Privacy Policy

You can check and update your privacy settings at any time.

1. Purpose of this data protection declaration

Everyone has a right guaranteed by law to the protection of their privacy and against any misuse of their personal data. Personal data is any information relating to an identified or identifiable person. A data subject is a person whose personal data is being processed. Processing is any operation relating to personal data, whatever the means and procedures used, in particular the conservation, communication, collection, deletion, recording, modification, destruction or use of personal data.

The purpose of this data protection declaration is to inform the user of the website, hereinafter referred to as ‘the user’, of the processing of his/her personal data on this website, in particular the purposes of the processing, the legal bases, the scope of the processing, the recipients, the registration deadlines and his/her rights. By using this website, the user agrees to the collection, processing and use of data as described below.

2. Department responsible / contact details

The company named in the site’s Privacy Policy with their respective contact details.

The user may contact the person in charge at the following e-mail address to send him any requests concerning data protection in writing: [email protected]

3. Purposes of processing

The purpose of this website is to provide users with information about the company and its activities, and it includes a portal enabling users to exchange information with the company and carry out transactions via the Internet. Unless expressly indicated to this effect, it is not intended to collect the user’s personal data (hereinafter referred to as ‘user data’) in a targeted manner, to use it specifically for other purposes or to pass it on to third parties.

In this context, the purpose of processing user data via the website is to enable the user to access the relevant information and services as easily as possible from a technical point of view and to ensure a pleasant user experience.

4. Legal data bases

The processing of user data in connection with this website is governed by the Swiss Data Protection Act (DPA).

Where third party services process user data outside Switzerland, foreign data protection legislation may apply, in particular the GDPR in the territory of the EU/EEA. This will be mentioned accordingly in the descriptions of third-party services in this data protection declaration.

5. Principles governing data processing

The data controller processes user data in compliance with the following legal principles, among others:

processing complies with the principle of good faith and must be proportionate;
processing is carried out solely for purposes recognisable to the user and is limited to what is compatible with those purposes;
data is destroyed or rendered anonymous as soon as processing is no longer necessary, unless there are exceptional grounds provided for by law;
data that is visibly incomplete or incorrect is rectified or deleted;
the user’s consent to data processing is valid only if it is freely given following appropriate information;
the principles of data protection by design and by default are respected.

6. Scope of data processing

In general, users can consult all the pages of this website without having to provide any personal data.

Exceptions are those areas and services of the website that require the user’s name, address or other data for functional reasons, for example digital service portals that can only be accessed with identifiers. See below, user account.

The person responsible reserves the right to keep limited records of the use of the website (e.g. to determine which days are particularly busy or which offers are used) by recording access data in a log file; this data may make it possible to identify the user. Specifically, the following data is collected for this purpose:

the user’s IP address
date and time of access
name of the file accessed
access status (successful, partially successful, failed, etc.)
page from which the access was made
web browser used
operating system used.

This data is recorded in the log files of the manager’s IT system. It is not stored with other personal data of the user. The system must collect this data in order to be able to transmit information from the website to the user’s device. This data also enables the person responsible to optimise the website, guarantee system security and prevent misuse (e.g. through mass access requests, spam, etc.).

Anonymisation of the IP address makes it impossible to identify individual users. A user’s specific IP address is therefore not combined with other data and no analysis of a personal nature is therefore possible or carried out.

User data is only accessible to a small number of persons who have been granted special authorisation by the responsible party and who are contractually obliged to maintain confidentiality, and who are responsible for the technical maintenance of the protected servers.

Other contractual services

The data controller processes user data and the data of other contractual partners and interested parties as well as that of other agents, customers, principals or partners (hereinafter collectively referred to as ‘contractual partners’) in order to provide them with contractual or pre-contractual services. The data processed in this context, in particular the type and extent of the data, the purposes for which it is processed and the need for it to be processed, are determined by the corresponding contractual relationship.

The data processed includes the basic data of the contractual partners (e.g. names and addresses), contact data (e.g. e-mail addresses and telephone numbers) as well as contractual data (e.g. services requested, contract contents, contractual communication, names of contact persons) and payment data (e.g. bank details and payment history).

As a general rule, the data controller does not process sensitive data unless it is required to do so on behalf of the customer or in accordance with the contract.

