1 Privacy Policy

The protection of your personal information and the safeguarding of your privacy is important to us. We promise to handle your information sensitively and carefully and to ensure a high level of information security. Consequently, we consider it a matter of course to comply with the applicable legal provisions, in particular the standards set out in the Personal Information Protection and Electronic Documents Act, and other information protection regulations that may apply. By using our site, you consent to the conditions set out in this Privacy Policy.

2 Contacts

The responsible organization for personal information is:

STOBAG North America Corporation
1445 Norjohn Ct
Burlington, ON L7L OE6
Canada
Tel.: +1 905 564 61 11
E-mail: info.northamerica@stobag.com
Website: www.stobag.ca 

We have appointed a Privacy Officer. The Privacy Officer supports the STOBAG North America Corporation in Canada with expert advice. Our Privacy Officer is Swiss Infosec AG and can be reached by mail, telephone or email using the abovementioned contact information or via the following e-mail address: stobag.datenschutz@infosec.ch 

Please direct inquiries and complaints in connection with the following concerns only to the abovementioned Privacy Officer’s contact:

• if you want to have access to or want to make a complaint about the personal information held by us, or
• if you need to address a challenge concerning compliance with the principles stated herein and therefore wish to challenge them, or
• if you generally have concerns about our privacy or security matters, or 
• if you have concerns about our policies and practices with respect to the management of personal information and want to make a complaint, or
• if you want to have a copy of the information that explain our policies, standards, or codes.

3 Scope and purpose of the collection, processing and use of personal information
The Act defines “personal information” as “information about an identifiable natural person”. We collect, process, and use your personal information for the following purposes:

3.1 Visiting the website (data collected automatically)
When you access the STOBAG website, our servers automatically temporarily store the following information in a log file, the so-called server log files:

• IP address of the requesting device
• date and time of the access/retrieval
• name and URL of the retrieved information
• operating system of your device and the browser you use
• country from which our website is accessed
• name of your Internet access provider
• time zone difference to Greenwich Mean Time (GMT)
• contents of the request (concrete site)
• access status/HTTP status code
• volume of information transmitted respectively
• last visited website
• browser settings
• language and version of the browser software
• activated browser plugins

All of this is information which cannot be used to identify you personally. We process this information for:

• displaying the contents of our website correctly and to optimize the advertising for them
• providing law enforcement officials with information necessary for prosecution in the event of unlawful activity
• improving our website and internet presence
• collecting statistical information.

This information is not stored together with other personal information. The information will be deleted as soon as it is no necessary for the purpose for which it was collected. When collecting your personal information for the purpose of displaying the website, this is the case when the relevant browsing session comes to an end.

3.2 Contact (data collected in a non-automatic way)
On our website you have the option to contact us via a contact form and/or by e-mail. In this case, the information you provide will be processed for the purpose of handling your request.

If you wish to contact us, the details marked with an asterisk (*) is mandatory. The other details are voluntary:

• Company
• Form of address
• First name*
• Last name*
• Street*
• ZIP code*
• Region*
• Country*
• E-mail address*
• Telephone number
• Message

The details identified as mandatory are necessary to process your request. Providing us with additional details makes it easier for us to process your request and enables us to provide you with more detailed information.

The personal information you provide will not be merged with other information.

We process this information to process your request, or, if the purpose of the contact is to fulfill a contract to which you are a party or to carry out pre-contractual measures, to fulfill the contract or the pre-contractual measures.

You can object to this information processing at any time. Please send your objection the following e-mail address: dataprotection@stobag.com and we will follow up with your request. In such cases, your request will not be processed further.

Your personal information will be deleted as soon as it is no longer required for the purpose for which it was collected. As regards the personal information from the input screen of the contact form and personal information sent by e-mail, this is the case when the respective conversation with you has ended. The conversation ends when it is clear from the circumstances that the matter in question has been resolved or when a conversation is discontinued due to your objection.

3.3 Marketing purposes (data collected in a non-automatic way)
We also use your personal information for the following purposes:

• to maintain the customer relationship with you
• to continuously improve your shopping experience and make it customer-friendly and personalized
• to contact you about your orders
• to keep you up to date regarding specific products and promotions
• to recommend products or services that may interest you

If you do not want this, you can object at any time to the processing of your personal information for the purpose of direct marketing. If you object, we will no longer process your personal information for this purpose. Please send your objection to the following e-mail address: stobag.datenschutz@infosec.ch 

3.4 Market research (data collected in a non-automatic way)
We do not use the information collected within the scope of market and opinion research for advertising purposes. You will find detailed relevant information (especially on the processing of your information) in the respective survey or wherever you provide your information. Your answers to surveys are not passed on to third parties or published.

