Privacy policy

A. General information

1. Controller and content of this privacy policy

The aim of this privacy policy is to explain to customers of Gustav Gerig AG what types of data are collected and for what purpose. It applies to all websites that Gustav Gerig AG operates (hereinafter referred to as ‘websites’). We guarantee compliance with the data protection regulations on our own website, but not on third-party websites that link to gerig.ch or other sites that Gustav Gerig AG operates. Gustav Gerig AG is hereinafter also referred to as ‘Gustav Gerig’, ‘we’ and ‘us’.

Please take note of the information below to know what personal data we collect from you and for what purposes we use it. In data protection matters, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR), the provisions of which may be applicable in individual cases. Furthermore, other companies are responsible under data protection law (or jointly responsible with us) for individual data processing operations listed below, and in these cases you should also take note of the information provided by these other companies is also applicable.

The following information may be amended from time to time. We therefore recommend that you consult this Privacy Policy regularly.

2. Data sources

Gustav Gerig only collects personal data if it is provided by users and customers.
When you contact us by email or by other means (e.g. contact form, handing over a business card, telephone contact), the data you provide (your email address, and if applicable, your name and telephone number) will be stored by us in order to respond to your inquiries. By submitting your contact request, you consent to the processing of the data you have provided (including your email address and name) for the purpose of responding to your inquiry and enabling us to get in touch with you.

3. Data protection officer

Unless indicated otherwise on a case-by-case basis, Gustav Gerig AG is the controller for the data processing operations described above. If you have any questions or comments or would like to assert your rights, please contact:

Gustav Gerig AG
Hardturmstrasse 169
CH-8005 Zurich
Switzerland

Phone number +41 44 444 33 33
You can reach us by phone from Monday to Friday from 8.00 a.m. to 12 p.m. and from 1.30 p.m. to 5.00 p.m.
Email: info@gerig.ch

4. Your rights

Provided that the relevant legal requirements are met, as a person affected by data processing you have the following rights:

• Right of access: You have the right to request access to your personal data stored and processed by us at any time and free of charge. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.
• Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.
• Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of legal retention obligations, the right to deletion may be excluded. In this case, we may block your data instead, provided the conditions are met.
• Right to restrict processing: You have the right to request that the processing of your personal data be restricted.
• Right to data transfer: You have the right to obtain from us, free of charge, the personal data you have provided to us in a readable format.
• Right to object: You can object to the processing of your data at any time, in particular for data processing in connection with direct advertising (e.g. advertising emails).
• Right of withdrawal: In principle, where you have given consent you have the right to withdraw that consent at any time. However, processing activities that have already taken place based on your consent do not become unlawful because of your revocation of consent.
• Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, for example against the way your personal data is processed.

To exercise these rights, please send us an email to the following address: info@gerig.ch

5. Data security

We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, namely unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to the personal data to the extent necessary for the fulfilment of their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.

6. Contact us

If you contact us via our contact addresses and channels (e.g. by e-mail, telephone or contact form), your personal data will be processed. The data you have provided us with, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request, will be processed. In addition, the time of receipt of the request will be documented. Data that it is mandatory you provide are marked with an asterisk (*) in the relevant contact form.

We process this data exclusively in order to implement your requests (e.g. providing information about a product, support in the processing of a contract such as the return of products, incorporating your feedback into the improvement of our service, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in the implementation of your request or, if your request is directed towards the conclusion or execution of a contract, the necessity for the implementation of the required measures within the meaning of Art. 6 para. 1 lit. b EU-GDPR.

7. Use of your data for marketing purposes

If it is possible to clearly identify you, we will store and link the data described in this data protection declaration, in particular your personal details, your contact details, your contract details and your surfing behaviour on our websites, in a central database. This serves the efficient administration of customer data, allows us to adequately respond to your requests and enables the efficient provision of the services you have requested and the processing of the associated contracts. The legal basis for this data processing is our legitimate interest in the efficient management of user data within the meaning of Art. 6 para. 1 lit. f EU-GDPR.

We evaluate this data in order to further develop our offers in a needs-oriented manner and to display and suggest the most relevant information and offers to you. We also use methods that predict possible interests and potential future orders based on your website use. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in carrying out marketing measures.

8. Disclosure of data to and access to data by third parties

Gustav Gerig does not disclose personal data to third parties for direct marketing purposes. The cases in which Gustav Gerig will disclose data to third parties are listed below.

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place to the extent that it is necessary for the fulfilment of the contract requested by you, for example to the logistics or transport companies that deliver the requested products, or to a manufacturer who is to fulfil your warranty claim. The legal basis for these disclosures is the necessity for the performance of the contract within the meaning of Art. 6 para. 1 lit. b EU-GDPR.

Furthermore, data is passed on to selected service providers, but only to the extent necessary for the provision of their services. Various third party service providers are explicitly mentioned in this privacy policy, e.g. in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consultancies. Our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in the procurement of third-party services forms the legal basis for this data transfer.

In addition, your data may be disclosed to authorities, legal advisors or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out due diligence or to complete the transaction. The legal basis for this data transfer is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in safeguarding our rights and complying with our obligations or the sale of our company.

9. Transfer of personal data abroad

We are entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this Privacy Policy. In doing so, we will of course comply with the statutory provisions on the disclosure of personal data to third parties. If the country in question does not have an adequate level of data protection, we guarantee through contractual regulations that your data is adequately protected by the recipients.

10. Retention periods

We only store personal data for as long as is necessary to carry out the processing explained in this Privacy Policy within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data result from the provisions on accounting and from tax law regulations. According to these regulations, business communications, concluded contracts and accounting vouchers must be stored for up to 10 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data is deleted as soon as there is no longer any obligation to retain it and we no longer have any legitimate interest in retaining it.