Your privacy and the protection of your data is important to Lamello AG and its subsidiaries (hereinafter Lamello, or Us). This Privacy Policy describes the personal data we collect, the purposes for which we process this data, who has access to the data, how long we retain the data, and how you can assert your rights in relation to your data. In doing so, we comply with Swiss and EU data protection laws.

Personal data refers to all information relating to a specific or identifiable person.

This Privacy Policy applies exclusively to personal data collected online by Lamello or one of its subsidiaries or via Lamello websites, by e-mail and other online tools and applications. Further privacy policies may regulate specific issues.

Personal data we collect and process

Most of our services require no registration, i.e. you can visit our website without providing your personal data. However, some of services do require your registration. Personal data we may collect about you depends on your relationship with Lamello and the services used. Personal data, collected to the extent necessary for the exercise of our legitimate interest, for the fulfilment of a legal obligation or for the fulfilment of a contract, or to the extent that you have agreed to their use, include:

• Your details from the contact form (contact details such as name, address, telephone number and e-mail) for processing your request and for any follow-up questions;
• Your e-mail address for submitting the newsletter offered on our website, provided that you subscribe to and give your consent to receive it, as well as information (title, last name, first name, e-mail address, company name, industry), which allow us to verify your ownership of this e-mail address. You may revoke your consent to the retention and use of your data for submitting the newsletter at any time, for example, via the "unsubscribe" link in the newsletter.
• Personal data that you provide to Lamello electronically, for example via e-mail or via a web form on our website, within the scope of an application, for the purpose of handling the application procedure.
• Your server log files, which are automatically transmitted to us by your browser (browser type and browser version; operating system used; referrer URL; host name of the accessing computer; time of the server request) for the purpose of ensuring access statistics for smooth system operation.
• To the extent permitted by law, we also collect personal data from publicly accessible sources, such as the media and the Internet, e.g. as part of a promotion, trade fair or marketing activity, or we receive certain data, in particular contact data from third parties, e.g. from address dealers.

Processing of personal data

We process your personal data only for the purposes stated in this Privacy Policy, in particular:

• To provide you with our services and answer your questions;
• For customer acquisition purposes and market research; 
• To send you our newsletter if you are one of our customers or have granted your consent;
• Data processing is necessary to fulfil a contract with you;
• Data processing is necessary to fulfil a legal obligation;
• To assert legal claims and defence in connection with legal disputes and official proceedings;
• To prevent and investigate criminal offences and other misconduct, such as internal investigations, data analyses to combat fraud;
• To ensure our operation, especially our computer systems, our websites and other platforms;
• In connection with the purchase and sale of business units, companies or parts thereof, and other corporate transactions and the related transfer of personal data;
• To the extent otherwise permitted and prescribed by law, or in support of a civil or criminal investigation;
• To improve our products and services. To such end, we make data collected anonymous for statistical purposes.

If you have granted us your consent to process your personal data for specific purposes, for example, when subscribing to our newsletter, or to carry out a verification in connection with your application, we shall process your personal data based on your consent. You can revoke your consent at any time, albeit this has no effect on completed data processing activities.

Application process

Lamello collects and processes personal data from applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is especially the case if an applicant sends Lamello corresponding application documents electronically, such as, for example, by email or via a web form on the website. If Lamello concludes an employment contract with an applicant, data transmitted will be stored in the personal file to process the employment relationship in compliance with statutory provisions. If Lamello concludes no employment contract with the applicant, application documents will be deleted two months after the rejection decision has been announced.

Cookies, tracking and other technologies in connection with the use of our website

We use cookies - small text files that are automatically stored on your computer's hard drive when you visit our websites - and similar technologies, such as web analysis services like Google Analytics. Cookies allow us to store information such as your domain name, your Internet service provider, your operating system, date and time of access, the pages you visit or the type of search you perform. Among other things, we collect this information for system administration purposes and to share collected information with affiliates, business partners and/or vendors who perform website and application analysis and site performance reviews on our behalf.

We may use this information to store your preferences and settings, to improve the content of our websites and applications, to enable you to register for our website applications, to compile aggregated statistics and evaluate the use of our website by visitors or website activity, or to use them internally and for market research purposes.

The types of cookies we use include:

Session cookies
During registration, so-called session cookies are required, as these data improves user-friendliness during authentication and helps in controlling access to various areas of our portal. These cookies are used for the duration of your visit to our website, being automatically deleted when the browser is deactivated.

Persistent Cookies
Persistent cookies remain on your device for a longer time and are used by our website to store usage settings and other information for a certain time, and to recognise your device when you return.

