1. what is this privacy policy about?
"Personal data" is all information that can be linked to a specific person, and "processing" means any handling of it, e.g. obtaining, using and disclosing it. We therefore very often process personal data. In this privacy policy, we explain how we do this, particularly in the context of our business activities and in connection with our website and web shop. If you would like further information on our data processing, please contact us (section 2).

2 Who is responsible for processing your data?
The following company is the "controller", i.e. the entity primarily responsible under data protection law (also "we"), for data processing in accordance with this privacy policy:

Sager AG
Dornhügelstrasse 10
CH-5724 Dürrenäsch
info@sager.ch
Phone +41 62 767 87 87

If you have any questions about data protection, you are welcome to contact us at the above postal address marked "Data protection" or at the following e-mail address: dsg@sager.ch

You may provide us with data that also relates to other persons (e.g. an employee in your company). If you do so, we will take this as confirmation that this data is correct. As we often have no direct contact with these third parties, we ask you to inform them about our processing of their data (e.g. by referring them to this privacy policy).

3. how do we process data in connection with our products and services?
If you make use of our products and services (together "services"), we process data for the preparation of the conclusion of the contract and for the execution of the corresponding contract:

• We may advertise our services, e.g. through newsletters. You will find further information on this under point 4.

• When we work with you are in contact with regard to a contractWe process data, e.g. when you contact the contact persons specified in our price lists. This mainly concerns data that you send us, e.g. name, contact details, details of services requested and the date on which you contacted us.

• When we have a Conclude a contractwe process the data from the run-up to the conclusion of the contract (see above) and information on the conclusion of the contract itself (e.g. on the conclusion date and the subject matter of the contract).

• Also during and after the contract period we process personal data. This applies, for example, to information on the purchase of services, but also to payments, contacts with customer service, mutual claims, complaints, defects, returns, data on the termination of the contract and - if there are disputes in connection with the contract - also to these and corresponding procedures. We use this data because we cannot process contracts without it.

• We also process the aforementioned data for Statistical analyses. Such analyses support the improvement and development of products and business strategies. We can also use them for personalised Marketing purposes Please refer to section 4 for further information.

For contractual partners who The company we process less personal data because data protection law only covers the data of natural persons (i.e. people). However, we process data of the contact persons with whom we are in contact, e.g. name, contact details, professional details and details from communication, and details about managers etc. as part of the general information about companies with which we work.

4 How do we process data in connection with advertising?
We also process personal data in order to advertise our services:

• Newsletter: We send out electronic newsletters that also contain advertising for our offers, but also for offers from other companies with which we work. We ask for your consent beforehand, except when we advertise certain offers to existing customers. In this context, in addition to your name and e-mail address, we also process information about which services you have already used, whether you open our newsletters and which links you click on. For this purpose, our e-mail dispatch service provider provides a function that essentially works with invisible image data that is loaded from a server via a coded link and thus transmits the corresponding information. This is a common procedure that helps us to assess the effect of newsletters and to optimise our newsletters. You can avoid this measurement by setting your e-mail programme accordingly (e.g. by switching off the automatic loading of image files).

• Online advertising: We use data to ensure that our adverts on third-party sites and platforms are only shown to those users who are likely to be interested in them. You can find more information on this in section 7.

• Market research: We also process data in order to improve services and develop new products, e.g. information about your purchases or your response to newsletters or information from customer surveys and polls or from social media, media monitoring services and public sources.

5 How do we work with service providers?
We use various services from third parties, in particular IT services (examples are providers of hosting and data analysis services), shipping and logistics services and services from banks, the post office, consultants, etc. You will find information on service providers for our website in section 8. These service providers may also process personal data to the extent necessary.

