Privacy Statement

Metall Zug AG

Version of 23.05.2018

This Privacy Statement describes the collection and further processing of personal data by Metall Zug AG (“Metall Zug”) as far as these are not covered by other data protection policies or are evident from the circumstances or are provided for by applicable law. The term personal data shall include all information relating to an identified or identifiable person.

1.     CONTROLLER, DATA PROTECTION OFFICER, REPRESENTATIVE

Every website (including online-shops and mini sites for special offers), every presence on social media, multimedia portals, chatbots and every app of Metall Zug (each a “website”) has a controller within Metall Zug with respect to collecting personal data according to applicable data protection laws. Unless provided otherwise on the website (according to the imprint, the terms of use, etc.), Metall Zug AG, Industriestrasse 66, 6300 Zug, Switzerland, is the controller.

Should a Metall Zug company or affiliate disclose personal data to another Metall Zug company or affiliate for certain purposes of the receiving company or affiliate, such company or affiliate is the controller. A comprehensive list of companies and affiliates of Metall Zug can be found here (“Metall Zug Group”).

Metall Zug has not appointed a data protection officer. Any inquiry, claim or concern regarding data protection at Metall Zug (all companies and affiliates) can be addressed to: compliance@metallzug.ch.

2.     PROCESSING OF PERSONAL DATA  

Metall Zug collects and processes personal data of

  • visitors of its websites registered or not registered with Metall Zug;
  • contact persons and employees of service providers, suppliers, traders, customers and other business partners and associated companies, personnel providers and employment agencies (as well as brokered employees/workers) and further commercial- and economic partners;
  • shareholders and beneficiaries of other rights to shares of the Metall Zug AG as well as respective interested parties;
  • recipients of ad hoc-information and newsletters of Metall Zug;
  • participants in research campaigns and opinion surveys conducted by Metall Zug; and
  • users of WIFI provided at Metall Zug business premises and other locations.
  • Personal data and contact information including but is not limited to first and last name, address, residence, telephone number, email address, age, date of birth, gender, marital status, relatives, contact in case of emergency, pictures, information about function within the company, information about business relationships with this data subject, information about commercial transactions, enquiries, offers, stipulations and contracts, statements about work or other interests of the data subject, etc.;
  • data pertaining to services and deliveries including but not limited to products and services delivered and sold as well as ordered and purchased, information connected to queries, complaints and disagreements relating to products and services or respective contracts entered into such as warranty claims, rescissions and disputes, etc.;
  • data in connection with product and services marketing including but not limited to information about marketing activities such as the receipt of newsletters, newsletter opt-ins and opt-outs, documents received, invitations to and participations at events and special activities (as far as they are not part of a customer loyalty program), personal preferences and interests, etc.;
  • data concerning the use of the website including but not limited to the IP address and other identification (e.g. user name of social media, MAC address of smartphones or computers, cookies), web beacons, pixel tags, log files, local shared objects (Flash cookies) or other technologies, with which personal data is collected, date and time of website visits, visited sites and contents, referring websites, etc.;
  • data of shareholders and beneficiaries of shares and related communication including but not limited to number of shares, share transfers, entitlement, security-deposit account, bank account for dividends, preferred means of communication, correspondence, correspondence language and communication with Metall Zug (including records of the communication), etc.;
  • In connection with products and services offered, conclusions of contracts (namely purchases and sales of products and services), executions of contracts (namely purchase- and supply agreements and contracts regarding the participation at customer programs and events), maintenance and development of business partner, shareholder and investor relations, communication, customer service and support (namely orders and enquiries), marketing-, promotion- and advertising activities (including newsletters and mailing of promotional materials);
  • Management of the users and visitors of the website and other activities in which business partners participate, operation and enhancement of the website (including the provision of functions which require identifiers or other personal data) and further IT systems, identity verifications; 
  • Quality control, market research, improvement of products and services, creation of statistics, budgets, records, reports and management information as well as further reports on business partners, transactions and activities, offers and other commercial aspects of Metall Zug for the purposes of company management and development of the company, its choice of products and services, its activities and project management;
  • protection of business partners, employees and other individuals and protection of data, secrets and assets of and entrusted to Metall Zug, safety of systems and premises of Metall Zug;
  • compliance with legal and regulatory requirements (in particular company law and stock exchange law and rules, ad hoc-information etc.) and internal rules of Metall Zug, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities;
  • sale or acquisitions of business divisions, companies or parts of companies and other corporate transactions and the transfer of business partner data associated therewith; For other purposes as far as a legal obligation requires processing and such processing was evident from the circumstances or indicated at the time of the collection;
  • performance of contracts;
  • compliance with legal obligations of Metall Zug;  
  • consent of the business partner (only insofar as the processing is based on a specific query and can be withdrawn at any time, namely the receipt of newsletters for which the client has registered for);
  • legitimate interests of Metall Zug, including but not limited to
    • purchase and shipment of products and services, also in connection with individuals who are not direct contractual partners (such as e.g. individuals receiving a gift);
    • carrying out advertisement and marketing activities;
    • efficient and effective customer support, maintenance of contact and other communication with business partners outside of the processing of contracts;
    • understanding customer behavior, activities, concerns and needs, market research;  
  • service providers (within Metall Zug as well as external, namely for share register, IT-support and services), including processors;
  • dealers, suppliers and other business partners;
  • local, national and foreign authorities;
  • media and private reporters and journalists;
  • the public including visitors of websites and social media of Metall Zug;
  • industry organizations, associations, organizations and other committees;
  • competitors;
  • acquirers or parties interested in acquiring business units, companies or other parts of Metall Zug;
  • other parties in potential or actual legal proceedings;
  • other companies of Metall Zug

