DATA PRIVACY POLICY JOB APPLICANTS

WELCOME

Dear job applicant, with this policy we would like to explain to you how and for which purposes we process and use your personal data in connection with your application and which rights and options you have in this respect.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

The SWISS KRONO entity to which you sent your application will be the primary responsible controller for your personal data.

FOR WHICH PURPOSES DO WE USE YOUR PERSONAL DATA?

We will process your personal data as required in connection with your application, in particular for the following purposes ("Permitted Purposes"):

• Processing of your application, including review and analysis of your qualifications and skills, confirm your references and educational background, for background checks and public register checks and considering your suitability for the job opportunities for which you applied, communication with you, conducting assessment centers and any other evaluation processes and organization of any travel required and expense reimbursement;

• Security purposes, including protecting our property, controlling access to our premises and facilities (including CCTV), ensuring integrity and security of our IT and communication systems, websites and other systems and investigating, preventing and detecting security threats, fraud, theft or other criminal or malicious activities;

• Legal documentation purposes, (such as record keeping obligations);

• compliance reasons, in particular, monitoring and assessing compliance with our internal policies and standards and our legal and regulatory obligations;

• Disputes and enforcement of claims, including supporting us in dealing with and solving disputes, complying with orders of courts, authorities or other public bodies, enforcing our contractual agreements and to establish, exercise or defend legal claims.

Where you have expressly given us your consent, we may also use your personal data for the following purposes:

• Including you in our job applicant data base, to provide you by email, telephone or other communication channels you permitted us to use with information about job opportunities at SWISS KRONO and to share your application data with our affiliates.

• Sending you information and updates by email about SWISS KRONO and our products and services, and invitations to programs, customer surveys or other events from SWISS KRONO and our affiliates.

We will not use your personal data for taking any automated decisions affecting you or creating profiles other than described above.

ON WHICH BASIS DO WE PROCESS YOUR INFORMATION?

We will process your personal data for the above Permitted Purposes only

• where it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into such a contract;

• where it is necessary for our or a third party's legitimate interests, always provided that such interests are not overridden by your interests or fundamental rights and freedoms. Our "legitimate interests" may include our commercial interests in operating our business in a professional, sustainable manner, in accordance with all relevant legal and regulatory requirements;

• for our compliance with our legal obligations;

• where we have obtained your specific or, where necessary, explicit consent to do so. We will in each case inform you about the processing of your data and your related rights prior to obtaining your consent.

The legal bases for processing of your personal data are set forth in Article 4 of the Swiss Federal Act on Data Protection (FADP), Article 328b of the Swiss Code of Obligations and Article 6 of the EU General Data Protection Regulation.

WHICH PERSONAL DATA DO WE COLLECT?

Unless otherwise agreed with you, we will collect only personal data which are required in connection with your application for the above purposes. This includes any information you provide to us directly with your application and any information which is derived from such information or otherwise collected in the course of your application process.

This may include the following categories of data:

• Personal details, such as name, address, date of birth, marital status, data in relation to kids, emergency contact details, country of residence, national insurance number, prior or expected salary, bank details, data regarding your size for work clothes (if applicable), social security and tax related details;

• Application Data, such as contact details of your prior employer, position and career data, CV, details of your qualifications, professional experience and skills;

• Identification documentation, such as copies of your passport, driving license, national or work ID card, or other documentation (which may include photographs submitted by you);

• Further information related to your application- such as expense reimbursement data, assessment centers or other assessment methods, reference checks, credit and background checks and public register checks;

• Data relating to access to and use of our systems, facilities and premises;

• Data relating to disputes and enforcement of claims, including data relating to or generated from proceedings, disputes, negotiations, statements, pleadings or other related communication or activities;

• Other personal data derived from or generated by pursuing the above Permitted Purposes.

Special categories of Personal Data. Where required for the above Permitted Purposes and only where required or permitted by applicable law or where you have specifically given us your consent, we may process special categories of your personal data such as:

• Your confession (e.g. for church tax purposes);

• Data in relation to an existing disability to comply with related statutory workplace security or insurance obligations or

• Biometric data (e.g. for access control or security purposes).

