Privacy Policy

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

ah Auto AG
Kapplerstrasse 113
9642 Ebnat-Kappel
Phone: +41 71 993 11 11
Email: info@auto-hermann.ch

Scope of application

This policy applies to our processing of personal data within the scope of the European Union’s General Data Protection Regulation (GDPR). This also covers all legal requirements of the revised Swiss Federal Act on Data Protection (FADP, in force as of 2023-09-01), as the scope of information under the GDPR is more comprehensive.

General information

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Federal Act on Data Protection, FADP), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse, or falsification. Please note that data transmission over the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible. By using this website, you agree to the collection, processing and use of data as described below. This website can generally be visited without registration. In doing so, data such as pages accessed or names of files retrieved, date and time are stored on the server for statistical purposes, without these data being directly related to you. Personal data, in particular name, address or email address, are collected on a voluntary basis wherever possible. Your data will not be passed on to third parties without your consent.


If you have given us consent, you can withdraw it at any time with effect for the future. You can also contact the supervisory authority at any time with a complaint.

In the event of data security breaches (colloquially also referred to as a “data protection incident” or “data breach”), with the entry into force of the new Swiss Federal Act on Data Protection (FADP) from September 1, 2023, these can be reported to the FDPIC if they are likely to result in a high risk to the personality or fundamental rights of the data subject. Online service for reporting data security breaches (Art. 24 FADP): https://databreach.edoeb.admin.ch/report

Your data subject rights

Using the contact details of our data protection officer provided, you can exercise the following rights at any time:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing, provided we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you can withdraw it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority of the federal state of your place of residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or your entire cookie inventory. In addition, you can obtain information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

Storage period and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

x months

Technically necessary cookies

Type and purpose of processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the browser accessing it can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again even after a page change.

We require cookies for the following applications:

Shopping cart
Adoption of language settings
Remembering search terms

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Recipients:

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Third-country transfer:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

Provision required or necessary:

Providing the aforementioned personal data is neither legally nor contractually required. However, without these data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection

Please read the information about your right to object under Art. 21 GDPR below.

Technically non-essential cookies

We also use cookies to better tailor the offering on our website to the interests of our visitors or to generally improve it based on statistical evaluations.

Please refer to the information listed below on the display, tracking, remarketing and web analytics technologies used to see which providers set cookies.

Legal basis:

The legal basis for these processing operations is your consent in each case, Art. 6(1)(a) GDPR.

Recipients:

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Please refer to the information listed below on the display, tracking, remarketing and web analytics technologies used for further recipients.

Third-country transfer:

Please refer to the lists of the individual display, tracking, remarketing and web analytics providers for more information.

Provision required or necessary:

Of course, you can generally view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can disable the use of cookies at any time via your browser settings (see withdrawal of consent).

Please note that individual functions of our website may not work if you have disabled the use of cookies.

Withdrawal of consent:

You can withdraw your consent at any time via our cookie consent tool.

Profiling:

Please refer to the information listed below on the display, tracking, remarketing and web analytics technologies used to see to what extent we analyze the behavior of website visitors using pseudonymized user profiles.

Comment function

Type and purpose of processing:

When users leave comments on our website, in addition to these details, the time they were created and the username previously chosen by the website visitor are stored. This serves our security, as we may be held liable for unlawful content on our website, even if it was created by users.

Legal basis:

The processing of the data entered as a comment is based on a legitimate interest (Art. 6(1)(f) GDPR).

By providing the comment function, we want to enable uncomplicated interaction. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

Recipients:

Recipients of the data may include processors.

Third-country transfer:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

Storage period:

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when communication with the user has been completed and the company can infer from the circumstances that the matter in question has been conclusively clarified. We reserve the right to delete without stating reasons and without prior or subsequent information.

You can also have your comment deleted by us at any time. To do so, please send an email to the data protection officer listed below or the person responsible for data protection and provide the link to your comment as well as, for identification purposes, the email address used when creating the comment.

Provision required or necessary:

Providing your personal data is voluntary. Without providing your personal data, we cannot grant you access to our comment function.

Newsletter

Type and purpose of processing:

To deliver our newsletter, we collect personal data that is transmitted to us via an input form.

