Data protection

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data means any information relating to an identified or identifiable person, such as your name, address or the IP address of the internet connection from which you access our site.

Based on Article 13 of the Swiss Federal Constitution and the provisions of the Swiss Federal Act on Data Protection (FADP), every person is entitled to protection of their privacy and protection against misuse of their personal data. We comply with these provisions and, where applicable, the EU General Data Protection Regulation (GDPR). Personal data is treated confidentially and is not sold or disclosed to third parties unless this is described in this policy, required for the provision of our services, based on your consent or otherwise permitted by applicable law.

In close cooperation with our hosting providers, we make every effort to protect databases as effectively as possible against unauthorised access, loss, misuse or forgery. When our websites are accessed, the following data may be stored in log files: IP address, date, time, browser request and general information transmitted by the operating system or browser. This usage data forms the basis for statistical, anonymised evaluations so that trends can be identified and our offering can be improved accordingly.

Who is responsible for data collection on this website?

Data processing on this website is carried out by Impact Acoustic AG, Bodenhof 4, 6014 Luzern, Switzerland. For the storage and processing of data, Impact Acoustic AG may use service providers that store and/or process the data exclusively on the instructions of Impact Acoustic AG and in compliance with applicable data protection law.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This includes data that you send to us in the context of a contact request. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data, such as the internet browser, operating system or time of the page view. This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors and securely. Other data may be used, where permitted or where you have given any required consent, to analyse your user behaviour in order to optimise our online offering. Your data will not be passed on to third parties outside the commissioning of service providers under processing agreements, or the placement of targeted advertising measures in our name where permitted by law and subject to the required data protection safeguards.

What rights do you have regarding your data?

You have the right to receive information free of charge about the origin, recipients and purpose of your stored personal data at any time, subject to the applicable legal requirements. You also have the right to request the rectification, erasure or restriction of processing of this data and, where applicable, to object to processing and to data portability. For this purpose, as well as for further questions regarding data protection, you may contact us at any time at the address given in the legal notice. You also have a right to lodge a complaint with the competent supervisory authority.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection law and this data protection policy. When you use this website, various personal data may be collected. Personal data means data with which you can be personally identified. This policy explains what data we collect, what we use it for, how we process it and for what purpose. Please note that data transmission over the internet, for example communication by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the controller

The controller responsible for data processing on this website is:

Impact Acoustic AG
Bodenhof 4
6014 Luzern
Switzerland
Email: connect@impactacoustic.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw consent that you have already given at any time. An informal notification by email to us is sufficient for this purpose. The lawfulness of the data processing carried out before the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority. For private-sector controllers in Switzerland, the competent federal supervisory authority is generally the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you may also lodge a complaint with a competent EU or EEA supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH-3003 Berne
Switzerland
Telephone: +41 (0)58 462 43 95
Website: www.edoeb.admin.ch

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format, and to have this data transmitted to you or to a third party. If you request the direct transfer of the data to another controller, this will be carried out only to the extent that it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and/or by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, restriction of processing, erasure

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification, restriction of processing or erasure of this data. For this purpose, as well as for further questions regarding personal data, you may contact us at any time at the address given in the legal notice.

3. Data collection on our website

Cookies

Our internet pages partly use so-called cookies and similar technologies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your device and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them or until their storage period expires. These cookies enable us to recognise your browser the next time you visit us.

You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested, such as the shopping basket function, are stored on the basis of our legitimate interest in the technically error-free and optimised provision of our services (Art. 6(1)(f) GDPR, where applicable) and the corresponding provisions of the FADP. Where required by applicable law, analytics, marketing and personalisation cookies and similar technologies are used only after you have given consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw or adjust your consent at any time via the cookie settings provided on the website or through your browser settings. We also observe the information and choice requirements under Swiss telecommunications law where applicable.

Server log files

We automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. The data is processed for the secure, stable and technically error-free operation of the website. The legal basis, where the GDPR applies, is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of the website. Mandatory legal provisions and retention obligations remain unaffected.

Contact and order form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and for the case of follow-up questions. Where separately permitted or consented to, we may also use hashed contact data for targeted advertising measures in our name. We will pass on this data to third parties only with your consent, if it is necessary to fulfil a contract with you or to process a pre-contractual enquiry made by you, for example to logistics service providers such as Material Bank, FedEx or Swiss Post, or if service providers process the data on our behalf under an appropriate processing agreement.

The processing of the data entered in the contact form is based on your consent (Art. 6(1)(a) GDPR, where applicable), on the performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR, where applicable), and on our legitimate interest in processing and responding to enquiries (Art. 6(1)(f) GDPR, where applicable). You may withdraw consent at any time. An informal communication by email to us is sufficient for this purpose. The lawfulness of the data processing procedures carried out before the withdrawal remains unaffected by the withdrawal.

The data entered by you in the contact form will remain with us until you request us to erase it, withdraw your consent to its storage or the purpose for which it was stored ceases to apply, for example after your request has been processed. Mandatory legal provisions, in particular retention periods, remain unaffected.

