Privacy Policy

The data controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

Maldoner Engineering
Daniel Maldoner
Rebhaldenstrasse 14
CH-9320 Arbon

Telephone: –
Email: info@maldoner.ch
Website: http://www.maldoner.ch/

General Information




Pursuant to Article 13 of the Swiss Federal Constitution
and the federal data protection provisions (Data Protection Act, DSG)
, every person is entitled to the protection of their privacy and to protection against
the misuse of their personal data. The operators of this website take the
protection of your personal data very seriously. We treat your
personal data confidentially and in accordance with the statutory
data protection regulations and this privacy policy.

In collaboration with our hosting providers, we
endeavour to protect our databases as effectively as possible against unauthorised access, loss,
misuse or falsification.

Please note that data transmission over the internet
(e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection
of data against access by third parties.

By using this website, you consent to the
collection, processing and use of data as described below
. In principle, this website can be visited without registration
. In doing so, data such as the pages accessed or
the names of the files accessed, along with the date and time, are stored on the
server for statistical purposes, without this data being directly linked
to you personally. Personal data, in particular your name, address or email address
, is collected on a voluntary basis wherever possible. No data will be passed on to third parties without your consent
.

Processing of personal data

Personal data refers to any information relating to an identified or identifiable individual. A data subject is a person in respect of whom personal data is processed. Processing encompasses any handling of personal data, irrespective of the means and methods used, in particular the retention, disclosure, collection, erasure, storage, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, insofar as the EU GDPR applies, we process personal data in accordance with the following legal bases in relation to Article 6(1) of the GDPR
:

  • (a) Processing of personal data with the consent of the data subject.
  • (b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
  • (c) Processing of personal data to comply with a legal obligation to which we are subject under any applicable EU law or under any applicable law of a country in which the GDPR
    is wholly or partly applicable.
  • (d) Processing of personal data to protect the vital interests of the data subject or another natural person.
  • lit. f) Processing of personal data to safeguard our legitimate interests or those of third parties, provided that the fundamental freedoms and rights as well as the interests of the data subject do not take precedence. Legitimate interests include, in particular, our commercial interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for as long as is necessary for the respective purpose or purposes. Where there are longer-term retention obligations arising from statutory and other obligations to which we are subject, we restrict processing accordingly.

Privacy Policy for Cookies

This website uses cookies. These are small text files that enable specific, user-related information to be stored on the user’s device whilst they are using the website. Cookies enable us, in particular, to determine the frequency of use and the number of users of the pages, to analyse usage patterns, and also to make our website more user-friendly.
Cookies remain stored after the end of a browser session and can be retrieved when you visit the site again. If you do not wish this to happen, you should configure your web browser to refuse cookies.

A general objection to the use of cookies for online marketing purposes can be made for a wide range of services – particularly in the case of tracking – via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, you can prevent cookies from being stored by disabling them in your browser settings. Please note that, in such cases, you may not be able to use all the features of this website.

Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the website operator. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Data transmission security (without SSL)

Please note that data transmitted via an open network such as the internet or an email service without SSL encryption is visible to anyone. You can recognise an unencrypted connection by the fact that the browser’s address bar displays “http://” and no padlock icon is shown in your browser’s address bar. Information transmitted via the internet and content received online may, in some circumstances, be transmitted via third-party networks. We cannot guarantee the confidentiality of communications or documents transmitted via such open networks or third-party networks.

If you disclose personal information via an open network or third-party networks, you should be aware that your data may be lost or that third parties may potentially access this information and, as a result, collect and use the data without your consent. Although individual data packets are often transmitted in encrypted form, the names of the sender and recipient are not. Even if the sender and recipient reside in the same country, data transmission via such networks frequently takes place, without any checks, via third countries – that is, countries that do not offer the same level of data protection as your country of residence. We accept no responsibility for the security of your data whilst it is being transmitted over the internet and disclaim all liability for any direct or indirect losses. We ask you to use other means of communication should you deem this necessary or reasonable for security reasons.

Despite extensive technical and organisational security measures, data may still be lost or intercepted and/or manipulated by unauthorised parties. We take appropriate technical and organisational security measures, as far as possible, to prevent this from happening within our system. However, your computer is located outside the security perimeter over which we have control. It is your responsibility as a user to inform yourself about the necessary security precautions and to take appropriate measures in this regard. As the website operator, we accept no liability whatsoever for any damage you may incur as a result of data loss or manipulation.