For effective registration, we require a valid email address. To verify that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we log the newsletter registration, the sending of a confirmation email and the receipt of the response requested with it. No further data is collected.

Legal basis:

On the basis of your expressly granted consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or comparable information by email to the email address you have provided.

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. Each newsletter contains a corresponding link. You can also unsubscribe directly on this website at any time or inform us of your withdrawal via the contact option provided at the end of this privacy notice.

Recipients:

Recipients of the data may include processors.

Third-country transfer:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

Storage period:

In this context, the data will only be processed for as long as the corresponding consent exists. After that, it will be deleted.

Provision required or necessary:

Providing your personal data is voluntary and based solely on your consent. Without existing consent, unfortunately we cannot send you our newsletter.

Withdrawal of consent:

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. Unsubscribing can be requested via the link included in every email or from the data protection officer listed below or the person responsible for data protection.

Contact Form

Type and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. This requires a valid email address and your name. This is used to assign the request and subsequently answer it. Providing additional data is optional.

Legal basis:

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6(1)(f) GDPR).

By providing the contact form, we want to enable uncomplicated contact. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request an offer, the processing of the data entered in the contact form is carried out to implement pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients:

Recipients of the data may include processors.

Third-country transfer:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

Storage period:

Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship is established, we are subject to statutory retention periods under the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision required or necessary:

Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address and the reason for the request.

Use of Google Analytics

If you have given your consent, Google Analytics is used on this website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on these websites, your IP address will, however, be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

More information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet use to the website operator.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Withdrawal of consent:

You can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future, as long as the cookie remains installed in your browser.

You can also prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

Use of script libraries (Google Web Fonts)

To display our content correctly and in a visually appealing way across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Use of Google Maps

We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
More information about data processing by Google can be found in Google’s privacy notices: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on managing your own data in connection with Google products can be found here: https://www.dataliberation.org

By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in with, or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not want the assignment to your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

Withdrawal of consent:

The provider currently does not offer an option for a simple opt-out or blocking of data transmission. If you want to prevent tracking of your activities on our website, please withdraw your consent for the relevant cookie category or for all technically non-essential cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website, or only to a limited extent.

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policies. There you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).

Withdrawal of consent:

The provider currently does not offer an option for a simple opt-out or blocking of data transmission. If you want to prevent tracking of your activities on our website, please withdraw your consent for the relevant cookie category or for all technically non-essential cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website, or only to a limited extent.

Social plugins

Type and purpose of processing:

We offer you the option of using so-called “social media buttons” on our website. To protect your data, we use the “Shariff” solution for implementation. This means these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking the graphic, you will be redirected to the services of the respective providers. Only then will your data be sent to the respective providers. If you do not click the graphic, no exchange takes place between you and the providers of the social media buttons. Information about the collection and use of your data in social networks can be found in the respective terms of use of the corresponding providers. More information about the Shariff solution can be found here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website:

Facebook, LinkedIn, …

Google AdWords

Our website uses Google conversion tracking. The operating company of the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

More information about data processing by Google can be found in Google’s privacy notices: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

Withdrawal of consent:

The provider currently does not offer an option for a simple opt-out or blocking of data transmission. If you want to prevent tracking of your activities on our website, please withdraw your consent for the relevant cookie category or for all technically non-essential cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website, or only to a limited extent.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The operating company of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function serves to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognize the visitor when they access websites that belong to Google’s advertising network. On these pages, the visitor can be shown advertisements that relate to content that the visitor previously accessed on websites that use Google’s remarketing function.

More information about data processing by Google can be found in Google’s privacy notices: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

Withdrawal of consent:

The provider currently does not offer an option for a simple opt-out or blocking of data transmission. If you want to prevent tracking of your activities on our website, please withdraw your consent for the relevant cookie category or for all technically non-essential cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website, or only to a limited extent.

SSL encryption

To protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art (e.g. SSL) via HTTPS.


Information about your right to object under Art. 21 GDPR

Right to object on a case-by-case basis

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Recipient of an objection

ah Auto AG
Kapplerstrasse 113
9642 Ebnat-Kappel


Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the data protection officer

If you have questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

René Hermann
Phone: +41 71 993 11 11
Email: rene@auto-hermann.ch

This privacy policy was created with the help of activeMind AG, the experts for external data protection officers(Version #2020-09-30).