Privacy policy
Version from May 2024
In this Privacy Policy, we, Kefinova AG (hereinafter referred to as the Company, weor us), how we collect and otherwise process personal data. This is not an exhaustiveDescription; if necessary, other data protection declarations regulate specific issues. UnderPersonal data is understood to mean all information that relates to a specific oridentifiable person.
If you provide us with personal data of other persons (e.g. family members, data ofcolleagues), please make sure that these persons have read and understood theWe ask that you familiarise yourself with this privacy policy and only share your personal data with us,
if you are authorised to do so and if this personal data is correct.This privacy policy is based on the requirements of the Swiss Data Protection Act("DSG") - and, if necessary, the EU General Data Protection Regulation("GDPR"). However, whether and to what extent these laws are applicable depends on the individual case.
1.responsible person / data protection officer / representative
Florian Kadler is responsible for the data processing described here,Zurlindenstrasse 215a, 8003 Zurich. If you have data protection concerns, you can contactPlease send them to the following contact address: Zurlindenstrasse 215a, 8003 Zurich
[email protected].
2.collection and processing of personal data
We primarily process the personal data that we collect in the context of ourbusiness relationship with our customers and other business partners from them andother persons involved in the operation of our website or that we receive from them in the course oftheir users.Insofar as this is permitted, we also take information from publicly accessible sources (e.g.debt collection registers, land registers, commercial registers, press, Internet) certain data orreceive data from authorities and other third parties. In addition to the data you provide us withdirectly, the categories of personal data that we collect from third parties about you includein particular information from public registers, information that we receive in thein connection with administrative and judicial proceedings, information in theconnection with their professional functions and activities (so that we can, for example, with your helpand transact business with your employer), information about you inCorrespondence and discussions with third parties, credit information (insofar as we have apersonally conduct business), information about you that people from your environment(family, advisors, legal representatives, etc.) so that we can enter into contracts with you or under or process with your involvement (e.g. references, your address forDeliveries, authorisations, information on compliance with legal requirements such as theAnti-money laundering and export restrictions, information from banks, insurance companies,sales and other contractual partners of ours for the utilisation or provision of services.services provided by you (e.g. payments made, purchases made), information from the media andInternet about your person (insofar as this is appropriate in the specific case, e.g. in the context of aapplication, press review, marketing/sales, etc.), your addresses and, if applicable, interests andfurther socio-demographic data (for marketing), data in connection with theUse of the website (e.g. IP address, MAC address of the smartphone or computer,Information about your device and settings, cookies, date and time of the visit, accessedpages and content, functions used, referring website, location data).
3.purposes of data processing and legal bases
We use the personal data we collect primarily to fulfil our contracts withand business partners, in particular in the area of the financial services sector.Within the scope of our purpose (development, production of and trade in foodstuffs of all kinds,especially of beverages and the operation of related businesses) with our customers andthe purchase of products and services from our suppliers, andsubcontractors, as well as to fulfil our legal obligations at home and abroad.to comply. If you work for such a customer or business partner, you canIn this function, you and your personal data will of course also be affected.In addition, we process personal data of you and other persons, insofar as permittedand it seems appropriate to us, also for the following purposes, in which we (and sometimesthird parties) have a legitimate interest corresponding to the purpose:Offering and further developing our products, services and websites, appsand other platforms on which we are present;Communication with third parties and processing their enquiries (e.g. applications,media enquiries);Examination and optimisation of demand analysis procedures for the purpose of directAddressing customers and collecting personal data from publicly accessible sourcessources for the purpose of customer acquisition;Advertising and marketing (including the organisation of events), insofar as you are theuse of your data (if we have not objected to you as an existing customer).advertising from us, you can object to this at any time, we willthen put you on a blacklist against further advertising mailings);Market and opinion research, media monitoring;Assertion of legal claims and defence in connection withlegal disputes and official proceedings;Prevention and investigation of criminal offences and other misconduct (e.g.conducting internal investigations, data analyses to combat fraud);guarantees of our operations, in particular IT, our websites, apps andother platforms;Video surveillance to safeguard domiciliary rights and other IT security measures,Building and facility security and protection of our employees and other personsand assets belonging to or entrusted to us (such as access controls, visitor lists, etc.),network and mail scanners, telephone recordings);Purchase and sale of business divisions, companies or parts of companiescompanies and other transactions under company law and the associatedthe transfer of personal data as well as measures for business management andto the extent necessary to comply with legal and regulatory obligations and internalregulations of the company.If you have given us your consent to process your personal data for specific purposes(for example, when you register to receive newsletters or carry out a newsletter subscription).of a background check), we process your personal data within the scope of and based onthis consent, insofar as we have no other legal basis and we do not require such consent.require. Consent that has been granted can be revoked at any time, but this does nothas an effect on data processing that has already taken place.
