Introduction

Rights of data subjects

You can assert the following rights regarding your personal data against us:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to the processing (Art. 21 GDPR)
If you submit a request for information to us, we will inform you in accordance with the data protection regulations whether and which data we have collected from you. We always endeavor to ensure up-to-date and error-free data collection. However, if incorrect information has been recorded, we will correct it immediately following a corresponding request.

To do this, please send us a request to: info@triple-g.ch

 

In addition to exercising your rights against us, you also have the right to lodge a complaint with a supervisory authority if you suspect a breach of data protection regulations (Art. 77 GDPR).

 

What is the legal basis for processing your personal data?

Your personal data is processed in accordance with the statutory provisions of the GDPR and the Federal Data Protection Act for the fulfillment of contractual obligations or for measures to initiate a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). We may also use this data for additional purposes within the scope of our business relationship.

How long is the data stored?

We process and store your personal data for the duration of our business relationship and at least in accordance with the statutory retention periods, such as the German Commercial Code or Tax Code.

Who is the data passed on to and where is it processed?

We only use the personal data for our own purposes in the course of the business relationship.

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized so that it is no longer possible to identify the accessing client.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service.
concluded. This is a contract prescribed by data protection law, which
guarantees that it will only process the personal data of our website visitors in accordance with our
instructions and in compliance with the GDPR.

Contacting us

When you contact us (e.g. via contact form, chat or email), we process your data to process the request and in the event that follow-up questions arise. If the data processing is carried out for the implementation of pre-contractual measures that are carried out at your request or, if you are already our customer, for the implementation of the contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Storage period

Unless specifically stated, we only store personal data for as long as is necessary to fulfill the purposes pursued. In some cases, the legislator provides for the retention of personal data, for example under tax or commercial law. In these cases, the data will only be stored by us for these legal purposes, but will not be processed in any other way and will be deleted after the statutory retention period has expired.

Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.

Profiling

Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or controller responsible for the processing

The controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims
• and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities. Your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) coding system, but would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last updated in March 2023. It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements.