Privacy Policy

1. General

The protection of your personal data is important to us.

With this privacy policy we inform you which personal data we process in connection with our website www.kammag.ch, our services, our communication channels and our online marketing activities, and for what purposes.

We process personal data in particular in accordance with the Swiss Federal Act on Data Protection (FADP) and its associated Data Protection Ordinance (DPO). Insofar as the European Union's General Data Protection Regulation (GDPR) is applicable in an individual case, we additionally take its requirements into account.

2. Controller

3. Definitions

"Personal data" means any information relating to an identified or identifiable natural person.

"Processing" means any handling of personal data, in particular the collection, recording, storage, use, alteration, disclosure, transmission, archiving or deletion of personal data.

4. What personal data we process

Depending on the type of use of our website or our services, we may process the following categories of personal data in particular:

• Contact data such as first name, last name, company, address, phone number and email address
• Project and order data such as project address, project type, requested services, technical details and messages
• Documents and files you transmit to us, for example plans, tender documents, PDFs, DWG files, ZIP files, photos or other project documentation
• Communication data from emails, phone calls, form inquiries or other correspondence
• Contract, quotation and billing data
• Technical data such as IP address, browser type, operating system, device information, date and time of access, pages accessed, referrer URL as well as server and log data
• Usage and analytics data relating to the use of our website
• Marketing and tracking data, in particular in connection with Google, Meta/Facebook, Instagram and TikTok
• where applicable, application data, if you apply to us for a position

5. Purposes of data processing

We process personal data in particular for the following purposes:

• Provision and secure operation of our website
• Handling of contact, project and quotation inquiries
• Preparation, conclusion and execution of contractual relationships
• Project planning and project execution
• Communication with customers, prospective customers, suppliers and business partners
• Management of customer and business relationships
• Preparation and processing of quotations and tenders
• Processing of job applications
• Improvement of our website and our services
• Reach measurement and analysis of website usage
• Implementation, optimization and success measurement of online advertising
• Creation of target audiences for advertising campaigns and — where permissible and subject to corresponding consent — for personalized advertising or remarketing
• Ensuring IT and information security
• Prevention and investigation of misuse
• Fulfilment of legal and regulatory obligations
• Assertion or defence of legal claims

6. Legal bases

Under Swiss data protection law, we process personal data within the framework of the statutory processing principles.

Insofar as consent is required for a specific processing activity, the processing takes place on the basis of your consent.

Insofar as the GDPR is exceptionally applicable, processing takes place in particular for the performance of a contract or the implementation of pre-contractual measures, for compliance with legal obligations, on the basis of legitimate interests, or on the basis of your consent.

Consent can generally be revoked at any time with effect for the future.

7. Contact and project inquiries

If you contact us via the contact form, by email, by phone or by other means, we process the personal data you transmit in order to handle your inquiry.

This may include in particular name, company, phone number, email address, project location, requested service, message content, as well as transmitted plans, tender documents or other files.

The data may subsequently also be used for the preparation of a quotation, project planning, or the conclusion and execution of a contract.

Please only transmit information via forms and file uploads that is necessary for the respective inquiry.

8. Server log files and hosting

When you access our website, technical information may be automatically collected by the hosting provider we use. This may include in particular IP address, date and time of access, page or file accessed, browser and browser version, operating system, referrer URL, status codes and the amount of data transferred.

This information is required in particular to technically provide the website, to ensure stability and security, and to detect errors and misuse.

Personal data may in this context be processed on our behalf by our hosting or IT service provider.

9. Cookies and similar technologies

Our website may use cookies and comparable technologies such as pixels, tags, local storage or similar identifiers.

We distinguish in particular between technically necessary technologies, functional technologies, analytics and statistics technologies, and marketing and advertising technologies.

Insofar as consent is required, the corresponding technologies are only activated after you have given your consent. You can change or revoke your selection at any time via the cookie or privacy settings provided on our website.

10. Consent management

We may use a consent management solution on our website with which website visitors are informed about the use of cookies and tracking technologies and can define their settings.

In doing so, in particular the time of consent, the categories granted or refused, technical details about the end device or browser, and, where applicable, a consent ID may be stored.

The storage of this information serves in particular to document and manage the data protection decisions made.

11. Google services

We may use services from the Google group, in particular for advertising, conversion measurement, reach analysis and remarketing. Depending on the specific implementation, this may include in particular Google Ads, Google Tag Manager and, where applicable, Google Analytics.

When using the respective services, technical information and data on the use of our website may be transmitted to Google. This may include in particular IP address, browser and device information, pages accessed, time and duration of visits, interactions with our website, information about advertisements, conversion events, as well as cookies or similar identifiers.

11.1 Google Ads and conversion tracking

We use Google Ads to advertise our services. In this context, we may use conversion tracking to determine whether a user, after coming into contact with one of our ads, performs certain actions on our website, for example submitting an inquiry or visiting a specific page.

11.2 Google Remarketing

Where activated and permissible, we may use Google services to subsequently display interest-based advertising to visitors of our website. Such use only takes place in compliance with the respective necessary data protection and consent requirements.

11.3 Google Consent Mode

We may use Google Consent Mode. In this process, the settings a visitor has made via our consent system are transmitted to Google tags and their behaviour is adjusted accordingly.

