Data protection
1. What is this privacy policy about?
We obtain and process various personal data in the course of our business activities. In this privacy policy, we inform you about this data processing and about your rights in this context.
Personal data is all data that relates to an identified or identifiable person and can directly or indirectly identify this person (e.g. name, contact details, email address, customer number, payment information, telephone number, IP address, etc.).
Our privacy policy is based on both the revised Swiss Data Protection Act (DSG) and the European General Data Protection Regulation (GDPR).
2. Who is responsible for data processing?
Portacomp AG (CHE-109.333.313) in Wangen SZ is responsible for processing your data. If you have any concerns in connection with data protection, you can address them to the following contact address
Portacomp AG
Nuolerstrasse 42
8855 Wangen SZ
3. Why do we process personal data?
Communication: We process personal data so that we can communicate with you and deal with your inquiries and concerns. This is the case, for example, when you send us an email, use our contact form on the website or contact us by post, telephone or in any other way, or when we contact you. For this purpose, we process in particular the content of the communication, your contact details and the marginal data of the communication.
Contract fulfillment: In order for us to conclude and process contracts with you, we normally need to process your personal data. This is particularly the case if you place a customer order in our online store, register for a customer account or make use of other offers from us in the online or offline area. In connection with the fulfillment of the contract, we process in particular your name, contact data, financial data (payment details, credit information), transaction data (shopping cart) and any data from previous orders or contacts with us.
Marketing and information: We process personal data in order to provide you with suitable offers and interesting information about our products and services. This is particularly the case if you place a customer order in our online store, register for a customer account or take advantage of other offers from us online or offline. In connection with the performance of the contract, we process in particular your name, contact details, financial data (payment details, creditworthiness information), behavioral and transaction data (shopping cart details, shopping behavior, participation in competitions, etc.), online identifiers (cookies), online tracking and traffic data, profiling data and any data from previous orders or contacts with us.
Operation of our website: In order to operate our website securely and stably, we collect technical data such as IP address, information about the operating system and settings of your end device, region, time and type of use. We also use cookies and similar technologies. For further information, see section 13.
Registration: In order to use certain offers and services (e.g. customer account, newsletter), you must register (directly with us or via our external login service providers). For this purpose, we process the data provided during the registration process. We may also collect personal data about you while you are using the offer or service; if necessary, we will provide you with further information about the processing of this data.
Security purposes and access controls: We obtain and process personal data in order to ensure and continuously improve the appropriate security of our IT and other infrastructure. This includes, for example, monitoring and controlling electronic access to our IT systems and physical access to our premises, analyzing and testing our IT infrastructures, system and error checks and creating backup copies.
Risk management and corporate governance: We obtain and process personal data as part of risk management (e.g. to protect against criminal activities) and corporate governance. This includes our business organization (e.g. resource planning) and corporate development (e.g. acquisition and sale of business units or companies).
Job application: If you apply for a job with us, we obtain and process the relevant data for the purpose of reviewing the application, carrying out the application process and, in the case of successful applications, for the preparation and conclusion of a corresponding contract. In addition to your contact details and the information from the corresponding communication, we also process the data contained in your application documents and the data that we can additionally obtain about you, e.g. from job-related social networks, the Internet, the media and from references, if you consent to us obtaining references.
4. Where does the personal data that we process come from?
We primarily process personal data provided to us by you or by our business partners. We also process personal data that we collect from users when operating our websites, apps and other applications.
The personal data may also come from publicly accessible sources (e.g. debt collection registers, media, internet, etc.) or be provided to us by authorities, clients or other third parties.
5. What is the legal basis for data processing?
The legal basis for the collection and processing of your personal data depends on the purpose of the data processing in each individual case. The following principles apply:
We process your data in good faith and for the purposes set out in this privacy policy (see section 3). In doing so, we ensure transparent and proportionate processing.
If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. The grounds for justification may include, in particular
- Your consent;
- the performance of a contract or pre-contractual measures
- the fulfillment of legal requirements;
- our legitimate interests, provided that your interests do not prevail.
You can withdraw any consent you have given at any time. We have created an opt-out option for certain processing operations for this purpose. An informal notification by e-mail is also sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation.
6. To whom do we disclose personal data?
In connection with the purposes listed in section 3, we transfer your personal data in particular to the categories of recipients listed below. If necessary, we will obtain your consent for this.
Service providers: We work with service providers in Germany and abroad who (i) process data on our behalf (e.g. IT providers), (ii) on our joint responsibility or (iii) on their own responsibility, which they have received from us or collected for us. (These service providers include, for example, IT providers, banks, insurance companies, debt collection agencies, credit agencies, freight forwarders and logistics service providers or advertising and marketing service providers). We generally agree contracts with these third parties on the use and protection of personal data.
Authorities and courts: We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if this is necessary for the fulfillment of our contractual obligations or if we are legally obliged or entitled to do so or if this appears necessary to protect and enforce our interests. These recipients process the data under their own responsibility.
