GRIWA RENT AG ("GRIWA RENT" or "we") attaches great importance to the protection of your data and the preservation of your privacy. In this statement, we would therefore like to inform you about the collection and use of individual data about personal or factual circumstances of an identified or identifiable natural person ("personal data") in the context of the use of our website.

This privacy policy applies exclusively to our website (www.griwarent.ch) ("website") and subdomains in the format subdomain.griwaarchitektur.ch. We accept no responsibility and disclaim all liability for links that lead from our website to third-party websites. Clicking on an external link is entirely your own responsibility.

1. Contact person

If you have any questions or messages regarding your personal data, please do not hesitate to contact us. You can reach us as follows:

GRIWA RENT AG

Dorfstrasse 118

3818 Grindelwald

welcome@griwarent.ch

2. Processing of personal data

We only collect the data listed below as part of your customer profile:

All information that you explicitly provide as part of an enquiry in the contact form or an e-mail (name, address, age, contact details, payment and billing information, etc.).
 

We do not engage in profiling on our website in the sense of automated processing of personal data that consists of using this data to evaluate certain personal aspects of you (e.g. for analyses or predictions regarding work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location), and only collect or process particularly sensitive personal data (e.g. on religious, political or ideological views, state of health, etc.) in exceptional cases and in this case limited to contractual or legal obligations.

3 Use of your personal data & disclosure to third parties

The processing of your personal data on the website takes place exclusively in the factual context of an enquiry or order placed by you, to correct errors or improve our website and, if necessary, for internal statistical purposes.
 

Your data will not be passed on to other third parties via the website without your express consent. Exceptions to this are our service partners that we need to process the contractual relationship (e.g. financial institutions for processing payments, the post office, tools for providing our accounting services or general order management, etc.). In these cases, we strictly observe the provisions of the applicable data protection laws. The scope of data transmission is limited to a minimum.

The use of service partners in countries other than Switzerland or the member states of the European Economic Area is only an option for us if the country in question either has an equivalent level of data protection according to the Federal Council's list of countries or if we can contractually ensure the equivalence of the level of protection (e.g. through contracts or the conclusion of so-called standard contractual clauses).

4. Messages, notifications and updates

Communication for promotional purposes: We may send you marketing content about our website, services and products, as well as products we offer jointly with our partners and third-party products and services, through various communication channels such as email, SMS, pop-ups, push notifications and messaging apps. You can unsubscribe from this advertising by following the instructions contained in the messages you receive from us. You can also opt out of receiving future marketing communications at any time by sending a message to welcome@griwarent.ch.

Communication for information and other purposes: We will send you communications that are required or necessary for all customers, notifications that contain important information, and other communications that you request from us. You cannot unsubscribe from these communications. However, you may be able to customise the media and format through which you receive the notifications.

5. Operation and hosting of this website (Cmsbox)

This website uses the Cmsbox content management system. The company Cmsbox GmbH, Terrassenweg 18, 3012 Bern, Switzerland, is responsible for the technical operation and hosting of this system. Cmsbox GmbH collects personal data so that it can provide, check and improve its services. This includes the following:
 

5.1 Server records

Each time this website is accessed, the server infrastructure records a range of general access data, which is stored in log files. The name of the website accessed, the URL, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and the user's IP address are recorded. This data is required to check and guarantee the functionality and security of the Cmsbox system.
 

5.2 Matamo

Cmsbox uses the tracking system Matamo (formerly PiWiK) to analyse visitor numbers. This data collection supports Cmsbox GmbH in operating and improving the technical infrastructure, but can also be deactivated on explicit request. The collection of data is pseudonymised, which means that it is no longer possible to identify a visitor. The underlying records are also deleted after 180 days.
 

5.3 reCaptcha

The forms on our website are protected by Google reCaptcha v3 against unauthorised sending by robots. It is technically unavoidable that a large amount of personal data is transferred to Google for this purpose. Google is committed to ensuring adequate data protection.
 

5.4 Cookies

Our website uses so-called cookies. Cookies are harmless text files that your browser automatically saves on your end device when you visit our website. They make it possible to identify a visitor within a predefined period of time. These cookies are used to enable you to use technical functions such as contact forms. They are also the technical tool for the data collection by third-party providers and Google Analytics mentioned under "Operation and hosting of this website". Most Internet browsers accept cookies automatically. However, you can configure your browser at any time so that no cookies are stored. In principle, this website can also be used without accepting cookies. However, if cookies are deactivated, the functionality of this website may be restricted.

6. Web fonts
This website uses myfonts.com, a font service provided by Monotype GmbH, Spichernstraße 2, 10777 Berlin (myfonts.com). Each time this website is accessed, files are loaded from a myfonts.com server to display the texts in a specific font. Your IP address may be transmitted to a myfontss.com server and stored as part of the usual weblogs. Further processing is the responsibility of myfonts.com, the corresponding conditions and setting options can be found in the data protection information of myfonts.com: myfonts.com/website-use-privacy-policy

7. Analytical cookies and for marketing

Google Tag Manager is used on our website. Google Tag Manager is a cookie-free domain that does not collect any personal data. The Google Tag Manager triggers other tags, which in turn may collect data. We hereby point this out separately. The Google Tag Manager does not access this data. If deactivation has been carried out by the user at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
 

Google Analytics (resident third party cookies)

The Google Analytics service is used to analyse the usage behaviour of our website. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information that is collected includes, for example, IP address, location, time or frequency of visits to our website. We have resorted to IP anonymisation for the use of Google tools. This addition means that the last digits of your IP address are truncated before they are definitively stored on the Google servers. As a result, the technical and analytical Google services can still be used properly, but you are no longer fully traceable and therefore have a higher degree of anonymity in relation to your surfing behaviour than without IP anonymisation.