The responsible party will only process the data required to justify and fulfil the contractual services and will inform the contractual partner of the need to provide the data if this is not clear to the contractual partner. Data will only be passed on to external persons or companies if this is necessary for the purposes of the contract. If the person responsible processes data provided to him/her as part of an order, he/she will comply with the customer’s instructions and legal requirements.

Administration, financial accounting, office organisation, contact management

The responsible party processes user data as part of the administrative tasks and organisation of its activity, financial accounting and compliance with legal obligations, particularly in terms of archiving. For these purposes, it processes the same data as it processes to provide its contractual services. The processing concerns users and other customers, interested parties, business partners and visitors to the website. This processing is intended for administration, financial accounting, office organisation and data archiving, i.e. activities that serve to maintain the business activities, fulfil the tasks and provide the services of the person responsible. In this context, the person responsible communicates or transmits data to the financial authorities, to advisers such as tax consultants or chartered accountants, and to other billing bodies and payment service providers.

The person responsible also records information about suppliers, event organisers and other business partners, e.g. in order to be able to contact them at a later date, on the basis of his or her business interests. For commercial reasons, this data, which mainly concerns companies, is stored on a long-term basis.

7. Conservation / archiving

The responsible party is not under any general obligation to store user data. It is primarily the user who is responsible for keeping available the data that is important to him or her and for archiving it where necessary.

The data controller shall delete User data as soon as it is no longer necessary to store it in order to achieve the purposes for which it was processed, but after ten years at the latest, unless legal storage obligations or the overriding interests of the data controller require it to be stored for longer.

User data collected in connection with orders in the online shop will be stored by the responsible party in its accounting systems after an order has been processed, invoiced and paid for as long as the responsible party is obliged to do so by virtue of tax, commercial or other regulations. In general, this data is kept for 10 years after the transaction due to legal provisions, and 10 years after the last transaction in the case of repeated transactions by the same user.

8. Confidentiality / disclosure to third parties

Unless expressly stated otherwise in this data protection declaration, e.g. in the area of data processing by agents or in the area of third-party services, or insofar as user data is not clearly intended to be passed on, it will be treated as confidential and will not be passed on to third parties or sold to third parties for their own purposes. Exceptions are transfers to third parties that are required by law, e.g. in response to orders from the authorities or the courts.

9. Communication abroad

Website data, including user data, is stored and processed on secure servers in Switzerland or in EU/EEA countries. Unless expressly stated otherwise in this data protection declaration, in particular in connection with third-party services, user data will not be transferred to countries outside the EU/EEA.

Note on data transmission to the USA (United States of America)

The data controller draws your attention to the fact that when data is transferred to the USA, there is a risk that the US authorities will be able to access it under US law, without any distinction, restriction or exception linked to the purposes pursued and without any objective criterion that would make it possible to limit access by the US authorities and their subsequent use of the data to defined and strictly limited purposes in order to justify the actions associated with access to and use of this data. We would also draw your attention to the fact that in the USA there are no remedies comparable to those offered by the DPA which would allow data subjects in Switzerland to access the data concerned and obtain its rectification or deletion, and that there is no judicial protection against the general access rights of the US authorities. We expressly draw the user’s attention to this factual and legal situation so that they can make an informed decision accordingly when consenting to the processing of their data in the USA.

10. Data processing by sub-contractors

The person responsible is authorised to entrust the processing of the user’s personal data to external service providers and/or agents who are bound by a contract. However, the latter must be bound by data protection law and confidentiality obligations to the same extent as the responsible party, whether by law or by contract. Their right to process user data may not exceed that of the person responsible. The person responsible is also obliged to check regularly that the sub-contractors involved are able to guarantee data security.

On request and unless there are overriding interests to the contrary, the person responsible will provide the user with a current list of the sub-contractors who process data on behalf of the person responsible in order to ensure the functionality of the website, indicating the extent to which personal data is processed by these sub-contractors.

11. Data security (MTO)

In order to ensure data security, the person responsible and his subcontractors apply technical and organisational measures (MTO) in line with the state of the art. On request and insofar as data security is not endangered for other users, the person responsible will provide the user with information on the MTOs taken.

