Privacy Policy

Privacy Policy of Genossenschaft Kilchzimmer

Version of 2025-11-25

In this privacy policy, we explain how we collect and process personal data. Personal data refers to all information relating to a specific or identifiable person.

If you provide us with personal data of other persons (e.g. family members, work colleagues, etc.), please ensure that they are aware of this privacy policy and only share their personal data with us if you are authorized to do so and if this data is correct.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DPA) and the revised Swiss Data Protection Act (revDPA). However, whether and to what extent these laws are applicable depends on the individual case.

1. Responsibility

We are responsible for the data processing described here. For data protection concerns, you can contact us using the following contact details:

2. Collection and Processing of Personal Data

We primarily process personal data that we receive from our customers and business partners in the context of our business relationships with them and other persons involved, or that we collect from users when operating our website, apps and other applications.

To the extent permitted, we also take certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, internet) or receive such data from authorities and other third parties.

In addition to the data you provide to us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we learn in connection with official and legal proceedings, information in connection with your professional functions and activities (so that we can, for example, conclude and process business with your employer with your help), information about you in correspondence and meetings with third parties, credit reports (insofar as we transact business with you personally), information about you given to us by people close to you (family, advisors, legal representatives, etc.) so that we can conclude or process contracts with you or involving you (e.g. references, your address for deliveries, powers of attorney, information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, distribution and other contractual partners of ours for the use or provision of services by you (e.g. payments made, purchases made)), information from the media and the internet about you (insofar as this is indicated in the specific case, e.g. in the context of an application, press review, marketing/sales, etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), as well as data in connection with the use of the website, see point 4.

3. Purposes of Data Processing and Legal Bases

We use the personal data we collect primarily to conclude and process contracts with customers and business partners, in particular to provide services to customers, but also to purchase products and services from business partners where applicable. If you work for such a customer or business partner, your personal data may also be affected in this capacity.

In addition, we also process personal data of you and other persons, to the extent permitted and deemed appropriate by us, for the following purposes in which we (and sometimes also third parties) have a legitimate interest corresponding to the purpose:

• Offer and further development of our offers, services and websites, apps and other platforms on which we are present
• Communication with third parties and processing of their inquiries
• Review and optimization of procedures for needs analysis for the purpose of direct customer approach as well as collection of personal data from publicly accessible sources for the purpose of customer acquisition
• Advertising and marketing (including organization of events), provided you have not objected to the use of your data. If we send you advertising as an existing customer of ours, you can object to this at any time.
• Market and opinion research, media monitoring
• Assertion of legal claims and defense in connection with legal disputes and official proceedings
• Prevention and clarification of criminal offenses and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud)
• Ensuring our operations, in particular IT, our websites, apps and other platforms

Insofar as you have given us consent to process your personal data for specific purposes (e.g. when you register to receive newsletters), we process this data within the framework of and based on this consent, insofar as we have no other legal basis and we require one. Consent given can be revoked at any time, but this has no effect on data processing that has already taken place.

4. Data in Connection with the Use of our Website

When you access our website, i.e. even if you do not actively transmit information, information of a general nature is automatically recorded. This includes, for example, the type of web browser, the operating system used, your IP address, referrer URL, date and time of access and similar.

They are processed in particular for the following purposes:

• Ensuring smooth use of our website
• Ensuring and evaluating system security and stability, in particular for abuse detection
• For optimal presentation and optimization of our website
• For statistical evaluation of access figures

This data is also stored in the web server's log files. This data is not stored together with other personal data of the user. We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively should concrete indications point to illegal use.

4.1. Cookies

We do not use cookies on our website.

4.2. Tracking Techniques

We do not use tracking techniques on our website.

5. Data Disclosure and Transfer Abroad

We also disclose personal data to third parties in the context of our business activities, to the extent permitted and deemed appropriate by us. This concerns in particular the following bodies:

• Service providers, dealers, suppliers and other business partners
• Customers
• Domestic and foreign authorities, official bodies or courts
• Media
• The public, including visitors to our websites and social media presences
• Competitors, industry organizations, associations, organizations and other bodies
• Other parties in potential or actual legal proceedings

all together recipients.

These recipients are mainly located in Switzerland, but may also be in the European Economic Area (EEA), or in exceptional cases potentially in any country in the world.

If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with the applicable data protection, unless they are already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption provision. For this purpose, we use the revised Standard Contractual Clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?. An exception may apply in particular in legal proceedings abroad, but also in cases of overriding public interests or if the performance of a contract requires such disclosure, if you have consented or if it concerns data made generally accessible by you to which you have not objected.

6. Duration of Retention of Personal Data

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e. for example for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data will be retained for the time during which claims can be asserted against us and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as a matter of principle and as far as possible.

7. Data Security

We take appropriate technical and organizational security measures to protect your personal data against unauthorized access and misuse, such as IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions.

8. Provision of Personal Data

Within the framework of our business relationship, it is essential to provide those personal data that are necessary for the commencement and execution of a business relationship and the fulfillment of the associated contractual obligations. You generally do not have a statutory obligation to provide us with data. Without this data, however, we will usually not be able to conclude or process a contract with you (or the entity or person you represent).

9. Your Rights Regarding Your Personal Data

Within the framework of the data protection law applicable to you and to the extent provided for therein, you have the right to information, correction and deletion of your personal data, the right to restriction of data processing and otherwise to object to our data processing, as well as to the surrender of certain personal data for the purpose of transfer to another body (so-called data portability). We reserve the right to assert the restrictions provided for by law on our part, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we may rely on this) or require it for the assertion of claims. If costs are incurred for you, we will inform you in advance. You can revoke your consent to data processing at any time. Please note that the exercise of these rights may conflict with contractual agreements and this may have consequences such as premature contract termination or further costs. We will inform you in advance in this case where this is not already regulated contractually.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your ID where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given above.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).

10. Changes to this Privacy Policy

We may amend this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by email or in another suitable manner in the event of an update.