Privacy statement

In the following we inform about the processing of personal data by us. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

I General Information

1. Responsible person

The person responsible pursuant to Art. 4 para. 7 EU Data Protection Basic Regulation (EU-DSGVO) is

Forster Rohner AG
Flurhofstrasse 150
CH-9000 St. Gallen
Schweiz

Phone: +41 71 243 15 15
Fax: +41 71 243 15 00
E-Mail: Turn on Javascript!

Further information can be found in our imprint.

2. Contact Data Protection

You can reach our contact person for data protection at

Forster Rohner AG
attn. Data Protection Officer
Flurhofstrasse 150
CH-9000 St. Gallen
Schweiz

Phone: +41 71 243 15 15
Fax: +41 71 243 15 00
E-Mail: Turn on Javascript!

3. supervisory authority

The supervisory authority responsible for our company is the authority designated by law as responsible.

4. Data and their origin

We process personal data, which we receive from you within the scope of our business relationship with you. In addition, we process - to the extent necessary for our business activities - personal data that we receive from other companies of the Forster Rohner Group affiliated with us (this includes in particular: Forster Rohner AG, Jakob Schlaepfer AG, Inter-Spitzen AG, Inter-Spitzen srl., Forster Rohner Ilidza d.o.o, Forster Rohner Suzhou Embroidery Co. Ltd.) or from other third parties (e.g. service agencies) in a lawful manner (e.g. for the purpose of processing personal data). Execution of orders, for the fulfilment of contracts or on the basis of a consent given by you). On the other hand, we process personal data that we have received and are permitted to process from publicly accessible sources (e.g. trade or association registers, debtor registers, land registers, media or the Internet).

Relevant personal data in this regard can be in particular: Name, academic degree, job title, address, telephone number, fax number, e-mail address, date and place of birth, identification data (e.g. ID card data), account details (IBAN or BIC), tax ID.

For example, when you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions.

As part of our business relationship, you must provide us with the personal data that is required for the establishment and performance of the respective business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect.

Without the necessary data, we will generally not be able to enter into or continue the business relationship.

5. Purposes of data processing

We process the aforementioned personal data in accordance with the provisions of the EU-DSGVO in its current version:

a. on the basis of your consent (Article 6 para. l a EU-DSGVO): If you have given us your consent to the processing of personal data for specific purposes, this processing is lawful on the basis of your consent. Your consent can be revoked at any time. The revocation only takes effect for the future, i.e. processing operations that took place before the revocation are not affected.

b. to fulfil contractual obligations (Article 6 para. 1 b EU-DSGVO): The processing of personal data takes place within the framework of the initiation or implementation of our business relationship with you. The purposes of the data processing depend primarily on the concrete object of the business relationship and can include in particular the provision of services as well as the manufacture and delivery of products.

c. due to legal requirements (Article 6 para. 1 c EU-DSGVO) or in the public interest (Article 6 para. l e EU-DSGVO): Insofar as we are subject to legal obligations, we may process data to the extent that this is necessary for the purpose of fulfilling the respective legal obligations, e.g. with regard to the duty to provide information to the tax authorities on the basis of existing tax laws.

d. within the scope of a weighing of interests (Article 6 para. 1 f EU-DSGVO): If necessary, we process your data beyond the actual fulfilment of the contract to safeguard the legitimate interests of our company or third parties. Examples include permissible advertising and market research, litigation to assert or defend legal claims, ensuring the IT security of our company as well as measures to ensure building and plant security or to secure our domestic rights such as access controls.

6. Recipient of the data

Within our company, those departments that require your data in order to fulfil their contractual and legal obligations in connection with our business activities will have access to it.

Service providers (contract processors) employed by us may also receive data for this purpose if they have undertaken to comply with our written data protection instructions. These are in particular companies in the following fields of activity: Support / maintenance of EDP / IT applications, archiving, document processing, data destruction, call center services, marketing, auditing and other consulting and service companies.

Furthermore, public bodies and institutions (e.g. tax authorities) may receive personal data if they are legally or officially obliged to do so.

Other data recipients may be those for whom you have given your consent for data transfer.

Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary or legally required to enter into or carry out our business relationship with you, if you have given us your consent or if corresponding order data processing takes place. If service providers are employed in a third country, they are obliged to comply with the data protection level prescribed within the EU by written instructions or other agreements (in particular in accordance with the EU standard contract clauses).

7. Duration of storage

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. It should be noted that the business relationship may be a continuing obligation lasting several years. If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their further processing - limited in time or scope - is necessary for the following purposes:

a. Compliance with commercial and tax retention periods, whereby the retention or documentation periods specified therein are between two and ten years;

b. Preservation of evidence within the framework of applicable statutes of limitations.

8. Your rights

a. You have the following rights against us with regard to your personal data:

- i. Right of access,

- ii. Right to rectification or deletion,

- iii. Right to limit the processing,

- iv. Right to object to the processing,

- v. Right to data transferability.

b. You also have the right to complain to a data protection supervisory authority about the processing of your personal data in our company.

c. In particular, you have an individual right of objection in the following sense:

- i. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which takes place on the basis of Article 6 para. 1 e EU-DSGVO (data processing in the public interest) and Article 6 para. 1 f EU-DSGVO (data processing on the basis of a weighing of interests); this also applies to profiling based on this provision. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

- ii. If we process your personal data for the purpose of direct advertising, you have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising. If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes.