Your consent is the basis for the processing of your personal information.

3.5 Provision of contractual services
For the purpose of fulfilling our contractual and pre-contractual obligations, we process inventory information (e.g., names and addresses as well as contact information) and contract information (e.g., services used, names of contact persons, payment information).

In order to provide our services, we also process personal information of the contact persons of our customers, service providers and suppliers outside our website. We use the contact information we collect primarily to prepare, conclude and execute contracts with our customers, service providers and suppliers, in particular for the manufacture, delivery, repair and return of the products we offer.

The basis for the processing of your personal information is the fulfillment of a contract to which you are party or the implementation of pre-contractual measures.

If we store your personal information on the basis of a contractual relationship, this information will be stored at least as long as the contractual relationship exists and at most as long as the limitation periods for possible claims from us are active or statutory or while contractual retention obligations are in effect.

4 Registration on the dealer portal
Customers have the option to register on our dealer portal. Within the portal, it is possible to set up additional user accounts. In the input screen, the following personal information may be collected from dealers in both an automatic and non-automatic way:

• First and last name
• Business e-mail address
• Login details
• Most recent login

The information entered during registration is transmitted to us and stored by us.

The portal contains up-to-date information on sales promotions, product news, advertising and other topics relating to STOBAG North America Corporation. It is used by dealers to order products and individual materials and to submit service reports.

We process your personal information to operate the portal and optimize of our website. If the use of the portal is for the fulfillment of a contract, or the implementation of pre-contractual measures, this is an additional basis for the processing of personal information.

The information will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case for the information collected during the registration process when the registration on our website is canceled or modified.

The customer has the option to cancel or alter the registration at any time. Furthermore, you can modify or delete your personal information at any time. Please send your objection to the following e-mail address: stobag.datenschutz@infosec.ch

5 Sharing of personal information
We treat your personal information as confidential and only share it with others to the extent allowed by law. The use of the data shared with third parties is strictly limited to the stated purposes in this Privacy Policy.

We also share your personal information to other companies of the STOBAG group or other third-party companies (e.g., commissioned service providers or subsidiaries) abroad, insofar as this is necessary for the information processing described in this Privacy Policy. Statutory regulations relating to the sharing of personal information with third parties are observed as a matter of course. If the level of information protection in a country in which the information is processed does not comply with the applicable information protection regulations, we ensure that the protection of your personal information is always equivalent to that in Canada or the United States.

Where we use contract processors to provide our services, we take appropriate legal precautions and take appropriate technical and organizational measures to ensure the protection of your personal information in accordance with the relevant legal provisions.

6 Cookies
We use cookies on our website. Cookies are small text files that are stored on your device by your browser. When you visit a website, a cookie may be stored on your operating system. This cookie contains a string of characters that enables the browser to be uniquely identified when the website is accessed again.

The use of cookies allows us to tailor our website and our offers to your interests. Cookies enable us to recognize visitors. The purpose of this recognition is to make it easier for you to use our website.

Most of the cookies we use are session cookies. These are automatically deleted when you log out or close the browser. Other cookies persist beyond the end of the session and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us.

Insofar as other cookies (e.g., cookies to analyze your browsing behavior) are stored, these are treated separately in this Privacy Policy.

Most internet browsers automatically accept cookies. If you do not want this, you can set your browser to notify you about cookies and to allow this only in individual cases, to exclude the acceptance of cookies for certain cases or generally. Furthermore, you can delete saved cookies at any time. The procedure for checking and deleting cookies depends on the browser you use. You can find information on this in your browser’s help menu.

7 Google Services
Our website uses features of the following web analytics services provided by Google LLC, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, based in Ireland ("Google"). Google LLC is always responsible for the processing of personal data when using "Google Maps". We use the Google services listed below on our website.

Further information on the individual specific Google services that we use on our websites can be found below.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable your use of our website to be analyzed. The information thus generated about your use of our website may be transmitted to a Google server in the USA or other countries and stored there. Information about the locations of Google's data centers can be found here. 

7.1 Google Ads
We use the online advertising program "Google Ads", a service of Google, which is part of Google marketing services.

Google Ads saves a cookie on your device (known as a “conversion cookie”) if you have reached our website via a Google ad. These cookies lose their validity after 30 days, do not contain any personal information and therefore cannot be used for personal identification. If you visit certain pages on our website and the cookie has not expired, we and Google are notified that you have clicked on the ad and have been directed to that page. Each Google Ads customer receives a different cookie. Thus, there is no possibility of cookies being be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. We do not receive any information with which you can be personally identified.

