employees, freelancers, and partner companies
• Recording relevant contact information such as name, address, telephone number, email, etc.
• Recording of personal details such as date of birth, nationality, marital status, occupation, education, job title, social security number, and insurance details, especially for employees
• Recording of financial information such as bank details

This data is processed on the basis of the following legal grounds:

• Performance or execution of a contract with the data subject
• Safeguarding legitimate interests, e.g., for administration, quality improvement, security, risk management, enforcement of rights, or examination of potential conflicts of interest

No personal data is required to use our website. However, each time the server is accessed, it automatically collects certain user information, which is temporarily stored in log files. This data cannot be directly attributed to a specific person and is used for technical provision, stability, and security of the website, as well as for the analysis and optimization of our online services.

Data collected includes, among other things:

• technical information such as IP address, device type, browser, and UDI
• User behavior such as page clicks, link clicks, and newsletter opens

This data is processed on the basis of the following legal grounds:

• Safeguarding legitimate interests, e.g., to improve quality, analyze user data, and promote our services
• Consent, e.g., to the use of cookies

Cookies are small text files that are automatically stored on your device when you visit our website or online store. They help us to make your experience more efficient, functional, and user-friendly. The aim is to tailor our offering to your needs as best as possible.

Cookies are safe. They do not damage your hard drive or transmit personal data to us.

You can set your browser so that no cookies are stored or so that you are informed about each new cookie. Our digital offerings can also be used without cookies, but with possible restrictions in functionality.

The use of Vibraplast AG's digital offerings is measured and evaluated by various technical systems, in particular by third-party providers such as Google Analytics. These analyses may be anonymous or personal. In some cases, the data collected is passed on to third parties for processing.

Google Analytics, a service provided by Google Inc., is the most widely used analysis tool. Data may be transferred to servers in the USA. You can object to the collection and processing of data by Google Analytics by setting an opt-out cookie (Google Analytics Opt-Out).

Vibraplast AG has no detailed knowledge of which specific data is collected and whether this data is passed on anonymously.

Our digital offerings are linked to external systems and third-party functions, including plug-ins from social networks such as Facebook, Twitter, and Google Plus. If you have a user account with these services, they may be able to track and evaluate your use of our website.

In doing so, personal data such as IP addresses, browser settings, and other parameters may be transmitted to these third-party providers and stored there.

We have no control over the use of this data by third parties and accept no responsibility or liability for this.

By registering on our website or in our online shop, you have agreed that we may use your personal data for personalized advertising measures. This includes, in particular, the personalization of advertising by email, such as our novum newsletter.

We only send newsletters and promotional emails if you have given us your consent or if there is a legal basis for doing so.

Our website may contain hyperlinks to external websites that are operated by third parties and are beyond our control. We accept no responsibility or liability for their content or data protection practices.

When you contact us (by phone, email, or chat) or visit us, we process the personal data required for this purpose. During visits, your contact details may be recorded and stored for a certain period of time in order to protect our infrastructure and information.

We use Zoom, Microsoft Teams, or Skype for online meetings, video conferences, and webinars. In particular, the following data is processed:

• Contact information (name, address, phone number, email)
• Communication data (IP address, duration, channel)
• Records of conversations, if relevant Data uploaded or provided by users
• professional information (position, employer, title)
• Time and reason for the visit

Legal basis for processing:

• Fulfillment of contractual obligations, including contract initiation and enforcement
• Protection of legitimate interests, e.g., for security, traceability, and management of customer relationships

You can submit your application by mail or email using the address provided on our website. Your application documents and personal data will be treated as strictly confidential, will not be disclosed to third parties, and will be used exclusively for the purpose of processing your application.

Without your consent, your application file will either be returned to you after the process has been completed or, provided there is no legal obligation to retain it, deleted or destroyed.

Processed data:

• Contact information (name, address, phone number, email)
• Personal details (occupation, position, employer, title)
• Application documents (cover letter, resume, references, diplomas, photos)
• Evaluation information (HR consultant evaluations, references, assessments)

Legal basis:

• Legitimate interests (e.g., hiring new employees)
• Consent
• Fulfillment of a contract or initiation of a contract

If we conclude a contract with you for the provision of a service, we will process your personal data or that of your employees. We need this data for communication and to make use of your services. It may also be used to check for conflicts of interest or to minimize risks (e.g., money laundering, sanctions).