Other persons: This refers to other cases where the inclusion of third parties arises from the purposes set out in section 3. This concerns, for example, delivery addressees or payment recipients specified by you, third parties in the context of agency relationships (e.g. your lawyer or your bank) or persons involved in official or legal proceedings. As part of our corporate development, we may sell or acquire businesses, parts of businesses, assets or companies or enter into partnerships, which may also result in the disclosure of data (including from you, e.g. as a customer or supplier or as their representative) to the persons involved in these transactions. In the course of communication with our competitors, industry organizations, associations and other bodies, data relating to you may also be exchanged.
All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict the processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
7. Does your personal data go abroad?
We generally process and store your data in Switzerland and the European Economic Area (EEA). It is possible that your data may exceptionally be transferred to any country in the world (in particular in connection with online services that we use). If it is a country without adequate data protection, we conclude EU standard contractual clauses in particular, but may also rely on consent or transfer data abroad on a case-by-case basis because it is necessary for the performance of a contract.
8. How long do we process personal data?
Please note that we generally process your data for as long as required by our processing purposes (see section 3), the statutory retention periods and our legitimate interests, in particular for documentation and evidence purposes, or if storage is technically necessary (e.g. in the case of backups or document management systems).
If there are no legal or contractual obligations or technical reasons to the contrary, we generally delete or anonymize your data after the storage or processing period has expired as part of our usual processes and in accordance with our retention policy. In certain cases, we will obtain your consent if we wish to process your data for longer.
9. How do we protect your personal data?
We take appropriate technical and organizational security precautions to ensure the security of your data and, in particular, to protect it from unauthorized or unlawful processing and to minimize the risk of loss, unintentional alteration, unwanted disclosure or unauthorized access.
Our technical security measures include, for example, the encryption and pseudonymization of data, access restrictions and regular backups. Organizational measures include, for example, access restrictions of a de facto nature, instructions to our employees, regular training and checks. We also oblige our processors to take appropriate technical and organizational measures if they are entrusted with the processing of your data.
We would like to point out that although we take all necessary measures to ensure data security, data security breaches can never be completely ruled out and a certain residual risk remains.
10. What rights do you have in relation to the processing of your personal data by Portacomp?
You have certain rights in connection with our data processing. If the applicable requirements are met and no legal exceptions apply, you have the following rights in particular:
- The right to object to data processing by us;
- The right to request information about all data we have collected and processed about you
- The right to have incorrect or incomplete personal data corrected;
- The right to request the deletion or anonymization of your personal data;
- The right to request the restriction of the processing of your personal data;
- The right to request the disclosure of certain personal data in a commonly used electronic format or the transfer to another controller
- The right to withdraw consent with effect for the future, insofar as processing is based on consent
If you wish to exercise your rights against us, please contact us; you will find our contact details in section 2. In order for us to rule out misuse, we must identify you (e.g. with a copy of your ID, if necessary).
Please note that conditions, exceptions or restrictions apply to these rights (e.g. to protect third parties or business secrets). We reserve the right to black out copies for reasons of data protection or confidentiality or to provide only excerpts.
11. How are cookies, similar technologies and social media plug-ins used on our website and other digital services?
[borlabs-cookie type=”btn-cookie-preference” title=”Cookie settings” /]
When using our website (including newsletters and other digital offers), data is collected that is stored in logs (in particular technical data). We may also use cookies and similar technologies (e.g. pixel tags or fingerprints) to recognize website visitors, evaluate their behavior and identify preferences. A cookie is a small file that is transmitted between the server and your system and makes it possible to recognize a specific device or browser.
You can set your browser so that it automatically rejects, accepts or deletes cookies. You can also deactivate or delete cookies in individual cases. You can find out how to manage cookies in your browser in your browser’s help menu.
Neither the technical data collected by us nor cookies generally contain any personal data. However, personal data that we or third-party providers commissioned by us store about you (e.g. if you have a user account with us or these providers) may be linked to the technical data or to the information stored in and obtained from cookies and thus possibly to your person.
We also use social media plug-ins, which are small pieces of software that establish a connection between your visit to our website and a third-party provider. The social media plug-in informs the third-party provider that you have visited our website and may send the third-party provider cookies that it has previously placed on your web browser. For more information on how these third-party providers use your personal data collected via their social media plug-ins, please refer to their respective privacy policies.
We also use our own tools and services from third-party providers (which may themselves use cookies) on our website, in particular to improve the functionality or content of our website (e.g. integration of videos or maps), to compile statistics and to place advertisements.
At present, we may in particular use offers from the following service providers and advertising partners, whereby their contact details and further information on the individual data processing can be found in the respective privacy policy:
- Google Analytics
Provider: Google Ireland
Data protection information: https://support.google.com/analytics/answer/6004245
Information for Google accounts: https://policies.google.com/technologies/partner-sites?hl=en
Some of the third-party providers we use may be located outside Switzerland. Information on the disclosure of data abroad can be found in section 6. In terms of data protection law, some of them are “only” processors on our behalf and some are controllers. Further information on this can be found in the data protection declarations.
12. Can this privacy policy be amended?
This privacy policy is not part of a contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.
Wangen SZ, August 23, 2023