Use of Google Analytics

We use Google Analytics, a web analytics service from Google Inc. („Google“). Google Analytics uses cookies and similar technologies to analyse the usage behavior of website visitors and to provide other services related to website and Internet usage. The information collected about your website usage, including your shortened IP address, is transmitted to Google Analytics and stored on servers in the USA. Google uses this information for the purpose of evaluating your use of the website, compiling statistical reports on website activity, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. By using this website, you consent to the processing of your personal data by Google as described in this statement. You can also disable Google Analytics (see below for more information).

We also use Google Maps, another Google service. Google Maps allows us to provide interactive maps on this website. Google Maps also uses Google Analytics, cookies and anonymised IP addresses.

Google is committed to ensuring an adequate level of privacy for personal information. Further information in this context can be found in the Privacy Policy of Google  as well as in the Google Analytics Terms and Conditions and in the Google Maps Terms and Conditions. Google also provides a free browser extension to disable Google Analytics.

Use of Mailchimp Plugins

Our pages also integrate plugins from Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308. USA. Mailchimp plugins are embedded in the contact form / newsletter form. When you visit our site, a direct connection between your browser and the Mailchimp server is established through the plugin/contact form. Mailchimp is committed to ensuring an adequate level of privacy for personal information. Further information in this context can be found in the Privacy Policy of Mailchimp under https://mailchimp.com/legal/privacy/.

How to control and disable cookies:

Most browsers are initially set to accept cookies automatically. However, you can deactivate the storing of cookies or adjust your browser so that it notifies you before accepting cookies. Please note that deactivation may make certain website functionality unavailable.

You can permanently disable the use of these cookies by clicking on the following link and downloading and installing the supplied plugin: https://www.google.com/settings/ads/plugin. Alternatively, you can visit the www.aboutcookies.org website, which contains information about disabling cookies in various desktop browsers.

Data transfer and data transmission abroad

In the course of our business activities and in order to fulfil the purposes described in this data protection declaration, we also disclose personal data to third parties insofar as this is necessary to fulfil the purposes described herein. Third parties include in particular:

• Our subsidiaries;
• Service providers who process personal data on our behalf, such as MailChimp for the administration of our newsletter submission or other IT providers;
• Suppliers, subcontractors or other business partners and customers;
• Domestic and foreign authorities, official bodies or courts;

Please note that the subsidiaries mentioned above and the authorities, customers, service providers and suppliers with whom we may share your personal information may be located outside your home country, including the United States, whose data protection laws may differ from those in your country. In such cases, we shall ensure that appropriate security measures are taken to protect your personal data by means of suitable legal mechanisms, e.g., EU standard contractual clauses.

Personal data retention period

We store your personal data for as long as is necessary to fulfil the purposes set out in this data protection declaration, unless a longer or shorter retention period is prescribed or permitted by law.
Data security
To protect your personal data from unauthorised access and misuse, we take appropriate technical and organisational security precautions including access controls and authorisations, instructions, password protection, encryption of data carriers and data transmission, regular security assessments, etc.

Your rights

Within the scope of the data protection laws applicable to you, you have the right to request information at any time about your personal data stored with us, their origin and recipient, and the purpose of data processing. You also have the right to correct, block, or delete your personal data. If you live in the EU, under certain conditions you also have the right to surrender certain personal data for transfer to another body (so-called data portability) and to file a complaint with a supervisory authority. If we rely on your consent as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. As far as we use your e-mail address for the dispatch of newsletters, you have the right to object to the submission of further newsletters in each e-mail. Please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its revocation.  Please also note that we reserve the right to enforce statutory restrictions, for example, if we are obliged to retain or process certain data, have an overriding interest in them, or require the data to assert certain claims.

To exercise your rights, please contact us as described in the "Contact" section below.

Changes

The current version of this data protection declaration is published on our website. We reserve the right to update the data protection declaration in due course and without notice in order to improve data protection and/or adapt it to changes in official practice or case law.

Contact

If you have any questions, comments or concerns regarding this Privacy Policy, or wish to exercise your rights, please contact the responsible body using the contact address below or email our Privacy Officer at datenschutz@lamello.com.

Responsible body and representatives in the EU

The responsible body as defined in data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Lamello AG
Hauptstrasse 149
CH-4416 Bubendorf
datenschutzlamello.com

Our representative in the EU according to Art. 27 GDPR is:

Lamello Services GmbH
Gewerbestrasse 24
DE-79618 Grenzach-Wyhlen, Germany