FROM WHICH SOURCES DO WE COLLECT PERSONAL DATA?

We may collect your personal data for the above Permitted Purposes

• primarily directly from you in the course of your application, e.g. when you complete job applicant questionnaires, visit our intranet, our website or other communication platforms and when you communicate with us in relation to your application

• from third parties, e.g. from references, educational institutions or public registers and

• from data generated in the course of your application process (e.g. expense reimbursement, assessment centers and other assessment methods or from recording and monitoring of your access and use of our premises, facilities and communication and IT systems).

HOW DO WE PROTECT YOUR PERSONAL DATA?

We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data from unauthorized access or intrusion. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will at all times strictly comply with applicable laws and regulations regarding the confidentiality and security of personal data.

WITH WHOM WILL WE SHARE YOUR PERSONAL DATA?

We may share your personal data with:

• Our affiliates if and to the extent required for the Permitted Purposes and legally permitted or where you have expressly given us your consent. In such cases, these entities will then use the Personal Data for the same purposes and under the same conditions as outlined in this Data Privacy Policy.

• Third parties in connection with a service provided to us or you on our behalf for the Permitted Purposes (such as training and educational providers, background check providers or third parties from whom we request a reference or information).

• Service providers (so called data processors) within or outside of SWISS KRONO Group, domestically or abroad (e.g. shared service centers, payroll or other service providers, including cloud providers) instructed by to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. SWISS KRONO will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers.

• Public or governmental bodies such as social security and tax authorities, mutual indemnity associations regulatory or enforcement authorities, attorneys or courts where we are required to do so by applicable law or regulation or at their request if legally permitted and necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.

• Otherwise, we will only disclose your personal data when you direct or give us permission, when we are required by applicable law or regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.

WHERE DO WE PROCESS YOUR PERSONAL DATA?

SWISS KRONO is a globally active enterprise. In the course of our business activities, we may transfer your personal data also to recipients in countries outside of the European Economic Area (“third countries”), in which applicable laws do not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data, in particular by entering into the EU Standard Contractual Clauses which are available here.

You may contact us anytime using the contact details below if you would like further information on such safeguards.

YOUR DATA PROTECTION RIGHTS

For your benefit, we make no distinction in the granting of rights in this regard according to whether you are in the territory of the EU or Switzerland, and in the latter case we also voluntarily comply with the stricter requirements of the EU General Data Protection Regulation.

Subject to certain legal conditions, you may request access to, rectification, erasure or restriction of processing of your personal data. You may also object to processing or request data portability. In particular, you have the right to request a copy of the personal data that we hold about you. If you make this request repeatedly, we may make an adequate charge for this. Please refer to Articles 8 ff. of the Swiss FADP as well as Articles 15-22 of the EU General Data Protection Regulation for details on your data protection rights.

For any of the above requests, please send a description of your personal data concerned stating your name and your date of birth as proof of identity to the contact details below. We may require additional proof of identity to protect your personal data against unauthorized access. We will carefully consider your request and may discuss with you how it can best be fulfilled.

If you have given us your consent for the processing of your personal data you may withdraw the consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. In case consent is withdrawn, we may only further process the personal data where there is another legal ground for the processing.

If you have any concerns about how your personal data is handled by us or wish to raise a complaint, you can contact us at the contact details below to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can file a complaint with the competent data protection supervisory authority in your country. If you are from Switzerland, for example, you can contact the Federal Data Protection and Information Commissioner (FDPIC) via the website www.edoeb.admin.ch.

ARE YOU REQUIRED TO PROVIDE PERSONAL DATA?

As a general principle, you will provide us with your personal data in connection with your application entirely voluntary. However, in certain circumstances we are required to collect certain personal data, for example because this personal data is required to deduct taxes, carry out a legally required compliance screening or provide evidence of legally required trainings or qualifications. In these cases, if you do not provide us with the required personal information, we may be unable to properly conduct or continue your application process.

HOW LONG DO WE STORE PERSONAL DATA?

