1. What do we do?

WK-Paletten AG (Eggiwilstrasse 29a, 3535 Schüpbach) operates the website www.wkpaletten.ch (hereinafter referred to as "we" or "us"). On this website, you can find out about our organisation, use our online services and get in touch with us. The protection of your personal data is of great importance to us. In this privacy policy, we inform you transparently and understandably about which data we collect via our website and how we handle it.

2. What do we inform you about?

• Who is responsible for data processing;
• Which data is collected;
• For what purpose this data is collected;
• To whom we disclose this data;
• How you can object to data processing;
• What rights you have and how you can exercise them.

3. Definitions of terms

3.1 What is personal data?

Personal data (synonymous with the term «personal data») is any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address or telephone number as well as the IP address. Data about personal preferences such as leisure activities or memberships also counts as personal data.

3.2 What are special categories of personal data?

Special categories of personal data (synonymous with the term «particularly sensitive data») are:

• Data on religious, ideological, political or trade union views or activities;
• Data concerning health, intimate sphere, racial or ethnic origin, as well as sex life and sexual orientation;
• Data on administrative or criminal prosecutions and sanctions, as well as data on social assistance measures;
• Genetic data and biometric data that uniquely identify a person.

To the extent necessary and where you provide us with such data yourself, we may process data that belongs to a special category of personal data. In this case, its processing is subject to stricter confidentiality.

3.3 What is the processing of personal data?

Processing (synonymous with the term «Editing») is any handling of personal data, regardless of the means and procedures applied, in particular the obtaining, storing, keeping, using, modifying, disclosing, archiving, deleting or destroying of personal data.

3.4 What is the disclosure of personal data?

This is the transmission of or provision of access to personal data, for example the publication or disclosure to a third party.

4. Contact

If you have any questions or concerns regarding the protection of your data by us, you can contact our data protection officer: WK-Paletten AG Thomas Lanz Eggiwilstrasse 29a 3535 Schüpbach thomas.lanz@wkpaletten.ch

5. Data security

We will store your data securely and take all appropriate measures to protect your data against loss, access, misuse or modification. Our contractual partners and employees who have access to your data are obliged to comply with the data protection regulations. In some cases, it will be necessary within the scope of order processing for us to forward your inquiries to companies affiliated with us. In these cases as well, your data will be treated confidentially. Within our website, we use the SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser.

6. Data subject rights

6.1 Right of access

You may request information about the data we have stored about you at any time. We ask you to send your request for information together with credible proof of identity to thomas.lanz@wkpaletten.ch. The information is provided in written or another form, possibly also electronically. If you so request, we may also provide the information orally, provided you prove your identity in another form. If you submit the request for information electronically, we will provide the information in a common electronic format, unless you specify otherwise. As a rule, the information is provided free of charge. If copies are requested beyond this, a reasonable fee may be charged. The right to receive a copy of the processed data must not impair the rights and freedoms of other persons. In the case of manifestly unfounded or excessive requests for information, we reserve the right to refuse the information within the limits of the law or to charge a reasonable fee for it. The processing of your request is subject to the statutory period of 30 days. We may extend this period by a further two months where necessary due to the complexity and the high number of requests. You will be informed of the extension of the period within one month of submitting the request for information. At the same time, you will be informed of the reasons for the extension.

6.2 Deletion and rectification

You have the right at any time to request the deletion or rectification or completion of your data, provided that no statutory retention obligations or a statutory basis for permission prevent this. Please note that the exercise of your rights may under certain circumstances conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. early termination of the contract or cost consequences).

6.3 Restriction of processing

You also have the right to request a restriction of processing if you contest the accuracy of this data, if the processing is unlawful, if the data is no longer needed, or if you have objected to the processing. If the processing of the data is restricted, it may only be stored. Any further processing may only take place with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, or for reasons of an important public interest. In the event that the restriction is lifted, you will be notified.

6.4 Right to data portability and data transfer

You have the right to receive your data in a common file format or (if technically feasible) to have it transmitted to a third party if we process your data automatically and if:

• you have given your consent to the processing of this data; or
• you have disclosed data in connection with the conclusion or performance of a contract.

6.5 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing including profiling that is carried out on the basis of our legitimate interests. This right also applies to processing for the purposes of direct marketing.

6.6 Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner.

7. Data processing in general

7.1 What data do we process about you and from whom do we receive this data?

Primarily, we process personal data that you provide to us or that we collect during the operation of our website. Under certain circumstances, we may also receive personal data about you from third parties. These may be the following categories:

• Master personal data (name, address, dates of birth, etc.);
• Contact details (mobile number, email address, etc.);
• Financial data (e.g. account details);
• Online identifiers (e.g. cookie identifier, IP addresses);

This data may originate from the following sources:

• Information from publicly accessible sources (e.g. media, internet);
• Information from public registers (e.g. commercial register, debt collection register, land register);
• Information related to administrative or judicial proceedings;
• Information regarding your professional functions and activities (e.g. professional networks);
• information about you in correspondence and meetings with third parties;
• Creditworthiness information (insofar as we conduct personal business with you);
• Information about you that we receive from persons in your environment so that we can conclude or process contracts with you;
• Data in connection with the use of the website.

