Data protection statement

1        Introduction

We at Menu System AG in St Gallen, as the operator of the online service, are responsible for processing the personal data of the users of the online service. This means all the data that say something about you and which can be used to identify you. We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this data protection statement and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations. In this data protection statement, we would like to explain how, for what purpose and the legal basis on which we process your data.

We are responsible for data processing on this website and in our company.

 

Menu System AG

Oberstrasse 222

Postbox 261

CH-9014 St Gallen

Switzerland

Phone +41 (0) 71 272 51 00

info@menusystem.ch

 

2        Your rights

2.1       The right to information

In accordance with art. 15 GDPR, you have the right to demand from us confirmation of whether we have processed any personal data concerning you. If this is the case, you have the right to information about this personal data and to further information as designated in art. 15 GDPR.

2.2       The right to rectification

In accordance with art. 16 GDPR, you have the right to demand that we correct any incorrect personal data concerning you without delay. While taking account of the purposes of the processing, you also have the right to request any incomplete personal data to be completed – even by means of a supplementary statement.

2.3       Right to deletion

You have the right to request us to delete any personal data that concern you without delay. We are obliged to delete personal data immediately if the appropriate requirements of art. 17 GDPR apply. For further details, we refer you to art. 17 GDPR.

2.4       Right to restriction of processing

In accordance with art. 18 GDPR, you have the right under certain conditions to request that we restrict the processing of your personal data.

2.5       Right to data transferability

In accordance with art. 20 GDPR, you have the right to receive the personal data concerning yourself that you have provided to us in a structured, commonly available and machine-readable format, and you have the right to transmit the data to another responsible individual without hindrance by us, as long as the processing is based on consent in accordance with article 6 para. 1 a) GDPR or article 9 para. 2 a) o GDPR, which is based on a contract in accordance with article 6 para. 1 b) GDPR and the processing is carried out using automated procedures.

2.6       Right to object

In accordance with art. 21 GDPR, you have the right to lodge an objection to the processing of personal data concerning you, which is based on article 6 paragraph 1 letter e or f GDPR; this also applies to profiling based on these provisions.

If we process your personal data in order to conduct direct marketing, you have the right at any time to lodge an objection to the processing of personal data in relation to yourself for the purpose of such promotional or advertising activity; this also applies to profiling, insofar as it is associated with direct marketing of this kind.

If you wish to exercise any of the rights you are entitled to, please contact us as the body responsible among the contact details provided above or use any of the other ways we have made available to have this message sent. If you have any questions about this, please contact us.

2.7       Existence of a right to complain to a supervisory authority

In accordance with art. 77 GDPR, you have the right to complain to the supervisory authority without prejudicing any other administrative or judicial remedy. This right exists in particular in the member state of your place of residence, your place of work or the place of the alleged violation if you are of the opinion that the processing of your personal data is in breach of the GDPR.

2.8       Right to withdraw consent

If your personal data are processed based on your consent, you have the right to revoke your consent at any time without this affecting the lawfulness of the processing conducted on the basis of your consent up to the point of revoking it.

3        Use of your data

3.1       Use of SalesViewer® technology

On this website, data for marketing, market research and optimisation purposes are collected and stored using SalesViewer technology of SalesViewer GmbH based on the legitimate interests of the website operator (art. 6 para.1 lit.f GDPR).

A JavaScript-based code is used for this purpose, which serves to collect company-related data and the use of it accordingly. The data collected using this technology are encrypted via a non-recalculated one-way function (known as hashing). The data are immediately pseudonymised and not used to identify the visitor to this website.

You can object to the collection and storage of data at any time with effect for the future by clicking this link https://www.salesviewer.com/opt-out to prevent collection by SalesViewer on this website in future. As such, an opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.

