Privacy policy
With this data protection statement we inform you about the processing of personal data in connection with our activities and operations, including our website under the domain wuethrich-ag.ch. In particular, we explain for what purpose, how and where we process which personal data. We also inform you about the rights of individuals whose data we process.
For individual or additional activities and operations, we may publish further data protection statements or other data protection information.
Table of contents
- 1. Contact details
- 2. Terms and legal bases
- 3. Type, scope and purpose of the processing of personal data
- 4. Disclosure of personal data
- 5. Communication
- 6. Applications
- 7. Data security
- 8. Personal data abroad
- 9. Rights of data subjects
- 10. Use of the website
- 11. Social media
- 12. Third-party services
- 13. Website extensions
- 14. Performance and reach measurement
- 15. Final remarks on the data protection statement
1. Contact details
Responsible under data protection law:
Sebastian Wüthrich
Wüthrich AG
Eschenweg 10
2542 Pieterlen
In individual cases, third parties may be responsible for the processing of personal data, or joint responsibility with third parties may exist. Upon request, we will be happy to provide data subjects with information about the respective responsibilities.
2. Terms and legal bases
2.1 Terms
Data subject: Natural person whose personal data we process.
Personal data: All information relating to an identified or identifiable natural person.
Special categories of personal data: Data relating to trade union, political, religious or philosophical views and activities, data on health, private life or membership of an ethnic group or race, genetic data, biometric data that uniquely identifies a natural person, data on criminal and administrative sanctions or proceedings, and data on social assistance measures.
Processing: Any handling of personal data, regardless of the means and procedures used, for example querying, matching, adapting, archiving, storing, reading, disclosing, collecting, recording, deleting, revealing, organising, modifying, distributing, linking, destroying and using personal data.
2.2 Legal bases
We process personal data in accordance with Swiss law, in particular the Federal Act on Data Protection (Data Protection Act, FADP) and the Data Protection Ordinance (DPO).
3. Type, scope and purpose of the processing of personal data
We process only those personal data that are necessary to carry out our activities and operations in a sustainable, user-friendly, secure and reliable manner. The personal data processed may in particular include categories such as browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data and payment data. Personal data may also constitute specially sensitive personal data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect while carrying out our activities and operations, provided such processing is permitted.
We process personal data, where necessary, with the consent of the data subjects. In many cases, we may process personal data without consent, for example to fulfil legal obligations or to safeguard overriding interests. We may also request consent from data subjects even if consent is not required.
We process personal data for the duration required for the respective purpose. We anonymise or delete personal data in particular in accordance with statutory retention and limitation periods.
4. Disclosure of personal data
We may disclose personal data to third parties, have it processed by third parties, or process it jointly with third parties. Such third parties may include specialised service providers whose services we use.
Within the scope of our activities and operations, we may disclose personal data in particular to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit agencies, logistics and shipping companies, marketing and advertising agencies, media, parent, sister and subsidiary companies, organisations and associations, social institutions, telecommunications companies, insurance companies and payment service providers.
5. Communication
We process personal data in order to communicate with individuals as well as with authorities, organisations and companies. In doing so, we process in particular data that a data subject provides to us when contacting us, for example by post or email. We may store such data in an address book or similar tools.
Third parties who transmit data about other persons to us are obliged to independently ensure the data protection of those data subjects. In particular, they must ensure that such data is accurate and that its transmission is permitted.
6. Applications
We process personal data of applicants insofar as it is necessary to assess suitability for employment or for the later execution of an employment contract. The required personal data arises in particular from the information requested, for example in the context of a job advertisement. We may publish job advertisements with the help of suitable third parties, for example in electronic and printed media or on job portals.
We also process personal data that applicants voluntarily provide or publish, in particular as part of cover letters, CVs and other application documents as well as online profiles.
7. Data security
We take appropriate technical and organisational measures to ensure data security appropriate to the respective risk. With our measures, we ensure in particular the confidentiality, availability, traceability and integrity of the personal data processed, without being able to guarantee absolute data security.
Access to our website and other digital presence is secured using transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting a website without transport encryption.
Our digital communication is subject – as generally all digital communication – to mass surveillance without cause or suspicion by security authorities in Switzerland, other European countries, the United States of America (USA) and other countries. We cannot directly influence the processing of personal data by intelligence services, police authorities and other security authorities. We also cannot exclude that a data subject is specifically monitored.
8. Personal data abroad
We generally process personal data in Switzerland. However, we may also disclose or export personal data to other countries, in particular in order to process it there or have it processed.
