1. What do we do?

WK-Paletten AG (Eggiwilstrasse 29a, 3535 Schüpbach) operates the website www.wkpaletten.ch (hereinafter referred to as "we" or "us"). On this website, you can find information about our organization, use our online services, and contact us. The protection of your personal data is very important to us. In this privacy policy, we inform you transparently and understandably about what data we collect via our website and how we handle it.

2. What information do we provide?

• Who is responsible for data processing;
• What data is collected;
• For what purpose this data is collected;
• To whom we share this data;
• How you can object to data processing;
• What rights you have and how you can assert them.

3. Definitions of terms

3.1 What is personal data?

Personal data (synonymous with the term "personal information") is any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address, telephone number, and IP address. Data about personal preferences such as hobbies or memberships also falls under the category of personal data.

3.2 What are special categories of personal data?

Special categories of personal data (equivalent to the term "particularly sensitive data") are:

• Data concerning religious, ideological, political or trade union views or activities;
• Data concerning health, privacy, race or ethnicity, as well as sex life and sexual orientation;
• Data relating to administrative or criminal prosecutions and sanctions, as well as data on social assistance measures;
• Genetic and biometric data that uniquely identify a person.

Where necessary and if you provide us with this data yourself, we may process data belonging to a special category of personal data. In this case, its processing is subject to stricter confidentiality.

3.3 What is the processing of personal data?

Processing (synonymous with the term "handling") means any operation performed on personal data, regardless of the means and procedures used, in particular the acquisition, storage, retention, use, alteration, disclosure, archiving, erasure or destruction of personal data.

3.4 What is the disclosure of personal data?

This is the transmission or making available of personal data, e.g., publication or disclosure to a third party.

4. Contact

If you have any questions or concerns regarding the protection of your data by us, you can contact our data protection officer: WK-Paletten AG Thomas Lanz Eggiwilstrasse 29a 3535 Schüpbach thomas.lanz@wkpaletten.ch

5. Data security

We will keep your data secure and take all reasonable measures to protect it from loss, unauthorized access, misuse, or alteration. Our contractors and employees who have access to your data are obligated to comply with data protection regulations. In some cases, as part of order processing, it will be necessary for us to forward your requests to affiliated companies. Even in these cases, your data will be treated confidentially. Within our website, we use the SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser.

6. Rights of data subjects

6.1 Right to information

You can request information about the data we have stored about you at any time. Please send your request, along with credible proof of identity, to thomas.lanz@wkpaletten.ch. The information will be provided in writing or in another form, including electronically if necessary. If you request it, we can also provide the information orally, provided you can prove your identity in another way. If you submit the request electronically, we will provide the information in a common electronic format unless you specify otherwise. Providing this information is generally free of charge. If copies are requested in addition, a reasonable fee may be charged. The right to receive a copy of the processed data must not infringe upon the rights and freedoms of other persons. In the case of manifestly unfounded or excessive requests for information, we reserve the right to refuse to provide the information within the limits of the law or to charge a reasonable fee. Your request will be processed within the statutory period of 30 days. Due to the complexity and high volume of requests, we may extend this deadline by a further two months, if necessary. You will be informed of the extension within one month of submitting your request for information. The reasons for the extension will also be provided.

6.2 Deletion and Correction

You have the right to request the deletion, correction, or completion of your data at any time, provided that no legal retention obligations or a legal basis for processing exist. Please note that exercising your rights may conflict with contractual agreements and could have corresponding effects on the performance of the contract (e.g., premature termination of the contract or cost implications).

6.3 Restriction of processing

You also have the right to request a restriction of processing if you contest the accuracy of this data, the processing is unlawful, the data is no longer needed, or you have objected to the processing. If the processing of the data is restricted, it may only be stored. Further processing may only take place with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another person, or for reasons of important public interest. You will be notified if the restriction is lifted.

6.4 Right to data disclosure and transfer

You have the right to receive your data in a commonly used file format or (if technically feasible) to have it transmitted to a third party if we process your data automatically, and if:

• You have given your consent to the processing of this data; or
• You have disclosed data in connection with the conclusion or execution of a contract.

6.5 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling, which is based on our legitimate interests. This right also applies to processing for direct marketing purposes.

6.6 Legal recourse

If you are affected by the processing of your personal data, you have the right to enforce your rights in court or to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner.

7. Data processing in general

7.1 What data do we process from you and from whom do we receive this data?

We primarily process personal data that you provide to us or that we collect when you use our website. We may also receive personal data about you from third parties. This could include the following categories:

• Personal data (name, address, date of birth, etc.);
• Contact details (mobile phone number, email address, etc.);
• Financial data (e.g., account details);
• Online identifiers (e.g., cookie identifiers, IP addresses);

This data may come from the following sources:

• Information from publicly accessible sources (e.g. media, internet);
• Information from public registers (e.g. commercial register, debt enforcement register, land register);
• Information relating to official or judicial proceedings;
• Information regarding your professional functions and activities (e.g., professional networks);
• Information about you in correspondence and discussions with third parties;
• Credit reports (insofar as we conduct personal business with you);
• Information about you that people in your environment provide to us so that we can conclude or process contracts with you;
• Data related to the use of the website.

