Privacy policy

Information on the handling of personal data

We are delighted that you are interested in our website - and therefore in our company. The protection of your private rights and freedoms is important to us. We only use your data for the purposes intended. As it is important to us that you know at all times to what extent we collect, use and, if necessary, transfer your data to third parties, we will inform you in detail below about the processing of your personal data collected by us or stored by us.

It is generally possible to visit our website without providing (personal) data; if there are any exceptions to this for selected services, we will explain these in the following sections. When processing personal data, we strictly adhere to the provisions of the EU General Data Protection Regulation (GDPR) and, where applicable, other data protection regulations.

Name and address of the controller

SIGA Services AG

Rütmattstrasse 7
6017 Ruswil
Switzerland

Phone: +41 41 499 69 69
E-mail: webmaster@siga.swiss
Website: http://siga.swiss

Name and address of the data protection officer

Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster
Germany

Data protection team for general data protection inquiries:
Team e-mail: dsb.siga@cortina-consult.de
Website: https://cortina-consult.com/

Actuality of the privacy policy

To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.

Rights of data subjects

Chapter III of the EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects, which we explain to you below in relation to the processing of your personal data:

Right to information

This requirement concerns in particular information on the following details of data processing:

  • Processing purposes
  • Data categories
  • Recipients or categories of recipients, if applicable
  • If applicable, the planned storage duration or the criteria for determining this duration.
  • Note on the respective right of correction, deletion, restriction or objection
  • Existence of the right to complain to a supervisory authority
  • If applicable, origin of the data (if not collected from you)
  • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
  • If applicable, (planned) transfer to a third country or international organization
Right to rectification

We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

Right to erasure (right to be forgotten)

Provided that the processing is no longer necessary and one of the following conditions is met:

  • Discontinuation of the purpose of processing
  • Withdrawal of their consent and absence of any other legal basis for processing
  • Objection to processing without an important reason to the contrary
  • Unlawful processing
  • Required to fulfill a legal obligation
  • Data collection was carried out in accordance with Art. 8 (1) GDPR
Right to restriction of processing

Provided that one of the following conditions is met:

  • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
  • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
  • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
  • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the respective sections.

Data security information

We protect your personal data processed by us against loss, destruction, access, alteration or distribution by unauthorized persons by means of appropriate technical and organizational measures. However, despite regular checks, complete protection against all risks is not possible.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Deletion or blocking of personal data

We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

Purpose of the survey

browser types and versions usedcorrect display of the page content
Operating system used, visitor origin (referrer, e.g. Google), subpages clicked onOptimization of our website content as well as our advertising
Date and time of access to the website as well as IP address and internet service provider of the visitorEnsuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse

Other data and information for security in the event of attacks

Providing relevant information to law enforcement agencies in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:

Nature or purpose of the processing

Need

Conclusion of a sales contract (e.g. your address)Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)Compliance with legal requirements (e.g. tax regulations)
Cookies

We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

Information about specific data processing on the website

If necessary, in deviation from or in addition to the above general information, you will find below details on the individual data processing on our website.

Specific services
Fast Fonts
Purpose of processingProviding written documents
Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, United States of America
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)United States of America
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually comes from the data subject, but can also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Referrer URL, Customer ID, URL, IP-Adresse, User-Agent
    Change of purpose if necessaryno
    Data protection officer of the providerprivacy@monotype.com
    Privacy policy of the providerhttps://www.monotype.com/legal/privacy-policy
    Google Analytics
    Purpose of processingCreation of usage profiles to optimize the cost-benefit factor on the website
    Legal basisConsent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transmission, storage and processing in the USA, Google LLCThe data transfer is based on the EU-U.S. Data Privacy Framework through which Google LCC is certified
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data originates from the data subject themselves.
    If applicable, categories of pb data (if not collected directly from the data subject)which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent
    Change of purpose if necessarynone
    Opt-OutInstallation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://policies.google.com/privacy?hl=en
    Google Adsense
    Purpose of processingDisplay of advertisements.
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Google LLC, Google Ireland Limited, Alphabet Inc.1600 Amphitheatre Parkway Mountain View, CA 94043, United States of Americahttp://www.google.com/intl/de/policies/privacy/
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing of personal data in the USA.