6. can we disclose data abroad?
The recipients of data are not only located in Switzerland. This includes certain service providers (especially IT service providers). These have locations both within the EU or the EEA, but also in other countries worldwide, e.g. in the USA. We may also transfer data to authorities and other persons abroad if we are legally obliged to do so or, for example, in the context of a company sale or legal proceedings (see section 9). Not all of these countries have adequate data protection. We compensate for the lower level of protection through appropriate contracts, in particular the so-called standard contractual clauses of the European Commission, which here are retrievable. In certain cases, we may also transfer data without such contracts in accordance with data protection regulations, e.g. if you have consented to the corresponding disclosure or if the disclosure is necessary for the fulfilment of the contract, for the establishment, exercise or enforcement of legal claims or for overriding public interests.

7 How do we process data in connection with our website?
Every time you use our website, certain data is collected for technical reasons and temporarily stored in log files (log data), in particular the IP address of the end device, information about the Internet service provider and the operating system of your end device, information about the referring URL, information about the browser used, date and time of access, and content accessed when visiting the website. We use this data so that our website can be used, to ensure system security and stability and to optimise our website, and for statistical purposes.
Our website also uses cookies, i.e. files that your browser automatically saves on your end device. This allows us to recognise individual visitors, but generally without identifying them. Cookies may also contain information about pages accessed and the duration of the visit. Certain cookies ("session cookies") are deleted when the browser is closed. Others ("persistent cookies") remain stored for a certain period of time so that we can recognise visitors on a subsequent visit. We may also use other technologies, e.g. to store data in the browser, but also to recognise you, e.g. pixel tags. Pixel tags are invisible images or a programme code that are loaded from a server and thereby transmit certain information (similar to the newsletters already mentioned in section 4).
You can configure your browser settings to block certain cookies or similar technologies or to delete cookies and other stored data. You can find out more about this in the help pages of your browser (usually under the heading "Data protection").

These cookies and other technologies may also originate from third-party companies that provide us with certain functions. These may also be located outside Switzerland and the EEA (see section 7 for details). For example, we use analysis services so that we can optimise our website. The relevant third-party providers can record the use of the website and combine their recordings with other information from other websites. This allows them to record user behaviour across multiple websites and end devices in order to provide us with statistical evaluations on this basis. The providers can also use this information for their own purposes, e.g. for personalised advertising on their own website or other websites. If a user is registered with the provider, the provider can assign the usage data to the person concerned.

Two of the most important third-party providers are Google and Facebook. You can find more information about these below. Other third-party providers generally process personal and other data in a similar way.

• We use on our website Google Analyticsan analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA, USA) and Google Ireland Ltd (Google Building Gordon House, Barrow St, Dublin 4, Ireland). Google collects certain information about the behaviour of users on the website and about the end device used. The IP addresses of visitors are truncated in Europe before being forwarded to the USA. Google provides us with analyses based on the recorded data, but also processes certain data for its own purposes. You can find information on data protection from Google Analytics hereand if you have a Google account yourself, you will find further details here.

• Our website also uses the "Facebook pixel" and similar technologies from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This enables us to ensure that our adverts on Facebook and Facebook partners ("Audience Network") are only shown to users who are likely to be interested in these adverts. This also allows us to measure the effectiveness of adverts on Facebook for statistical and market research purposes. You can find further information on this here. We are jointly responsible with Facebook for the exchange of data that Facebook receives as a result, for the display of personalised ads, the improvement of ad delivery and the personalisation of content. Users can address requests for information and other enquiries in this context directly to Facebook.

• We use Hotjar to better understand the needs of our users and to optimise the offer and experience on this website. Hotjar's technology gives us a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and helps us to tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect data about the behaviour of our users and their end devices, in particular the IP address of the device (is only recorded and stored in anonymised form during your website use), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
  
  For more information, see the 'about Hotjar' section on Hotjar's help page.

8. how do we process data via social media?
We operate our own presences on social networks and other platforms (Facebook, LinkedIn, Instagram and YouTube). If you communicate with us there or comment on or disseminate content, we collect information that we use primarily to communicate with you, for marketing purposes and for statistical analyses (see sections 4 and 9). Please note that the provider of the platform also collects and uses data (e.g. on user behaviour) itself, possibly together with other data known to it (e.g. for marketing purposes or to personalise the platform content). If we are jointly responsible with the provider, we will enter into a corresponding agreement, which you can find out about from the provider.