12. Meta / Facebook / Instagram

We may use technologies and advertising services from the Meta group of companies, in particular in connection with Facebook and Instagram. This may include in particular the Meta Pixel or a comparable conversion or event measurement.

This makes it possible in particular to track whether a website visitor reached our website via a Meta advertisement and subsequently performed certain actions.

Depending on the implementation, this may involve, for example, IP address, browser and device information, pages accessed, time of visit, interactions and events on our website, advertising and cookie identifiers, as well as conversion information.

We may use the information obtained in this way in particular to measure the success of our campaigns, optimize our advertising, and — where permissible and subject to corresponding consent — for remarketing or the formation of target audiences.

Meta may also process personal data for its own purposes in accordance with its own privacy policy.

13. TikTok

We may use advertising and tracking technologies from TikTok. This may include in particular the TikTok Pixel or a comparable event or conversion measurement.

This can be used in particular to measure whether users visit our website after coming into contact with a TikTok ad and perform certain actions.

Depending on the implementation, this may involve in particular IP address, browser and device information, pages accessed, usage and interaction data, advertising identifiers, cookie or device identifiers, as well as conversion and event data.

The data may be used in particular for the measurement and optimization of advertising campaigns and — where permissible and consented to — for the creation of target audiences and personalized advertising.

TikTok may also process data for its own purposes in accordance with its own privacy policy.

14. Social media

We may maintain a presence on social networks and platforms such as Facebook, Instagram, LinkedIn and TikTok.

If you visit our profiles or communicate with us there, personal data is also processed by the respective platform operators. We have only limited influence on the scope, nature and purpose of this data processing by the platform operators. The platform operator's own privacy policy additionally applies to the data processing carried out by it.

15. Maps and external content

Our website may embed maps, videos, fonts, media or other content from external providers.

Such embedding may for technical reasons transmit your IP address in particular to the respective provider. Insofar as such embeddings are not strictly necessary for operation and consent is required, they are only loaded after corresponding consent has been given.

16. Recipients of personal data

To the extent necessary, we may disclose personal data in particular to the following categories of recipients:

• IT and hosting service providers
• web agencies and technical service providers
• cloud and software providers
• advertising, analytics and marketing service providers
• Google
• companies of the Meta group
• TikTok or affiliated companies
• business partners and subcontractors, insofar as this is necessary for a project
• consultants, fiduciaries, lawyers or insurers
• authorities and courts, insofar as a legal obligation exists

Insofar as external service providers process personal data on our behalf, we take appropriate contractual and organizational measures to protect this data.

17. Data processing abroad

In connection with the use of international IT, cloud, analytics or advertising service providers, personal data may also be processed outside Switzerland.

This may in particular concern states within the European Union or the European Economic Area, as well as other countries.

Insofar as personal data is transmitted to countries that, from a Swiss perspective, do not guarantee an adequate level of data protection, we take suitable protective measures where necessary. This may include in particular recognized standard data protection clauses or other legally provided guarantees.

In cases provided for by law, a transfer may also be based on explicit consent or another statutory exception.

18. Retention period

We only store personal data for as long as necessary for the respective processing purposes or as long as statutory or contractual retention obligations exist.

Business correspondence, contract documents, quotations, billing documents and comparable records may in particular be stored for several years within the scope of statutory retention obligations.

Data that is no longer required is deleted or anonymized, unless there is a retention obligation or an overriding legitimate interest in further storage.

19. Data security

We take appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, unauthorized alteration or disclosure.

This may include in particular encrypted data transmission via TLS/HTTPS, access restrictions, authorization concepts, password and access protection, regular updating of systems, backups, logging and security measures, as well as organizational guidelines for handling personal data.

However, absolute security in electronic data transmission or storage cannot be guaranteed.

20. Rights of data subjects

Within the framework of applicable data protection law, data subjects may in particular have the right to:

• obtain information about the data processed concerning them
• have inaccurate personal data corrected
• request the deletion or destruction of certain data
• request the release or transfer of certain personal data
• object to a specific data processing activity
• revoke consent given, with effect for the future

The exercise of such rights may be subject to statutory restrictions. To exercise your rights, you can contact us at info@kammag.ch. We may require suitable proof of identity for such requests.

21. Automated individual decisions and profiling

We generally do not make any decisions based solely on automated processing that have a significant legal or comparable effect on data subjects.

In the context of online advertising, however, profiles or target audiences may be created based on usage, interest and interaction data. Such procedures may in particular be carried out by Google, Meta or TikTok.

Insofar as consent is required for this under applicable law, the corresponding processing only takes place after you have given your consent.

22. Data protection for job applications

If you apply to us, we process the data you submit exclusively for handling your application and conducting the application process.

This may include in particular contact data, curriculum vitae, references, qualifications, correspondence and further information you submit.

If no employment relationship is established, the application documents are deleted after an appropriate period, unless a statutory obligation or explicit consent exists for a longer retention period.

23. Amendments to this privacy policy

We may amend this privacy policy at any time, in particular in the event of changes to our data processing activities, the technologies used, or legal requirements.

The version published on our website at any given time shall apply.