Legal.

Terms of use.

The contents of this website have been created with the greatest of care. However, Hugentobler Schweizer Kochsysteme AG cannot guarantee that everything displayed on it will be free from errors. No liability is assumed for any damages, especially direct or indirect as well as material or immaterial damages resulting from the use or non-use of the information presented; liability for criminal intent and gross negligence are excepted.
In addition Hugentobler Schweizer Kochsysteme AG reserves the express right to alter, amend or delete certain pages or even the entire website without giving any prior notice, and also reserves the right to partially or completely cease publication.

References and links.

Hugentobler Schweizer Kochsysteme AG declares that at the time the links were created, the linked pages contained no illegal content and that it does not have any influence on the present and future design nor on the contents of the linked pages. It therefore expressly disassociates itself from all contents of all linked pages that are changed after the links have been set.

Legal validity of this disclaimer.

If sections or individual terms of this text are not legal or correct, the content or validity of the other parts shall remain uninfluenced by this fact.

Copyright and trademark law.

Texts, images, graphics, audio files, animations and video sequences and their arrangement are governed by copyright law and other protective laws.

Privacy policy.

In this Privacy Policy, we, Hugentobler Schweizer Kochsysteme AG (hereinafter Hugentobler, we or us), describe how we collect and process personal data - based on the requirements of the EU General Data Protection Regulation ("GDPR"), the Swiss Data Protection Act ("DPA") and the revised Swiss Data Protection Act ("revDPA"). This data protection declaration is not an exhaustive description; other data protection declarations may regulate specific matters. For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable person.

1.Responsible body and contact.

Hugentobler Schweizer Kochsysteme AG is responsible for the data processing described here, unless otherwise stated in individual cases. Enquiries about data protection can be sent to us by letter or e-mail, enclosing a copy of the ID or passport identifying the user: Hugentobler Schweizer Kochsysteme AG, Gewerbestrasse 11, 3322 Urtenen-Schönbühl, Switzerland, Tel: +41 (0)848 400 900, info@hugentobler.ch.

2.Collection and processing of personal data.

We process personal data in the following categories of processing in particular.

• Customer data of customers for whom we provide or have provided services.
• Personal data that we have received indirectly from our customers during the provision of services.
• When visiting our website
• When using our newsletter
• When participating in one of our events.
• When we communicate or a visit takes place.
• In the case of other contractual relationships, e.g. as a supplier, service provider or consultant.
• For applications
• If we are obliged to do so for legal or regulatory reasons.
• To fulfil our due diligence obligations or other legitimate interests, e.g. to avoid conflicts of interest, prevent money laundering or other risks, ensure data accuracy, check creditworthiness, ensure security or enforce our rights.

More detailed information can be found in the description of the respective categories of processing in section 5

3.Categories of personal data.

Which personal data we process depends on your relationship with us and the purpose for which we process it. In addition to your contact details, we also process other information about you or about people who have a relationship with you. We collect the following categories of personal data, depending on the purpose for which we process them:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Customer information (e.g. profession, title, job title)
• Risk assessment data (e.g. credit rating information, commercial register data)
• Financial information (e.g. data on bank details)
• Mandate data, depending on the mandate (e.g. tax information, articles of association, minutes, projects, contracts, employee data (e.g. salary, social insurance), accounting data, beneficial owners, ownership structure)
• Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
• Application data (e.g. CV, references)
• Marketing information (e.g. newsletter registration)
• Security and network data (e.g. visitor lists, access controls, network and mail scanners, telephone call lists)

Insofar as this is permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, Internet) or receive such data from our clients and their employees, from authorities, (arbitration) courts and other third parties. In addition to the data that you provide to us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we learn in connection with official and court proceedings, information in connection with your professional functions and activities (so that we can, for example to conclude and process transactions with your employer with your help), information about you in correspondence and meetings with third parties, creditworthiness information, information about you that people from your environment (family, advisors, legal representatives, etc.) give us so that we can conclude or process contracts with you or with your involvement (e.g. References, your address for deliveries, powers of attorney) Information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours on the utilisation or provision of services by you (e.g. payments made, purchases made), information from the media and the Internet about you (insofar as this is appropriate in the specific case, e.g. in the context of a job application, etc.), information from the media and the Internet about your person (insofar as this is appropriate in the specific case, e.g. in the context of a job application, etc.).e.g. in the context of a job application etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location data).