3.2       Server log files

Visiting our website. When you access our website, the company authorised by us to operate the website processes and stores technical information about the end device you are using (operating system, screen resolution and other non-personal characteristics) as well as the browser (version, language settings), in particular the public IP address of the computer you are using to visit our website, along with the date and time of access. The IP address is a unique numerical address under which your end device sends or retrieves data on the Internet. We or our service provider is normally unaware of who is behind an IP address, unless you give us data while our website is being used that enable us to identify you. Furthermore, a user may be identified if legal action is taken against them (e.g. in the event of attacks on our website) and we become aware of his identity in the light of an investigation. Normally therefore, you do not have to worry that we are able to assign your IP address to you. Our service provider does not use the processed data related to individuals for statistical purposes, so we can understand which end devices are used with which settings when visiting our website in order to optimise them for it if necessary. These statistics contain no personal data. The legal basis for compiling these statistics is art. 6 para. 1 f) GDPR.

The IP address is used further so you can technically access and use our website and to detect and defend against attacks against our service providers or our website. Unfortunately, repeated attacks are made that are intended to inflict damage on the operators of websites or their users (e.g. to prevent access, spying on data, disseminating malware [e.g. viruses] or other unlawful purposes). Attacks of this kind would impair the intended functioning of the data centre of the company we have commissioned, the use of our website and / or its functionality as well as the security of visitors to our website. The IP address and the time of access are processed to defend against such attacks. With this processing method and via our service provider, we pursue the legitimate interest of ensuring our website functions properly and to defend ourselves from unlawful attacks against us and visitors to our website. The legal basis for processing is art. 6 para. 1 f) GDPR.

The stored IP data are deleted (by being anonymised), if they are no longer required to identify or defend against an attack.

3.3       Forwarding data to third parties

We abide by the principle of not forwarding personal data we have been notified of to third parties, i.e. in particular not to third parties for promotional and advertising purposes. However, we do work with third parties to operate this website or to provide products and services. In the process, it may happen that such third parties acquire knowledge of personal data. We select our service providers carefully – especially with regard to data protection and data security – and take all the data protection measures necessary for permissible data processing.

3.4       Data processing outside the European Union

We do not process your personal data outside the EU ourselves. However, the service providers whose plug-ins and tools we use, process some of their data outside the EU. This is disclosed as part of the present data protection statement when clarifying the use of the plug-ins or tools used. The appropriate level of data protection is guaranteed in the context of participation in what is known as the Privacy Shield and the measures taken by the service provider for data protection and data security.

3.5       Cookies

We use cookies and similar technologies (local storage) to operate our website in order to ensure the technical functionality of our website, to understand how visitors use our website and to save default settings that a user has made in his browser. A cookie is a small text file that is stored on your end device when you access our website using your browser. If you visit our website again later, we can read these cookies again. Cookies are stored for different lengths of time. You have the option to set in your browser which cookies it will accept at any time, but a possible result of this is that our website will no longer work properly. In addition, you can delete cookies by yourself at any time. If you do not do this, we can specify how long a cookie will be stored on your computer when it is stored. A distinction should be made here between what are referred to as session cookies and permanent cookies. Session cookies are deleted from your browser when you leave our website or you close your browser. Permanent cookies are stored for the duration we specify when storing them.

We use cookies for the following purposes.

  • Technically required cookies, which are absolutely essential for using the function of our website (e.g. recognising whether you have logged in). Without these cookies certain functions could not be provided.
  • Functional cookies, which are used to be able to carry out certain functions you wish to use.
  • Analysis cookies, whose purpose is to analyse your user behaviour. For details, please read the information about evaluations.
  • Third-party cookies. Third-party cookies are stored by third parties, whose functions we include on our website to enable certain functions. They can also be used to analyse user behaviour. For details, please read the information about evaluations.

Most browsers that our users use allow them to set which cookies are to be stored and make it possible to delete (specific) cookies again. If you restrict the storage of cookies to certain websites or do not allow any cookies from third-party websites, this may result under certain circumstances in you no longer being able to use our website to its full extent.

Here you will find information about how to adjust cookie settings for the most commonly used browsers.