Data that you provide in online forms may be passed on to contracted third parties for the purpose of order processing and may be viewed and, where necessary, processed by them.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request

This data cannot be linked to specific individuals. This data is not combined with other data sources. We reserve the right to review this data at a later date should we become aware of specific indications of unlawful use.

Privacy policy for the comment function on this website

For the comment function on this website, in addition to your comment, details of the time the comment was posted, your email address and, if you are not posting anonymously, the username you have chosen are stored.

Storage of IP addresses

Our comments function stores the IP addresses of users who post comments. As we do not moderate comments on our site before they go live, we require this data to be able to take action against the author in the event of legal infringements such as insults or propaganda.

Subscribing to comments

As a user of the site, you can subscribe to comments once you have logged in. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this service at any time via a link in the notification emails.

Rights of data subjects

Right to confirmation

Every data subject has the right to request confirmation from the website operator as to whether personal data relating to them is being processed. If you wish to exercise this right to confirmation, you may contact the Data Protection Officer at any time.

Right of access

Any data subject whose personal data is being processed has the right to obtain, at any time and free of charge, information from the website operator regarding the personal data stored about them, as well as a copy of this information. Furthermore, where applicable, information may be provided regarding the following:

  • the purposes of processing
  • the categories of personal data being processed
  • the recipients to whom the personal data has been or will be disclosed
  • where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • where the personal data have not been collected from the data subject: any available information as to the origin of the data

Furthermore, the data subject has the right to be informed as to whether personal data has been transferred to a third country or to an international organisation. Where this is the case, the data subject is also entitled to receive information on the appropriate safeguards relating to the transfer.

If you wish to exercise this right to information, you may contact our Data Protection Officer at any time.

Right to rectification

Any data subject affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be completed – including by means of a supplementary statement.

If you wish to exercise this right to rectification, you may contact our Data Protection Officer at any time.

Right to erasure (right to be forgotten)

Any data subject affected by the processing of personal data has the right to request that the controller of this website erase personal data relating to them without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

  • The personal data was collected or otherwise processed for purposes for which it is no longer necessary
  • The data subject withdraws their consent on which the processing was based, and there is no other legal basis for the processing
  • The data subject objects to the processing on grounds relating to their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and associated profiling
  • The personal data has been processed unlawfully
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject
  • The personal data was collected in relation to information society services offered directly to a child

If any of the above grounds apply and you wish to request the erasure of personal data stored by the operator of this website, you may contact our Data Protection Officer at any time. The Data Protection Officer for this website will ensure that the request for erasure is complied with without delay.

Right to restriction of processing

Any data subject affected by the processing of personal data has the right to request that the data controller of this website restrict processing if one of the following conditions is met:

  • The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data
  • The processing is unlawful; the data subject objects to the erasure of the personal data and requests, instead, that the use of the personal data be restricted
  • The data controller no longer requires the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise or defence of legal claims
  • The data subject has objected to the processing on grounds relating to their particular situation, and it has not yet been established whether the legitimate grounds of the controller override those of the data subject

If any of the above conditions apply and you wish to request the restriction of personal data stored by the operator of this website, you may contact our Data Protection Officer at any time. The Data Protection Officer for this website will arrange for the processing to be restricted.

Right to data portability

Any data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to have this data transmitted to another controller, provided the legal requirements are met.

Furthermore, the data subject has the right to have the personal data transmitted directly from one data controller to another, provided this is technically feasible and does not infringe upon the rights and freedoms of others.

To exercise your right to data portability, you may contact the data protection officer appointed by the operator of this website at any time.

Right to object

Any data subject affected by the processing of personal data has the right to object, at any time and on grounds relating to their particular situation, to the processing of personal data concerning them.

In the event of an objection, the operator of this website will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or where the processing serves to establish, exercise or defend legal claims.

To exercise your right to object, you may contact this website’s data protection officer directly.

Right to withdraw consent to the processing of personal data

Any data subject affected by the processing of personal data has the right to withdraw their consent to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact our Data Protection Officer at any time.

Privacy Policy regarding objections to promotional emails

We hereby object to the use of contact details published in accordance with the legal requirement to provide an imprint for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as via spam emails.

Paid Services

In order to provide paid services, we request additional data, such as payment details, so that we can process your order or request. We store this data in our systems until the statutory retention periods have expired.