4.Purposes of data processing and legal basis.

4.1 Provision of services.

We primarily process the personal data that we receive from our clients and other business partners in the context of our client relationships and other contractual relationships with them and other persons involved. The personal data of our customers includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information)
• Personal information (e.g. profession, title, job title, etc.)
• Risk assessment data (e.g. credit rating information, commercial register data, sanctions lists, specialised databases, data from the Internet)
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the mandate, e.g. tax information, articles of association, minutes, employee data (e.g. salary, social insurance), accounting data, etc.

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or execution of a contract with the data subject or in favour of the data subject, including contract initiation and any enforcement (e.g. consulting, fiduciary services)
• Fulfilment of a legal obligation (e.g. if we are obliged to disclose information)
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, ensure security, manage risk, enforce our rights, defend ourselves against claims or to check for possible conflicts of interest)
• Consent (e.g. to send you marketing information).

4.2 Indirect data processing from service provision.

When we provide services for our customers, we may also process personal data that we have not collected directly from the data subjects or personal data of third parties. These third parties are usually employees, contact persons, family members or persons who have a relationship with the customers or data subjects for other reasons. We require this personal data in order to fulfil contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose are informed by our customers that we are processing their data. Our customers can refer to this privacy policy for this purpose. The personal data of persons who have a relationship with our customers includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information, marketing data)
• Personal information (e.g. profession, title, job title, etc.)
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the mandate, e.g. tax information, articles of association, minutes, employee data (e.g. salary, social insurance), accounting data

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or performance of a contract with the data subject or in favour of the data subject (e.g. when we fulfil our contractual obligations)
• Fulfilment of a legal obligation (e.g. if we are obliged to disclose information)
• Safeguarding legitimate interests, in particular our interest in providing our customers with an optimal service.

4.3 Use of our website.

No personal data needs to be disclosed in order to use our website. However, the server collects a range of user information with each visit, which is temporarily stored in the server's log files. When using this general information, no assignment to a specific person takes place. The collection of this information or data is technically necessary to display our website and to ensure its stability and security. This information is also collected in order to improve the website and analyse its use. This includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Other information that you send us via the website (e.g. contact form, course registration form, shop order)
• Technical information automatically transmitted to us or our service providers, information on user behaviour or website settings (e.g. IP address, referrer, UDI, device type, operating system, browser, provider, date and time of the visit or request, number of clicks on the page, opening the newsletter, clicking on links, etc.).

We process this personal data for the purposes described on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyse data or publicise our services)
• Consent (e.g. to the use of cookies or the newsletter).

Our website is hosted by Cloudrexx. Your data is stored in secure and ISO/IEC 27001-certified data centres in Switzerland. The servers are shielded as well as possible against unauthorised third-party access. Backups are created regularly to prevent data loss as far as possible.

4.4 Newsletter use.

If you subscribe to our newsletter, we will use your e-mail address and other contact details to send you the newsletter. You can subscribe to our newsletter with your consent. Your full name and email address, which we store after your registration, are mandatory for sending the newsletter. The legal basis for the processing of your data in connection with our newsletter is your consent to the sending of the newsletter. You can revoke your consent at any time and unsubscribe from the newsletter.

4.5 Participation in events.

If you take part in an event organised by us, we collect personal data in order to organise and run the event and, if necessary, to send you additional information afterwards. We also use your information to inform you about other events. You may be photographed or filmed by us at these events and we may publish this image material internally or externally.This includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, further training, employer company, eating habits)
• Pictures or videos
• Payment information (e.g. bank details).

We process this personal data for the purposes described on the basis of the following legal bases:

• Fulfilment of a contractual obligation with the data subject or in favour of the data subject, including contract initiation and possible enforcement (enabling participation in the event)
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organisation)
• Consent (e.g. to send you marketing information or create image material).

4.6 Direct communication and visits.

When you contact us (e.g. by telephone, e-mail or chat) or we contact you, we process the personal data required for this. We also process this personal data when you visit us. In this case, you may have to leave your contact details before your visit or at reception. We store this data for a certain period of time in order to protect our infrastructure and our information. We use services such as "Zoom" or "Microsoft Teams" to organise telephone conferences, online meetings, video conferences and/or webinars ("online meetings").We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Edge data for communication (e.g. IP address, duration of communication, communication channel)
• Recordings of conversations, e.g. during video conferences
• Other information that the user uploads, provides or creates while using the video conferencing service as well as metadata used for the maintenance of the service provided Additional information on the processing of personal data by "Zoom" or Microsoft Teams can be found in their privacy policies.
• Personal information (e.g. profession, function, title, employer company)
• Time and reason for the visit.