We also use the remarketing function as part of the Google Analytics usage spectrum. This allows us to show you personalised advertising on suitable advertising spaces on other websites based on the interests you have shown on our website. This option is limited to a maximum of 18 months. Retargeting enables us to place adverts that are as relevant as possible for you and to measure the efficiency and reach of the advertising media, but also to check the invoices of our advertising partners for campaigns placed.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it will not associate your IP address with any other data. Google also provides further data protection information for you at google.com/policies/privacy, e.g. on the options for preventing the use of data.

Google also offers a so-called deactivation add-on at tools.google.com/gaoptout along with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this privacy policy.

Please note that if you delete the cookies in your browser settings, this may result in the opt-out cookie also being deleted and you may have to reactivate it.

Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies. To do this, you must select "Do not accept cookies" in your browser settings. Please note that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Google AdWords with conversion tracking (resident third party cookies)

We use conversion tracking to advertise our website in a targeted manner. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

If you click on an advert placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies lose their validity after 30 days and are not used for your personal identification. If the cookie is still valid and you visit a specific page of our website, both we and Google can analyse that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.

Google uses the information obtained in this way to compile statistics about your visit to our website. We also receive information about the number of users who have clicked on our advert(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords will be able to identify you in this way.

8 Company pages on social media

8.1 Media used

We operate a company page or a company profile on the following social media, on which we publish information and interact with other platform users:

8.2 Data processing on company websites

We process personal data in accordance with the principles of this privacy policy. Corresponding personal data may be processed if you interact with us via our company pages on the relevant social media.

When a company website is visited, the respective platform operator collects information that enables it to recognise users and comprehensively analyse user behaviour. The platform operator can also use the data collected in this way to create user profiles. If you are logged in with your corresponding user account when you visit a company page, the respective provider can also assign this visit to your account. The respective provider only provides us with an anonymised statistical evaluation of the use of our company website based on the information obtained.

In principle, you can assert your rights under data protection law in relation to data processing by our company pages both against us and against the respective operator of a platform. However, we would like to point out that these can be asserted most effectively with the respective operator, as only they have access to the user's data and can take appropriate measures and provide information directly.
 

Further information on data processing, including the place of processing, by the respective operator can be found at:

9. Use of Mailchimp in newsletter dispatch

The newsletter is sent using "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and analyse the newsletter on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
 

You can find MailChimp's privacy policy here: mailchimp.com/legal/privacy  

The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our endeavour nor that of MailChimp to observe individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

10. Transmission of personal data

Unless expressly agreed otherwise, electronic communication takes place via unencrypted e-mails. The use of e-mails is not technically secure; e-mails may not be delivered. When e-mails are transmitted, they may leave national borders, even if the sender and recipient are in Switzerland. The confidentiality of e-mails cannot be guaranteed if they are not encrypted or are insufficiently encrypted.
 

Even when using forms that are available on our website, only the transmission of your message from your computer to the web server is encrypted.

By using the forms or sending an e-mail, you consent to communication via e-mail in full knowledge of the risks described. The use of encrypted or otherwise secure communication channels must be agreed with us in advance.

11 Retention of your personal data

We only store your data for as long as is legally required or as long as is necessary for the purpose of processing. In the case of analyses, we store your data until the analysis has been completed. If we store data on the basis of a contractual relationship with you, this data will be stored for at least as long as the contractual relationship exists and at most as long as limitation periods for possible claims from us run or statutory or contractual retention obligations exist. As a rule, the retention period does not exceed 10 years (calculated from the end of the contractual or de facto relationship with you).

12. Information, correction, transfer

You have the right to free information about your stored data and the right to rectification at any time. Please contact us for this purpose. Our contact details can be found in section 1 of this privacy policy.

You also have the right to request the transfer of your electronically stored personal data to another controller free of charge. Please note, however, that we cannot adapt your data to any special format specifications of another controller and will not transfer your business history or passwords under any circumstances.

13 Revocation and deletion

You can revoke your consent to this privacy policy at any time and request the deletion of your personal data. Please contact us for this purpose. Our contact details can be found in section 2 of this privacy policy.

In the event of a cancellation request, we will block your profile. Please note, however, that we are obliged under commercial and tax law to keep accounting documents for at least 10 financial years. We can therefore neither delete nor process the personal data contained in these documents. Your deletion request therefore only applies to this extent for future processing and only for personal data that we do not process on the basis of a legal justification, but exclusively on the basis of your consent.

If a contractual relationship is still pending at the time of receipt of your cancellation and deletion request, your personal data will continue to be processed until the contract has been fully processed. Your cancellation under data protection law expressly has no influence on the processing of existing contractual relationships and is not considered an extraordinary reason for termination.

14 Complaint to a supervisory authority

With the entry into force of the revised DPA (expected on 1 September 2023), you have the right to lodge a complaint with the competent supervisory authority at the registered office of the controller if you believe that we have violated a provision of the DPA.

The Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) is responsible for complaints from data subjects.

15 Amendments to this privacy policy

Changes to this privacy policy apply from the time of their publication on our website. The processing of personal data collected under an older privacy policy is carried out in accordance with this privacy policy.

We reserve the right to change this privacy policy at any time and to inform customers of the changes in an appropriate manner.
 

Status: July 2023