Your personal data will be deleted when it is no longer reasonably required for the Permitted Purposes or you withdraw your consent (where applicable) and we are not legally required or otherwise permitted to continue storing such data. We will in particular retain your personal data where required and appropriate for SWISS KRONO to assert or defend against legal claims until the end of the relevant retention period or until the claims in question have been settled.

UPDATES OF THIS DATA PRIVACY POLICY

This Data Privacy Policy was last updated in March 2020 We reserve the right to update and change this Data Protection Notice from time to time in order to reflect and changes to the way in which we use your personal data or changing legal requirements. Any amended Data Privacy Policy will apply from the date it is posted on our intranet or otherwise made available to you.

HOW TO GET IN TOUCH WITH US

If you have any questions regarding your rights or if you have any specific requests relating to your personal data please contact our Data Protection Team by e-mail: dataprotection@swisskrono.com.

1 Data collection on our website

1.1 Cookies

The website uses so-called cookies in some cases. Cookies do not damage your computer or contain any viruses. They are designed to make our services more user-friendly, effective and secure. Cookies are small text files which are placed on your computer and saved by your browser.

Most of the cookies used by us are what are known as “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the placing of cookies and allow cookies only in certain cases, to exclude the acceptance of cookies in specific cases or in general as well as to activate automatic deleting of cookies when you close your browser. This website’s functionality may be restricted if you deactivate cookies.

Cookies that are needed to carry out electronic communication processes or to provide certain functions that you wish to use (e.g. the shopping cart function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies on your computer to allow it to provide you with a technically flawless and optimised service. If other cookies (such as cookies for analysing your browsing behaviour) are stored on your computer, they will be treated separately in this Privacy Policy.

1.2 Server log-files

The site provider automatically collects and stores information in so-called server log files, which your browser sends to us automatically.

This is:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of server request
IP address

This data will not be merged with other data sources.

The basis for processing your data is Article 6(1)(b) GDPR, which allows data to be processed to fulfil a contract or pre-contractual measures.

1.3 Contact form

If you send us questions via the contact form, we will save your information from the contact form, including the contact details you have given there, in order to process the question and in the event of follow-up questions. We will not share this information without your permission.

The data entered into the contact form will therefore be processed solely on the basis of your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. All you have to do is send us a simple email. The legality of any data processing operations carried out before you withdraw your consent will not be affected by withdrawal of your consent.

The data you provide in the contact form will remain with us until you ask us to erase it, until you withdraw your consent to your data being stored or until the data no longer needs to be stored (once your enquiry has been processed, for example). Mandatory legal regulations - particularly concerning retention periods - will not affected.

1.4 Registration on this website

You can register on our website to use additional features on the site. We will only use the data you enter for the purpose of using the respective product or service for which you have registered. The mandatory information requested during registration must be provided in full. We will otherwise decline your registration.

We use the email address provided during registration to inform you by email of important changes, such as changes to our products and services or technical changes we need to make.

The data entered when registering is processed on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time. All you have to do is send us a simple email. The legality of any data processing operations carried out before you withdraw your consent will not be affected by withdrawal of your consent.

The data collected during registration will be stored while you are registered on our website and will then be deleted. Statutory retention periods will not be affected.

1.5 Processing of data (customer and contract data)

We collect, process and use personal data only if this is necessary for the establishment, content-related design or change to the legal relationship (inventory data). This is performed on the basis of Article 6(1)(b) GDPR, which allows data to be processed to fulfil a contract or pre-contractual measures. We collect, process and use personal data about the use of our websites (user data) only if this is necessary to enable the user to use the service or to bill the user for this service.

The collected customer data is deleted after the completion of the order or the end of the business relationship. Statutory retention periods will not be affected.

1.6 Data transfer upon conclusion of contract for online shops, traders and goods dispatch

We transfer personal data to third parties only if this is necessary within the framework of processing the contract, for example to companies entrusted with the delivery of the goods or the credit institution commissioned with the payment processing. A further transfer of the data does not take place and/or only if you have explicitly consented to the transfer. A transfer of your data to third parties without explicit consent, for example for purposes of advertising, does not take place.