7.2 Under what conditions do we process your data?

We process your data in good faith and in accordance with the purposes set out in this privacy policy. We ensure transparent and proportionate processing. Should we exceptionally be unable to comply with these principles, the data processing may still be lawful because a legal basis exists. A legal basis may include, in particular:

• Your consent;
• the performance of a contract or pre-contractual measures;
• compliance with legal requirements;
• our legitimate interests, unless your interests override them.

In some circumstances, you may be required to provide us with certain personal data so that we can establish a business relationship. Without such data, we are usually unable to process a contract. The website also typically cannot be used if certain information necessary for ensuring data transmission, such as your IP address, is not disclosed.

7.3 How can you revoke consent you have given?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another legal basis for processing or another legal ground for processing applies. You can revoke your consent at any time for the future by sending an email to the address listed in the legal notice. Data processing that has already taken place is not affected by the revocation and remains valid.

7.4 In which cases do we share your data with third parties?

a. Principle: We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called data processors). Categories of recipients include, in particular:

• Accounting, trust and auditing firm;
• Consulting firms (legal advice, taxes, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers (only with your prior consent);
• Providers of tracking, conversion, and advertising services.

We ensure that data is only shared with your explicit consent, unless it involves commissioned data processing. Furthermore, we ensure that these third parties and our affiliated companies comply with data protection regulations and treat your personal data confidentially. We may also be obligated to disclose your personal data to authorities. b. Sharing with Partners and Cooperation Companies We sometimes work with various companies and partners who publish their offers on our website. You will be able to identify these as third-party offers (marked as "advertising"). If you take advantage of such an offer, we will transmit your personal data to the relevant partner or cooperation company (e.g., name, position, contact details, etc.) whose offer you wish to use, provided you have given your explicit consent beforehand. These partners and cooperation companies are independently responsible for the personal data they receive. After the data has been transmitted, the data protection regulations of the respective partner apply. c. Transfer Abroad In some cases, your personal data may be transferred to companies abroad as part of commissioned data processing. These companies are bound by the same data protection obligations as we are. Data transfers can take place worldwide. If the level of data protection does not correspond to that of Switzerland, we conduct a prior risk assessment and contractually ensure that the same level of protection as in Switzerland is guaranteed (e.g., using the EU Commission's new Standard Contractual Clauses or other legally required measures). Should our risk assessment be negative, we will implement additional technical measures to protect your data. You can access the EU Commission's Standard Contractual Clauses at the following link.

7.5 How long do we keep your data?

We only store personal data for as long as necessary to fulfill the specific purposes for which it was collected. We retain contractual data for a longer period, as we are legally obligated to do so. In particular, we must keep business correspondence, concluded contracts, and booking documents for up to 10 years. Once we no longer require such data from you to provide our services, its processing will be restricted, and we will only use it for accounting and tax purposes.

8. Data processing in detail

8.1 Provisioning the website and creating log files

By simply visiting www.wkpaletten.ch, without registering or providing any other information, only the data that your browser automatically transmits to our server will be collected. This data is technically necessary for the operation of the website.

What data do we process?

The following data is processed in particular for the provision of the website and the creation of log files:

• Name of the Internet service provider
• IP address
• Technical information such as browser, operating system or screen resolution
• the date and time of access
• Referrer URL

This data cannot be attributed to any specific person and this data is not merged with other data sources.

For what purpose do we process the data?

The processing of log files is carried out to guarantee the functionality of the website and to ensure the security of our information technology systems.

To whom do we pass on the data?

Our transfer of data is governed by our statements on data transfer.

How can you prevent data processing?

The data is stored only as long as necessary to fulfill the purpose for which it was collected. Accordingly, the data is deleted after each session ends. Storing the log files is essential for the operation of the website; therefore, you have no right to object to this unless you do not visit our website.

8.2 Contact

You can contact us in several ways. When you contact us and provide personal data, we process that data. This includes any form of communication, whether oral, written, or otherwise.

What data do we process?

When you contact us, we process all the data you provide. This includes, in particular:

• name
• E-mail address
• Content and timing of your contact
• Contact details

In some cases, you may be required to provide certain information in order to contact us, for example when contacting us via a contact form or when requesting a callback.

For what purpose do we process the data?

The purpose for which we use the data is always determined by the nature of the contact. However, we will never use the data for unforeseen or unexpected purposes. The most common purposes are communication and feedback, customer service, and processing business inquiries.

To whom do we pass on the data?

Our handling of your data is governed by our data sharing policy. If the purpose of your contact requires us to share your data with third parties, we will share the data to the necessary extent

How can you prevent data processing?

If you contact us, data processing is unavoidable. Therefore, you must refrain from contacting us if you do not want your data to be processed.

