Privacy Policy
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the Swiss Data Protection Act (DSG) is Normrahmen AG, Bernstrasse 41, 3175 Flamatt, Switzerland, Tel.: +41 31 991 93 90, E-Mail: info@normrahmen.ch. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 When you use our website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (“session cookies”), while others remain on your device for longer and enable page settings to be saved (“persistent cookies”). In the latter case, you can find out the storage duration from your web browser’s cookie settings overview.
If personal data is also processed using individual cookies set by us, the processing is carried out either for the performance of the contract, if consent has been given, or to safeguard our legitimate interest in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
Personal data is collected when you contact us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. Your data will be deleted after your enquiry has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account and for contract processing
Personal data is collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to our address. We store and use the data you provide for contract processing. After deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a justification under the law.
6) Use of your data for direct advertising
6.1 Registration for our e-mail newsletter
By providing your personal data, you agree that we may use this data to send you newsletters.
We store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later date. The data collected by us during registration for the newsletter is used exclusively for advertising purposes within the scope of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending us a corresponding message. After you have unsubscribed, your e-mail address will be deleted immediately from our newsletter distribution list, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a justification under the law.
6.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those you have already purchased, from our range by e-mail. For this, we do not need to obtain separate consent from you. The data processing in this respect is based solely on our legitimate interest in personalised direct advertising. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. For this, you only incur transmission costs according to the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.
6.3 MailChimp
The dispatch of our e-mail newsletters is carried out via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider so that they can handle the newsletter dispatch on our behalf.
Subject to your express consent, the provider also carries out a statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the contents of the newsletter. Device information (e.g. time of retrieval, IP address, browser type and operating system) is also collected and evaluated, but is not merged with any other data sets.
You may revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a commissioned data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards.
6.4 Advertising by postal mail
On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation, and to use this information to send you interesting offers and information about our products by postal mail.
You can object to the storage and use of your data for this purpose at any time by sending us a corresponding message.
7) Data processing for order handling
7.1 The personal data we collect will be passed on to the shipping company commissioned with the delivery in the context of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution in the context of payment processing, insofar as this is necessary for payment processing. Insofar as special service providers are used for order processing, we inform you about this below.
7.2 Disclosure of personal data to shipping service providers
- Post CH
If delivery is made by the transport service provider Post CH (Schweizerische PostAG, Switzerland, Wankdorfallee 4, 3030 Bern), we will pass on your e-mail address to Post CH prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process.-Otherwise, for the purpose of delivery, we only pass on the recipient’s name and delivery address to Post CH. The transfer only takes place insofar as this is necessary for the delivery of goods. In this case, it is not possible to coordinate the delivery date in advance with Post CH or to transmit status information of the shipment delivery.
Consent may be revoked at any time with effect for the future vis-à-vis the controller referred to above or vis-à-vis the transport service provider Post CH.
7.3 Carrying out credit checks
- CRIF AG (Switzerland)
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transfer the personal data required for a credit check to the following service provider:
CRIF AG (Switzerland)
Hagenholzstrasse 81
8050 Zurich
The credit report may contain probability values (“score values”). If score values are included in the result of the credit report, they are based on a scientifically recognised, mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. We use the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, execution or termination of a contractual relationship.
You may object to this processing of your data at any time by sending a message to the controller responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Use of social media: Videos
8.1 Use of Vimeo videos
Plugins of the Vimeo video portal of Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA, are integrated on our website. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. By this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are currently not logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly associate the visit to our website with your Vimeo account. If you interact with the plugins (such as pressing the start button on a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to directly associate the data collected via our website with your Vimeo account, you must log out of Vimeo before visiting our website.
For the purpose and scope of data collection and the further processing and use of data by Vimeo as well as your rights in this regard and setting options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com
For Vimeo videos embedded on our site, the Google Analytics tracking tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo’s own tracking, to which we have no access and which we cannot influence. Google Analytics uses so-called “cookies” for tracking, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server and stored there; this may also result in transmission to the servers of Google LLC. in the USA.