The basis for processing your data is Article 6(1)(b) GDPR, which allows data to be processed to fulfil a contract or pre-contractual measures.

1.7 Data transfer upon conclusion of contract for services and digital content

We transfer personal data to third parties only if this is necessary within the framework of processing the contract, for example to the credit institution commissioned with the payment processing.

A further transfer of the data does not take place and/or only if you have explicitly consented to the transfer. A transfer of your data to third parties without explicit consent, for example for purposes of advertising, does not take place.

The basis for processing your data is Article 6(1)(b) GDPR, which allows data to be processed to fulfil a contract or pre-contractual measures.

2 Social media

2.1 Sharing content via plug-ins (Facebook, Google+1, Twitter & Co.)

The content on our web pages may be shared on social networks such as Facebook, Twitter or Google+ in conformity with data protection regulations. The website uses the eRecht24 Safe Sharing Tool for this. This tool establishes direct contact between the networks and users only if the user actively clicks on one of these buttons.

This tool does not automatically transfer user data to the operators of these platforms. If the user is logged on to one of the social networks and uses the social buttons on Facebook, Google+1, Twitter & Co. etc., an information window will appear where the user can confirm the text before pressing send.

Our users can share the content of this site on social networks in ways which comply with data protection regulations, without allowing the social network operators to create full browser profiles.

3 Analysis tools and advertising

3.1 Google Analytics

This website uses functions of the web analysis service, Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

Google Analytics uses so-called “cookies”. These are text files stored on your computer and which allow an analysis of how you use the website. The information generated by the cookie about your use of this website is typically transmitted to and stored by Google on servers in the USA.

Google Analytics cookies are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of the user behaviour to optimise both its web offering and it advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. Google uses this to shorten your IP address within member states of the European Union or in other signatories to the Agreement on the European Economic Area before sending it to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this site to evaluate your use of the website, compile reports on website activity and to provide other services to the website operator regarding web and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google.

Browser Plug-in

You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent. You can also prevent the release of data generated by the cookie about your use of the website (including your IP address) to Google as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is installed that prevents the collection of your data when you visit this website in future:

Disable Google Analytics.

You can find more information on how Google Analytics deals with user data in Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded an agreement with Google on contract data processing and implement in full the strict provisions of the German data protection authorities for the use of Google Analytics.

Demographic features in Google Analytics

This website uses the “demographic features” function of Google Analytics. Using this function, reports can be produced that contain statements on the age, gender and interests of the visitors to the site. This data originates from interest-related advertising by Google as well as visitor data of third-party providers. This data cannot be matched to specific people. You can disable this feature at any time via the display settings in your Google Account, or refuse to allow Google Analytics to collect your data at all, as outlined in the section “Objecting to having your data collected”.

3.2 etracker

Our website uses the analysis service etracker. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. A usage profile can be generated from the data under a pseudonym. Cookies may be deployed for this purpose. Cookies are small text files that are stored locally in the web page user's internet browser cache. The cookies enable it to recognise your browser when you revisit the site. The data collected by etracker technology will not be used to personally identify visitors of this website and will not be merged with personal data of the bearer of the pseudonym without the separately granted consent of the person concerned.

etracker cookies remain stored on your end device until you delete them.

etracker cookies are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour to optimise both its web offering and it advertising.

You can object to the data collection and storage at any time with future effect. In order to object to the collection and storage of your visitor data in the future, you can obtain an opt-out cookie from etracker under the following link; this will mean that no visitor data from your browser will be collected and stored in the future:

https://www.etracker.de/privacy?et=V23Jbb.

An opt-out cookie called “cntcookie” from etracker will be placed. Please do not delete this cookie for as long as you wish to maintain your objection preference. Further information can be found in the etracker privacy policy:

https://www.etracker.com/de/datenschutz.html.

Agreement on contract data processing

We have concluded an agreement with etracker on contract data processing and implement in full the strict provisions of the German data protection authorities in our use of etracker.

3.3 Google AdSense

This website uses Google AdSense, a service to integrate adverts provided by Google Inc. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

Google AdSense uses so-called “cookies”, text files which are saved on your computer and allow your use of the website to be analysed. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons enable information to be evaluated, such as, for example, visitor traffic on these pages.