9. are there any other edits?
Yes, because very many processes are not possible without processing personal data, including standard and even unavoidable internal processes. It is not always possible to determine this precisely in advance, nor the scope of the data processed, but below you will find details of typical (though not necessarily frequent) cases:

• Communication: If we are in contact with you (e.g. when you call customer service or if you communicate with us on a social media platform), we process information about the content of the communication regarding the type, time and location of the communication. We may also process information to prove your identity.

• Compliance with legal requirements: We may disclose data to authorities within the scope of legal obligations or authorisations and to comply with internal regulations.

• Prevention: We process data to prevent criminal offences and other violations, e.g. as part of the fight against fraud or internal investigations.

• Legal proceedings: If we are involved in legal proceedings (e.g. court or administrative proceedings), we process data, e.g. about parties to the proceedings and other persons involved, such as witnesses or persons providing information, and disclose data to such parties, courts and authorities, possibly also abroad.

• IT security: We also process data for monitoring, controlling, analysing, securing and checking our IT infrastructure, as well as for backups and archiving data.

• Competition: We process data about our competitors and the market environment in general (e.g. the political situation, the association landscape, etc.). We may also process data about key individuals, in particular their name, contact details, role or function and public statements.

• Transactions: If we sell or acquire receivables, other assets, business units or companies, we process data to the extent necessary to prepare and execute such transactions, e.g. details of customers or their contact persons or employees, and also disclose corresponding data to buyers or sellers.

• Other purposes: We process data to the extent necessary for other purposes such as training and education, administration (e.g. contract management, accounting, enforcement of and defence against claims, evaluation and improvement of internal processes, preparation of anonymous statistics and analyses; acquisition or sale of receivables, businesses, parts of businesses or companies and protection of other legitimate interests.

10 How long do we process personal data?
We process your personal data as long as it is necessary for the purpose of processing (in the case of contracts, generally for the duration of the contractual relationship), as long as we have a legitimate interest in storing it (e.g. to enforce legal claims, for archiving and/or to ensure IT security) and as long as data is subject to a statutory retention obligation (e.g. a ten-year retention period applies to certain data). After these periods have expired, we delete or anonymise your personal data.

11. are there any other points that need to be considered?
Depending on the applicable law, data processing is only permitted if the applicable law specifically authorises it. This does not apply under the Swiss Data Protection Act, but does apply under the GDPR, for example, insofar as it is applicable (which can only be determined on a case-by-case basis). In this case, we base the processing of your personal data on the fact that it is necessary for the preparation and execution of contracts (section 3), that it is necessary for the legitimate interests of us or third parties, e.g. for statistical analyses (section 3) or for marketing purposes (section 4), that it is required or permitted by law or that you have separately consented to the processing. You will find the relevant provisions in Art. 5 and 8 of the GDPR.
Incidentally, you are not obliged to disclose data to us, subject to individual cases (e.g. if you have to fulfil a contractual obligation and this involves disclosing data to us). However, we must process data for legal and other reasons when we conclude and fulfil contracts. The use of our website is also not possible without data processing (see section 7).

12 What are your rights?
You have certain rights under applicable data protection law to obtain further information about our data processing and to influence it:

• You can request further information about our data processing. We are at your disposal for this purpose. You can also submit a request for information if you would like further information and a copy of your data;

• You can object to our data processing, in particular in connection with direct marketing;

• You can correct or complete incorrect or incomplete personal data or have it supplemented by a note of dispute;

• You also have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, provided that the corresponding data processing is based on your consent or is necessary for the fulfilment of the contract;

• If we process data on the basis of your consent, you can withdraw your consent at any time. The revocation is only valid for the future, and we reserve the right to continue processing data on another basis in the event of a revocation.

If you wish to exercise such a right, please contact us (Section 2). As a rule, we will have to verify your identity (e.g. by means of a copy of your ID). You are also free to lodge a complaint against our processing of your data with the competent supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).