1) Introduction and contact details of the responsible person
1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.
1.2 The responsible person for data processing on this website pursuant to the General Data Protection Regulation (GDPR) is Alexander Lehe, Wydeweg 6, 5620 Bremgarten AG, Switzerland, Tel.: +41 78 260 45 44, Email: a.lehe@enerveritas.com. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data collection when visiting our website
2.1 When using our website solely for informational purposes, i.e., if you do not register or otherwise provide us with information, we collect only those data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data that are technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page (Referrer)
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to review the server log files afterwards if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible person). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar. This encryption ensures that data transmitted between your browser and the website is secure and cannot be read or manipulated by unauthorized parties during transfer.
3) Hosting & Content-Delivery-Network
For hosting our website and displaying page content, we use a provider that performs its services exclusively on servers within the European Union, either by itself or through selected subcontractors.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement (Auftragsverarbeitungsvertrag) with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
4) Contact
In the context of contacting us (e.g., via contact form or email), personal data are collected. Which data are collected when using a contact form is evident from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for making contact and the associated technical administration.
The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your inquiry has been conclusively processed. This is the case when it can be inferred from the circumstances that the matter has been finally resolved and as long as there are no legal retention obligations.
5) Rights of the Data Subject
5.1 The applicable data protection law grants you the following rights as a data subject regarding the processing of your personal data by the controller (rights of information and intervention), whereby the specific conditions for exercising these rights refer to the stated legal basis:
- Right of access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to be informed according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw given consent according to Art. 7 para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
5.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
MAKE USE OF YOUR RIGHT OF OBJECTION, AND WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNING YOU. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
MAKE USE OF YOUR RIGHT OF OBJECTION, AND WE WILL STOP PROCESSING THE PERSONAL DATA FOR DIRECT MARKETING PURPOSES.
6) Duration of storage of personal data
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and – if applicable – the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on an explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you do not revoke your consent.
If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, these data are routinely deleted after the expiry of the retention periods, provided they are no longer required for contract fulfillment or contract initiation and/or there is no longer a legitimate interest on our part to continue storing them.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data are stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Bei der Verarbeitung von personenbezogenen Daten zum Zwecke der Direktwerbung auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO werden diese Daten so lange gespeichert, bis Sie Ihr Widerspruchsrecht nach Art. 21 Abs. 2 DSGVO ausüben.
Unless otherwise specified in the other information of this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.