(together “business partners”).

The personal data of business partners is generally collected directly during the course of using the website, at events of Metall Zug or during direct communication via email, telephone or in any other way.

However, personal data can also be collected indirectly, namely when the business partner engages in a commercial activity which does not correspond with the person benefitting from the commercial activity or if a purchase is shipped to a different person (e.g. as a gift), based on the recommendation of a third party (e.g. recommendation by friends and acquaintances of the business partner) or through further obtaining or acquisition of supplementary information from third party data sources (e.g. social media, address brokers).

In particular, the following categories of personal data is processed by Metall Zug:

(together “business partner data”).

3.     PURPOSE OF THE PROCESSING AND LEGAL BASIS

In accordance with applicable law, Metall Zug may process business partner data namely for, but not limited to, the following purposes:

(together the purpose of business partner data processing).

Metall Zug uses the business partner data for the purpose of business partner data processing based on the following legal grounds:

  • efficient and effective improvement of existing products and services and development of new products and services;
  • efficient and effective protection of business partners, employees and other individuals as well as protection of data, secrets and assets of or entrusted to Metall Zug, safety of systems and premises of Metall Zug;
  • maintenance and secure, efficient and effective organization of business operations including a secure, efficient and effective operation and successful further development of the website and other IT systems;
  • reasonable corporate governance and development;
  • successful sale and acquisition of business units, companies or parts of companies and other corporate transactions;
  • compliance with legal and regulatory requirements and internal rules of Metall Zug;
  • concerns regarding the prevention of fraud, offences and crimes as well as investigation in connection with such offences and other improper conduct, handling of claims and actions against Metall Zug, cooperation in legal proceedings and with public authorities as well as the prosecution, exercise of and defense against legal actions.

In accordance with applicable data protection laws, Metall Zug may namely process visitor data for the purpose of maintaining and developing the website (including the provision of functions which require identifiers or other personal data), for statistical analysis regarding the use of the website as well as for combating abusive conduct, for purposes of legal investigations or proceedings and for the response to inquiries of public authorities. The visitor data shall be processed in accordance with the principles set out for business partner data above.

In accordance with applicable data protection laws, Metall Zug may process partner data namely for the purpose of entering into and performance of contracts and other business relationships with partners, promotions, advertisement and marketing, sales measures, communication, invitation to events and participation in promotions for partners and shareholders, organization of joint activities, compliance with legal and regulatory requirements and internal rules of Metall Zug, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities, for the sale or acquisition of business units, companies or parts of companies and other corporate transaction and related transfers of partner data. The partner data shall be processed in accordance with the principles set out for business partner data above.