7.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing. Should we exceptionally be unable to comply with these principles, the data processing may nevertheless be lawful because a justification exists. The following in particular may serve as justification:

• Your consent;
• the performance of a contract or pre-contractual measures;
• compliance with statutory regulations;
• our legitimate interests, provided that your interests do not prevail.

Under certain circumstances, you are obliged to disclose certain personal data to us so that we can establish business relations with one another. Without such data, we are normally unable to process a contract. As a rule, the website also cannot be used if certain information required to ensure data traffic, such as your IP address, is not disclosed.

7.3 How can you withdraw consent that you have given?

If you have given us consent to process your personal data for specific purposes, we process your data within the scope of this consent, provided we have no other justification or no other legal basis applies. You may revoke your consent for the future at any time and send an email to the address stated in the legal notice. Data processing that has already taken place is not affected by the revocation and remains valid.

7.4 In which cases do we disclose your data to third parties?

a. General principle We may under certain circumstances be required to use the services of third parties or affiliated companies and to commission them with the processing of your data (so-called processors). Categories of recipients are namely:

• Accounting, fiduciary and auditing company;
• Consulting companies (legal advice, tax, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers (exclusively with your prior consent);
• Providers of tracking, conversion and advertising services.

We ensure that data is only passed on with your explicit consent, provided that this does not constitute commissioned data processing. In addition, we ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially. Under certain circumstances, we may also be obliged to disclose your personal data to authorities. b. Passing on to partners and cooperation companies We work in part with various companies and partners that display their offers on our website. It is recognisable to you that this is a third-party offer (marked as «advertising»). If you take advantage of such an offer, we transmit your personal data to the corresponding partner or cooperation company (e.g. name, function, communication, etc.) whose offer you wish to use, provided that you have previously expressly consented to this. These partners and cooperation companies are independently responsible for the personal data received. After the data has been transmitted, the data protection provisions of the respective partner apply. c. Passing on abroad Under certain circumstances, your personal data may be transmitted to companies abroad as part of commissioned data processing. These companies are obliged to protect data to the same extent as we are. The transmission may take place worldwide. If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and contractually ensure that the same protection as in Switzerland is guaranteed (e.g. by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). Should our risk assessment be negative, we take additional technical measures to protect your data. You can access the standard contractual clauses of the EU Commission at the following link.

7.5 How long do we retain your data?

We store personal data only for as long as is necessary to fulfil the individual purposes for which the data was collected. We store contractual data for longer, as we are obliged to do so by statutory regulations. In particular, we must retain business communications, concluded contracts and booking records for up to 10 years. Insofar as we no longer require such data from you for the provision of the services, the data will be restricted for further processing and we will use it only for accounting and tax purposes.

8. Data processing in detail

8.1 Provision of the website and creation of log files

If you merely visit www.wkpaletten.ch, i.e. do not register or disclose any other information, only the data that your browser automatically transmits to our server will be collected. This data is technically necessary for the operation of the website.

What data do we process?

To provide the website and when creating log files, the following data in particular is processed:

• Name of the internet service provider
• IP address
• Technical information such as browser, operating system or screen resolution
• the date and time of access
• Referrer URL

This data cannot be assigned to any specific person and this data is not merged with other data sources.

For what purpose do we process the data?

The log files are processed in order to guarantee the functionality of the website and to ensure the security of our information technology systems.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements on data disclosure.

How can you prevent data processing?

The data is stored only for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is absolutely necessary for the operation of the website, so you have no option to object to this, unless you do not visit our website.

8.2 Contact

You can contact us in several ways. If you contact us and provide personal data, this will result in data processing by us. This refers to any oral, written and any other form of contact with us.

What data do we process?

When you contact us, we process all the data you provide to us. This includes in particular:

• Name
• Email address
• Content and time of your contact
• Contact details

It may be the case that you are required to provide certain data in order to contact us, for example when making contact via a contact form or when you request a callback.

For what purpose do we process the data?

The purpose for which we use the data depends in each case on the nature of the contact. However, under no circumstances do we use the data for unforeseeable or unexpected purposes. The most common purposes are communication and feedback, customer service and the processing of business inquiries.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements on data disclosure. If the purpose of your contact requires the disclosure of your data to third parties, we will disclose the data to the extent necessary

How can you prevent data processing?

If you contact us, data processing cannot be avoided. Consequently, you must refrain from contacting us if you do not wish your data to be processed.

8.3 Applications

You have the opportunity to apply to us. We place great importance on confidentiality in the application process and handle your data responsibly.