4. Analysis tools

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated about your use of this website may be transferred to Google servers, including servers in the United States, and processed there. Where required by applicable law, Google Analytics is activated only after you have given consent via the cookie banner or cookie settings. The legal basis is your consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw your consent at any time with effect for the future.

The statistics obtained enable us to improve our offering and make it more relevant for you as a user. Where enabled and consented to, this website may also use Google Analytics for cross-device analysis of visitor flows, for example through a user ID or Google signals. If you have a Google user account, you can manage certain cross-device and advertising settings in your Google account.

Google states that Google Analytics does not log or store individual IP addresses from users in the EU, Switzerland or the United Kingdom. IP addresses are used only to derive coarse geo-location information and are then discarded before being logged. Where IP anonymisation or regional data collection functions are available or required, they are activated accordingly.

For transfers to the United States, Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. Where required, transfers may also be based on additional contractual or statutory safeguards. Further information on Google’s data transfer frameworks is available from Google and the official Data Privacy Framework website.

You can prevent the storage of cookies by selecting the appropriate settings in your browser or by adjusting your cookie settings on our website. Please note that, if you do this, you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website, including your IP address, and the processing of this data by Google by downloading and installing the browser plug-in available from Google: tools.google.com/dlpage/gaoptout.

You can find more information on how Google Analytics handles user data in Google’s privacy information and Analytics help resources, including support.google.com/analytics/answer/6004245.

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offering. Google Tag Manager itself, which implements the tags, does not create user profiles or carry out independent analyses. However, the tags managed through Google Tag Manager may process personal data. With regard to the processing of users’ personal data by integrated Google services, we refer to the information on those services in this policy and to Google’s usage guidelines: google.com/intl/en/tagmanager/use-policy.html.

Objection to data collection and withdrawal of consent

You can prevent the storage of cookies by adjusting your browser software accordingly. You can also withdraw or adjust your consent for analytics cookies through the cookie settings on our website, where such settings are provided.

You can also prevent the collection of data generated by the cookie and related to your use of the website, including your IP address, and the processing of this data by Google by downloading and installing the browser plug-in available at tools.google.com/dlpage/gaoptout.

5. Advertising

Newsletter data

If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or is collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties, except to service providers that process the data on our behalf for newsletter delivery under appropriate data protection arrangements.

The processing of the data entered in the newsletter registration form is based on your consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example by clicking on the “unsubscribe” link in the newsletter. The lawfulness of the data processing procedures already carried out remains unaffected by the withdrawal.

The data that you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you cancel the newsletter, unless statutory retention obligations or other legal bases apply. Data that has been stored by us for other purposes, for example email addresses for a member area, remains unaffected.

Google Ads Remarketing

We use Google Ads Remarketing to display targeted banner and text ads tailored to the interests of users. Where required by applicable law, remarketing tags and advertising cookies are activated only after you have given consent. The legal basis is your consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw or adjust your consent at any time through the cookie settings on our website.

You can also manage personalised advertising from Google in Google’s My Ad Centre or advertising settings. Please note that these settings may be linked to your Google account, browser or device and may not affect advertising from providers other than Google.

Meta Pixel

This website may use the Meta Pixel for advertising, conversion measurement and retargeting. The provider is Meta Platforms, Inc. and, for users in the European region, Meta Platforms Ireland Limited (“Meta”), depending on the applicable Meta terms.

When you visit our pages, the Meta Pixel may establish a connection between your browser and Meta servers. Meta may thereby receive information that you have visited our site, together with your IP address and other event data. If you are logged into a Meta service, Meta may be able to assign the visit to your user account. We may use the information obtained in this way to display Meta ads, create custom audiences or measure the effectiveness of our advertising.

Where required by applicable law, the Meta Pixel is activated only after you have given consent. The legal basis is your consent (Art. 6(1)(a) GDPR, where applicable). You may withdraw or adjust your consent at any time through the cookie settings on our website.

Your data may be shared with Meta in a pseudonymised form, for example through hashed contact data, to address you through targeted advertising or to create custom audiences. In such cases, the relevant data is hashed before transmission so that Meta does not receive the corresponding contact information from us in plain text. The use of hashed identifiers does not necessarily mean that the processing is anonymous under data protection law.

Detailed information can be found in Meta’s privacy information and in the Meta Business Tools Terms. If you do not wish to receive interest-based advertising through Meta services, you can adjust your ad preferences in the Meta Accounts Centre and, where applicable, withdraw consent through our cookie settings.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Avenue, Sunnyvale, CA 94085, USA.

The LinkedIn Insight Tag is a lightweight JavaScript code integrated into our website. It enables us to measure the effectiveness of LinkedIn advertising campaigns, record conversions, create retargeting audiences and receive aggregated reports on the professional demographics and behaviour of visitors who interact with our website and LinkedIn advertisements.

If you consent to the use of marketing cookies or similar technologies, the LinkedIn Insight Tag may collect information about your visit to our website, including the URL, referrer URL, IP address, device and browser characteristics, timestamp and interactions such as page views, button clicks or form submissions. LinkedIn may use cookies or similar technologies to match this information with LinkedIn member accounts. We do not receive personal data from LinkedIn that directly identifies individual LinkedIn members; LinkedIn provides us with aggregated campaign, audience and conversion reports.