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is based outside the European Economic Area or Switzerland, data processing via Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as ‘Google’.

The statistics obtained enable us to improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google account, you can disable cross-device analysis of your usage in the settings there under ‘My data’ > ‘Personal data’.

The legal basis for the use of Google Analytics is Article 6(1)(f) of the GDPR. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. Please note that on this website, Google Analytics has been extended to include the code ‘_anonymizeIp();’ to ensure that IP addresses are collected anonymously. As a result, IP addresses are processed in a truncated form, thereby ruling out any possibility of personal identification. Where the data collected about you is personally identifiable, this is therefore immediately ruled out and the personal data is deleted without delay.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. In the exceptional cases where personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that, in this case, you may not be able to make full use of all the functions of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: Disable Google Analytics.

You can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will store a so-called opt-out cookie on your device, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted; this means that you will need to set the opt-out cookies again if you wish to continue preventing this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be enabled separately for each browser, computer or other device.

reCAPTCHA

To protect your enquiries submitted via the online form, we use the reCAPTCHA service provided by Google Inc. (Google). This check serves to distinguish whether the input is being made by a human or, in a malicious manner, by automated, machine-based processing. The check involves the transmission of your IP address and, where applicable, any further data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and processed there. However, your IP address will first be truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data held by Google. The separate data protection provisions of Google apply to this data. Further information on Google’s privacy policy can be found at:
https://policies.google.com/privacy?hl=de

Privacy Policy for Google Ads

This website uses Google’s online marketing tool, Google Ads (‘Google Ads’). Google Ads uses cookies to display relevant adverts to users, to improve campaign performance reports, or to prevent a user from seeing the same adverts multiple times. Using a cookie ID, Google tracks which adverts are displayed in which browser and can thus prevent them from being shown multiple times. Furthermore, Google Ads can use cookie IDs to track so-called ‘conversions’ relating to adverts. This is the case, for example, when a user sees a Google Ads advert and later visits the advertiser’s website using the same browser and makes a purchase there. According to Google, Google Ads cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. Through the integration of Google Ads, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that Google may obtain and store your IP address.

You can prevent participation in this tracking process in various ways:

  • by adjusting the settings in your browser software; in particular, blocking third-party cookies means you will not receive adverts from third-party providers;
  • by disabling cookies for conversion tracking, by setting your browser to block cookies from the domain ‘www.googleadservices.com’, https://adssettings.google.com, although this setting will be reset if you clear your cookies;
  • by disabling interest-based adverts from providers participating in the ‘About Ads’ self-regulatory campaign via the link https://www.aboutads.info/choices; please note that this setting will be reset if you clear your cookies;
  • by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers via the link https://www.google.com/settings/ads/plugin. Please note that, in this case, you may not be able to make full use of all the features of this website.

The legal basis for the processing of your data is a balancing of interests, according to which there are no overriding interests on your part that would preclude the processing of your personal data as described above (Article 6(1), first sentence, point (f) of the GDPR). Further information on Google Ads from Google is available at https://ads.google.com/intl/de_DE/home/, and on data protection at Google in general at https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.

External payment service providers

This website uses external payment service providers via whose platforms users and we can carry out payment transactions. For example, via

  • PostFinance
    (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
  • Visa
    (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
  • Mastercard
    (https://www.mastercard.ch/de-ch/datenschutz.html)
  • PayPal
    (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
  • Apple Pay (https://support.apple.com/de-ch/ht203027)
  • TWINT
    (https://www.twint.ch/datenschutzerklaerung-twint-id/)

In the context of fulfilling contracts, we use payment service providers on the basis of the Swiss Data Protection Ordinance and, where necessary, Article 6(1)(b) of the EU GDPR. Furthermore, we use external payment service providers on the basis of our legitimate interests in accordance with the Swiss Data Protection Ordinance and, where necessary, in accordance with Article 6(1)(f) of the EU GDPR, in order to offer our users effective and secure payment options.

The data processed by the payment service providers includes personal details, such as name and address; bank details, such as account numbers or credit card numbers; passwords, TANs and checksums; as well as information relating to the contract, transaction amounts and the recipient. This information is required to carry out the transactions. However, the data entered is processed and stored solely by the payment service providers. As the operator, we do not receive any information regarding (bank) accounts or credit cards, but only information confirming the acceptance or rejection of the payment. In some circumstances, the data may be transferred by the payment service providers to credit reference agencies. The purpose of this transfer is to verify identity and creditworthiness. In this regard, we refer you to the terms and conditions and privacy policies of the payment service providers.

