Privacy Policy

Responsibility for the processing of personal data:

Weyrauch Investment AG
Unterbrüglenweg 2
6340 Baar
Switzerland

We will indicate if other controllers are responsible for the processing of personal data in individual cases.

We process the personal data required to carry out our activities and operations on a permanent, user-friendly, secure and reliable basis. Such personal data may in particular include inventory and contact data, browser and device data, content data, metadata or peripheral data and usage data, location data, sales data as well as contract and payment data.

We process personal data for as long as required for the respective purpose or purposes or as required by law. Personal data that is no longer required for processing is anonymised or deleted.

We may have personal data processed by third parties. We may process personal data jointly with third parties or transfer personal data to third parties. Such third parties include, in particular, specialised providers whose services we use. We also ensure data protection when working with such third parties.

As a general rule, we process personal data only with the consent of the data subject. If and insofar as processing is permitted for other legal reasons, we may dispense with obtaining consent. For example, we may process personal data without consent in order to perform a contract, comply with legal obligations or safeguard overriding interests.

In this context, we process in particular information voluntarily provided to us by a data subject when contacting us – for example by post, email, instant messaging, contact form, social media or telephone – or when registering for a user account.

We may store such information, for example, in an address book, a Customer Relationship Management system (CRM system) or comparable tools. If we receive data about other individuals, the persons providing this data are required to ensure data protection in relation to those individuals and to ensure that the personal data is accurate.

We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in connection with our activities and operations, insofar as such processing is permitted for legal reasons.

We process personal data relating to applicants insofar as this is necessary to assess their suitability for employment or for the subsequent performance of an employment contract.

The required personal data results in particular from the information requested, for example in connection with a job advertisement. We also process personal data voluntarily disclosed or published by applicants, in particular as part of cover letters, CVs, other application documents and online profiles.

We generally process personal data in Switzerland. However, we may also disclose or export personal data to other countries, in particular in order to process it there or have it processed there.

We may disclose personal data to all countries and territories on Earth as well as elsewhere in the universe provided that the applicable law ensures adequate data protection in accordance with a decision of the Swiss Federal Council.

We may disclose personal data to countries whose laws do not provide adequate data protection, provided that appropriate data protection is ensured by other means. Appropriate data protection may, for example, be ensured through contractual agreements, standard data protection clauses or other suitable safeguards.

In exceptional cases, we may export personal data to countries without adequate or appropriate data protection if the specific requirements of data protection law are met, for example where the data subject has expressly consented or where there is a direct connection with the conclusion or performance of a contract. Upon request, we will provide data subjects with information about any safeguards or provide a copy of such safeguards.

We take appropriate technical and organisational measures to ensure a level of data security appropriate to the respective risk. However, we cannot guarantee absolute data security.

Access to our website is protected by transport encryption (SSL/TLS), in particular using Hypertext Transfer Protocol Secure (HTTPS). Most browsers indicate transport encryption by displaying a padlock symbol in the address bar.

Our digital communication – like digital communication in general – is subject to mass surveillance without cause or suspicion and other forms of surveillance by security authorities in Switzerland, elsewhere in Europe, the United States of America (USA) and other countries. We have no direct influence over the corresponding processing of personal data by intelligence services, police authorities and other security authorities.

We maintain a presence on social media platforms and other online platforms in order to communicate with interested individuals and provide information about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.

The General Terms and Conditions (GTC), terms of use, privacy policies and other provisions of the respective platform operators also apply. These provisions provide information in particular about the rights of data subjects directly in relation to the respective platform, including the right of access.

We use services provided by specialised third parties in order to carry out our activities and operations on a permanent, user-friendly, secure and reliable basis. Such services allow us, among other things, to embed functions and content into our website. When such content is embedded, the services used may, for technically necessary reasons, temporarily collect users' Internet Protocol (IP) addresses.

For necessary security-related, statistical and technical purposes, third parties whose services we use may process data relating to our activities and operations in aggregated, anonymised or pseudonymised form. This may include, for example, performance or usage data required to provide the respective service. In particular, we use:

• Google services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the European Economic Area (EEA) and Switzerland.
• Microsoft services: Providers: Microsoft Corporation (USA) / Microsoft Ireland Operations Limited (Ireland) for users in the European Economic Area (EEA), the United Kingdom and Switzerland.

We seek to determine how our online offering is used. In this context, we may measure the success and reach of our activities and operations as well as the impact of links from third parties to our website.

We may also test and compare how different parts or versions of our online offering are used (“A/B testing”). Based on the results of success and reach measurement, we may in particular correct errors, strengthen popular content and improve our online offering.

For success and reach measurement, the Internet Protocol (IP) addresses of individual users are generally stored. In such cases, IP addresses are generally shortened (“IP masking”) in accordance with the principle of data minimisation through pseudonymisation.

Cookies may be used for success and reach measurement and user profiles may be created. Any user profiles created may include, for example, individual pages visited or content viewed on our website, information about screen or browser window size and at least an approximate location.

Any user profiles are generally created exclusively in pseudonymised form and are not used to identify individual users. Certain third-party services where users are logged in may associate use of our online offering with the respective user account or user profile.

In particular, we use:

• Google Analytics: Success and reach measurement; provider: Google; including measurement across different browsers and devices (cross-device tracking).