We use the LinkedIn Insight Tag for the purpose of measuring, optimising and personalising our advertising and online offering. Where consent is required, the legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR and the relevant provisions of the Swiss Federal Act on Data Protection (FADP). Where processing is legally permitted without consent, it may also be based on our legitimate interest in effective B2B marketing and the optimisation of our online offering pursuant to Art. 6 para. 1 lit. f GDPR.

Data may be transferred to LinkedIn companies in countries outside Switzerland, the EEA and the United Kingdom, including the United States. For such transfers, LinkedIn states that it uses appropriate legal transfer mechanisms, including the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses.

You can prevent the use of the LinkedIn Insight Tag by rejecting marketing cookies in our cookie banner or by changing your cookie settings at any time. LinkedIn members can also manage their advertising preferences in their LinkedIn account settings. Further information can be found in LinkedIn’s privacy policy and cookie policy.

ZoomInfo

We use services provided by ZoomInfo Technologies LLC, 330 W Columbia Way, Floor 8, Vancouver, WA 98660, USA, for B2B sales, marketing, lead qualification, contact enrichment, customer relationship management and account-based marketing. ZoomInfo provides business contact and company information relating to individuals in their professional or employment capacity. When you contact us, interact with our website, submit a form, communicate with us in a business context or represent an organisation that may be interested in our products or services, we may use ZoomInfo to verify, supplement or update business-related information. This may include, in particular, your name, business e-mail address, business telephone number, job title, employer, business address, company website, industry and related company information.Depending on the configuration of the services used, ZoomInfo may also process technical and usage data collected through cookies, web beacons, pixels or similar technologies, such as IP address, device and browser information, pages visited, time of visit and interaction data. This helps us identify organisations that may be interested in our products and services, analyse B2B interest, improve the relevance of our sales and marketing communications and maintain accurate business contact data.

We use ZoomInfo in a B2B context only. We do not use ZoomInfo for private consumer profiling and do not intentionally process special categories of personal data for this purpose.The processing is carried out for the purposes of B2B lead generation, verification and enrichment of business contact data, customer relationship management, advertising measurement and direct marketing in a professional context. The legal basis is our legitimate interest in efficient B2B marketing, customer acquisition and maintaining accurate business contact data pursuant to Art. 6 para. 1 lit. f GDPR and the relevant provisions of the Swiss Federal Act on Data Protection (FADP). Where cookies or similar technologies are used and consent is required, the processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and the relevant provisions of the FADP. You may withdraw your consent or object to the processing at any time.

Depending on the specific service and processing activity, ZoomInfo may process personal data as our processor or as an independent controller in accordance with its own privacy policy. Data may be transferred to the United States. ZoomInfo states that it primarily relies on Standard Contractual Clauses where necessary and complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework.You may object to processing by us at any time by contacting us using the contact details provided in this privacy policy. In addition, ZoomInfo provides options to access, update, delete or remove professional profile information and to opt out of certain processing through its Trust Center or by contacting ZoomInfo at privacy@zoominfo.com.

6. Customer relationship management and Salesforce

We use Salesforce services for customer relationship management, sales administration, lead management, communication with customers and prospects, processing enquiries, maintaining business contact data and documenting business relationships.

The provider is Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA, and/or the relevant Salesforce group company or contractual entity.

If you contact us, submit a form, request information, subscribe to communications, interact with us in a business context or enter into a contractual relationship with us, we may process the personal data provided by you or generated in the course of the business relationship in Salesforce. This may include, in particular, your name, business e-mail address, business telephone number, job title, employer, business address, communication history, enquiries, interests, contractual data and related sales or customer service information.

We use Salesforce to manage and respond to enquiries, maintain business relationships, organise sales processes, administer customer and prospect data, improve our internal workflows and provide relevant information about our products and services. The legal basis for this processing is, where applicable, the performance of a contract or pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR, our legitimate interest in efficient customer relationship management, sales administration and B2B communication pursuant to Art. 6 para. 1 lit. f GDPR, and the relevant provisions of the Swiss Federal Act on Data Protection (FADP). Where processing is based on consent, the legal basis is Art. 6 para. 1 lit. a GDPR and the relevant provisions of the FADP.

Salesforce generally processes personal data on our behalf and in accordance with our instructions. Depending on the specific service and processing activity, Salesforce may also process certain data as an independent controller in accordance with its own privacy documentation.

Personal data processed in Salesforce may be transferred to countries outside Switzerland, the EEA and the United Kingdom, including the United States. Salesforce states that it uses appropriate legal transfer mechanisms, including Standard Contractual Clauses, the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, where applicable.

We retain personal data in Salesforce only for as long as necessary for the relevant purposes, including the handling of enquiries, the management of business relationships, the performance of contracts and compliance with statutory retention obligations. You may object to processing based on legitimate interests at any time by contacting us using the contact details provided in this privacy policy.