4.     DISCLOSURE OF DATA AND TRANSFER OF DATA ABROAD

In accordance with applicable data protection laws, Metall Zug may disclose business partner data, visitor data and partner data to the following categories of third parties who process personal data in accordance with the purpose of data processing on behalf of Metall Zug or for their own purposes:

(together “third parties”).

Metall Zug may disclose business partner data, visitor data and partner data within Metall Zug Group as well as to third parties and in every country worldwide, including namely all countries in which Metall Zug is represented by companies, affiliates or other offices and representatives as well as to countries in which service providers of Metall Zug process their data. If data is disclosed to countries that do not guarantee adequate protection, Metall Zug will ensure adequate protection of data disclosed by business partners, visitors or partners by way of putting adequate contractual guarantees in place, namely on the basis of EU standard clauses, binding corporate rules or it bases the transfer on the exceptions of consent, conclusion or performance of contract, the determination, exercise or enforcement of legal claims, overriding public interests or it discloses the data in order to protect the integrity of these individuals. The business partner, visitor or partner can obtain a copy of the contractual guarantees from or will be advised where to obtain such copies by the contact person named above. Metall Zug reserves the right to redact such copies for reasons of data protection or secrecy reasons.  

5.     STORE OF DATA

As a rule, Metall Zug retains contract related business partner data and partner data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship unless a longer statutory store obligation is applicable on a case-by-case basis, this is required for reasons of proof or another valid reason for an exception is pertinent based on applicable law or the deleting of the data is required earlier (namely because the data is no longer required or Metall Zug is required to delete the respective data).   

As a rule, shorter retention periods are applicable for operational data containing business partner data, visitor data and partner data (e.g. protocols, logs).

Business records, including communications, will be retained as long as Metall Zug has an interest in them (namely an interest in reasons of proof in case of claims, documentation of compliance with certain legal or other requirements, an interest in non-personalized analysis) or is obligated to do so (by way of contract, law or other provisions). Deviating legal obligations are reserved namely with respect to anonymization or pseudonymizing.

6.     COOKIES, GOOGLE ANALYTICS AND SOCIAL PLUG-INS

Metall Zug uses cookies on its website. Cookies are a widespread technique that allocates an identification to the browser of the user of a website which the user saves and shows upon request. On the one hand, Metall Zug uses session cookies which are automatically erased when the user closes the website and which enable the server to establish a stable connection to the user (so that the content of a shopping basket is not lost, for example) as long as he browses on the website. On the other hand, permanent cookies which are only erased after a period defined per website are used. Permanent cookies allow saving certain settings (e.g. langue) for several sessions or allow for an automated log-in. The user consents to the application of permanent cookies by way of using the website and the respective functions (e.g. langue settings and automated log-in). The user may block the application of cookies on his browser or delete cookies there which may, however, impair the use of the website.

In accordance with applicable law, Metall Zug may install coding in newsletters and other marketing email which allow it to determine if the recipient has opened an email or downloaded pictures contained in the email. However, the recipient may block this application in his/her email application. In any case he consents to the application of this technology by way of receiving newsletters on other marketing related emails.

Should Metall Zug place advertisement of third parties on the website (e.g. banners) or intend to place an own ad on the website of a third party, cookies from companies specializing in the use of such advertisement may be employed [used]. Metall Zug will not disclose personal data to such companies, i.e. they shall only place a permanent cookie with users of the website in order to recognize users and do so in the sole interest of Metall Zug. This allows Metall Zug to place aimed advertisements for these individuals on external [third party] websites (e.g. in connection with products for which these individuals showed an interest in the online-shop). Metall Zug will not disclose personal data to the operators of external websites either.