Processed data:

• Contact information (name, address, phone number, email)
• Personal details (occupation, position, employer, title)
• Financial information (e.g., bank details)

Legal basis:

• Conclusion or execution of a contract, including contract initiation and enforcement
• Safeguarding legitimate interests, e.g., to avoid conflicts of interest, to protect the company, and to enforce legal claims

If you participate in an event organized by us, we collect personal data for planning, implementation, and follow-up purposes. We also use your data to inform you about future events. During the event, photos or videos may be taken and published internally or externally.

Processed data:

• Contact information (name, address, phone number, email)
• personal details (occupation, position, employer, eating habits)
• Images or videos
• Payment information (bank details)

Legal basis:

• Performance of a contract, e.g., participation in the event
• Safeguarding legitimate interests, e.g., event management, dissemination of information, and efficient organization
• Consent, e.g., for marketing purposes or publication of image material

We only pass on your personal data to third parties if this is necessary for the provision of our services, if third parties provide a service for us, if we are legally or officially obliged to do so, or if there is an overriding interest in passing on the data. In addition, data will be passed on if you have given us your consent or if you have requested us to do so.

Not all personal data is transmitted in encrypted form by default. Unless expressly agreed otherwise with you, transmission will be unencrypted.

Possible recipients of personal data are:

• Service providers (e.g., IT service providers, hosting providers, consultants, lawyers, insurance companies)
• Authorities, government agencies, and courts, if required by law or contract

We conclude contracts with service providers who process personal data on our behalf to ensure data protection. Most of our service providers are located in Switzerland or in the EU/EEA. In some cases, such as with Google Analytics, data may also be transferred to the US or other countries outside the EEA. If this is necessary, the transfer is based on EU standard contractual clauses or other appropriate instruments to ensure data protection.

We process and store your personal data for as long as this is necessary to fulfill our contractual and legal obligations or for the purposes pursued. This means that we may store your data, for example, throughout the entire business relationship—from the initiation to the termination of a contract—and may also store it after the termination of the contract due to legal storage and documentation obligations.

Personal data may also be retained for the duration of the statutory limitation period if claims could be asserted against our company or if legal obligations or legitimate business interests require this, for example for evidence and documentation purposes.

As soon as personal data is no longer required for these purposes, it is generally deleted or anonymized, as far as this is possible. For operational data, such as system logs, shorter retention periods of usually twelve months or less apply.

We take appropriate technical and organizational measures to protect your personal data from unauthorized access and misuse. These include issuing instructions and providing training, using IT and network security solutions, access controls and restrictions, and encrypting data carriers and transmissions.

In addition, we use pseudonymization and regular checks to ensure the security of your data.

You have the following rights in connection with our processing of personal data:

• Right to information about the personal data we have stored about you, the purpose of processing, the origin, and the recipients or categories of recipients to whom personal data is disclosed
• Right to rectification if your data is incorrect or incomplete
• Right to restriction of processing of your personal data
• Right to request the deletion of processed personal data
• Right to data portability
• Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons
• Right to lodge a complaint with a competent supervisory authority, where provided for by law

To exercise these rights, please contact us at the address provided in the “Basic Information” section. Please note that we reserve the right to apply the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are permitted to invoke this), or need the data to assert claims. If you incur any costs, we will inform you in advance.

Within the scope of our business relationship, you must provide the personal data necessary for establishing and conducting the business relationship and for fulfilling the associated contractual obligations. Without this data, we will not be able to conclude or execute a contract with you or with the entity or person you represent.

It is also not possible to use the website if certain information required to secure data traffic, such as the IP address, is not disclosed.

The information published on the Vibraplast AG website is provided exclusively for personal use and for informational purposes. No guarantee is given for the correctness, completeness, accuracy, reliability, or timeliness of the information.

Vibraplast AG accepts no liability for material or immaterial damage resulting from the use or non-use of the information on this website. Furthermore, no liability is accepted for technical faults or misuse of the connection.

All offers are non-binding. Vibraplast AG expressly reserves the right to change, supplement, or delete parts of the website or the entire offer without prior notice, or to discontinue publication temporarily or permanently.

The implementation of new technologies or data protection regulations may necessitate changes or revisions to these terms and conditions.

You will be notified of any significant changes to the data protection provisions by means of a notice after logging into your user account or by email.

The current data protection regulations can be viewed on our website at any time.

The data protection guidelines of Vibraplast AG and the general terms and conditions are subject exclusively to Swiss substantive law, excluding the conflict of law provisions of Switzerland and your place of residence. Unless otherwise required by mandatory statutory provisions, the place of jurisdiction for all disputes arising in connection with these general terms and conditions is Switzerland.