Privacy Policy

Scope of the Privacy Policy
This privacy policy outlines the steps we have taken to meet data protection requirements under Swiss and EU law as well as other applicable laws governing the collection, storage, use, and transmission ("processing") of personal data. In this privacy policy, we describe what we do with your data when you use http://www.rex-royal.ch or other websites or apps from us, use our services or products, otherwise engage with us under a contract, communicate with us, or otherwise interact with us. Where applicable, we will inform you in a timely written notice about additional processing activities not mentioned in this privacy policy. Additionally, we may inform you about the processing of your data separately, e.g., in consent declarations, contractual conditions, additional privacy statements, forms, and notices.

If you provide us with data about other people, such as colleagues, we assume that you are authorized to do so and that this data is accurate. By providing data about third parties, you confirm this. Please also ensure that these third parties are informed about this privacy policy. Swiss data protection law (DSG) applies, and possibly further applicable law from the European General Data Protection Regulation (GDPR).

Processing of Personal Data; Type, Purpose, and Use
When you visit our website www.rex-royal.ch, information is temporarily stored in so-called log files on our server. This information is automatically sent by the browser of your end device. Specifically:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software

The data mentioned is processed by us for the following purposes:
Personal data is all information that relates to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular storing, disclosing, obtaining, deleting, storing, modifying, destroying, and using personal data.

We process the personal data necessary to effectively and user-friendly provide our services, ensuring they are permanently secure and reliable. We generally only process personal data with the consent of the data subject, unless the processing is permitted for other reasons, for example, to fulfill a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests, because the processing is evident from the circumstances or after prior information. In this context, we particularly process information provided by the data subject when contacting us – for example, by mail, email, contact form, phone, or social media – and may store such information in a Customer Relationship Management System (CRM system), online shop software, or comparable tools.

We process personal data for the duration necessary for the respective purpose(s). In the case of longer retention obligations due to legal and other obligations to which we are subject, we limit the processing accordingly. We may have personal data processed by third parties – also abroad. Such processors process personal data on our behalf. We ensure that such third parties guarantee adequate data protection. We are present on social media platforms and other online platforms to communicate with customers and interested parties and inform them about our offerings. The general terms and conditions (GTC), privacy policies, and other provisions of the respective operators apply.

Legal Basis for Processing Personal Data
We process personal data in accordance with Swiss data protection law (DSG) and other applicable data protection laws (e.g., GDPR).

Processing of Personal Data
Rex-Royal can process personal data in the following situations and for the following purposes:
- Communication: We may process personal data when you contact Rex-Royal or when Rex-Royal contacts you. In this case, we usually process names and contact details as well as the content and time of the respective communications. We may use this data to provide you with information, handle your concern, and communicate with you. Communications may also be forwarded within Rex-Royal.
- Visiting websites, using apps: When you visit our websites, we may automatically collect information such as your browser, the IP address of your computer, your Internet service provider, the website from which you switched to our website, the duration of your visit on our website, and the type of device you use (such as PC, smartphone, or tablet and the corresponding operating system). We may also record which pages you accessed during your visit to our website. This information may be used to improve the functionality of our website, for statistical purposes, and within the scope of system administration. We may also use "cookies". These are small text files that are temporarily or permanently stored on your device when you visit our website. Cookies collect information about the number of visitors to the websites, the pages visited, and the time spent on the websites. They are often necessary for the functionality of the website. Other cookies may be used for the personalization of the offering so that Rex-Royal can show you targeted advertising from third parties. You can refuse the use of cookies by adjusting the settings on your browser or clicking on the cookie settings on our website. After refusing the use of cookies, you may still be able to visit our websites, but some functions may not work properly.
- Use of email: We may use your name and email address to send you notifications, updates, invitations to events, and other information by email. However, we will first ask for your consent unless we have already obtained your contact details from you in connection with our services. If you receive marketing communications from us and no longer wish to, you can unsubscribe at any time by following the link in these emails. We may use external service providers to learn if you open our emails or click on the links contained therein. You can prevent this by adjusting the settings in your email client.
- Customer events: When we hold customer events (such as promotional events, sponsorship events, cultural events, and sports events), we may also process personal data. This data may include the name and address of the participants or interested parties and – depending on the event – other data such as your date of birth. We may process this information for the purpose of conducting customer events but also to contact you and get to know you better.
- Business partners: Rex-Royal works with various companies and business partners such as suppliers, commercial customers of goods and services, and service providers (e.g., IT service providers). We may process personal data about the contact persons of these companies, such as their names, functions, titles, and nationalities/residence permits. Depending on the area of activity, we may be required to examine the respective company and/or its employees in detail. If this is the case, we will inform you separately. We may also process personal data about you to improve our customer orientation, customer satisfaction, and customer loyalty ("Customer Relationship Management").
- Administration: We may process personal data for our internal administration. For example, we may process personal data in connection with IT or property management. We may also process personal data for accounting and archiving purposes and generally to review and improve internal processes.
- Protection of rights: To protect our rights, we may process personal data under various circumstances, such as to assert claims in court or out of court or to defend claims against us. For example, we may clarify the prospects of success of a case or submit documents to an authority. Authorities may also require us to disclose documents containing personal data.

We process personal data based on the following grounds:
- to fulfill a contract,
- based on legitimate interests. These include, for example, the interest in customer care and communication with customers outside of a contractual relationship, for marketing activities, to get to know our customers and other persons better, to improve products and services and develop new ones, to combat fraud, and to prevent and investigate crimes, to protect customers, personnel, and other persons and data, secrets, and assets of Rex-Royal, to ensure IT security, especially in connection with the use of websites, apps, and other IT infrastructure, to ensure and organize business operations, including the operation and development of websites and other systems, to manage and develop Rex-Royal, and to enforce or defend legal claims,
- based on consent if obtained separately, and
- to comply with legal and regulatory obligations.

In general, you are not obliged to disclose personal data to us. However, we need to collect and process certain data to conclude and fulfill a contract and for other purposes.
Disclosure of Data to Third Parties (including Joint Controllers and Processors)

Your data will be disclosed to our partners (third parties) as required for order processing. When we transfer data to external service providers, technical and organizational measures are taken to ensure that the transfer complies with the statutory provisions of data protection. If you voluntarily provide us with personal or company data, we will not use, process, or disclose this data beyond the legally permissible scope or the scope specified by you in a consent declaration. Furthermore, we only disclose your data to external service providers to the extent necessary for contract processing, and these service providers have agreed to the corresponding confidentiality and diligence provisions. Additionally, we only disclose your data when we are legally obliged to do so by official or judicial orders.

Cookies
We use cookies (session cookies as well as temporary and permanent cookies) on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. A cookie does not necessarily mean that we can identify you. The use of cookies serves, on the one hand, to record the frequency of use, the number of users, and behaviors on our website, to increase the security of the website, and to design our information offer to be user-friendly. Once you leave the website, these cookies are automatically deleted.

We also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period. When you visit our site again to use our services, it is automatically recognized that you have already been with us and what inputs and settings you have made so that you do not have to enter them again. You can configure your browser settings so that no cookies are stored on your computer. The complete deactivation of cookies may result in you not being able to use all functions of our website. By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and to the collection, storage, and use of personal usage data, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser settings to refuse cookies from third-party providers.

Analysis Tools
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ('Google'). Google Analytics uses so-called 'cookies', text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your IP address, which is anonymized using the _anonymizeIp() method so that it can no longer be assigned to a connection) will be transmitted to and stored by Google on servers in the USA. The following data is collected: address and title of the page visited or files downloaded, screen resolution, browser type, browser version, browser window size, color depth, browser language, Java plugin enabled or not, Flash version, and information about the origin. This list may be expanded by Google and reflects only the current knowledge about the analysis. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies by selecting the appropriate settings on your browser software; however, we point out that in this case, you may not be able to use all the functions of this website fully. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection of data by Google Analytics with effect for the future by installing a deactivation add-on for your browser (http://tools.google.com/dlpage/gaoptout?hl=en).

Social Media Plugin
We use the following social plug-ins on our website to make our company more widely known through them. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective providers. Data processing in connection with these plugins takes place with your consent when you use these plugins.