Metall Zug may use PIWIK (http://piwik.org), Google Analytics or similar services on its website. These applications are third party services which allow Metall Zug to measure and analyze the use of its website. The provider of these services may be located in any country worldwide (in the case of Google Analytics which is operated by Google Inc. it is the U.S., www.google.com). The service provider uses permanent cookies for these applications. Metall Zug will not disclose any personal data to the service provider (who will also not save any IP addresses). The service provider may, however, monitor the use of the website by the user and combine this data with data from other websites monitored by the same service provider which the user has visited and the servicer may use these findings for its own benefits (e.g. control of advertisement). The service provider knows the identity of the user who has registered with the service provider. In this case the processing of personal data will be the service provider's responsibility and data shall be processed according to the data protection policies of the service provider. The service provider will provide data on the use of the website to Metall Zug.

Metall Zug may integrate and use the Google Remarketing function on its websites to advertise V-ZUG goods and services. This function is used to present interest-based ads from Metall Zug to visitors to the website as part of the Google advertising network. For this purpose, cookies are used, which are set by the service provider. All data is collected anonymously so that no conclusions can be drawn about specific persons. In default settings of the Metall Zug websites remarketing tags are deactivated. If a visitor to the Metall Zug websites is redirected to Google, Google's data protection regulations apply. You can make changes to the settings of Google's remarketing feature at http://www.google.com/settings/ads.

On its websites Metall Zug may also include and use remarketing tags from Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The default settings of the Metall Zug websites are configured so that the embedded remarketing tags are deactivated. After selecting and activating the remarketing tags, a direct connection is established between the visitor's browser and the Facebook server. Facebook receives the IP address of the visitor and thus the information that the visitor has visited the corresponding Metall Zug website. This allows Facebook to assign the visit to the Metall Zug website to a possible Facebook user account of the visitor to the Metall Zug website. Metall Zug may use such information to display Facebook Ads. If a visitor to the Metall Zug websites is forwarded to Facebook, the data protection regulations of Facebook apply, pointing out that V-ZUG as the provider of the websites receives no knowledge of the content of the transmitted data and its use by Facebook. For more information, please see Facebook's Privacy Policy at https://www.facebook.com/about/privacy/.

In addition, Metall Zug may use plug-ins (also add-ons) from social media networks such as Facebook, LinkedIn, Twitter, YouTube, Google+, Pinterest, Instagram or business partners as well as Google Maps on its websites or integrate RSS feeds or graphics from other websites. In the default setting of the website plug-ins are deactivated; the user can thus choose when to activate them. Should the user do so, the social media providers are able to establish a direct connection to the user during his visit on the website, which allows the provider to be aware of the user's visit and may analyze the respective information. The subsequent processing of the personal data will be conducted in the responsibility of the provider and according to his data protection policies.

7.     RIGHTS OF THE BUSINESS PARTNERS, VISITORS AND PARTNERS

Any affected individual, including any business partner, visitor and partner, may request information from Metall Zug as to whether data concerning them is being processed. In addition, they have the right to request the correction, destruction or restriction of personal data regarding them as well as to object to the processing of personal data. Should the processing of personal data be based on consent, the affected individual may withdraw consent at any time. In countries of the EU and EEA the affected individual may, in certain cases, have the right to obtain data generated during the use of online services in a structured, common and machine-readable format which allows for further use and transfer. Request in this respect shall be submitted to the contact person (see para. 1 supra). Metall Zug reserves the right to restrict the rights of the affected individual in accordance with applicable law and e.g. not to disclose comprehensive information or not to delete data.

Should Metall Zug make an automated decision with respect to a certain individual which may have a legal effect for the affected individual or seriously affect her in a similar way, the affected individual shall have, in accordance with applicable law, the right to communicate with a controller of Metall Zug and to request a reconsideration of the decision or to request the prior evaluation by the controller. In this case the affected individual might no longer be able to use certain automated services. The individual will be informed thereof subsequently or separately in advance.

Any affected individual may also raise a complaint with the competent data protection authority.

8.     CHANGES TO THE PRIVACY STATEMENT

Metall Zug is entitled to amend this Privacy Statement at any time and without prior notice or announcement. The latest version according to the website shall be applicable.

Should the Privacy Statement form part of an agreement with business partners and partners, Metall Zug may inform them of an update or amendments by email or in another appropriate manner. The amendments shall be deemed to have been accepted unless an objection is raised within 30 days of notification. In case of objection Metall Zug shall be free to terminate the agreement exceptionally and with immediate effect.