Privacy Policy

1. Introduction

Below, we inform you about who is responsible for processing your data, what data we collect in connection with your visit to our website and your use of our services, for what purposes we process this data, and to whom we may disclose this data. We also inform you about the duration of data processing, the legal basis for processing (if applicable), and your rights regarding the processing of your data. This privacy policy applies to all your data that we already hold or that we may hold in the future. Please note that we may amend this privacy policy from time to time. The current version published on our website applies.


Personal data is defined as any information relating to an identified or identifiable natural person (hereinafter referred to as "personal data"). This includes, in particular, information such as name, address, telephone number, email address, and potentially also IP addresses and device IDs. In this privacy policy, the term "data" encompasses not only personal data but also non-personal and anonymized data. "Processing" refers to any handling of data, regardless of the means and procedures used, in particular the collection, storage, use, modification, disclosure, archiving, or deletion of data (hereinafter referred to as "processing").


If you provide us with personal data of other people, please ensure that these people are aware of this privacy policy and only share their personal data with us if you are authorized to do so under applicable data protection law.


2. Name and address of the responsible party

The entity responsible for data processing in accordance with this privacy policy is:

Z-AG Engineering
Böllistrasse 18, Oeschgen, 5072, Switzerland
alessandro.zumsteg@z-ag.ch


3. Categories of processed data

When you visit our website, use our services, and contact us, we collect certain data. Generally, we collect this data directly from you. The personal data we process may include the following:


  • Data that is collected or disclosed when you visit our website or use our services. This includes, among other things, the IP and MAC address or device ID of the device used, cookies, pages you visit and search terms you enter, entries in dialog boxes, ratings, time and duration of visits, clicks, referring/exit URL, information about the time of use, browser and device type, operating system and internet service provider used, and the amount of data transferred.
  • Data exchanged in or in connection with contact with us, e.g. communication by letter, telephone, email, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, job title, photo, employees, language, payment information).
  • Data disclosed when registering for a newsletter or for file download (e.g. software) (especially email address and name).
  • Data that is provided when creating a customer account for online shopping and in connection with orders placed (in particular username, password, chosen payment method and delivery address).
  • Data relating to offers and concluded contracts (e.g. contract date, type, content, product, parties, duration, value, adjustments, payment details, contact details, contact persons, billing and correspondence addresses, customer feedback, cancellations, disputes, etc.).
  • Data disclosed via the comment function (in particular your email address, your chosen username if you are not posting anonymously, and your IP address).
  • Data that you disclose when participating in competitions, surveys and the like.


The above data does not necessarily constitute personal data. As a rule, we cannot associate data collected when using our services without registration (e.g., for a newsletter or online shop) with a specifically named individual. However, in individual cases, this may be possible in combination with other data.

We would like to draw your attention to the fact that the information provided in connection with the use of the contact form or the comment function may include particularly sensitive data (such as health data) and that you provide this to us voluntarily.



4. Processing purposes

We will process personal data, to the extent permitted by applicable law, in particular for the following purposes:


  • Initiation, conclusion, fulfillment and settlement of contracts;
  • Offering, further development and improvement of our services, development of new services, operation, maintenance, optimization and ensuring the security of our services and infrastructure;
  • Managing users of our services, identity checks, logins, and other authentications;
  • Maintaining, administering and developing our customer relationships, communicating with customers and third parties, promotions, advertising and marketing, offering customized services and relevant content;
  • Quality control, creation of statistics;
  • Compliance with legal and regulatory obligations and internal rules, law enforcement, civil, administrative and criminal proceedings, complaints, combating abuse, investigations and responding to inquiries from authorities and agencies.



5. Legal basis

We use personal data for the above purposes on the basis of the following legal grounds, insofar as such a basis is required under applicable data protection law:


  • Contract fulfillment;
  • Fulfillment of legal obligations;
  • Consent given to us or to third parties;
  • Legitimate interests of us and of third parties, in particular:
  • Offering and providing services;
  • Advertising and marketing;
  • Maintaining contact and communicating with users;
  • User management, identity checks, logins;
  • Compliance with legal and regulatory obligations, law enforcement, civil, administrative and criminal proceedings, complaints, investigations and responding to inquiries from authorities.



