Data Privacy Statement

The party responsible for data privacy is:

Debrunner Koenig AG
Hinterlauben 8
9004 St. Gallen
Switzerland
Telephone: +41 58 235 00 00
Email: info@dkg.ch

You can reach our data protection officer as follows:

Data Protection Officer of Klöckner & Co SE
Am Silberpalais 1
47057 Duisburg
Germany
Telephone: +49 203-307-0
Email: datenschutzbeauftragter@kloeckner.com

a) Categories of data concerned:
We process the following data each time you visit our websites:

• The connection data of the requesting computer, including the IP address
• The web pages you have accessed, including the page from which you accessed our website
• The date and time of your visit
• The type and version of the browser and operating system used
• The amount of data transmitted during the connection

We analyse the use of our website using the web analysis tools Siteimprove , Firebase Crashlytics and Clarity . These tools are used exclusively to optimise the user friendliness of the website and to provide useful information about our services. We also use the following marketing channels: Google Tag Manager, Google AdWords, DoubleClick, LinkedIn, Bing Ads, Tableau, Datalab. This data will not be merged with other personal data sources or passed on to third parties.

Art. 6(1)(f) of the GDPR explains the legal basis for the temporary storage of the data and log files. Please note that according to Swiss law – insofar as this is applicable – no legal basis is required to process personal data.

The data is not evaluated in connection with the person concerned. The analyses are based on anonymous data sets.

The anonymised statistical evaluations are stored for an unlimited period of time.

On our websites we use “Google Analytics” and “Google Search Console”, web analysis services provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA to evaluate website usage. Google Analytics uses cookies (see point 2), which are stored on your computer. Google is able to process and evaluate the information contained in the cookies about the visitor’s website and internet usage.

Google may transmit the data it collects to countries outside the EU and EEA, in particular to the USA. However, Google has pledged to observe the Privacy Shield Framework.

In addition, we ensure that your IP address is anonymised before it is transmitted to Google.

The legal basis for the use of Google Analytics is Article 6(1)(1)(f) of the EU GDPR.

b) Processing purposes, legal basis and legitimate interests, if any:
We process the data specified above in order to make our websites available to users and to safeguard their technical operation on the basis of Article 6(1)(1)(b) of the EU GDPR and for the purpose of determining and eliminating disruptions to our website services in accordance with Article 6(1)(1)(f) of the EU GDPR. The interest we pursue here is to ensure trouble-free use of our websites.

c) Duration of data storage:
We delete your data after one year, unless we need it longer for the above-mentioned purposes in exceptional cases. In such a case, we delete the data once the purpose is fulfilled.

d) Need for your cooperation in data collection / consequences of refusal:
When you visit our websites, the data specified above is automatically processed. Without providing this data, you cannot use our websites.

a) Categories of data concerned:
When you contact us, we process the data you provide with your enquiry, e.g. your name, address, telephone number and email address.

b) Processing purposes, legal basis and legitimate interests, if any:
We process the data specified above in order to answer your enquiry on the basis of Article 6(1)(1)(b) of the EU GDPR or in accordance with Article 6(1)(1)(f) of the EU GDPR. The interest we pursue here is to deal with your enquiry.

c) Duration of data storage:
We delete the specified data after your enquiry has been dealt with and the relevant legal retention periods have expired.

d) Need for your cooperation in data collection / consequences of refusal:
You must provide us only with the data we need to process your enquiry and contact you. If you do not provide us with this data, we may not be able to answer your enquiry.

We use cookies on our websites. We use both session cookies (cookies that are deleted immediately after closing the browser) and persistent cookies (cookies that are used beyond a session).

Cookies are small text files that are transmitted to your end device via the web browser you use and stored there, whereby the information stored in them is read out again. The information stored in the cookie can help your web browser to be recognised.

Regardless of the type of cookies used, you can always choose whether to accept cookies or not.

You can thus object to the use of cookies at any time, free of charge. You can exercise this right of objection in particular by setting your web browser to prevent the storage of cookies or to restrict them to certain websites only. In addition, if cookies are not technically required, you have the option to declare your objection by means of a separate procedure.

It is possible to use our websites without cookies. You can also delete stored cookies at any time in your web browser. This applies in particular to persistent cookies. Please note, however, that this may lead to technical limitations on how our websites are displayed or to limited user guidance.

