Information on data protection.

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the EU General Data Protection Regulation (GDPR) and the Data Protection Act of the Principality of Liechtenstein (DSG)) as well as this privacy policy.

Below, we explain how we collect data, for what purpose we use it and what rights you have.

 

Who is responsible?

SWM AG
P.O. Box 334
9496 Balzers
Principality of Liechtenstein
Phone: +423 23 00 182
E-mail: service@sev.li
FL-0001.003.361-2

Data Protection Officer: Sonja Grasern (Board of Directors)
E-mail: s.grasern@swm-ag.li

If you have any questions regarding data protection, you can contact Sonja Grasern by post (see address above), telephone or E-mail.

 

Competent data protection authority

Data Protection Authority (DSS)
Städle 38
9490 Vaduz
Principality of Liechtenstein

Phone: +423 23 66 090
E-mail: info.dss@llv.li

 

General information

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the applicable national data protection laws. When you visit our website, personal data is processed only to the extent necessary to provide a fully functional website and to ensure security and stability.

Processing is carried out in particular for the following purposes:

• Provision and operation of the website
• Ensuring IT security and system stability
• Processing enquiries via email or contact forms
• Preventing and detecting misuse or unauthorised access

The legal basis for the processing of technically necessary data is Article 6(1)(f) of the GDPR (legitimate interest in the secure and stable operation of the website).

If you contact us via a contact form or by email, your data will be processed to handle your enquiry on the basis of Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

We do not use any proprietary analytics, tracking or marketing services.

Furthermore, we process personal data to the extent necessary to fulfil legal obligations. The legal basis for this is Article 6(1)(c) of the GDPR.

Should we process personal data for purposes other than those mentioned, we will inform you of this separately in accordance with the statutory provisions.

 

Data collection and hosting

Hosting by Supranet AG

Our website is hosted by Supranet AG:

Supranet AG
Dominik Müller
Im alten Riet 121
9494 Schaan
Principality of Liechtenstein

The provision of this service takes place within the framework of data processing on behalf of a client in accordance with Article 28 of the GDPR.

Data collection (server log files)

Each time you visit our website, our hosting provider’s system automatically collects data and information from your computer’s system. This data is stored in so-called server log files. The following data is collected:

• Your IP address
• Date and time of access
• Pages or files accessed
• Browser and operating system used
• Referrer URL (the previously visited page)

Purpose of processing

The temporary storage of data, in particular the IP address, is necessary in order to:

• Enable the technical delivery of the website to your computer.
• Ensure the stability and security of the system (e.g. defence against attacks).
• Carry out effective error analysis.

This data is not combined with other data sources.

Legal basis

Processing is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the technically sound, secure and optimised operation of our website.

Retention period

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data stored in log files, this is the case after 7 days at the latest. Storage beyond this period is possible provided that no statutory retention obligations prevent this.

Transfer to third countries

As things stand, no processing takes place outside the EEA.

  

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address bar in your browser changes from “http://” to “https://” and by the padlock icon in your browser bar.

 

Cookies

Our website uses technically necessary cookies, which are required for the secure and proper functioning of the website.

In addition, technically necessary cookies may be set when embedded YouTube videos are accessed. These are integrated using YouTube’s enhanced privacy mode.

You can prevent cookies from being stored by adjusting your browser settings, or delete cookies that have already been stored. This may restrict the functionality of certain areas of the website.

The legal basis for the use of technically necessary cookies is Article 6(1)(f) of the GDPR.

Cookies used: 

Name	Provider	Purpose	Retention period
VISITOR_INFO1_LIVE	YouTube	Optimisation of embedded video display.	6 months
YSC	YouTube	Technically necessary cookie for embedded videos.	Session
CONSENT	Google Ireland Limited	Storage of settings and consents.	2 years
[Joomla Session ID]	Own website	Technically necessary session cookie for the secure provision of the website.	Session
cookiehint	Own website	Storage of your cookie preferences.	1 year

 

Web fonts (locally hosted)

This site uses web fonts to ensure consistent font display. To protect your privacy, these fonts are not loaded from Google’s servers but are installed locally on our own web server.

As a result, no connection to Google’s servers is established when you visit our site. No data (such as your IP address) is transmitted to Google or any other third-party providers.

These web fonts are used to ensure a consistent and attractive presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

  

Contact/Contact form

If you contact us by email or via the contact form, we will process the personal data you provide (e.g. name, email address, the content of your message and any other voluntary information you may provide).

Purpose of processing: Processing is carried out solely for the purpose of handling your enquiry, communicating with you, and implementing pre-contractual measures or fulfilling the contract.

Legal basis: Depending on the circumstances, processing is carried out on the basis of Article 6(1)(b) of the GDPR (contract or pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest in responding to your enquiry).

Retention period: The data will be deleted as soon as your enquiry has been fully processed and there are no further statutory retention obligations. Statutory retention periods (e.g. under tax or commercial law) remain unaffected.

Obligation to provide data: The provision of your data is voluntary. However, without the necessary information, your enquiry may not be processed.

 

YouTube

Videos from YouTube are embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Privacy mode: We use YouTube in enhanced privacy mode. According to YouTube, this means that information about you is only stored once you actively play a video. However, a connection to Google’s servers may still be established when you visit the relevant page.

Data processed: IP address, device information and information about the use of the embedded videos. If you are logged into your YouTube or Google account at the same time, Google may link this usage to your user profile.

Legal basis: Processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.

Transfer to third countries: Data processing in the USA cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework (DPF). In addition, EU Standard Contractual Clauses are used.

Withdrawal: You can change your cookie settings at any time via your browser settings or delete cookies that have already been set.

 

Obligation to provide personal data

The provision of personal data is not required by law or contract. However, certain details may be required in order to use the contact form. Mandatory fields are marked accordingly. Without the provision of this data, it may not be possible to process your enquiry.

  

Duration of storage and deletion

We only store your data for as long as is necessary to process your enquiry or to fulfil our contractual and legal obligations:

Enquiries: These are deleted as soon as your matter has been clearly resolved and no further correspondence is required.

Tax and commercial law: Where there are statutory retention obligations under commercial and tax law (e.g. for invoices or business agreements), we store the data in accordance with the retention periods of 6 to 10 years.

Preservation of evidence: Where necessary, we retain data in accordance with the statutory limitation periods (usually 3 years, in exceptional cases up to 30 years) in order to defend against or assert legal claims.

 

Data transfer to third countries

Where we process personal data in a third country, this is done only on the basis of legal authorisations or safeguards. Details of the services we use (e.g. YouTube) that may involve data transfer to third countries can be found in the relevant section of this privacy policy under “YouTube”.

 

Your rights regarding your personal data

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed, and to receive information about such data as well as further details.
• Right to rectification (Art. 16 GDPR): You may request the rectification of inaccurate data or the completion of your data stored by us.
• Right to erasure (Art. 17 GDPR): You have the right to request that your data be erased without delay (‘right to be forgotten’), provided that no legal grounds for retention (e.g. retention obligations) prevent this.
• Right to restriction of processing (Art. 18 GDPR): You may request that the processing of your data be restricted (e.g. whilst the accuracy of your data is being verified).
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller.
• Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you have the right to object to the processing on grounds relating to your particular situation.
• Withdrawal of consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future. This applies in particular to objections to direct marketing.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority (e.g. the Liechtenstein Data Protection Authority or the authority in your place of residence).

 

Automated decision-making/profiling

No automated decision-making or profiling takes place.