Privacy policy

Controller

The controller responsible for data processing on this website is Mariacher Schweiz AG, with locations in Staad SG, Walterswil SO and Glis VS.

You will find the full contact details with address, phone number and e-mail address in the imprint. For questions about how we handle your data, you can also reach us via the contact form.

Principles

We process personal data in accordance with the Swiss Data Protection Act (DSG). Where the European General Data Protection Regulation (GDPR) applies in an individual case, it applies in addition.

We collect only the data we need to operate the website and to process enquiries. We do not sell data and pass it on only where this is necessary for processing or where a legal obligation exists.

Contact form

If you send us an enquiry via the contact form, we process the details from the form:

• your request and your message
• your name
• Your telephone number and your email address — both are required so that we can reach you
• Your company, if you provide one; this is optional
• The area of service you select in the form
• optionally a file you attach to your enquiry, for example a plan, a quotation or a photo

We use these details exclusively to answer your enquiry and to clarify the next steps with you. The enquiry is stored in our system for as long as this is necessary for processing or as long as statutory retention obligations exist.

If you have also consented to the “Marketing” category, we report the submission as an event to Meta and Google and transmit the encrypted email address and telephone number. You will find the details in the “Advertising and conversion measurement” section. Without this consent your details do not leave our company.

The file attachment is optional; you can submit the enquiry just as well without it. The formats PDF, JPG, PNG and WebP up to 8 MB are possible, other formats are rejected. The file is neither published on the website nor stored in a publicly accessible way: it is only cached in order to attach it to the enquiry e-mail and is deleted from the web server immediately afterwards. In the e-mail inbox it remains for as long as this is necessary for processing or as long as statutory retention obligations exist.

Applications

There is a separate form for applications. If you apply using this form, we process:

• the position you are applying for, or the note that this is a speculative application
• your first name and last name
• your e-mail address and your phone number
• optionally your place of residence and your earliest possible start date
• optionally your message to us
• optionally your application documents, for example CV, references and diplomas

We use these details exclusively to review your application and to stay in contact with you. They are not passed on to third parties. The basis for this is the initiation of an employment relationship on your own initiative.

The same technical rules apply to the documents as to the contact form: PDF, JPG, PNG and WebP are possible, a maximum of three files of up to 8 MB each. Other formats are rejected. The files are neither published on the website nor stored in a publicly accessible way; they are only cached in order to attach them to the application e-mail and are deleted from the web server immediately afterwards.

If no employment results, we delete your application documents as soon as the procedure is complete and no statutory retention obligations stand in the way. If you would like us to keep your documents for future positions, please tell us; without your express consent we do not retain them beyond that point. You can withdraw your application at any time and request the deletion of your data.

Protection against spam

To protect the form against automated requests, the Turnstile service from Cloudflare may be embedded. The verification script is loaded as soon as you select the first field; from that moment your IP address is transmitted to Cloudflare, not only when you submit. The basis for this is our legitimate interest in a functioning, spam-free contact channel.

Details on the processing by Cloudflare are governed by Cloudflare's privacy policy.

Server log data

When this website is accessed, the web server automatically stores technical access data: the IP address, the date and time of access, the page accessed and the browser used.

We need this log data for the secure and stable operation of the website, for example to detect faults and attacks. It is not linked with other data and is deleted after a short time.

Cookies and your consent

On your first visit we ask which cookies we may set. You decide for each category separately. As long as you do not consent, neither statistics nor advertising cookies are set; the website remains fully usable without consent. Only the maps on the Locations page load once you expressly allow it.

We distinguish three categories:

• Necessary — without these cookies the website does not work. They include “pll_language”, which remembers your choice of language, and the cookies with the prefix “cmplz”, in which your consent decision is recorded.
• Statistics — audience measurement with Google Analytics, see the next section.
• Marketing — conversion measurement and advertising via Meta and Google Ads, see the section after next.

You can change your choice or withdraw it entirely at any time, using the “Cookie settings” button in the footer of every page. The individual cookies that are set, with provider, purpose and duration, are listed in the cookie policy.

If your browser sends a “Do Not Track” signal, all measurement is omitted entirely. In that case we do not show you a consent banner either, since there is nothing to decide.

One point we want to disclose expressly: Google’s measurement software is loaded on every page, even if you have not consented. In that case it sets no cookies and stores nothing on your device, but reports to Google that no consent is present. In doing so your IP address is transmitted to Google, which is technically unavoidable. Google calls this procedure “Consent Mode”; it ensures that a refusal is enforced reliably, but it is indeed a connection to Google that is established without your consent as well.

Audience measurement

If you consent to the “Statistics” category, we use Google Analytics 4 to measure which pages are read and by which route visitors find us. We use this to improve the content and structure of the website. Without your consent no audience measurement takes place.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The cookies “_ga” and “_ga_GCL3GBG04Z” are set in the process. The data may be transferred to the USA and processed there by Google LLC; Google relies for this on the European Commission’s standard contractual clauses.

Advertising and conversion measurement

If you consent to the “Marketing” category, we measure whether an advertisement led to an enquiry and can serve you advertisements. Without this consent all of that is omitted — including the reports our own server would send.

If you submit the contact or application form with Marketing consent given, we additionally report the event to Meta and Google. Encrypted details from the form are transmitted: the email address and telephone number, and to Meta additionally first and last name, town and country. The encryption uses a non-reversible procedure (SHA-256) — the recipients can match the values against data they already hold, but cannot compute them back. The content of your message and any attached files are never transmitted.

• Meta — we embed the Meta Pixel (provider Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) and additionally report events from our server via the Conversions API. Both reports carry the same identifier so that one event is not counted twice. Your IP address and your browser identifier are also sent from the server. The cookie “_fbp” is set. For the operation of the pixel we are joint controllers with Meta within the meaning of Art. 26 GDPR.
• Google Ads — we measure whether a click on an advertisement led to an enquiry (provider Google Ireland Limited, Dublin). With what are known as enhanced conversions we transmit the encrypted email address and telephone number so that attribution succeeds without cookies as well. The cookie “_gcl_au” is set.

Both providers may transfer the data to the USA and process it there. You can withdraw your consent at any time using the “Cookie settings” button in the footer; from the point of withdrawal no further transmission takes place. Data already transmitted must be pursued with the providers themselves; the contact routes are given in their privacy statements.

Maps

We use the Leaflet library to display maps. It is loaded locally from our server and sets no third-party cookies.

The map material (map tiles) comes from OpenStreetMap. Maps load only once you expressly allow it in the placeholder. When loading, your IP address is transmitted to the OpenStreetMap Foundation, based in the United Kingdom, so that the tiles can be delivered. Under Annex 1 of the Data Protection Ordinance the United Kingdom provides adequate data protection, so no additional safeguards are required. No cookies are set in the process. Further information can be found in the OpenStreetMap Foundation’s privacy notices.

Your rights

Within the scope of the applicable data protection law, you have in particular the following rights:

• information about which data we process about you
• rectification of incorrect data
• deletion of data that is no longer needed
• restriction of processing
• release of your data in a common electronic format
• objection to the processing

To do so, please contact us using the details in the imprint. You may also contact the competent supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

Changes and status

We adapt this privacy policy when the website, our processes or the legal situation change. The version published here at any given time applies.