The information collected by the cookie about your use of our website is usually transferred to a Google server in the USA  or elsewhere and stored there. Based on the information collected, your browser will be assigned categories relevant to your interests. These categories are used for the purposes of interest-based advertising.

We use the data about you acquired with the above-mentioned cookie (so-called conversion tracking) for the following purposes:

• Remarketing
• Targeting specific audiences with common interests
• Targeting user-defined audiences with common interests
• Targeting users that are willing to buy
• Similar audiences
• Demographic and geographical focus

You also have the option to object to interest-based advertising by Google. To do this, go to http://www.google.com/settings/ads in each of the internet browsers you use and configure the desired settings there.

For more information on the terms of use and data protection in the context of Google AdWords, please follow this link: https://policies.google.com/technologies/ads?hl=en.

7.2 Google Maps
This website features content from Google Maps. When you visit this website, data such as your IP address is transmitted to Google in the USA or elsewhere and stored there. Google processes this data in the form of user profiles for the purpose of tailoring services, advertising and market research. If you are signed into Google, this information is directly associated with your account. If you do not want this, you must unsubscribe first. By using this website, you consent to the collection, processing and use of the automatically collected data as well as the data you provide by Google, one of its representatives, or third parties. As the provider of the website, we have no knowledge of the content of the transmitted data or its use by Google. You can prevent the use of Google Maps by disabling JavaScript in your browser settings. However, this may sometimes result in functional impairment when using the website.

For further details on the processing of data by Google Maps, and your rights and settings options for the protection of your privacy, please refer to Google’s terms of use and data protection notices: https://www.google.com/intl/en_us/help/terms_maps/ and https://policies.google.com/privacy?hl=en

⁠7.3 Google reCAPTCHA
The reCAPTCHA function helps us to differentiate whether an entry (e. g. in a contact form) is made by a human or automatically by a computer programme (so-called bots). This is intended to ensure the security of our website and in particular to protect it from automated entries (or attacks) and spam.

For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. These analyses run completely in the background and begin automatically as soon as you access a website on which we have integrated reCAPTCHA (e. g. as part of a job application). To differentiate between humans and bots, Google analyses various information, such as the IP address of the end device used, the time spent on the website, the browser and operating system used or mouse movements made by the website visitor.

Data processing is carried out on the basis of our legitimate interest. Our legitimate interest in the processing is to protect our website from abusive automated spying and spam.

Further information on the use of the data collected by Google in this way can be found in Google's privacy policy and terms of use.

⁠7.4 Google Data Studio
Based on our legitimate interests, we also use Google Data Studio on our website. Google Data Studio makes it possible to summarise and visualise different data in connection with other Google services or via external data sources. We use this service in particular for statistical analyses, forecasts and as a basis for strategic decisions. All data processed by us with Google Data Studio is of a purely statistical nature. No personal data is processed, nor is anonymised or pseudonymised data merged with personal data.

Further information on how Google Data Studio works can be found on the corresponding Google Website.

⁠7.5 Google Search Console
We use the Google Search Console, a service provided by Google. The Google Search Console is an analysis tool that provides us with statistical data. This data includes the findability of our website by Google, the resolution of indexing problems and the performance in the search results. No personal data is collected. Deactivations at do-main or cookie level also apply to all tracking mechanisms implemented with the Google Search Console.

Further information can be found in the usage guidelines for this service: Google Search Console usage guidelines.

For more information about Google's use of data for marketing purposes, see the Google Technologies and Principles overview page or the Google Privacy Policy.

If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: Google Ads Settings

7.6 YouTube
To integrate videos, we use the services of the provider YouTube LLC, based in the USA ("YouTube"), a subsidiary of Google LLC ("Google"). 

When you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

We use the so-called extended data protection mode of YouTube. According to YouTube, this mode means that YouTube does not store any data about you as a visitor to our website before you watch or play the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode.

Further information can be found in Youtube's terms of use  and Google's Privacy Policy.

⁠8 Friendly Analytics
We use Friendly Analytics on our website, a web analytics software from Friendly GmbH based in Switzerland (www.friendly.ch; hereinafter referred to as "Friendly"), to analyse user behaviour on our website, to optimise it on an ongoing basis and to tailor it even more specifically to the needs of users. This software is based on Matomo and is operated in Switzerland and hosted on Friendly's servers in Switzerland.