We may disclose personal data to any country worldwide and elsewhere in the universe, provided that the local law ensures an adequate level of data protection in accordance with a decision of the Swiss Federal Council.
We may disclose personal data to countries whose laws do not ensure an adequate level of data protection, provided that appropriate safeguards are in place, in particular on the basis of standard data protection clauses or other suitable guarantees. In exceptional cases, we may export personal data to countries without adequate or appropriate data protection if the special legal requirements are met, for example explicit consent of the data subject or a direct connection with the conclusion or execution of a contract. Upon request, we will be happy to provide data subjects with information about any guarantees or provide a copy of such guarantees.
9. Rights of data subjects
9.1 Data protection claims
We grant data subjects all rights under applicable law. In particular, data subjects have the following rights:
- Access: Data subjects may request information as to whether we process personal data about them and, if so, which personal data. Data subjects also receive the information necessary to assert their data protection rights and ensure transparency. This includes the personal data itself, as well as information about the purpose of processing, retention period, any disclosure or export of data to other countries, and the origin of the personal data.
- Rectification and restriction: Data subjects may have incorrect personal data corrected, incomplete data completed, and the processing of their data restricted.
- Opportunity to express their view and human review: Data subjects may express their view in decisions based solely on automated processing of personal data that have legal effects or significantly affect them (automated individual decisions), and request human review.
- Deletion and objection: Data subjects may have their personal data deleted (“right to be forgotten”) and object to the processing of their data with effect for the future.
- Data portability: Data subjects may request the disclosure or transfer of their personal data to another controller.
We may delay, restrict or refuse the exercise of data subject rights within the legally permissible framework. We may inform data subjects of any conditions that must be met for exercising their rights. For example, we may refuse access in whole or in part due to confidentiality obligations, overriding interests or the protection of other persons. We may also refuse deletion of personal data in whole or in part, in particular with reference to statutory retention obligations.
We may exceptionally charge costs for exercising rights. We will inform data subjects in advance of any such costs.
We are obliged to identify data subjects requesting information or asserting other rights using appropriate measures. Data subjects are obliged to cooperate.
9.2 Legal protection
Data subjects have the right to enforce their data protection claims in court or to lodge a complaint with a data protection supervisory authority.
The data protection supervisory authority for private controllers and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
10. Use of the website
10.1 Cookies
We may use cookies. Cookies – both our own (first-party cookies) and those of third parties whose services we use (third-party cookies) – are data stored in the browser. Such stored data is not limited to traditional text-based cookies.
Cookies may be stored temporarily as “session cookies” or for a defined period as permanent cookies. Session cookies are automatically deleted when the browser is closed. Permanent cookies have a defined storage duration. Cookies enable, in particular, recognising a browser on subsequent visits to our website, for example to measure reach. Permanent cookies may also be used for online marketing.
Cookies can be disabled, restricted or deleted at any time in the browser settings. Browser settings often also allow automatic deletion and other management of cookies. Without cookies, our website may not be fully available. Where required by applicable law, we request explicit consent for the use of cookies.
For cookies used for reach measurement or advertising, an opt-out is possible via AdChoices, the Network Advertising Initiative (NAI), YourAdChoices, or Your Online Choices.
10.2 Logging
We may log at least the following data for each access to our website, provided it is automatically generated or transmitted: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, the specific subpage accessed including amount of data transferred, and the referrer.
We store such data, which may also constitute personal data, in log files. The data is required to provide our digital presence in a reliable and user-friendly manner and to ensure data security.
10.3 Tracking pixels
We may integrate tracking pixels into our digital presence. Tracking pixels (also known as web beacons) are small, invisible images or scripts that are automatically retrieved when accessing our digital presence. They can collect similar data as logging in log files.
11. Social media
We maintain presences on social media platforms and other online platforms to communicate with interested individuals and provide information about our activities. Personal data may also be processed outside Switzerland in connection with such platforms.
The terms and conditions, privacy policies and other provisions of the respective platform operators also apply. These provisions inform in particular about the rights of data subjects directly against the respective platform.
12. Third-party services
We use services from specialised third parties to carry out our activities reliably. Such services may embed functions and content into our website. When embedding such services, the providers may temporarily collect IP addresses of users for technical reasons.
Third parties may process data in aggregated, anonymised or pseudonymised form for security, statistical and technical purposes.
15. Final remarks on the data protection statement
We may update this data protection statement at any time. We will inform about updates in an appropriate manner, in particular by publishing the current version on our website.