9. Automated decision making / Profiling

For the establishment and execution of the business relationship with you, we generally do not use fully automated decision making. Should we use these procedures in individual cases, we will inform you separately if this is required by law.

II Additional information on the use of our website

1. data collection

If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f EU-DSGVO):

a. IP address

b. Date and time of the request

c. Time zone difference to Greenwich Mean Time (GMT)

d. Contents of the request (concrete page)

e. Access Status/HTTP Status Code

f. amount of data transferred in each case

g. Website from which the request originates

h. Browser

i. Operating system and its interface

j. Language and version of the browser software.

2. cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective.

3. our use of cookies

a. This website uses the following types of cookies, the scope and functionality of which are explained below:

- i. Transient Cookies (see b)

- ii. Persistent cookies (see c).

b. Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.

c. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

d. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

4. further functions and offers of our website

a. In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must generally provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

b. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

c. Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, the conclusion of contracts or similar services together with partners. You will find more detailed information on this in the description of the respective offer.

d. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer.

III Additional information on the use of web analytics

Our website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Our website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are shortened for further processing, which means that it is not possible to identify individuals. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.

we use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f EU-DSGVO.

In particular, Google names information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.

IV Additional information on social media

§ 2 Integration of Google Maps

1. On our website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and allows you to conveniently use the map function.

2. By visiting our website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section I.4 of this data protection declaration will be transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and / or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

3. We leave it up to you to obtain further information on the purpose and scope of the data collection and processing by Google directly from Google and, if necessary, to use the contact data and other information available on the Internet for this purpose, in particular the data protection declarations and setting options to protect your privacy.

§ 3 Integration of Facebook

To advertise our products and services and to communicate with interested parties, applicants or customers, we operate a company presence on the Facebook platform.

On this social media platform we are responsible together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The Facebook Privacy Officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the DSGVO.

The legal basis for the processing of personal data as a result of this and reproduced below is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the analysis, communication, sale and advertising of our products and services.

The legal basis may also be the user's consent to the platform operator pursuant to Art. 6 para. 1 lit. a DSGVO. According to Art. 7 para. 3 DSGVO, the user can revoke this consent at any time for the future by notifying the platform operator.

When calling up our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU processes the user's data (e.g. personal information, IP address, etc.).

This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Using these profiles, Facebook Ireland Ltd. is able, for example, to advertise users inside and outside Facebook on an interest-related basis. If the user is logged in to his Facebook account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.

If the user contacts Facebook via Facebook, the user's personal data entered on this occasion will be used to process the request. The user's data will be deleted by us provided that the user's request has been conclusively answered and there are no legal storage obligations, e.g. in the case of subsequent contract processing.

Facebook Ireland Ltd. may also set cookies to process the data.

If the user does not agree with this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented using the browser settings, but by setting the Flash Player accordingly. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions are fully usable.

For more information on the processing activities, their prevention and the deletion of the data processed by Facebook, please refer to the Facebook Data Policy: https://www.facebook.com/privacy/explanation

It cannot be ruled out that the processing by Facebook Ireland Ltd. may also take place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Facebook Inc. has submitted to the "EU-US Privacy Shield" and thereby declares its compliance with the data protection regulations of the EU when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

§ 4 Integration of Instagram

To advertise our products and services and to communicate with interested parties, applicants or customers, we operate a company presence on the Instagram platform.

On this social media platform we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The Instagram Privacy Officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the DSGVO.

The legal basis for the processing of personal data that takes place as a result and is reproduced below is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the analysis, communication, sale and advertising of our products and services.

The legal basis can also be the user's consent to the platform operator pursuant to Art. 6 Para. 1 lit. a DSGVO. According to Art. 7 para. 3 DSGVO, the user can revoke this consent at any time for the future by notifying the platform operator.

When calling up our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU processes the user's data (e.g. personal information, IP address, etc.).

This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. These profiles enable Facebook Ireland Ltd., for example, to advertise users inside and outside Instagram on an interest-related basis. If the user is logged in to Instagram on their account at the time of the call, Facebook Ireland Ltd. may also link the data to the respective user account.

If the User contacts Instagram via Instagram, the User's personal data entered at that time will be used to process the request. We will delete the user's data provided that the user's request has been conclusively answered and there are no legal obligations to retain the data, such as in the case of subsequent contract processing.

Facebook Ireland Ltd. may also set cookies to process the data.

If the user does not agree with this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented using the browser settings, but by setting the Flash Player accordingly. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions are fully usable.

For more information about the processing activities, how to prevent them and how to delete the data processed by Instagram, please refer to Instagram's Data Policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that the processing by Facebook Ireland Ltd. may also take place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Facebook Inc. has submitted to the "EU-US Privacy Shield" and thereby declares its compliance with the data protection regulations of the EU when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active