Users can deactivate the collection and transmission of website usage data to us on the website (settings) at any time. The information collected by Friendly about the use of our website includes in particular:

• anonymised IP address of the website user (shortened so that this data is not considered personal)
• Information about the website visit (date, time, pages viewed, downloads)
• Key figures of the end device (brand, type, screen, memory)
• Information about the operating system (e. g. iOS, Android)
• If applicable, type and version of the internet browser used

Under this link you can read how Friendly uses the collected data.

⁠9 Fusedeck
We use the tracking solution fusedeck by Capture Media AG (hereinafter “Capture Media”) on our website. Capture Media is a Swiss company based in Zurich that, on our behalf, measures the use of this website and serves in particular to optimise our media content, which is in our legitimate interest. The tracking is carried out anonymously so that no connection can be made to identified or identifiable individuals.

Further information on data protection and on the rights of data subjects in connection with fusedeck can be found in the privacy policy of Capture Media. If you wish to opt out of the anonymous measurements by Capture Media, you will find a corresponding “opt-out” option on the Capture Media website.

⁠10 Matomo Tag Manager
We use the Matomo Tag Manager on our website, part of the open source software tool Matomo (www.matomo.org), a service provided by InnoCraft Ltd (7 Waterloo Quay PO625, 6140 Wellington, New Zealand), to analyse and statistically evaluate the use of the website. This service does not collect any personal data. This tag is used to allow third-party services to run small programmes on the website, which in turn may collect personal data under certain circumstances. The Matomo Tag Manager itself does not collect any personal data, does not pass on any personal data to third parties and does not access any personal data collected by the aforementioned third-party services.

11 Partner Sites
We offer our business partners and customers the opportunity to embed a widget on their website, which loads our product information and content from our website and displays it in the design of the business partner's/customer's website ("PartnerSites").

The use of our widget is analyzed with Matomo, a web analytics service provided by InnoCraft Ltd. (7 Waterloo Quay PO625, 6140 Wellington, New Zealand) ("Matomo").

Matomo is an open-source software that allows us to analyze the usage of our widget. For this purpose, Matomo uses a cookie, through which, among other things, the IP address of the website visitors of the respective PartnerSites is recorded, which of our products they have accessed, and from which PartnerSites they may have been redirected to our website. The analysis is generally carried out without it being possible to draw conclusions about the individual website visitors; the IP addresses collected by Matomo are shortened and anonymized immediately after collection and before storage.

This data processing is carried out exclusively for the statistical analysis of the usage of our widget and to optimize our offers. All data processed by Matomo is stored on our servers and not disclosed to unauthorized third parties.

For further information on the terms of use and data protection regulations, please refer to Matomo's privacy policy.

We would like to point out that PartnerSites using our widget are beyond our control, and we cannot influence the embedding or use of our widget on such websites. To the extent that the use of our widget requires a legal basis (e.g., consent) from the website visitors of the PartnerSites, the respective business partner/customer is responsible for this. For information on data protection and data security when visiting PartnerSites, please refer to their privacy policies.

⁠12 Microsoft Bookings
We use Microsoft Bookings on our website, an appointment scheduling service provided by Microsoft Operations Ltd., based in Ireland.

Microsoft Bookings allows you to book an appointment with us online (e.g. for a showroom visit). The data you provide when scheduling an appointment (e.g. first and last name, telephone number), as well as the date and time you select, are transmitted to a Microsoft server located in Switzerland or the EU and stored there within our Microsoft 365 account.

We require this information to confirm your appointment and, if necessary, to contact you with any questions. Access to your information and its processing is carried out only by authorised STOBAG employees.

Microsoft Bookings is a service generally provided by Microsoft within the EU. However, we cannot rule out the possibility that data may be transmitted to Microsoft Corporation, based in the USA, or to other countries in which Microsoft operates.

To protect your privacy, we have concluded a «Data Protection Addendum» with Microsoft. If your data is transferred to a country without an adequate level of data protection, Microsoft relies on EU Standard Contractual Clauses. In addition, Microsoft is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. Further information about Microsoft Bookings and data protection at Microsoft can be found on the Microsoft website or in the Microsoft Privacy Policy.

⁠13 Social Media presence
We maintain social media profiles on Facebook, Instagram, YouTube, LinkedIn, XING and Pinterest.

The data you enter on our social media profiles will be published by the social media platform and will not be used or processed by us for any other purpose at any time. However, we reserve the right to delete content should this be necessary. If necessary, we will communicate with you via the social media platform.