    The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

    If known: Duration of data storageData will be deleted as soon as it is no longer required for processing purposes.
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually comes from the data subject, but can also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).IP address, mouse movements, clicks, impressions, information on whether an ad has already appeared in your browser at an earlier point in time.
    Change of purpose if necessaryno
    Privacy policy of the providerhttps://business.safety.google/privacy/
    Google Fonts
    Purpose of processingUniform representation of the fonts
    Legal basisConsent (Art. 6 para. 1 lit. a GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transmission, storage and processing in the USA, Google LLCThe data transfer is based on the EU-U.S. Data Privacy Framework through which Google LCC is certified
    If known: Duration of data storageUnknown duration
    See General time limits for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).IP address, access time, access date
    Change of purpose if necessarynone
    Opt-OutUse a browser that does not support Google Fonts
    Privacy info of the addinhttps://www.google.com/policies/privacy/
    Google Maps
    Purpose of processingProvision of maps.
    Legal basis (according to Art. 6 / 9 GDPR)Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Google Ireland Limited, Google LLC, Alphabet Inc, United States of America
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Possibly transfer, storage and processing in the USA.

    The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually comes from the data subject, but can also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).IP address, date and time of visit, location information, URL, usage data, search terms, geographic location, user agent
    Change of purpose if necessaryno
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://business.safety.google/privacy/
    Google reCaptcha
    Purpose of processingBot protection, spam prevention, fraud detection
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Google ​Ireland​ Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)United States of America
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually comes from the data subject, but can also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Screen resolution, browser language, browser plug-ins, click path, date and time of visit, IP address, user behavior, time spent on a page, user input, device information, mouse movements, geographic location, device operating system, user agent
    Change of purpose if necessaryno
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://business.safety.google/privacy/
    Google Tag Manager
    Purpose of processingSimplified management of analysis tools through central control and management of the collected analysis mechanisms
    Legal basisConsent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing of personal data in the USA.

    The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data comes from the person concerned.
    Where applicable, categories of personal data (if not collected directly from the data subject).which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, time of visit
    Opt-Outno
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://business.safety.google/privacy/
    Hotjar
    Purpose of processingCreation of usage profiles to optimize the website in terms of the cost-benefit factor
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data comes from the person concerned.
    Where applicable, categories of personal data (if not collected directly from the data subject).Date and time of visit, device type, geographical location, IP address, mouse movements, pages visited, referrer URL, screen resolution, own device identifier, language information, device operating system, browser type, clicks, domain name, own user ID, user agent
    Change of purpose, if applicableno
    Opt-OutSee Cookies and https://www.hotjar.com/legal/compliance/opt-out
    Data protection officer of the providerdpo@hotjar.com
    Privacy policy of the providerhttps://www.hotjar.com/legal/policies/privacy
    Microsoft Azure
    Purpose of processingFunctionality, optimization
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Article 6 paragraph 1 a)
  • Recipient (if applicable)Microsoft Corporation One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Irelandhttps://privacy.microsoft.com/de-de/privacystatement
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)United States of America, Microsoft Corporation

    The data transfer is based on the EU-US Data Privacy Framework, with which Microsoft Corporation is certified.

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityno
    Consequences of non-compliance (in case of failure to provide the required data)no
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually comes from the data subject, but can also come from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).IP address, date and time of visit, user agent, referrer URL
    Change of purpose if necessaryno
    YouTube
    Purpose of processingThis is a video player service. It can be used by users to view, rate, share, comment on and upload videos.
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Google Ireland Limited; Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transmission, storage and processing in the USA, Google LLCThe data transfer is based on the EU-U.S. Data Privacy Framework through which Google LCC is certified.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Device informationIP addressReferrer URLViewed videos
    Change of purpose if necessarynone
    Change of purpose if necessaryhttps://safety.google/privacy/privacy-controls/
    Data protection officer of the providerhttps://support.google.com/policies/contact/general_privacy_form
    Privacy policy of the providerhttps://policies.google.com/privacy?hl=en

    Scope and purpose of the collection, processing and use of personal data

    Personal data is "information relating to an identified or identifiable natural person". Online identifiers, such as IP addresses, may be considered personal data unless they are specifically anonymized. We process your personal data for the following purposes:

    Visit the website

    When you visit our website, our servers temporarily store the following data in a log file, the so-called server log files:

    • IP address of the requesting computer
    • Date and time of access/retrieval
    • Name and URL of the retrieved data
    • Your computer\'s operating system and the browser you are using
    • Country from which our website is accessed
    • Name of your internet access provider
    • Time zone difference to Greenwich Mean Time (GMT)
    • Content of the request (specific page)
    • Access status/HTTP status code
    • Amount of data transferred in each case
    • last visited website
    • Browser settings
    • Language and version of the browser software
    • Activated browser plugins

    We have a legitimate interest in the temporary storage of your personal data and log files. This legitimate interest exists in order to

    • deliver the content of our website correctly
    • to optimize the content of our website and the advertising for it
    • to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack
    • to further improve our offer and our website
    • to collect statistical data
    • process orders in our online store
    Newsletter

    If you would like to subscribe to our newsletter, we need your e-mail address. For the processing of your data after registration for the newsletter, it is our legitimate interest to provide existing business customers (business-to-business) with information and advertising about our products.