3.6       Contact form

If you send us a message via any of the contact options provided, we will use the data you have given us to process your request. The legal basis for this is our legitimate interest in responding to your concern in accordance with art. 6 para. 1 f) GDPR. If the purpose of your request is to conclude a contract with us, a further legal basis for the processing is art. 6 para. 1 b) GDPR. The data are deleted once the request has been dealt with. If we should be legally obliged to store data for longer, deletion will occur after the relevant agreed term has expired.

3.7       Application opportunities

We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with your application.

We process the data you have sent us in connection with your application in order to review your suitability for the position (or other vacancies in our company if applicable) and to carry out the application process. The legal basis for processing your personal data is the recognition of legitimate interests in accordance with art. 6 para. 1 lit. f) GDPR. Our interest lies in carrying out the application process and in asserting or defending against claims if necessary.

If you have been accepted for a position, your data will be transferred from the applicant data system to our personnel information system.

In general terms, only those individuals in the company have access to your data who need it to administer our application process properly.

3.8       Google Analytics

As part of GGF order processing via the Google Tag Manager, we use Google Analytics, a service of Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google uses what is referred to as a cookie as an order processor for this purpose. This is a small text file that is stored by your browser on your computer. By using this cookie, Google receives information about which website you have accessed and in particular the following information: browser type / version, operating system used, technical information about the operating system and the browser as well as the public IP address of the computer you are using. We use Google Analytics in such a way that your IP address is only used in an anonymised form. This anonymisation takes place after notification by Google in the European Union or a member state of the EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and then abbreviated there. Based on information from Google, the anonymisation occurs before the IP address is stored on a permanent data carrier for the first time. For details, we refer you to Google’s data privacy policy, accessible at https://support.google.com/analytics/answer/6004245?hl=de.  Google Analytics allows us to create usage statistics in a non-personal form for our website and demographic data about visitors and their user behaviour. Furthermore, statistics are created that help us better understand how users find our website in order to improve the optimisation of our search engine and our promotional and advertising activities. With this processing, we pursue the legitimate interest of being able to improve our website and our promotional and advertising activities. The legal basis for processing is art. 6 para. 1 f) GDPR.

At https://tools.google.com/dlpage/gaoptout?hl=de, you can find information on how you can object to the use of Google Analytics. Google is a member of the Privacy Shield agreement and has concluded an order processing agreement for Google Analytics with us.

3.9       Google marketing / re-marketing services

Based on our legitimate interests, (i.e. interest in the analysis, optimisation and commercial operation of our online service within the meaning of art. 6 para. 1 lit. f. GDPR) we use the marketing and re-marketing services (“Google marketing services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). Google is certified under the Privacy Shield agreement and therefore offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google marketing services allow us to display advertisements for and on our website in a more targeted way in order to present to users only advertisements that will be potentially of interest to them. If, for example, a user is shown advertisements for products he or she has shown an interest in on other websites, we refer to this as “re-marketing”. For these purposes, when our websites and others are accessed on which Google marketing services are operating, Google immediately executes a Google code and what are known as re-marketing tags (invisible graphics or code, also referred to as web beacons) are integrated into the website. With their assistance, an individual cookie, i.e. a small file, is stored on the user’s device (similar technologies may also be used instead of cookies). The cookies can be set by various domains, including by google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file makes a note of which websites the user has visited, what content he has shown an interest in, plus technical information about the browser and operating system, referring websites, visiting times and other details about the use of the online service. The user IP address is also recorded, whereby we notify in the context of Google Analytics that the IP address is abbreviated within member states of the European Union or in other contracting states of the agreement in the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the United States and abbreviated there. The IP address is not merged with the user’s data within other Google services. The aforementioned information can also be connected by Google with such information from other sources. If the user then visits other websites, the advertisements tailored to his interests can then be displayed to him. The user data are processed pseudonymously as part of Google marketing services. This means that Google does not store and process user names or email addresses, for example, but processes the relevant data based on cookies within pseudonymous user profiles. From Google’s perspective, this means the advertisements are not managed and displayed for a specifically identified person but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected by Google marketing services about the user is transmitted to Google and stored on Google’s servers in the United States. The Google marketing services we use also include the online advertising programme Google Ads. In the case of Google Ads, each Google Ads customer receives a different conversion cookie. This means cookies cannot be tracked via the websites of Google Ads customers. The information obtained with the cookie’s assistance is used to create conversion statistics for Google Ads customers, who have opted for conversion tracking. Google Ads customers find out the total number of users who have clicked on their ad and were then redirected to a page that includes a conversion tracking tag. However, they do not receive any information that would let them identify users personally. We can integrate third-party advertisements based on Google marketing services’ AdSense. AdSense uses cookies that enable Google and its partner websites to run ads based on the visits of users on this website or other websites on the Internet. We can also use the Google Tag Manager to integrate into and manage Google analysis and marketing services on our website. You can find more information about how Google uses data for marketing purposes on the overview page: www.google.com/policies/technologies/ads, and Google’s data privacy policy can be accessed at www.google.com/policies/privacy. If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: www.google.com/ads/preferences.