Please be aware that the operator of the social media platform uses web tracking methods. Web tracking, over which we have no influence, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing and further information on your rights in this regard and setting options to protect your privacy as well as your right to object to the creation of user profiles by the provider of the social media platform can be found in the privacy policy of the respective provider:

• Facebook – Meta Platforms Inc. (USA)/Meta Platforms Ireland Ltd. (Ireland): Privacy Policy
• Instagram – Meta Platforms Inc. (USA)/Meta Platforms Ireland Ltd. (Ireland): Privacy Policy
• YouTube –  YouTube LLC (USA): Privacy Policy
• LinkedIn – LinkedIn Corporation (USA)/LinkedIn Ireland Unlimited Company (Ireland): Privacy Policy
• XING – New Work SE (Germany): Privacy Policy
• Pinterest – Pinterest Inc. (USA)/Pinterest Europe Ltd. (Ireland): Privacy Policy

14 Your choices
You may block cookies and similar technologies in your browser or device settings, as and if permitted by such device (see cipher 6).

You may also opt out of receiving tailored advertising from companies that provide advertising services. You may opt out of receiving targeted advertising from participating ad networks, audience segment providers, ad serving vendors, and other service providers by visiting websites operated by the Network Advertising Initiative, Digital Advertising Alliance and Digital Advertising Alliance of Canada (see also cipher 7).

You may access, modify, or delete your account registered with us (see cipher 4).

You may opt out of receiving marketing mail from us (see cipher 3.3).

Subject to applicable law, you may also have a right to access, update, and correct inaccuracies in other personal information in our custody and control, subject to certain exceptions prescribed by law. You may request access, updating and corrections of inaccuracies in the personal information we have in our custody or control by emailing or writing to us at the contact information set out above. We may request certain personal information for the purposes of verifying the identity of the individual seeking access to their personal information records. You also have the right to contact the relevant regulatory and or data protection authority. Please refer to the website of your local regulatory and or data protection authority for instructions on how to contact them. The Office of the Privacy Commissioner of Canada (“OPC”) can be reached via: https://www.priv.gc.ca/en/contact-the-opc/.

15 Information security
We take technical and organizational security measures to protect your personal information against tampering, loss, destruction, or access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection laws.

The measures taken are intended to ensure the confidentiality and integrity of your personal information and to guarantee the availability and resilience of our systems and services in the processing of your personal information in the long term. They are also intended to ensure the rapid restoration of the availability of your personal information and access to it in the event of a physical or technical incident.

Our information processing and security measures are continuously improved in line with technological developments.

Unless specified otherwise, your data will be stored until the purpose of processing has been achieved.

16 Use of the website by minors
The website is aimed at an adult audience. Minors, especially children under 13 years of age, are prohibited from transmitting personal information to us or registering for a service without the consent or approval of their parents or legal guardians. If we discover that such information has been transmitted to us, it will be deleted. The child’s parents (or legal guardian) can contact us to request deletion or deregistration. For this we need a copy of an official document that identifies you as a parent or legal guardian.

17 Links to websites of other providers
Our website may contain links to websites of other providers to which this Privacy Policy does not apply. Once the link has been clicked, we no longer have any control over the processing of any information transferred to the third party when the link is clicked (such as the IP address or the URL where the link is located), as the behavior of third parties is naturally beyond our control. We can therefore not assume any responsibility for the processing of your personal information by third parties. If the use of other providers’ websites involves the collection, processing, or use of your personal information, please note the data protection policies of the respective providers.

18 Your California Privacy Rights
As a California resident, you have certain rights over your Personal Information held by us under the California Consumer Privacy Act (the “CCPA”). This chapter should be read to supplement the rest of our Privacy Policy with disclosures designed to conform to the CCPA.

The rights afforded to you as a California resident are as follows:

• The right to request the deletion of any personal information about you that has been collected from the you;
• The right to request disclosures regarding the collection of your personal information;
• The right to request disclosures regarding the sale of your personal information or disclosures made for a business purpose;
• The right not to be discriminated against for exercising your rights under the CCPA;
• We do not sell your personal information. However, you remain to have the right to opt-out of the sale of your personal information.
• The right, once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the preceding calendar year.

In order to exercise your rights, please contact us via the contact details in cipher 2.

19 Your Nevada Privacy Rights
We do not sell your personal information. However, as a Nevada resident, you remain to have the right to opt-out of the sale of your Personal Information collected by us. In order to exercise this right, please contact us via the contact details in cipher 2.

20 Changes to the Privacy Policy
We expressly reserve the right to amend or modify this Privacy Policy at any time. All changes and additions are at our sole discretion.