8.2 Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, initiates the storage of user information only when the video(s) are played. When the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness, and prevent misuse. If you are logged in to Google and click on a video, your data will be directly associated with your account. If you do not want this data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles; in order to exercise this right, you must contact YouTube. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of the playback of the embedded videos, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations without our influence.
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de
9) Web analysis services
Google Analytics 4
Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables you to analyse your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website, which are small text modules that are stored on your device and collect certain information. This information also includes your IP address, which is, however, truncated by Google to exclude any direct reference to a person.
The information is transmitted to Google servers and processed there. In this process, transmission to Google LLC, which is based in the USA, is also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics and truncated is not merged with other data held by Google. The data collected within the framework of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent to do so.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic characteristics
Google Analytics 4 uses the special "demographic characteristics" function and can use it to compile statistics that provide information about the age, gender and interests of site visitors. This is done by analysing advertising and information from third party providers. This enables target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and is deleted after a storage period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalised ads and have linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalised advertising" function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4, set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analysed across devices.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards.
10) Tools and Miscellaneous
10.1 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when they access the website in the form of an interactive user interface, where consent for certain cookies and/or cookie-based applications can be granted by ticking boxes. All cookies/services requiring consent are only loaded when the respective user provides their consent by ticking the appropriate boxes when using the tool. This ensures that such cookies are only set on the respective user’s device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or recording cookie settings, this is done on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in the legally compliant design of our website.
Furthermore, as data controllers, we are under a legal obligation to make the use of non-essential cookies dependent on the respective user’s consent.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the relevant user interface on our website.
10.2 Applications for job vacancies by e-mail
On our website, we currently advertise vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection together with the application by e-mail.
The required information includes general information about the person (name, address, a telephone or electronic means of contact) as well as proof of the qualifications required for a position. In some cases, health-related information may also be required which, in the interests of social protection, must be given special consideration under labour and social law in the person of the applicant.
You can find out which components an application must contain in each individual case for it to be considered and in what form these components are to be submitted by e-mail in the respective job advertisement.
After receipt of the application sent using the specified e-mail contact address, the applicant’s data will be stored by us and evaluated exclusively for the purpose of processing the application. For queries that arise in the course of processing, we will, at our discretion, use either the e-mail address provided by the applicant with the application or a telephone number provided.
The legal basis for these processing operations is the processing of the application procedure as pre-contractual initiation of an employment contract.
Insofar as special categories of personal data (e.g. health data such as information about severe disability status) are requested from applicants as part of the application process, processing takes place so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this respect.
Cumulatively or alternatively, the processing of special data categories may also be carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnostics, the care or treatment in the health or social sector or for the management of systems and services in the health or social sector.
If, as a result of the above evaluation, the applicant is not selected or if an applicant withdraws their application early, the data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted after a corresponding notification at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
If your application is successful, the data provided will be further processed for the purposes of the employment relationship.
10.3 Doofinder
To make your visit to our website attractive and to present you with better search results more quickly, we use the search function of doofinder. This serves to safeguard our overriding legitimate interest in an optimised presentation of our offer in the context of a balancing of interests. The operator of the website is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain.
To use the doofinder search function, the browser you use must connect to the doofinder servers. This enables doofinder to find out that our website has been accessed via your IP address.
Further information on the Doofinder search can be found at https://www.doofinder.com
11) Rights of the data subject
The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention). For the respective prerequisites for exercising these rights, please refer to the legal basis set out below:
- Right of access pursuant to Art. 25 DSG
- Right to data access or transfer pursuant to Art. 28 DSG
- Right to rectification pursuant to Art. 32 para. 1 DSG
12) Duration of storage of personal data
The duration of storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if applicable – also on the basis of the respective statutory retention period (e.g. retention periods under the Code of Obligations).
When processing personal data on the basis of express consent, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data, such data will be stored for the legally prescribed period.
Otherwise, personal data will be processed for as long as you do not expressly object to the processing, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 DSG or a justification under the law.