The information generated by the cookie and web beacons about your use of this website (including your IP address) and delivery of advertising formats will be transferred to a Google server in the U.S.A and stored there. This information may be transferred by Google to contractual parters of Google. Google will not, however, merge your IP address with other data stored about you.

The storage of AdSense cookies is performed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of the user behaviour to optimise both its web offering and it advertising.

You can prevent the installation of cookies via the corresponding setting in your browser software; however, we would like to point out to you that in this case you may not be able to completely utilise all functions of this website. By using this website you agree to Google processing the data collected about you in the manner described above and for the purpose described above.

3.4 Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

This function enables the advertising target groups created using Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalised advertising messages which, depending on your previous usage and browsing behaviour on an end device (e.g. mobile phone) have been customised to you, can also be displayed on one of your other end devices (e.g. tablet or PC).

If you have issued corresponding consent to this, Google will to this end link your web and app browsing history to your Google account. In this way the same personalised advertising messages can be displayed on every end device on which you are logged on to your Google account.

To support this function Google Analytics collects Google-authenticated IDs of users who are temporarily linked to our Google-Analytics data in order to define and create target groups for the cross-device display of advertising.

You can object to the cross-device remarketing/targeting with permanent effect by deactivating personalised advertising in your Google account; to do this, follow this link:

https://www.google.com/settings/ads/onweb/.

The merging of the collected data in your Google account is performed exclusively on the basis of your consent, which you can provide to or withdraw from Google (Article 6(1)(a) GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or you have objected to the merging, the collection of the data is based on Article 6(1)(f) GDPR). The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of the website visitor for advertising purposes.

You can find further information and data protection provisions in Google’s privacy policy:

https://www.google.com/policies/technologies/ads/.

3.5 Google AdWords and Google conversion tracking

This website uses Google AdWords. AdWords is an online advertising program provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

Within Google AdWords we use so-called conversion tracking. If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies lose their effectiveness after 30 days and cannot be used to personally identify the user. If the user visits certain pages on our website and the cookie has not yet expired, we and Google are able to recognise that you have clicked on the advert and have been forwarded to this page.

Every Google AdWords customer receives a different cookie. Cookies therefore cannot be traced via the websites of AdWords customers. The information that is gathered with the help of the conversion cookie serves to produce conversion statistics for AdWords customers who have opted for conversion tracking. As a result, the customers learn the total number of users who have clicked on their advert and were forwarded to a site with a conversion tracking tag. They do not receive any information, however, by means of which they can be identified personally. Users who do not wish to participate in tracking can simply disable the Google Conversion Tracking cookie via their Internet browser under the user settings. They will then not be included in the conversion tracking statistics.

“Conversion cookies” are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of the user behaviour to optimise both its web offering and it advertising.

More information about Google AdWords and Google conversion tracking can be found in Google’s privacy policy:

https://www.google.de/policies/privacy/.

3.6 Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

reCAPTCHA is used to check whether data is being entered into our website (e.g. on a contact form) by a person or by an automated program. For this, reCAPTCHA analyses the behaviour of the website visitor using different features. This analysis begins automatically once the website visitor accesses the website. reCAPTCHA uses various information for the analysis (e.g. IP address, length of the visitor’s stay on the website or mouse movements made by the user). The data collected in the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is performed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website against abusive automated data spying and spam.

Further information on Google reCAPTCHA and Google’s privacy policy can be accessed via the following links:

https://www.google.com/intl/de/policies/privacy/

and

https://www.google.com/recaptcha/intro/android.html.

3.7 Facebook Pixel

To tracks conversions, our website uses the visitor behaviour pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

This enables the tracking of behaviour of website users after they are forwarded to the website of the provider by clicking on a Facebook advert. In this way the effectiveness of the Facebook adverts is evaluated for statistical and market research purposes and future advertising measures optimised.

