Information on data protection

Crescat takes the protection of personal data seriously. Therefore, we conduct our business in compliance with applicable laws on data protection and data security. We want you to know when we collect data and how we use it.

1. General

Personal data is data relating to your identity. This includes, for example, particulars such as your name, address, telephone number and email address. Your personal data is processed in accordance with Swiss and European data protection regulations.

We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and any third parties involved in data processing must comply with the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act and the confidential handling of personal data. If personal data is processed via our website the information is transferred in an encrypted form to avoid misuse by third parties. Our security measures are regularly updated in accordance with technological developments.

2. The processing of data on our website

a) Access to Internet Services
Any access to our website is stored in a log file. In the log file the following data will be stored up to 14 days:

Name of the file
Date and time of access
Amount of data transferred
Notification of whether the call was successful
as well as IP address of the accessing the host system.

This data is used to optimize our website. The IP address is only used for attacks on the Internet infrastructure Crescat evaluated.

You are under no legal or contractual obligation to provide your access data. However, please note that we cannot allow you to use our website without providing your access data.

The legal basis for temporary storage of your access data is Art. 6 (1) f) GDPR. Our legitimate interest is the continued optimisation of our website.

b) Cookies
Depending on your browser settings, we use cookies to collect information on how you use our website. Cookies are small text files which are stored on your computer when you visit our website. Cookies help us to determine how often our website is used and by how many users. It also makes it as convenient and efficient as possible for you to use our website. We use session cookies which are temporarily stored while you use one of our websites as well as permanent cookies to store information about computers which repeatedly access our website. This enables us to provide you with optimum user guidance and to “recognise” you when you return to our website so that we can offer you maximum variety and new content. We use permanent cookies to record the number of times you visit our website, the amount of time you spend on our website, start and end of use and your interest in our products.

The content of a permanent cookie is limited to an identification number. Name, IP address or other information regarding your true identity are not stored, and we do not set up any individual profiles regarding your pattern of use. Permanent cookies are automatically deleted. Storage duration varies depending on the cookie. You may delete permanent cookies at any time under the security settings of your web browser.

We use cookies in order to make our website more user-friendly. Some elements on our website require the browser which is contacting it to be identified after a change of pages. We use these cookies for technical reasons to make it simpler for you to use our website. Some functions on our website cannot be offered without the use of these cookies. On our website we also use cookies to analyse the users’ browsing patterns. The personal data collected in this way is pseudonymised. Therefore, the data can no longer be attributed to the users visiting the website. The data is not stored together with the users’ other personal data. The analytical cookies are used in order to improve the quality of our website and its content. From the analysis provided by the cookies we learn how the website is used and can optimise our offer on an ongoing basis.

The legal basis for the processing of personal data using cookies is Art. 6 (1) f) GDPR. Our legitimate interest is the continued optimisation of our website.

c) Contact Forms
You can use our contact forms to send us messages and questions. The data you enter in the contact forms is transferred to and stored on our company server. We only use the data you send us to respond to your contact inquiry.

If you wish to contact another Crescat company via our contact forms, we will forward your request to them and the receiving company will process your data for these purposes and stores them for as long as required for the provision of services or possible future business contacts.

You are not contractually required to provide personal data when you contact us. However, please note that we cannot address your inquiry if the information marked as such is not provided.

To address your inquiry your data is stored until the inquiry has been completely processed, then it is deleted. This does not apply to data which is legally required for invoicing or accounting purposes.

The data you provide is processed on the basis of Art. 6 (1) b) GDPR.

3. Disclosure of personal data

We disclose the access data you transmit to us to the following recipients or categories of recipients:

We collaborate with providers who support us in providing our services, performances and the offer on this website (e.g. hosting provider). These service providers (agents) process data on our behalf and under our control and for the purposes described in this data protection declaration.
Those public or private bodies to which we have to disclose personal data to meet a statutory obligation.
We may be required by Swiss law to disclose personal information to Swiss authorities. In these cases, we limit the publication to the extent that is legally mandatory.
We may also disclose personal information to enforce our rights or to protect our rights or the rights of third parties to the holders of such rights, advisers and authorities.

4. Transmission of personal data to third countries

We intend to also transfer your personal data to recipients in third countries. Third countries are countries outside of the European Union or the European Economic Area where it is not always possible to assume that the level of data protection is comparable to that of the European Union.

Before any such data transfer we ensure that the required level of data protection is ensured in the third country concerned or at the recipient in the third country. This may take the form of an “adequacy decision” of the European Commission which ensures that an adequate level of data protection has been ascertained overall for a certain third country. Alternatively, we can also transfer data on the basis of “EU standard contractual clauses” or, for recipients in the USA that have a valid EU-US Privacy Shield certification, on the basis of compliance with the principles of the “EU-US Privacy Shield.

We would be pleased to provide further information on the suitable and appropriate safe-guards for compliance with an adequate level of data protection on request; the contact details can be found at the bottom of this data privacy statement.

5. Your rights when your personal data is processed

You have certain rights in accordance with applicable data protection provisions – in particular the GDPR and the relevant provisions in the applicable law of a Member State of the European Union:

You have the right of access to your personal data.
You have the right to demand rectification of any inaccurate personal data.
You have the right to demand erasure or to restrict the processing of your personal data.
You have the right to receive the personal data you have provided in a structured, commonly-used and machine-readable format.

If you have given us your consent, you also have the right to withdraw your consent at any time with effect for the future.

You are entitled to assert the above-mentioned rights against us, e.g. by notifying us via one of the methods of contact listed at the end of this data protection statement.

You may also contact the competent authority if you have a complaint about how your personal data is handled.

6. Your right to object

You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation on the basis of Art. 6 (1) e) or (1) f) GDPR, including profiling based on those provisions.

In such cases Crescat will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

7. Cookies

In your browser settings, you can deactivate the storage of cookies under “Options/Internet Options”, limit them to certain websites or set up your browser so that it informs you when a cookie is sent. You may also delete cookies whenever you wish. Please note, however, that disabling or deleting them means that you will have limited presentation of our website and limited user guidance.

8. Contact information

If you have any further questions relating to our information on data protection and the processing of your personal data, please do not hesitate to contact us at any time. We are available at any time to answer information requests, or if you have any suggestions or complaints.

The controller responsible for the processing of your personal data on this website is Crescat GmbH, Ruessenstrasse 6, 6340 Baar / CH.