Data protection and data security are important to Tulux AG (referred to below as ‘Tulux’; ‘we’). We process your personal data responsibly, in compliance with applicable legal provisions, and in accordance with this privacy policy.

Content of this privacy policy

This privacy policy provides you with information about how we collect and process personal data when you visit our website at www.tulux.ch (‘website’) or social media pages, contact us or use our services.

Data controller

Tulux is responsible for the data processing described in this privacy policy.
If you have any questions or would like to exercise your rights under data protection law, please contact us at datenschutz@tulux.ch or write to us at this address: Tulux AG, Datenschutz, Tödistrasse 4, 8856 Tuggen, Switzerland.

Personal data processed during communication and service provision

We collect the data you provide to us as follows:

• When you contact us
• When you register as a user on the website or on the online platform
• When you order goods or services
• When you apply for a job with us

This includes general personal data, such as name and contact details, and any information about your position or role at the organisation on whose behalf you are contacting us.

If you order goods or services that require payment, we will also ask for your financial details, such as your preferred payment method and billing address.

We also process personal data that we receive from third parties. This routinely includes personal data that we receive in correspondence or in discussions with customers or business partners, such as your name and details of your work as a team member of the customer or business partner.

To the extent necessary to achieve the purposes described in this privacy policy, we also collect general personal data from publicly accessible registers, websites and platforms (e.g. to verify that you are authorised to sign) or by obtaining information from third parties (e.g. for reference purposes in the application process provided that you consent to this).

Provision and use of our website

Use for informational purposes
You can find out about Tulux and our range of services on the website without telling us who you are. As with any connection to a web server, the server we use for website provisioning automatically logs and stores certain technical data. This data is stored for a short period of time. Such data includes the IP address and operating system of your device, the date and time of use, and the type of browser you use to access the website.

Web analytics
We use web analytics services (currently Google Analytics) to evaluate website use and to obtain information for its optimisation. The web analytics services used by us use cookies to collect and store usage data. The requesting IP addresses are truncated before being transferred to a server outside Switzerland/EU/EEA. We therefore do not transfer any personal data to the provider of the web analytics services abroad.

Resources from external websites
We integrate resources from external servers on our website. These resources contain visible content (videos, Google Maps) and technical resources (Google Fonts).
The technical resources are used to improve the performance or security of our website. When accessing these resources, the operator of the external server will be made aware of your IP address and/or certain metadata that is required in order to use the external operator's server.

Note on the use of cookies
We use cookies, tags and other such technologies on the website to provide you with the best possible user experience and to help us improve the website. Cookies are text files that are downloaded onto your computer or mobile device when you visit a website or use an app.
Some of the cookies we use are required in order to provide certain features of the website. We also use cookies to analyse website use and to obtain information for website optimisation purposes.
You can instruct your browser not to accept cookies or to ask you each time before a cookie is set. You can also delete cookies on your device by using the corresponding feature of your browser.

Use of our social media sites
Our social media sites contain articles on current developments at Tulux and our range of services. The social media providers collect and analyse usage data. This includes the number of visits and demographic details of visitors to our company web pages.
We receive analytics from such social media providers based on this data. These analytics only contain aggregated or otherwise sufficiently anonymised data. Only the respective provider is able to identify you on the basis of the usage data collected. For this reason, please note the privacy notices of the respective provider.

Use and optimisation of our newsletter
When you subscribe to our newsletter, we collect the information you provide us with. This includes generic personal data such as first name, surname and email address. We use analytics services to measure and analyse use of our newsletter. The analytics services collect and analyse usage data such as the number of people who opened a newsletter or clicked on certain posts. We receive analytics generated on this basis. This enables us to optimise our newsletter and provide you with content of interest to you.
You can also notify us at any time that you do not wish to receive our newsletter in future. To do so, please use the unsubscribe link at the end of the newsletter. If you click on this link, we will no longer measure and analyse your use of the newsletter in future.

For what purposes and on what basis do we process your personal data?

We process your personal data primarily to inform you about our range of services and to provide, document and invoice our services in accordance with our contractual and legal obligations.

We also process your personal data for the following purposes:

• To respond to your enquiries and to communicate with you
• To process your registration and orders
• To respond to applications
• To make the website available
• To optimise our posts on our company social media sites
• To provide information about new developments at Tulux and about new services (e.g. via our newsletter; whereby you can notify us at any time that you do not wish to receive such information in future)
• To fulfil legal obligations
• To enforce legal claims

We have a legitimate interest in the processing of your personal data for the purposes stated. Some processing is also required to ensure that we can fulfil our contractual obligations towards you or fulfil our legal obligations (e.g. retention obligations). We process your personal data on this basis if and to the extent that the applicable data protection law requires a legal basis or justification for the lawfulness of data processing in general or for specific processing activities.

How do we store and protect your personal data?

We only store your personal data to the extent and for as long as is necessary to fulfil the purposes described in this privacy policy or to fulfil legal obligations.

In the interests of the integrity and confidentiality of personal data, we adopt appropriate technical and organisational measures. In accordance with our risk assessment, we implement physical access controls, electronic access controls and procedures to ensure routine review, assessment and evaluation of the effectiveness of such measures.

Who do we transfer your personal data to?

To fulfil the purposes described in this privacy policy, it may be necessary for us to transfer your personal data to other companies. These are the following categories of recipients:

• Other Group companies
• External service providers
• (If applicable) authorities and courts

Place of processing

We store and process your personal data primarily in Switzerland and the EU. However, in the case of our newsletter or the use of Google Analytics, we may also transfer your personal data to recipients in countries outside Switzerland or the EU (worldwide, in particular the USA). We transfer data to countries without adequate data protection on the basis of standard contractual clauses or legal exceptions (e.g. requirement for contract fulfilment).

Your rights in relation to your personal data

You have the following rights in relation to your personal data:

• The right to be informed about personal data that we store about you and how we process such data
• The right to receive or have a copy of your personal data transferred in a commonly used format
• The right to rectification of your personal data
• The right to erasure of your personal data
• The right to object to the processing of your personal data

Please note that legal requirements and exceptions apply to these rights. To the extent permitted by law, we may refuse your request to exercise these rights. You also have the right to lodge a complaint with the competent supervisory authority for data protection.

How may we change this privacy policy?

We may amend this privacy policy at any time, in particular if we change our data processing or if new legislation becomes applicable. The version made available at www.tulux.ch applies.