For security reasons and in order to secure the transmission of confidential content, e.g. requests received by the website operator from the user, the website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that ‘http://’ is replaced by ‘https://’ in the browser address bar and by the presence of a lock icon. When SSL/TLS encryption is activated, the data you send us cannot be read by third parties.

However, it is impossible to rule out the possibility that information or personal data transmitted by users via unencrypted online forms, e-mails or FTP downloads could be consulted or modified by unauthorised persons. This type of transmission is carried out at the user’s own risk and without any guarantee from the party responsible.

12. Use of cookies

This website uses cookies. These are small files stored on the user’s computer to track their visit to the website and their preferences based on how they use the site. Cookies show how users navigate the website and can also be used to save user settings between visits. Cookies are stored on the user’s device, which transmits them to the website.

Some cookies used on the manager’s website are ‘session cookies’ which are deleted automatically at the end of the visit. Other cookies remain stored on the user’s device until they are deleted. These cookies enable the webmaster to recognise the user when they return to the website. They contain an identification number enabling the manager to identify the device from which a request originated. This enables the operator to improve its services when the user visits its website several times. However, it is not possible to associate this identification number with personal data.

When accessing the website, a pop-up window allows the user to accept, refuse or restrict the use of cookies. Users can also configure their web browser so that it displays a warning before a cookie is stored, restricts the creation of cookies or blocks them entirely. Users can also delete stored cookies later via their browser or activate automatic deletion of cookies when the browser is closed. The browser’s help function indicates how to set the browser’s cookie parameters.

Users are informed that for technical reasons, if they deactivate or delete cookies, it may not be possible to use certain functions of the website in full.

13. Use of third-party servicess de tiers

The responsible party uses content or service offers from third-party providers on its website in order to be able to integrate their content and services, e.g. videos or fonts (together referred to hereinafter as ‘content’), into its website. For these purposes, third-party suppliers of such content must always capture users‘ IP addresses, as otherwise they would not be able to transmit their content to users’ browsers. The IP address is therefore required to display this content. Third-party suppliers may also use invisible pixels (also known as ‘web beacons’) for statistical or marketing purposes. These ‘invisible pixels’ make it possible to analyse information such as the flow of visitors to the various pages of the website. This information may also be recorded on users’ devices by means of cookies and may contain, in particular, technical information on the browser and operating system, referring websites, the time of the visit and other information on the use of our online offering; it may also be combined with information from other sources. With certain third-party services, it is possible that other information relating to the user may be collected, used for the third-party supplier’s own purposes and possibly processed abroad.

Insofar as the party responsible uses the third-party services listed in the appendix on the website, by using the website the user accepts the use of these services and the associated data processing by third parties, the use of the data for the third parties’ own purposes, any associated communication abroad and the corresponding provisions of third parties regarding the use and protection of data.

In particular, the user acknowledges that the party responsible accepts no liability for the processing of personal data in the context of these third-party services, as it has no influence in this respect. The operator endeavours to use only content whose providers use the IP address solely to deliver the content, but cannot guarantee this due to lack of influence. These third-party services and the extent to which user data is processed change constantly as a result of updates, error corrections, new versions or other programme modifications. The corresponding descriptions of third-party services in this data protection declaration are therefore only intended to provide the user with general information on the content and scope of data processing by these services and on the possibility of objecting to this (the so-called ‘opt-out’). The person responsible endeavours to update the descriptions regularly, but cannot guarantee that the data is up-to-date at all times. We recommend that users regularly check directly with the third-party supplier in question to find out about the content of these services and the extent of the associated data processing.
The attached list provides an overview of third-party providers and their content, as well as links to their data protection declarations, which contain further information on data processing and the possibility of objecting to it (known as ‘opt-out’).

14. User rights

Subject to the exceptions provided for by law or agreed by contract, the user has the following rights with regard to user data:

the right to information on data processing (art. 19 DPA);
the right to information (art. 25 DPA);
the right to rectify data (art. 6 para. 5 DPA, art. 32 para. 1 DPA);
the right to have data deleted (‘right to be forgotten’; art. 6 para. 4, DPA; art. 32 para. 2 let. c DPA);
the right to object and to limit (‘block’) or stop the processing of data (art. 30 para. 2 let. b LPD; art. 32 para. 2 let. a, b LPD);
the right to revoke consent to data processing (art. 30 al. 2 let. b LPD);
the right to delivery and portability of personal data (art. 28 DPA);
the right to information in the event of automated individual decisions (art. 21 DPA).

In the event of revocation of consent to the processing of user data, a request to restrict data processing or the deletion of user data, the person responsible will delete the user data unless legal retention obligations or overriding interests prevent this. In particular, in this case, the person responsible will restrict the use of user data to the purposes required by law. User data required for the performance of a contract or for commercial purposes is excluded. In all such cases, the user accepts that it will no longer be possible to provide personalised services or only to a limited extent.

If the user has any questions about the processing of personal data, or if he/she has any other queries or requests concerning data protection, he/she can contact the person responsible at the contact point indicated above under ‘Person responsible / Contact details’. However, in order to prevent misuse, the person responsible will only respond to data protection requests in writing and on presentation of proof of identity (copy of your passport or identity card). Information is provided free of charge, generally within 30 days.

15. Competent supervisory authorities

The Federal Data Protection and Information Commissioner (FDPIC) is the competent authority for data protection requests concerning the processing of user data by private individuals, insofar as persons in Switzerland are concerned or if the data is processed from Switzerland. The SDPC can investigate violations of data protection regulations on his own initiative or on the basis of a complaint, and order the modification, suspension or cessation of all or part of the processing. It also advises private individuals on data protection issues, informs data subjects on request of how they can exercise their rights, and can lodge a complaint with the relevant criminal prosecution authority. https://www.edoeb.admin.ch/en

16. Place of jurisdiction / applicable law

Unless mandatory law states otherwise, only Swiss law applies, to the exclusion of international rules on conflicts of law. With the exception of mandatory legal jurisdictions, the exclusive place of jurisdiction is the registered office of the party responsible.

STL Swiss SA

May 2025

17. Third-party services used

Use of Google Maps

This website uses Google Maps. This enables us to display interactive maps directly on the website and to make it easier for you to use the map function. When you visit the website, Google receives the information that you have visited the relevant subpage of our website, regardless of whether or not Google has a user account to which you are logged in. If you are logged in to Google, your data will be linked directly to your account. If you do not wish this association with your Google profile, you must log out before activating the button. Google saves your data in the form of user profiles and uses them for advertising purposes, market research and/or to adapt its website to your needs. This analysis is carried out in particular (even for users who are not logged in) in order to offer advertising tailored to your needs and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, please contact Google. You can find more information about the purposes and scope of data collection and processing by Google, as well as further information about your rights in this respect and the configuration options for protecting your privacy, at https://policies.google.com/privacy?hl=en&gl=ch.

Privacy policy for the use of Google web fonts

This website uses web fonts provided by Google to ensure that the fonts are displayed consistently. When you visit a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly. If your browser does not support web fonts, your computer will use a default font.

You can find more information about Google Web Fonts at
https://developers.google.com/fonts/faq and in Google’s privacy policy:
https://policies.google.com/privacy?hl=en&gl=ch

Data protection policy for Vimeo

This website incorporates plugins from the Vimeo video portal of the company Vimeo, LLC, 555 West 18th Street, New York, New York 10011, United States. Each time you display a page offering one or more video clips hosted on Vimeo, a direct connection is established between your browser and a Vimeo server in the United States. Information about your visit and your IP address is recorded there. When you interact with the Vimeo plugins (e.g. by clicking on the ‘Start’ button), this information is also transmitted to Vimeo and stored there. Further information on the collection and use of your data by Vimeo can be found in the Vimeo data protection declaration.

If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and associate it with your membership data stored on Vimeo, you must log out of Vimeo before visiting this website.

Vimeo also activates the Google Analytics tracker by means of an iFrame in which the video is displayed. This is tracking carried out by Vimeo to which we do not have access. You can block tracking by Google Analytics by using the deactivation tools offered by Google for certain web browsers. In addition, you can prevent the collection of data generated by Google Analytics about your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB

Privacy policy for LinkedIn

This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages with LinkedIn functions is accessed, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website via your IP address. If you click on the LinkedIn ‘Recommend’ button while you are logged into your LinkedIn user account, LinkedIn can associate your visit to our website with you and your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

You can find more information in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy