Privacy policy

General Data Protection Information

In the first section, we provide you with general information about data processing and your rights as a data subject. The second section contains additional information about specific processing situations.

Controller

Swiss Steel Holding AG

Werkstrasse 7 - 6020 Emmenbrücke

Phone: +41 41 581 40 00 Fax: +41 (0) 41 209 51 04

Data Protection Officer

Data Protection Officer 

c/o Swiss Steel Holding AG

dpo@swisssteelgroup.com

Purposes and Legal Basis of Processing

In the course of our business activities, we process personal data of various data subjects (e.g., website users, prospects, and customers). Information about the purposes, legal bases, and further details of particular processing activities is provided in the lower section of these data protection notices.

Recipients

Depending on the respective processing situation, your personal data are not only processed by us but also by third parties. Possible recipients particularly include processors (e.g., web hosting, software providers, and other technical service providers) as well as third-party providers of online services and content. Further details can be found in the information on the respective processing.Recipients in the legal sense of data protection law also include affiliated companies within the Swiss Steel Group, with which personal data are shared or exchanged within the framework of the applicable data protection laws.

Transfer to Third Countries

If you use our services within the EU, we generally process your personal data within the EU or in safe third countries as defined by Art. 45 Para. 1 GDPR. Transfer to other third countries only occurs when necessary for the processing purposes described below and if permissible by law. Te latter implies that an adequate level of protection is ensured by appropriate safeguards such as EU standard contractual clauses or Binding Corporate Rules. For further information on how we protect your personal data under these circumstances, please contact our Data Protection Officer. You will be appropriately informed about possible transfers to third countries if necessary.

Storage Period

Personal data are stored as long as necessary for the purpose, as long as we are legally obliged to retain them, or as long as other legal reasons justify further processing.

Rights of Data Subjects

You have the right, in accordance with Art. 15 GDPR, to obtain information about the data stored about you, including any recipients and the planned duration of storage. If the processed data are no longer correct, you have the right to rectification (Art. 16 GDPR). If the respective legal requirements are met, you can request the erasure (Art. 17) or restriction (Art. 18) of processing and object to the processing (Art. 21 GDPR). If you believe that our processing of your personal data violates data protection laws, you have the right to complain to a data protection supervisory authority of your choice (Art. 77 GDPR).

Right to Object

You have the right to object on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1). We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, or for the establishment, exercise, or defense of legal claims. You can object to the processing of your data for direct marketing purposes and the associated profiling, if any, without stating reasons.

Processing Situations

Website Use 

Our online offerings provide information about our company and our services, initiate or conclude contractual relationships, and facilitate communication and interaction with our customers or prospects.For these purposes, we also process personal data. The scope and legal basis of data processing depend on the services requested by the user, the individual browser configuration, and the extent of any consents given.

Web Analysis, Third-Party Content

To improve communication and interaction with our customers and optimize the user experience, we use various software solutions and web technologies, including tools for web analysis and marketing as well as services for integrating third-party content like fonts, maps, or videos, provided by third parties.Analysis tools are used to collect, measure, and analyze data points, such as visitor numbers, sources of visitors, visited pages, time spent on the website, or scrolling depth. Marketing tools enable targeted control and evaluation of marketing measures (ad campaigns, affiliate advertising, multichannel analysis).Due to e-privacy and data protection reasons, the use of certain technologies and services is only permissible with the user's explicit consent.We use a cookie banner (see following section) to obtain and manage the consents that are required by law.Detailed information about the content and scope of the corresponding consents and the data processing based thereon are provided directly via the cookie banner and our cookie policy.If consent is not required, the processing of personal data is based on Art. 6 Abs. 1 S.1 lit. f GDPR for the above purposes, which also represent the interests pursued by us or our partners. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.

Cookie Banner

We use a cookie banner to obtain the required consents and document them as per our obligations. The legal basis for this is Art. 6 Abs. 1 lit. c GDPR. When visiting our website, a cookie is set to store the consents given for individual services and to control the activation or deactivation of the respective functionalities.

Newsletter

As part of our business activities, we offer various newsletter services. When you register for a newsletter, we process your contact data for the purpose of sending personalized messages (including advertising) based on your consent (Art. 6 Abs. 1 lit a. GDPR). You can unsubscribe from the newsletter at any time and thereby revoke your consent. A link to unsubscribe can be found in each newsletter message.

Contact Inquiries

If you contact us via our contact forms or by email, we process (possibly with the help of service providers) your personal data to respond to your inquiry or to process your request, regularly based on Art. 6 Abs. 1 lit. f GDPR to pursue fundamental interests of business activity, particularly corporate communication.Contract-related communication necessary for the performance of a contract with you or for pre-contractual measures based on your request also takes place based on Art. 6 Abs. 1 lit. b GDPR.

Customers, Suppliers, Service Providers

We process contact and communication data as well as other business-relevant information of our customers, cooperation partners, suppliers, and service providers or their contact persons.

Business Contacts, Contract Management

The processing is based on Art. 6 Abs. 1 lit. f GDPR in the interest of initiating, conducting, and maintaining our business relationships and on Art. 6 Abs. 1 lit. b, if the data subject (e.g., as a sole proprietor) is a contracting party.

Marketing

In addition, we process personal contact data for marketing purposes. This particularly includes the targeted and possibly personalized delivery and design of direct advertising. The legal basis for processing to pursue our advertising interests is Art. 6 Abs. 1 lit. f GDPR.If consent exists, data processing for the purposes covered by the consent also takes place based on Art. 6 Abs. 1 lit. a GDPR.Please note that consent may not be required for existing customer advertising. So we may process data for advertising based on legitimate interests without consent or after you have withdrawn consent.

Investors

We process personal data of shareholders and potential investors. This includes contact information, professional details, and, if necessary, financial information. The purpose of this data processing is to effectively communicate and exchange information about financial reports, quarterly and annual statements, and strategic company presentations. The processing is carried out to protect our legitimate communication interests based on Article 6 Abs. 1 lit. f) GDPR and, if applicable, to initiate, conduct, or terminate legal business relationships (Art. 6 Abs. 1 lit. b GDPR).

Recruiting

In the context of recruiting, we process applicant data for the purpose of initiating a possible employment relationship based on Art. 6 Abs. 1 S. 1 lit. b GDPR. If an employment relationship does not materialize, we delete all application data no later than six months after the conclusion of the application process. With your consent, which also constitutes the legal basis (Art. 6 Abs. 1 S. 1 lit. a GDPR) for further data processing, we may include your application documents in our applicant pool for future job advertisements for another year.

Whistleblower Reporting 

The whistleblowing system is used to receive and process reports of potential violations of compliance regulations. The use of the system is voluntary, and personal data such as the name and employment location of the reporting person, as well as information about other affected individuals, may be processed. Processing is based on Section 10 of the Whistleblower Protection Act (HinSchG) and Article 6(1)(c) and (f) of the GDPR, in order to fulfill the legal obligations of the organizations and to protect their legitimate interests, particularly in relation to detecting and preventing violations. The whistleblowing system is operated by an independent service provider on behalf of Swiss Steel Holding AG, and personal data will only be shared if necessary for processing the report or if there is a legal obligation. Data will be retained for three years after the procedure is concluded, in accordance with Section 11(5) HinSchG, unless a longer retention period is required.

Legal Obligations

As a company, we are subject to various legal regulations that require us to process certain personal data. Such obligations may arise, among others, from provisions of commercial, tax, and social law, e.g., in connection with regulations to prevent the financing of terrorism, financial reporting, or occupational safety. Insofar as we process your personal data for such legally prescribed purposes or transfer them to third parties (esp. governmental authorities), the legal basis is Article 6 Abs. 1 lit. c GDPR. In this context, obligations to secure, store, report, and collect data may also arise, which generally serve the control purposes of the respective authorities.