4.cookies / tracking and other technologies in connection with the useour website
We typically use & quot;cookies" and similar technologies on our websites,with which your browser or device can be identified. A cookie is a small file,sent to your computer or automatically stored on your computer by the web browser you are using.computer or mobile device when you visit our website. When youthis website again, we will be able to recognise you, even if we have notknow who you are. In addition to cookies that are only used during a session and are deleted aftercookies are deleted during your website visit ("session cookies"), cookies can also be used forto store user settings and other information over a certain period of time (e.g. two weeks).years) ("permanent cookies"). However, you can set your browser to do so,that it rejects cookies, only stores them for one session or otherwise deletes them prematurely. TheMost browsers are preset to accept cookies. We use permanentCookies so that you can save user settings (e.g. language, autologin) so that we can betterunderstand how you use our offers and content and so that we can respond to your needs.display customised offers and advertising (which can also be displayed on websites of othercompanies; however, they will not find out from us who you are if weeven know that, because they only see that the same user is on their website,who was also on a certain page with us). If you block cookies, it may be,that certain functionalities (e.g. language selection, shopping basket, ordering processes) are no longer available.function.In our newsletters and other marketing e-mails, we partially and to the extent permittedvisible and invisible image elements, by retrieving them from our servers, we alsodetermine whether and when you have opened the e-mail, so that we can also measure andbetter understand how you use our services and tailor them to youcan. You can block this in your email programme; most are like thispreset that you do this.By using our website and consenting to the receipt of newsletters and other informationother marketing e-mails, you consent to the use of these techniques. Do you want thisyou must set your browser or e-mail programme accordingly.We sometimes use Google Analytics or comparable services on our websites.This is a service provided by third parties who may be located in any country in the world,www.google.com), with which we measure the use of the website (not personalised)and analyse them. Permanent cookies are also used for this purpose, which theservice provider. We have configured the service in such a way that the IP addresses of visitorsare shortened by Google in Europe before being forwarded to the USA and are therefore notcan be traced. We have the settings "Data transfer" and "Signals"switched off. Although we can assume that the information we collect with Googleare not personal data for Google, it is possible that Google may use this data fordraw conclusions about the identity of visitors for their own purposes, personal profilesand link this data with the Google accounts of these persons. Insofar as youhave registered with the service provider themselves, the service provider also knows you. TheThe processing of your personal data by the service provider is then carried out under the responsibility of theservice provider in accordance with its data protection provisions. The service provider only informs us,how our respective website is used (no information about you personally).We also use so-called plug-ins from social networks such as Facebook on our websites,Twitter, YouTube, Pinterest or Instagram. This is visible to you in each case (typicallyvia corresponding symbols). We have configured these elements so that theyare deactivated by default. If you activate them (by clicking on them), the operators of therespective social networks register that you are on our website and canuse this information for their own purposes. The processing of your personal data then takes placeunder the responsibility of this operator in accordance with its data protection provisions. We receive fromhim no information about you.
5.data disclosure and transfer abroad
Within the scope of our business activities and the purposes outlined in section 3, we disclose information to third parties as permitted and deemed appropriate. This disclosure occurs either because these third parties process the data for us or because they wish to use it for their own purposes. The recipients in this context particularly include:
- Our service providers (both within the company and external, such as banks and insurance companies), including data processors (e.g., IT providers);
- Dealers, suppliers, subcontractors, and other business partners;
- Customers;
- Domestic and foreign authorities, offices, or courts;
- Media;
- The public, including website and social media visitors;
- Competitors, industry organizations, associations, organizations, and other bodies;
- Buyers or interested parties in acquiring business units, companies, or other parts of the company;
- Other parties in potential or actual legal proceedings;
These entities are collectively referred to as recipients. Some of these recipients are located domestically, but they may be anywhere in the world. Specifically, you must expect the transfer of your data to all countries where the company is represented through group companies, branches, or other offices, as well as to other European countries and the USA, where our service providers (e.g., Microsoft) are located.