6. Publication and disclosure of data

We can publish and share data as follows:


Order data processor

We may engage third parties to provide certain services (e.g., in the areas of IT, application operation, administration, shipping, etc.) and to process and store data (so-called "data processors"). Data processors may have access to personal data and process it on our behalf. We require these processors to comply with data protection law and to process data only as we ourselves do. Data processors who may receive personal data may be located in any country, in particular Switzerland, Germany, Israel, and the USA.


Contract partner

We may share data with contractual partners (such as sales partners, service providers, financial institutions, etc.). This occurs, for example, to fulfill contractual obligations, to offer certain services, for debt collection and marketing purposes, to analyze the use and operation of our services, systems, and infrastructure, and for payment processing. Potential recipients may also include acquirers or prospective acquirers of business units, companies, or parts thereof. Contractual partners may gain access to personal data and process it for their own purposes (such as contract fulfillment or compliance with their own legal obligations). They are themselves obligated to comply with applicable data protection laws.

Contractual partners who may receive personal data may be located in any country, in particular in Switzerland, in EU and EEA countries, and in the USA.


Disclosures to authorities

In certain situations, we may disclose data to authorities, government agencies, and other third parties. We do this when we are officially or legally required to do so, or when we deem it necessary.



7. Storage period

We store personal data for as long as necessary for the purpose for which we collected it. Certain personal data is also subject to legally binding retention periods of ten years or more, which we comply with. We may also store personal data for at least the duration of the applicable limitation periods, which in many cases is five or ten years. Personal data generated in connection with the use of our services (e.g., protocols, logs, analyses, etc.) and which is not subject to such retention or limitation periods is generally deleted earlier, as soon as we no longer have an interest in processing it. Data may also be stored for longer periods in anonymized form. Subject to an explicit contractual agreement, we are not obligated to retain data for a specific period.



8. Data security

We implement appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. Your rights (data subject rights)

Every data subject has the right to access their personal data. They also have the right to request that we correct, delete, or restrict the processing of their personal data, as well as to object to such processing. Exercising these rights generally requires the data subject to clearly prove their identity. If the processing of personal data is based on consent, the data subject may withdraw this consent at any time. In certain cases, the data subject has the right to receive the data generated during the use of online services in a structured, commonly used, and machine-readable format that allows for further use and transmission. Inquiries relating to these rights should be directed to the address above. We reserve the right to restrict the data subject's rights within the framework of applicable law and, for example, not to provide complete information or to delete data. We also draw your attention to the fact that deleting your personal data may mean that some or all of the services will no longer be available or usable.

Every data subject has the right to lodge a complaint with the competent data protection authority. In the case of a data controller in Switzerland, this is the Federal Data Protection and Information Commissioner. In the case of a data controller in the Principality of Liechtenstein, it is the Liechtenstein Data Protection Authority.


10. Cookies, web analytics and tracking tools

We use various common technologies to collect, store and analyze data when you visit our website and use our services.

This includes, in particular, cookies that can identify your browser or device. A cookie is a small file that is sent to your computer and automatically stored on your computer or mobile device by your web browser. When you revisit a service, it can recognize your browser or device using the cookie. Cookies can store user preferences and other information. We use session cookies. These are necessary to enable the basic functionalities of our services and are automatically deleted after you use them. We also use temporary and persistent cookies, which remain stored on your computer or mobile device for a longer period. The information collected through cookies allows us to improve our website and services to better meet customer needs and to provide you with tailored offers.

You can block or delete cookies in your browser settings. Please note that if you do not allow cookies, you may not be able to fully use all the functions of a service, and that deleting cookies will also delete any opt-out cookies you may have set. Such opt-out cookies would then need to be reactivated the next time you visit the service. Otherwise, you will be recognized as a new user and your data will be collected again.

In addition to cookies, we use web analytics and tracking tools to measure and evaluate the use of our website and services, to personalize the services, and to display offers and advertising tailored to you. The data processing carried out by such tools, which are mostly provided by third parties, is subject to the terms of use and privacy policies of those third parties.



11. Integration of third-party offers

We integrate third-party services and content into our websites that may allow you to interact with these third parties (e.g., YouTube videos or online payments via a payment service provider). Any data you provide will be forwarded to these third parties for processing and fulfilling the respective service, or processed directly by them.

Please note that the data processing practices of these third parties are subject to their own terms of use and privacy policies.


Version 1.0.0