What data do we process?

We process the data that you have disclosed to us when submitting your application. This data includes in particular:

• Name
• Address
• Email address
• Phone number
• Application documents

This also includes information that you share with us during any job interview or outside of your application documents. In addition, we may collect data from third parties, namely references. The term «application data» is used below as an umbrella term for this data.

For what purpose do we process the data?

When selecting our employees, it is very important for us to be able to process application data so that we can form a complete picture of the individuals applying to us. Only on the basis of the application data are we able to determine an applicant's suitability. The data is used exclusively for this purpose and is only passed on to those employees who are involved in the application process. If your application is accepted, your application documents will be passed on to the employees responsible for your employment.

To whom do we disclose the data?

We treat your application documents confidentially. Furthermore, our statements on data disclosure apply to the transfer of data. How can you prevent data processing? We process your data to the extent described above only if you apply to us. Since an application process cannot be carried out without the necessary data processing, your only option to prevent data processing is not to apply.

8.4 Cookies

Our website uses cookies. Cookies are text files that are stored on your device's operating system via the browser when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them or their lifetime expires.

For what purpose do we process the data?

We use cookies so that, based on the data collected, we can make our website more user-friendly, effective and secure. In particular, we use cookies to store your preferences (for example language and location settings), to provide website content quickly and present it attractively (for example through the use of fonts and content delivery networks), and to analyze the use of this website for statistical evaluation and continuous improvement (usually by means of third-party cookies). The specific purposes for which we use (technically non-essential) cookies are set out in the explanations below in this privacy policy.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements on data disclosure. In addition, the following statements on the individual data processing operations in this privacy policy must be observed.

How can you prevent data processing?

Cookies are stored on your computer. You can delete them completely or disable or restrict their transfer by changing the settings in your browser. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent. Instructions for the most common browsers can be found here:

• For Chrome by Google
• For Safari from Apple
• For Edge from Microsoft
• For Firefox from Mozilla

For cookies used for performance and reach measurement or for advertising, a general objection ("opt-out") is possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

8.5 Tracking pixels

We may use tracking pixels on our website or in our emails. Tracking pixels are also referred to as web beacons. Tracking pixels are small, usually invisible images that are automatically retrieved when you visit our website or open our emails.

What data do we process?

Tracking pixels can be used to collect the same information as in log files. In addition, movement profiles of the entire session can be recorded. In particular, tracking pixels are used by third parties whose services we use. These third-party services are described in detail below in this declaration.

For what purpose do we process the data?

Tracking pixels are used by various tracking services to analyze the use of this website and for statistical evaluation as well as for continuous improvements. In addition, tracking pixels can be used for email tracking.

To whom do we disclose the data?

The disclosure of data by us is governed by our statements on data disclosure. Please also note the statements in this privacy policy regarding the individual tracking services.

How can you prevent data processing?

To prevent data processing by means of tracking pixels, you can install suitable browser extensions such as uBlockOrigin and block external graphics in your email program.

8.6 Google Maps

We use Google Maps on our website, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, headquartered at Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, both together referred to as «Google».

What data do we process?

Google Maps is a map service for websites that enables Google Maps to be integrated. In particular, the following information may be collected:

• IP address
• Technical information such as browser, operating system or screen resolution
• Interactions with the map

The IP address is anonymised by Google Maps, so that it can no longer be traced to a person. If you have a Google account and are logged in, data processing by Google Maps also takes place across devices.

For what purpose do we process the data?

The IP address is processed in order to analyze the approximate location of the visitor so that the correct section is displayed when the website is accessed. The technical information is processed so that the map can be displayed appropriately on all devices. Your interaction data is collected so that the map can be used interactively and so that we can improve map usage. If you are signed in with your Google account, the data is synchronized between your devices. For example, markers and planned routes are synchronized between devices.

To whom do we disclose the data?

The transfer of data by us is governed by our statements on data transfer. As Google is a transnational company, your data may be transferred by Google throughout the world. In particular, it may be transferred to the USA to Google's headquarters. A country in which legislation does not ensure adequate protection of data.

8.7 Google Hosted Libraries

Google Hosted Libraries is a collection of JavaScript libraries hosted by Google that can be used on a website. These libraries are used to improve the functionality and performance of the website by providing commonly used features such as animations, effects, form validation, data manipulation, and more. By using Google Hosted Libraries, website developers do not have to download and host each library individually on their website, which saves time and storage space. In addition, the libraries from Google can be loaded faster and more reliably, as they are provided by many servers around the world. This leads to a better user experience and faster loading time of the website. Furthermore, the libraries are regularly updated and maintained by Google, so website developers always have access to the latest and most secure versions.

9. Does our privacy policy always remain the same?

We may amend this privacy policy at any time. The amendments will be published on www.wkpaletten.ch. You will not be notified separately.