If a recipient is located in a country without adequate legal data protection, we contractually obligate the recipient to adhere to applicable data protection laws (using the revised Standard Contractual Clauses of the European Commission, accessible here:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless the recipient is already subject to a legally recognized framework ensuring data protection, or we rely on an exemption clause. An exemption may particularly apply in the case of legal proceedings abroad, overriding public interests, if the disclosure is required for contract execution, if you have consented, or if it concerns data made publicly accessible by you, which you have not objected to being processed.
6.duration of storage of personal data
We process and store your personal data for as long as it is necessary for the fulfilment of ourcontractual and legal obligations or otherwise the purposes pursued with the processingis required, i.e. for example for the duration of the entire business relationship (from thethe initiation, execution and termination of a contract) and, in addition, in accordance with thestatutory retention and documentation obligations. It is possible thatpersonal data will be stored for the period during which claims against our company are pending.can be asserted and insofar as we are otherwise legally obliged to do soor legitimate business interests require this (e.g. for evidence anddocumentation purposes). As soon as your personal data is not required for the above-mentioned purposesare no longer required, they are deleted as a matter of principle and as far as possible oranonymised. For operational data (e.g. system protocols, logs), the following basic principles applyshorter retention periods of twelve months or less.
7.data security
We take appropriate technical and organisational security precautions toProtection of your personal data against unauthorised access and misuse, such as the [decreeof instructions][, training][, IT and network security solutions][, access controls and-restrictions][, encryption of data carriers and transmissions][,Pseudonymisation][, controls].
8.obligation to provide personal data
As part of our business relationship, you must provide the personal data,the establishment and implementation of a business relationship and the fulfilment of the associatedassociated contractual obligations (a legal obligation to provide us with data).you do not usually have to provide). Without this data, we will generally notbe in a position to enter into a contract with you (or the entity or person you represent).close the website or process it. The website can also not be used ifcertain information to secure data traffic (e.g. IP address) is not disclosedbecomes.
9.profiling
We process your personal data partly automatically with the aim of processing certain personalaspects (profiling). We use profiling in particular to target youto provide information and advice on products. We use evaluation toolswhich enables us to provide needs-based communication and advertising, including market andEnable opinion research.
10.rights of the data subject
Within the framework of the data protection law applicable to you and insofar as it(such as in the case of the GDPR) the right to information, rectification and erasure,the right to restriction of data processing and otherwise the right to object toour data processing activities, in particular those for the purposes of direct marketing, theprofiling for direct marketing purposes and other legitimate interests in theprocessing and the disclosure of certain personal data for the purpose of transfer to aother location (so-called data portability). Please note, however, that we reserve the right toto assert the restrictions provided for by law on our part, for example if weare obliged to store or process certain data, there is an overriding reason for this.interest (insofar as we are entitled to invoke it) or to use it for the assertion of claims.claims. If you incur any costs, we will inform you in advance. AboutWe have already informed you about the possibility of withdrawing your consent in Section 3. Please notethat the exercise of these rights may be in conflict with contractual agreementsand this may have consequences such as premature cancellation of the contract or cost consequences. Wewill inform you in advance if this has not already been contractually agreed.The exercise of such rights generally requires that you clearly prove your identity.prove your identity (e.g. with a copy of your ID where your identity is otherwise not clear or verified).can be). To assert your rights, you can contact us at the address given in section 1contact the address given.Furthermore, every data subject has the right to enforce their claims in court or toto lodge a complaint with the competent data protection authority. The responsibleSwitzerland's data protection authority is the Federal Data Protection and InformationPublic Relations Officer
(http://www.edoeb.admin.ch).
11.changes
We may amend this privacy policy at any time without prior notice. Thecurrent version published on our website. Insofar as the data protection declaration is partof an agreement with you, we will inform you in the event of an update about thechange by e-mail or other suitable means.
6.duration of storage of personal data