We process this personal data for the purposes described on the basis of the following legal bases:

• Fulfilment of a contractual obligation with the data subject or in favour of the data subject, including contract initiation and possible enforcement (provision of a service)
• Safeguarding legitimate interests (e.g. security, traceability, processing and administration of customer relationships).

4.7 Applications.

You can submit your application for a position with us by post or via the e-mail address provided on our website. The application documents and all personal data disclosed to us will be treated in strict confidence, will not be disclosed to third parties and will only be processed for the purpose of processing your application for employment with us. Without your consent to the contrary, your application dossier will be deleted/destroyed after the application process has been completed. The legal basis for the processing of your data is your consent, the fulfilment of the contract with you and our legitimate interests. We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, employer company)
• Application documents (e.g. letter of motivation, certificates, diplomas, CV)
• Assessment information (e.g. assessment of personnel consultants, reference information, assessments)
• Particularly sensitive personal data: This personal data may also include particularly sensitive personal data, such as data relating to health, religious beliefs or social assistance measures.

We process this personal data for the purposes described on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. hiring new employees)
• Consent.

4.8 Suppliers, service providers, other contractual partners.

When we enter into a contract with you to provide a service for us, we process personal data about you or your employees. We need this data in order to communicate with you and utilise your services. We may also process this personal data to ensure that we do not enter into any unwanted risks, e.g. with regard to money laundering or sanctions. We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail).
• Personal information (e.g. profession, function, title, employer company).
• Financial information (e.g. data on bank details).

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or execution of a contract with the data subject or in favour of the data subject, including contract initiation and possible enforcement
• Protection of legitimate interests (e.g. avoidance of conflicts of interest, protection of the company, enforcement of legal claims).

5. Tracking technologies.

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is required for the purposes mentioned. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

6.Web and newsletter analysis.

We use the following web analysis tools and re-targeting technologies to obtain information about the use of our website, to improve our Internet offering and to be able to address you with advertising on third-party websites or on social media: Google Analytics, Google Tag Manger, Google Ads and Mailchimp (newsletter). These tools are provided by third-party providers. As a rule, the information collected for this purpose about the use of a website is transmitted to the server of the third-party provider through the use of cookies or similar technologies. Depending on the third-party provider, these servers may be located abroad. The data is usually transmitted by shortening the IP addresses, which prevents the identification of individual end devices. This information is only transmitted by third-party providers on the basis of legal regulations or as part of order data processing.

6.1 Google Analytics.

We use Google Analytics on our websites, the web analysis service of Google LLC, Mountain View, California, USA, responsible for Europe is Google Limited Ireland ("Google"). To deactivate Google Analytics, Google provides a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses cookies. These are small text files that make it possible to store specific user-related information on the user's end device. These enable Google to analyse the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure anonymised collection of IP addresses (so-called IP masking). If anonymisation is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google may associate your IP address with other Google data. For data transfers to the USA, Google has undertaken to sign and comply with the EU standard contractual clauses.

6.2 Google Tag-Manager.

We use Google Tag Manager on our website to collect user behaviour data and forward it to our analysis tools. The Tag Manager does not have access to the data, but merely collects it. As it does not process any personal data itself, we refer to the tracking services and the Google Tag Manager usage guidelines. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html

6.3 HCaptcha.

This website uses the "hCaptcha" function from Intuition Machines, Inc. to prevent misuse by malicious bots. hCaptcha is characterised by immediate evaluation to avoid long-term data storage. It also supports privacy initiatives such as Privacy Pass, which protects online privacy through cryptographic proof. Usage guidelines: https://www.hcaptcha.com/privacy.