3.10    Use of Facebook plug-ins

These sites use plug-ins of the social media network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). If you access pages on our sites online with such a plug-in, a connection with Facebook servers is established and the plug-in is displayed on the website by notifying your browser. This transmits to the Facebook server details of which of our websites you have visited. If you are logged in as a member of Facebook, Facebook will assign this information to your personal Facebook user account. When using the plug-in functions (such as clicking on the Like buttons, posting a comment), this information will also be assigned to your Facebook account, which you can prevent it only by logging in before using the plug-in.

You can find more information about Facebook’s recording and use of data, about your rights in this regard and options for protecting your privacy in Facebook’s data protection information.

To evaluate and support our online marketing activities on or via Facebook, a Facebook tracking pixel is included on this site, which has been provided and evaluated by Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304 , USA (“Facebook”). When you visit our pages, the tracking pixel establishes a direct connection between your browser and the Facebook server. As such, Facebook receives information from your browser among other things that our site has been accessed by your end device. If you are a Facebook user, Facebook can use this to assign your visit to our site to your user account. Consequently Facebook can also recognise whether a Facebook ad has had an impact, that it resulted in an online purchase, for example. We only receive statistical data from Facebook without it referring to a specific individual. This is done for the purposes of advertising effectiveness, market research and the needs-based structuring of our website. Tracking using the pixel is carried out in such a way that it does not enable us to identify you as a person and only marks users as visitors to our website in anonymised form for us. Facebook uses cookies for this. You can find out how to prevent cookies being set in the Cookies section of this data privacy notice. Facebook stores and uses the data collected by means of the pixel. This also occurs, at least in part, outside the geographic scope of EU data protection regulations. For further information about the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your settings options to protect your privacy, please refer to Facebook’s data privacy policies, which are available at https://www.facebook.com/privacy/explanation. You can edit the settings for Facebook’s ads at the following link: https://www.facebook.com/ads/website_custom_audiences/.

3.11    Use of LinkedIn plug-ins

On our website, we use the LinkedIn Corporation’s conversion tracking technology and re-targeting function. Using this technology, visitors to this website can have personalised ads shown to them on LinkedIn. Furthermore, it is possible to create anonymous reports on the performance of ads and information about website interaction. For this purpose, the LinkedIn Insight tag is integrated into this website, which means a connection is established with the LinkedIn server, if you visit this website and are logged into your LinkedIn account at the same time. In LinkedIn’s data privacy policy at https://www.linkedin.com/legal/privacy-policy, you can find more information about collecting and using data as well as the options and rights to protect your privacy. If you are logged in at LinkedIn, you can deactivate data collection at any time by using the following link: https://www.linkedin.com/psettings/enhanced-advertising.