Internal recipients: At DKG, only those persons who need to have access to your personal data to the extent necessary to fulfil the above-mentioned purposes are granted such access.

External recipients: We will only pass on your personal data to external recipients outside DKG if this is necessary for the processing or handling of your enquiry, if another legal authorisation exists, or if we have your consent.

External recipients may be:

a) Service providers
These are group companies of DKG or external service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance or the provision of contractually relevant content.

b) Public authorities
These are authorities and state institutions, e.g. public prosecutors’ offices, courts or tax authorities, to which we must transfer personal data for legally binding reasons.

c) Other private entities
These are sales partners, independent subsidiaries, cooperation partners or auxiliary persons, as far as necessary for the fulfilment of the contract, provided you have given your consent or a legal authorisation exists.

The recipients of personal data are not only located in the state or country in which you reside. This applies in particular to certain service providers (IT service providers in particular). They have locations both within the EU and EEA, and also other in other countries worldwide. We may also transmit data to authorities and other persons abroad if we are legally obliged to do so, or, for example, as part of a company sale or legal proceedings. Not all of these countries have adequate data protection. We compensate for the lower level of protection with the appropriate contracts, in particular the standard contractual clauses of the European Commission, which can be viewed here. In certain cases, we may transmit data, in accordance with data protection requirements, even without such contracts, e.g. if you have consented to the corresponding disclosure or if the disclosure is necessary for processing the contract, establishing/exercising/enforcing legal claims, or for overriding public interests.

Our newsletters do not contain any obvious or hidden counters, third-party advertising or links to third-party sites that are not directly related to the newsletter’s content.

We use your email address and the personal data simultaneously collected only to manage and send out the newsletter you have requested, at the frequency you indicated when you signed up. We collect anonymised statistical data such as opening rates or placement of the individual information modules in order to be able to continuously optimise our offerings.

Every newsletter contains instructions on how to unsubscribe.

To place orders in our online shop, you must register once and set a username and personal password. On future visits to our website, you can log in with your username and password and do not have to enter your address and payment information every time you place an order. Your password is stored in encrypted form and cannot be accessed by us.

When you register, you must provide information such as your title, your company details, phone number, first and last name, address and email address. We may need your consent to store this registration data (as your personal customer account), depending on the applicable law. At an appropriate point on the registration page, we will include comprehensive information on the purpose and scope of the data to be collected and processed. You can then give your consent by ticking a check box. We will record and store your declaration of consent.

Your declaration of consent expires automatically when you delete your customer account. You can also revoke your consent by sending an email to info[at]dkg.ch.

The data for your orders are also stored in your customer account.

We use the personal data collected at registration and when you order exclusively for the proper processing of your order.

You can view and change the data in your customer account, e.g. your chosen method of payment and delivery address, at any time. If you update information, we will retain a copy of your original details in order to clarify any outstanding issues between us.

We delete any data we are not legally required to keep, e.g. in accounting, as soon as the order is completed. You can delete your customer account at any time as soon as no more orders are open.

As a data subject, you have the following rights, depending on the applicable data protection law, insofar as their respective legal requirements are met:

Information: You have the right to obtain information about the personal data we process about you.

Correction: You can request that incorrect data concerning your person be corrected. In addition, you may request that incomplete data be completed.

Deletion: In certain cases, you may request the deletion of your personal data.

Restriction of processing: You can demand in certain cases that we restrict the processing of your data.

Data transferability: If you have provided us with data on the basis of a contract or consent, you may ask to view the data you have provided in a structured, common, machine-readable format or request that we transfer the data to another responsible party.

Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Art. 6(1)(1) of the GDPR. We will then no longer process this personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of establishing, exercising or defending legal claims.

Revocation of consent: If you have given us consent to process your data, you may revoke your consent at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected.

Exercising your rights: To exercise all of your above-described rights, please contact us by email at dataprivacy@kloeckner.com or by post, addressed to the Data Protection Officer of Klöckner & Co SE. Please make sure that we can clearly identify you.

Right to complain to the supervisory authority: If you believe that the processing of personal data concerning you is unlawful, you have the right to file a complaint with the data protection supervisory authority, in particular in the country of your usual place of residence, place of employment, or where the alleged violation occurred.

Automated decisions in individual cases, including profiling for the purpose of Article 22 of the EU GDPR, are not made in connection with the use of our websites.