6.4 Social media plugins.

Social media plugins ("plugins") from third-party providers are used on our website. The plugins can be recognised by the logo of the respective social network. We offer you the opportunity to interact with the social networks and other users via the plugins. We use the following plugins on our website: LinkedIn, Facebook, Instagram, YouTube. When you visit our website, your browser establishes a direct connection to the third-party provider's servers. The content of the plugin (e.g. YouTube videos) is transmitted directly to your browser by the respective third-party provider and integrated into the page. The transfer of data for the display of content (e.g. publications on Twitter) takes place regardless of whether you have an account with the third-party provider and are logged in there. If you are logged in with the third-party provider, your data collected by us will also be assigned directly to your existing account with the third-party provider. If you activate the plugins, the information will also be published on the social network and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by the third-party providers as well as your rights in this regard and setting options for protecting your privacy can be found in the third-party providers' data protection notices. The third-party provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or customising its website. Such an evaluation is also carried out in particular for users who are not logged in to display customised advertising and to inform other users of the social network about your activities on our website. If you wish to prevent the third-party providers from assigning the data collected via our website to your personal profile in the respective social network, you must log out of the respective social network before visiting our website. You can also completely prevent the plugins from loading with specialised add-ons for your browser, such as "Ghostery" (https://www.ghostery.com/) or "NoScript" (http://noscript.net/).

6.5 Newsletter tracking.

We use Mailchimp software to send our newsletters. This software can be used to send and analyse newsletters. To carry out this analysis, we collect device and access data. The newsletter contains a pixel to collect this data. The newsletter and the websites that can be accessed from this newsletter are also tracked using cookies. A pixel is an image file that is stored on the recipient's device. With the help of these technologies, we receive information on whether the newsletter has arrived, has been opened and what content has been clicked on. We use this information to improve our newsletter and our offers. The setting of a pixel can be prevented by deactivating HTML in the mail programme (varies depending on the mail programme).

6.6 Web-Fonts.

This site uses so-called web fonts, which are provided by Fonts.ch or the company Monotype, for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. According to the information provided by Monotype (fonts.com), no cookies are set and the user's IP address is completely anonymised during the server query, which means that no personal data is transmitted. Further information on web fonts can be found in Monotype's privacy policy: https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy

6.7 Google Ads.

Our website uses the functions of Google Ads Remarketing. With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting). Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). If you have a Google account, you can object to personalised advertising by clicking on the following link: https://www.google.com/settings/ads/onweb/. Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de..

7. Data transfer and data transmission.

We only pass on your data to third parties if this is necessary for the provision of our services, if these third parties provide a service for us, if we are legally or officially obliged to do so or if we have an overriding interest in passing on the personal data. We will also pass on personal data to third parties if you have given your consent or requested us to do so. Not all personal data is transmitted in encrypted form as standard. Unless explicitly agreed otherwise with the customer, accounting data, payroll administration data, payslips and salary statements are transmitted unencrypted. The following categories of recipients may receive personal data from us:

• Branches, subsidiaries, sister or parent companies.
• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants, lawyers, insurance companies).
• Third parties within the scope of our legal or contractual obligations, authorities, state institutions, courts.

We conclude contracts with service providers who process personal data on our behalf, obliging them to guarantee data protection. The majority of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA (e.g. Google Analytics data) or, in exceptional cases, to other countries worldwide. If it is necessary to transfer data to other countries that do not have an adequate level of data protection, this is done on the basis of the EU standard contractual clauses (e.g. in the case of Google) or other suitable instruments.)

8. duration of storage of personal data.

We process and store your personal data for as long as is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e. for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it can be deleted or anonymised as far as possible. Shorter retention periods of twelve months or less generally apply to operational data (e.g. system protocols, logs).

9. data security.

We take appropriate technical and organisational security precautions to protect your personal data from unauthorised access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymisation and controls.

10. obligation to provide personal data.

As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations (you are not generally legally obliged to provide us with data). Without this data, we will not be able to enter into or fulfil a contract with you (or the entity or person you represent). The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.

11. your rights.

You have the following rights in connection with our processing of personal data:

• Right to information about your personal data stored by us, the purpose of processing, the origin and recipients or categories of recipients to whom personal data is passed on.
• Right to rectification if your data is incorrect or incomplete.
• Right to restrict the processing of your personal data
• Right to request the erasure of processed personal data
• Right to data portability
• Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons.
• Right to lodge a complaint with a competent supervisory authority, where provided for by law, if you consider that the processing of personal data relating to you infringes the GDPR or the DPA.

To assert these rights, please contact the address given in section 1. Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or require it for the assertion of claims. If you incur costs, we will inform you in advance.

12.amendment of the privacy policy.

We expressly reserve the right to amend this privacy policy at any time. Last change: May 2024