Privacy Policy

Nitronic AG Privacy Policy

Version dated April 15, 2024

In this privacy policy, we, Nitronic AG, explain how we collect and otherwise process personal data. Personal data is understood to mean all information relating to a specific or identifiable person.
This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DSG”) and the revised Swiss Data Protection Act (“RevDSG”). However, whether and to what extent these laws apply depends on the individual case.

1. Responsible person/ data protection officer/ representative

Nitronic AG is responsible for the data processing that we carry out here. If you have data protection concerns, you can send them to us at the following contact address: Nitronic AG, Mattenstraße 11, 2555 Brügg, info@nitronic.ch.

2. Collection and processing of personal data

We primarily process the personal data that we receive from these and other persons involved as part of our business relationship with our customers and other business partners or that we collect from their users when operating our website.
In addition to the data about you that you give us directly, the categories of personal data that we receive about you from third parties include data related to the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location information).

3. Purposes of data processing and legal bases

We use the personal data we collect primarily to conclude and process our contracts with our customers and business partners, in particular as part of our core business with our customers and the purchase of products and services from our suppliers and subcontractors, as well as to comply with our legal obligations at home and abroad. If you work for such a customer or business partner, your personal data may of course also be affected in this function.
In addition, we also process personal data from you and other persons, as far as permitted and appears appropriate to us, for the following purposes, in which we (and sometimes also third parties) have a legitimate interest corresponding to the purpose:
- Offering and developing our offers, services and website
- communication with third parties and processing their inquiries (e.g. applications, media inquiries);
- Review and optimization of needs analysis procedures for direct customer contact and collection of personal data;
- asserting legal claims and defending in connection with legal disputes and regulatory proceedings;
- warranties for our operations, in particular our website;

If you have given us consent to process your personal data for specific purposes (for example when you register to receive newsletters or carry out a background check), we process your personal data within the scope of and based on this consent, unless we have another legal basis and we need one. A given consent can be withdrawn at any time, but this has no effect on data processing that has already been carried out.

4. Cookies/tracking and other technologies related to the use of our website

We typically use “cookies” and similar technologies on our website that can identify your browser or device. A cookie is a small file that is sent to your computer or automatically saved on your computer or mobile device by the web browser you use when you visit our website. This allows us to recognize you when you visit this website again, even if we don't know who you are. In addition to cookies that are only used during a session and are deleted after your visit to the website (“session cookies”), cookies can also be used to store user preferences and other information over a specific period of time (e.g. two years) (“persistent cookies”). However, you can set your browser so that it rejects cookies, stores them only for one session, or otherwise deletes them prematurely. Most browsers are pre-set so that you accept cookies. If you block cookies, certain functionalities (such as language selection, shopping cart, ordering processes) may no longer work.

By using our website and consenting to receive newsletters and other marketing emails, you consent to the use of these techniques. If you do not want this, you must set your browser or email program accordingly.

We sometimes use Google Analytics on our websites. This is a third party service located in Ireland. Google Ireland relies on Google LLC (based in the USA) as an order processor (both “Google”), www.google.com), with which we can measure and evaluate the use of the website (not personally identifiable). Permanent cookies set by the service provider are also used for this purpose. We have configured the service so that the IP addresses of visitors to Google in Europe are abbreviated before being redirected to the USA and cannot therefore be traced. We have switched off the “Data Transfer” and “Signals” settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles and link this data to the Google accounts of these people. If you have registered yourself with the service provider, the service provider also knows you. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its data protection regulations. The service provider only tells us how our respective website is being used (no information about you personally).

5. Data transfer and data transfer abroad

As part of our business activities and for the purposes set out in Section 3, we also disclose it to third parties, as far as permitted and appears appropriate to us, either because they process them for us or because they want to use them for their own purposes. This concerns in particular the following positions:
- Our service providers
- dealers, suppliers, subcontractors and other business partners;
customers;
- domestic and foreign authorities, authorities or courts;
- the public, including visitors to websites and social media;
- competitors, industry organizations, associations, organizations and other bodies;
- all recipients together.

Some of these recipients are domestically located, but may be anywhere on earth. In particular, you must expect your data to be transferred to all countries. If a recipient is in a country without adequate legal data protection, we contractually oblige the recipient to comply with applicable data protection (for this purpose, we use the revised standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless he is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exception. An exception may apply, in particular, to legal proceedings abroad, but also in cases of overriding public interests or when the execution of a contract requires such disclosure, if you have given your consent or if it concerns data made generally available by you and which you have not objected to the processing of.

6. Duration of storage of personal data

We process and store your personal data as long as it is necessary to fulfill our contractual and legal obligations or otherwise for the purposes for which the processing was carried out, i.e. for the duration of the entire business relationship (from initiation, processing to termination of a contract) and also in accordance with legal storage and documentation requirements. It is possible that personal data may be stored for the time during which claims can be made against our company and insofar as we are otherwise required to do so by law or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will be deleted or anonymized as far as possible. For operational data (e.g. system logs, logs), there are generally shorter retention periods of twelve months or less.

7. Data security

We take appropriate technical and organizational security measures to protect your personal data from unauthorised access and misuse.

8. Obligation to provide personal data

As part of our business relationship, you must provide the personal data that is necessary to enter into and carry out a business relationship and to fulfill the associated contractual obligations (you generally do not have a legal obligation to provide us with data). Without this data, we will generally not be able to conclude or process a contract with you (or the body or person you represent). The website can also not be used if certain information to ensure data traffic (such as IP address) is not disclosed.

9. Profiling

We process your personal data partly automatically with the aim of evaluating certain personal aspects (profiling). In particular, we use profiling to be able to provide you with targeted information and advice about products. In doing so, we use evaluation tools that enable us to communicate and advertise in line with our needs, including market and opinion research.

10. Rights of the person concerned

Within the framework of data protection law applicable to you and to the extent provided therein (such as in the case of the GDPR), you have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, in particular that for direct marketing purposes, profiling carried out for direct marketing and other legitimate interests in processing and to release certain personal data for transfer to another location (so-called data portability).). Please note, however, that we reserve the right to assert the restrictions provided for by law on our part, for example if we are required to store or process certain data, have an overriding interest in doing so (insofar as we may rely on them) or need them to assert claims. If you incur any costs, we will inform you in advance. We have already informed you about the option to withdraw your consent in Section 3. Please note that the exercise of these rights may conflict with contractual agreements and this may have consequences such as early termination of the contract or cost consequences. In this case, we will inform you in advance where this is not already contractually agreed.

Exercising such rights usually requires that you clearly prove your identity (e.g. by means of a copy of an identity document, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.
Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

11. Amendments

We can amend this privacy policy at any time without notice. The current version published on our website applies. To the extent that the privacy policy is part of an agreement with you, we will inform you of the change by email or by other appropriate means in the event of an update.