8.3 Applications

You have the opportunity to apply to us. We place great importance on confidentiality in the application process and handle your data responsibly.

What data do we process?

We process the data you disclosed to us when submitting your application. This data includes, in particular:

• name
• address
• E-mail address
• Telephone number
• Application documents

This also includes information you share with us during a potential job interview or outside of your application documents. We may also collect data from third parties, specifically references. The term "application data" is used below as a general term for this data.

For what purpose do we process the data?

When selecting our employees, it is very important for us to be able to process application data so that we can get a complete picture of the people applying to us. Only with this application data can we determine an applicant's suitability. The data is used exclusively for this purpose and is only shared with those employees involved in the application process. If your application is accepted, your application documents will be forwarded to the employees responsible for your employment.

To whom do we pass on the data?

We treat your application documents confidentially. Furthermore, our statements regarding data transfer apply to the disclosure of your data. How can you prevent data processing? We only process your data to the extent described above if you apply to us. Since an application process cannot be carried out without the necessary data processing, your only way to prevent data processing is not to apply.

8.4 Cookies

Our website uses cookies. Cookies are text files that are stored on your device's operating system by your browser when you visit our website. Cookies do not harm your computer and do not contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are so-called "session cookies." These are automatically deleted after you leave our website. Other cookies remain stored on your device until you delete them or their expiration date.

For what purpose do we process the data?

We use cookies to make our website more user-friendly, effective, and secure based on the data collected. Specifically, we use cookies to save your preferences (such as language and location settings), to ensure the fast delivery and attractive presentation of website content (for example, through the use of fonts and Content Delivery Networks), and to analyze website usage for statistical evaluation and continuous improvement (generally using third-party cookies). The specific purposes for which we use these (technically non-essential) cookies are explained in the following sections of this privacy policy.

To whom do we pass on the data?

Our transfer of data is governed by our data transfer policy. Furthermore, please note the following details regarding individual data processing activities in this privacy policy.

How can you prevent data processing?

Cookies are stored on your computer. You can delete them completely or disable or restrict their transmission by changing your browser settings. If you disable cookies for our website, you may not be able to use all of its functions. Instructions for the most common browsers can be found here:

• For Chrome from Google
• For Apple's Safari
• For Microsoft Edge
• For Firefox by Mozilla

For cookies used for performance and reach measurement or for advertising, a general objection ("opt-out") is possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

8.5 counting pixels

We may use tracking pixels on our website or in our emails. Tracking pixels are also known as web beacons. They are small, usually invisible images that are automatically retrieved when you visit our website or open our emails.

What data do we process?

Tracking pixels can collect the same information as log files. They can also be used to create movement profiles for the entire session. Tracking pixels are primarily used by third parties whose services we utilize. These third-party services are described in detail below.

For what purpose do we process the data?

Tracking pixels are used by various tracking services to analyze the use of this website, for statistical evaluation, and for continuous improvement. Tracking pixels may also be used for email tracking.

To whom do we pass on the data?

Our data transfer practices are governed by our data transfer policy. Please also refer to the information in this privacy policy regarding individual tracking services.

How can you prevent data processing?

To prevent data processing using tracking pixels, you can install suitable browser extensions such as uBlock Origin and block external graphics in your email program.

8.6 Google Maps

We use Google Maps on our website, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, headquartered at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, both together referred to as "Google".

What data do we process?

Google Maps is a map service for websites that allows Google Maps to be embedded. In particular, the following information can be collected:

• IP address
• Technical information such as browser, operating system or screen resolution
• Interactions with the map

Google Maps anonymizes the IP address, making it impossible to identify you personally. If you have a Google account and are logged in, Google Maps may process your data across multiple devices.

For what purpose do we process the data?

The IP address is processed to analyze the visitor's approximate location so that the correct section is displayed when the website is accessed. Technical information is processed to ensure the map displays correctly on all devices. Your interaction data is collected to enable interactive map use and to help us improve map functionality. If you are signed in with your Google account, data will be synchronized between your devices. For example, markers and planned routes will be synchronized across devices.

To whom do we pass on the data?

Our data transfer policy is based on our data transfer policy. Because Google is a multinational company, your data may be transferred by Google worldwide. In particular, it may be transferred to Google's headquarters in the USA, a country where data protection laws do not guarantee adequate protection.

8.7 Google Hosted Libraries

Google Hosted Libraries is a collection of JavaScript libraries hosted by Google that can be used on a website. These libraries enhance website functionality and performance by providing commonly used features such as animations, effects, form validation, data manipulation, and more. By using Google Hosted Libraries, website developers don't need to download and host each library individually, saving time and storage space. Furthermore, Google's libraries load faster and more reliably because they are hosted on numerous servers worldwide. This results in a better user experience and faster website loading times. Additionally, Google regularly updates and maintains the libraries, ensuring website developers always have access to the latest and most secure versions.

9. Will our privacy policy always remain the same?

We may change this privacy policy at any time. Changes will be published on www.wkpaletten.ch. You will not be notified separately.