The data collected is anonymous for us as the provider of this website; we cannot draw any conclusions about the identity of the users. The data will, however, be stored and processed by Facebook, meaning that a linking with the respective user profile is possible and Facebook can according to the Facebook Data Policy use the data for its own advertising purposes. In this way, Facebook can enable the display of adverts on Facebook pages and outside of Facebook. We as the website operator have no influence of this use of the data.

In Facebook’s Privacy Policy you can find further information on the protection of your privacy:

https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the settings for adverts area at:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

For this you must also be logged on to Facebook.

If you do not have a Facebook account you can deactivate usage-based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance:

http://www.youronlinechoices.com/de/praferenzmanagement/.

4 Newsletters

4.1 Newsletter data

If you would like to receive the newsletter offered on the website, we will require your email address as well as information allowing us to verify that you are the owner of the specified email address and that you have agreed to receive the newsletter. Further data will not be collected or will be collected only on a voluntary basis. This data is used exclusively to send the requested information and will not be shared with third parties.

The data entered into the newsletter registration form will be processed solely on the basis of your consent (Article 6(1)(a) GDPR). You may revoke your consent to the storage of your data, email address, as well the use of this for the sending of the newsletter at any time, for example by following the Unsubscribe link in the newsletter. The legality of any data processing operations carried out before you withdraw your consent will not be affected by withdrawal of your consent.

We will store the data you provide us in order to receive the newsletter until you cancel your subscription, and we will erase the data when you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the members area) will not be affected.

Legal basis

The data processing is performed on the basis of your consent according to Article 6(1)(a) GDPR. You can revoke this consent at any time. The legality of any data processing operations carried out before you withdraw your consent will not be affected by withdrawal of your consent.

Storage period

We will store the data you provide us in order to receive the newsletter until you cancel your subscription and erase it from both our servers and the servers of the newsletter provider when you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the members area) will not be affected.

5 Plugins and tools

5.1 YouTube

Our website uses plug-ins from the Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our websites equipped with a YouTube plug-in, a link to the servers of YouTube is produced. In doing so, the YouTube server is informed about which of our websites you have visited.

If you are logged into your YouTube account, you enable YouTube to link your browser patterns directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is made in the interest of an attractive presentation of our online offerings. This represents a legitimate interest in the sense of Article 6(1)(f) GDPR.

You can find further information on how user data is dealt with in YouTube’s privacy policy:

https://www.google.de/intl/de/policies/privacy.

5.2 Vimeo

Our website uses plug-ins of the video portal Vimeo. The provider of this is Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of the Vimeo plug-in enabled pages on our website, you will be connected to Vimeo’s servers. The Vimeo server will then be informed about which of our pages you have visited. In addition Vimeo will obtain your IP address. This applies even if you are not logged in on Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transferred to the Vimeo servers in the USA.

If you are logged into your Vimeo account, you enable Vimeo to link your browsing patterns directly to your personal profile. You can prevent this by logging out of your Vimeo account.

You can find further information on how user data is dealt with in Vimeo’s privacy policy:

https://vimeo.com/privacy.

5.3 Google Web Fonts

In order to ensure the uniform display of fonts, this website uses so-called Web Fonts provided by Google. When you visit a page, your browser loads the necessary web fonts in your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. In this way, Google is informed that our website has been visited via your IP address. We use Google Web Fonts in the interest of displaying our online platform in a uniform and appealing way. This represents a legitimate interest in the sense of Article 6(1)(f) GDPR.

If your browser does not support Web Fonts, your computer will use a standard font.

Further information on Google Web Fonts can be accessed via

https://developers.google.com/fonts/faq

and in Google’s privacy policy:

https://www.google.com/policies/privacy/.

5.4 Google Maps

This website uses the maps service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google").

In order to use the functionality of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA, where it is stored. The provider of this website has no influence on this data transfer.

Google Maps is used to ensure the attractive presentation of our online service and to make it easy to find one of the locations specified on our website. This represents a legitimate interest in the sense of Article 6 (1)(f) GDPR.

You can find more information on the handling of user data in Google’s privacy policy:

https://www.google.de/intl/de/policies/privacy/.

SWISS KRONO AG

Willisauerstrasse 37

6122 Menznau

SWITZERLAND

Telephone: +41 41 494 94 94