    We use the so-called double opt-in procedure for newsletter registration. This means that after you have entered your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. Confirmation takes place by clicking on an activation link contained in the confirmation e-mail.

    The newsletter is sent via "MailChimp". Further information on data processing with MailChimp can be found under "Specific services" in the section "Information on specific data processing on the website".

    Contact us

    On our website, you have the option of contacting us via a contact form and/or by e-mail. Which data is collected in the case of a contact form can be seen from the relevant contact form

    This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

    Our and your legitimate interest lies in responding to your request. If the purpose of the contact is to fulfill a contract to which you are a party or as an inquiry in the context of pre-contractual measures, this is an additional legal basis for the processing of your personal data.

    You can object to this data processing at any time. Please send your request to object to the following e-mail address webmaster@siga.swiss

    Use for advertising purposes

    We also use your personal data on the basis of our legitimate interest for the following purposes:

    • to continuously improve your shopping experience and make it customer-friendly and individualized for you
    • to communicate with you about your orders
    • and existing business customers (business-to-business) to communicate occasionally about specific products or marketing campaigns for which we need your e-mail address
    • and to recommend products or services that may be of interest to you

    As the data subject, you have the right to object to or unsubscribe from our direct marketing at any time: webmaster@siga.swiss

    Online store

    General information

    If you wish to use the services of our online store store.siga.swiss, it is necessary for you to provide us with the data required to process the order. The mandatory information required for processing the contract is marked separately. Further information is voluntary.

    As part of order processing, the service providers we use receive the necessary data for order and order processing. This data also includes your e-mail address and telephone number, e.g. in order to be able to arrange an individual delivery date with you. You can find more information on data protection with these providers on their websites.

    Setting up a customer account

    When you open a customer account, you receive password-protected direct access to your inventory data stored with us (e.g. name and address). In the customer account, you can view data about your completed, open and recently shipped orders, among other things.

    We require your correct name, address and payment details in order to process your order. We need your e-mail address so that we can confirm receipt of your order and its dispatch and generally so that we can communicate with you. We also use your e-mail address to identify you (as your login name) when you log in to your customer account.

    The customer accounts are not public and cannot be indexed by search engines. If you close your customer account, the associated data will be deleted, subject to legal retention obligations. It is your responsibility to back up your personal data before the end of the contract in the event of termination. We are entitled to irretrievably delete all data stored during the term of the contract.

    Use of the customer account

    You can use your customer account to log in to our online store. If you do not log out of your customer account, you will automatically remain logged in on the device you are using for a certain period of time. This function enables you to access the online store more quickly

    If you create a customer account or revise data you have already entered, the data you have entered will be saved in your account settings and can be used for further orders without having to be entered again.

    Your personal data is used for the purpose of processing your order if you have created a customer account in our online store, and also to facilitate further orders. To prevent unauthorized access to your personal data by third parties, the order process is encrypted using TLS technology.

    We store the IP address and the time of the respective user action as part of the registration and renewed logins as well as the use of our online services. This data is stored on the basis of our legitimate interests and to protect against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so. We process usage data (e.g. the websites visited on our online offering, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile, e.g. to show you product information based on the services you have used so far.

    Online application

    If you apply for a position with us, we will process your details in order to process your application. During the application process, your personal details, postal and contact addresses and the documents relating to your application, such as your letter of motivation, CV and references, are stored in the applicant database. Applicants can also voluntarily provide us with additional information. This data is only stored, evaluated, processed or forwarded internally as part of your application. The data may be processed for statistical purposes (e.g. reporting). It is not possible to draw conclusions about individual persons. By submitting your application to us, you consent to the processing of your data for the purposes of the application process

    Otherwise, your application data will be processed on our behalf by a host provider on the basis of contracts in accordance with Art. 28 GDPR.

    The legal basis for the processing of your personal data is the common interest in the processing of your application. If the processing of the application data serves the fulfillment of a contract to which you are a party or the implementation of pre-contractual measures, this is an additional legal basis.

    If we conclude an employment contract with you, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the application process ends without employment, your personal data will be stored for a further six months for documentation purposes and then deleted, unless you have given us your consent to use your details for further application processes with us.

    Notwithstanding the above, you have the option of having your electronic data deleted at any time. You can send your request for deletion to the person named as the contact person in the job advertisement or to hr@siga.swiss.