Facebook
Our website uses plugins of the social network Facebook, offered by Facebook Inc. The Facebook plugins are marked with a Facebook logo or the addition “Like” or “Share”. An overview of the Facebook plugins and their appearance can be found at https://developers.facebook.com/docs/plugins. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not logged into Facebook at the moment. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example, by pressing the “Like” button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and shown to your Facebook friends. For the purpose and scope of data collection and further processing and use of data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, please refer to Facebook’s data protection information: http://www.facebook.com/policy.php.

LinkedIn
Our website has plugins installed from the social network LinkedIn Corporation USA. The LinkedIn plugin (“LinkedIn Recommended” button) can be recognized by the LinkedIn logo. When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the LinkedIn server. LinkedIn thereby receives the information that you have visited our site with your IP address. If you click the LinkedIn button while logged into your LinkedIn account, you can link the contents of our pages to your LinkedIn profile. This allows LinkedIn to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by LinkedIn. Further information can be found at https://www.linkedin.com/legal/privacy-policy.

Google Maps
We use Google Maps services on our website (e.g., in-screen or via interfaces/API). Google LLC USA may therefore process information about your actual location. Google uses various technologies to determine location, such as IP addresses, GPS, and other sensors that provide Google with information about nearby devices, Wi-Fi access points, or cell towers. For the purpose and scope of data collection and further processing and use of data by Google, as well as your rights and settings options for protecting your privacy, please refer to Google’s privacy policy at https://policies.google.com/privacy?hl=en.

YouTube
Our website includes at least one plugin from YouTube, belonging to Google Inc., located at LLC 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that contains a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed about which specific page of our website you visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your account beforehand. For more information on how YouTube collects and uses your data, please refer to YouTube’s privacy policy at http://www.youtube.com/t/privacy.

Newsletter
By signing up for the newsletter and confirming to receive the newsletter (double opt-in), the following personal data is processed: name, first name, email address. The data is processed for the purpose of authenticating the subscriber at the time of registration and sending the subscriber a newsletter to determine if and when they opened it and individual articles in it. The data you enter for the purpose of receiving the newsletter will be processed by Toolpark if externally processed. The processing of this data is based solely on your consent. You can revoke this consent at any time, for example via the "Unsubscribe" link in the newsletter. The data processing that has already taken place remains unaffected by the revocation. If we send newsletters using Toolpark, we can determine if a newsletter was opened and which links were clicked. Toolpark enables us to divide recipients into different categories. For more information, please visit: https://www.toolpark.com/de/1034/Rechtliche-Bestimmungen.htm. If you do not want analysis, you must unsubscribe from the newsletter.

Access, Deletion, and Correction
You can request information about the data we have stored about you at any time. We ask you to send an information request by email to the address below. Together with the request, an identity proof must be sent to the same address. You have the possibility to request the deletion or correction of your data at any time. You are, of course, also entitled to revoke your consent to the use or processing of personal data with effect for the future at any time. We ask you to write to us by email at info@rex-royal.ch.

Stored data will be deleted by us if it is no longer needed for the specified purpose. Regarding the deletion of data, it should be noted that we are subject to certain legal obligations that require a retention obligation for certain data. We have to comply with this obligation. If you wish to delete data that is subject to the legal retention obligation, the data will be locked in our system and used only for the purpose of fulfilling the legal retention obligations. After the retention period has expired, your deletion request will be complied with.

Right to Object
If your personal data is processed based on legitimate interests, you have the right to object to the processing of your personal data, provided there are reasons arising from your particular situation, or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

Data Security
We will keep your data secure and therefore take all reasonable measures to protect your data from loss, access, misuse, or alteration. Our employees and contractors who have access to your data are contractually obligated to maintain confidentiality and comply with data protection regulations. In some cases, it will be necessary to forward your requests to affiliated companies. Even in these cases, your data will be treated confidentially.

Contact Information
This privacy policy applies to data processing by:

Rex-Royal AG
Peter L. Sager
Industriestrasse 34
8108 Dällikon-Zurich
info@rex-royal.ch
+41 44 847 57 57
www.rex-royal.ch

Supervisory Authority
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
Switzerland
https://www.edoeb.admin.ch/edoeb/en/home.html

Currency and Changes to this Privacy Policy
Changes to this privacy policy will be published on this page. This way, you can always find out what data we store, how we collect and use it.