Payment transactions are governed by the terms and conditions and privacy policies of the respective payment service providers, which are available on their respective websites or within the transaction applications. We also refer you to these for further information and for exercising your rights of withdrawal, access and other data subject rights.

Privacy Policy for YouTube

This website incorporates features of the ‘YouTube’ service. ‘YouTube’ is owned by Google Ireland Limited, a company registered and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services within the European Economic Area and Switzerland.

Your legal agreement with ‘YouTube’ consists of the terms and conditions available via the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and ‘YouTube’ regarding the use of the services. Google’s Privacy Policy explains how ‘YouTube’ handles your personal data and protects your information when you use the service.

Order processing in the online shop with a customer account

We process our customers’ data in accordance with the data protection provisions of the Federal Government (Data Protection Act, DSG) and the EU GDPR, within the framework of the ordering processes in our online shop, in order to enable them to select and order the chosen products and services, as well as to facilitate their payment, delivery and fulfilment.

The data processed includes master data (customer records), communication data, contract data and payment data; the data subjects affected by this processing include our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services in connection with the operation of an online shop, billing, delivery and customer services. In doing so, we use session cookies, e.g. to store the contents of the shopping basket, and persistent cookies, e.g. to store the login status.

Processing is carried out on the basis of Article 6(1)(b) (execution of orders) and (c) (legally required archiving) of the GDPR. The information marked as required is necessary for the conclusion and performance of the contract. We only disclose the data to third parties in connection with delivery, payment or in accordance with statutory permissions and obligations. The data is only processed in third countries if this is necessary for the performance of the contract (e.g. at the customer’s request in connection with delivery or payment).

Users may optionally create a user account, which allows them, in particular, to view their orders. During registration, users are informed of the mandatory details required. User accounts are not public and cannot be indexed by search engines, e.g. Google. Once users have closed their user account, their data relating to that account will be deleted, subject to any retention required for commercial or tax law purposes in accordance with Article 6(1)(c) of the GDPR. Information in the customer account remains until it is deleted, after which it is archived in the event of a legal obligation. It is the users’ responsibility to back up their data prior to the end of the contract following cancellation.

When users register, log in again or use our online services, we store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as the users’ interests in protection against misuse and other unauthorised use. As a general rule, this data is not disclosed to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so in accordance with Article 6(1)(c) of the GDPR.

The data is deleted once statutory warranty obligations and similar obligations have expired; the necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, the data is deleted once these obligations have expired.

Copyright

The copyright and all other rights to content, images, photographs or other files on the website belong exclusively to the operator of this website or to the specifically named rights holders. Written consent must be obtained in advance from the copyright holder for the reproduction of any files.

Anyone who infringes copyright without the consent of the relevant rights holder may be liable to prosecution and, where applicable, liable for damages.

General Disclaimer

All information on our website has been carefully checked. We endeavour to ensure that the information we provide is up to date, accurate and complete. Nevertheless, the occurrence of errors cannot be entirely ruled out, and we therefore cannot guarantee the completeness, accuracy or timeliness of the information, including that of a journalistic or editorial nature. Claims for damages, whether material or non-material, arising from the use of the information provided are excluded, unless there is evidence of wilful misconduct or gross negligence.

The publisher may, at its own discretion and without prior notice, amend or delete texts and is under no obligation to update the content of this website. Use of or access to this website is at the visitor’s own risk. The publisher, its clients or partners are not responsible for any damage, including direct, indirect, incidental, foreseeable or consequential damage, allegedly arising from a visit to this website, and therefore accept no liability in this regard.

The publisher also accepts no responsibility or liability for the content and availability of third-party websites accessible via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher hereby expressly distances itself from all third-party content that may be relevant under criminal or civil law or that contravenes public decency.

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply. Where the privacy policy forms part of an agreement with you, we will inform you of any changes by email or by other appropriate means in the event of an update.

Enquiries to the Data Protection Officer

If you have any questions regarding data protection, please send us an email or contact the data protection officer within our organisation, as listed at the beginning of this privacy policy.

Arbon, 30 July 2026

Source: SwissAnwalt