Privacy Policy
Last updated: 31 August 2025
Transparent handling of personal data is very important to us. This Privacy Policy explains which personal data we collect, for what purpose, and to whom we may disclose it. We review and update this Privacy Policy regularly to ensure the highest level of transparency.
What do we do?
Stiftung Silea (Hännisweg 3D, 3645 Gwatt) operates the website kraabe.ch / https://info.stiftung-silea.ch/kraabe (hereinafter “we” or “us”). On this website you can learn about our organisation, use our online services and contact us.
Protecting your personal data is of great importance to us. This Privacy Policy explains, in a transparent and understandable manner, what data we collect via our website and how we handle it.
We inform you about:
-
Who is responsible for data processing;
-
What data is collected;
-
For what purposes this data is collected;
-
To whom we disclose this data;
-
How you can object to data processing;
-
What rights you have and how to exercise them.
Definitions
What is personal data?
Personal data (also referred to as “personal information”) means any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, e-mail address or telephone number as well as IP addresses. Data about personal preferences such as hobbies or memberships are also considered personal data.
What are special categories of personal data?
Special categories of personal data (also referred to as “sensitive personal data”) include:
-
Data revealing religious, ideological, political or trade union views or activities;
-
Data concerning health, privacy, racial or ethnic origin, as well as sex life and sexual orientation;
-
Data relating to administrative or criminal prosecutions and sanctions, as well as data on measures of social assistance;
-
Genetic and biometric data uniquely identifying a person.
Where necessary, and if you disclose such data to us yourself, we may process data belonging to a special category of personal data. In such cases, processing is subject to stricter confidentiality.
What is processing of personal data?
Processing (also referred to as “handling”) means any operation performed on personal data, regardless of the means and procedures used, in particular obtaining, storing, retaining, using, altering, disclosing, archiving, deleting or destroying personal data.
What is disclosure of personal data?
Disclosure means transmitting or making personal data accessible, e.g. publication or disclosure to a third party.
Contact
If you have questions or concerns regarding our data protection, please contact our Data Protection Officer:
Stiftung Silea
Hännisweg 3D
3645 Gwatt
datenschutz@stiftung-silea.ch
Data Security
We will store your data securely and take all appropriate measures to protect it from loss, unauthorised access, misuse or alteration.
Our contractors and employees who have access to your data are obliged to comply with data protection regulations. In some cases, within the scope of order processing, it may be necessary to forward your requests to affiliated companies. Your data will be treated confidentially in such cases as well.
Within our website we use SSL (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser.
Rights of Data Subjects
Right of Access
You may request information at any time about the data we hold about you. Please send your access request together with a credible proof of identity to datenschutz@stiftung-silea.ch.
The information will be provided in writing or in another form, where appropriate electronically. If you so request, we can also provide the information orally, provided you prove your identity in another form. If you submit the request electronically, we will provide the information in a commonly used electronic format unless you specify otherwise.
The information is generally provided free of charge. If additional copies are requested, a reasonable fee may be charged.
The right to obtain a copy of the processed data must not adversely affect the rights and freedoms of others.
In the case of manifestly unfounded or excessive requests, we reserve the right, within legal limits, to refuse to provide information or to charge a reasonable fee.
We will process your request within the statutory period of 30 days. We may extend this period by up to two further months due to complexity and the number of requests, if necessary. You will be informed of any extension within one month of submitting the request and given the reasons for the extension.
Erasure and Rectification
You may request the erasure or rectification and/or completion of your data at any time, provided there are no legal retention obligations or statutory permissions to the contrary.
Please note that exercising your rights may conflict with contractual agreements and may have implications for contract performance (e.g. early termination or costs).
Restriction of Processing
You also have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful, the data is no longer needed, or you have objected to processing.
If processing is restricted, the data may only be stored. Further processing is permitted only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another person, or for reasons of important public interest. You will be notified if the restriction is lifted.
Right to Data Portability
You have the right to receive your data in a commonly used file format or (where technically feasible) have it transmitted to a third party, if we process your data by automated means and if:
-
you have given your consent to such processing; or
-
you disclosed the data in connection with the conclusion or performance of a contract.
Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to processing—including profiling—based on our legitimate interests. This right also applies to processing for direct marketing purposes.
Legal Remedies
If you are affected by the processing of personal data, you have the right to enforce your rights in court or lodge a complaint with the competent supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
General Data Processing
What data do we process about you and from whom do we obtain it?
Primarily, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These categories may include:
-
Basic personal details (name, address, date of birth, etc.);
-
Contact data (mobile number, e-mail address, etc.);
-
Financial data (e.g. account details);
-
Online identifiers (e.g. cookie identifiers, IP addresses).
These data may originate from:
-
Publicly available sources (e.g. media, internet);
-
Public registers (e.g. commercial register, debt collection register, land register);
-
Information in connection with administrative or judicial proceedings;
-
Information concerning your professional roles and activities (e.g. professional networks);
-
Information about you from third-party correspondence and meetings;
-
Credit information (where we conduct business with you personally);
-
Information provided by persons in your environment to enable us to conclude or perform contracts with you;
-
Data in connection with the use of the website.
On what basis do we process your data?
We process your data in good faith and for the purposes set out in this Privacy Policy, ensuring transparency and proportionality.
If we exceptionally cannot adhere to these principles, processing may still be lawful if a justification applies, notably:
-
your consent;
-
performance of a contract or pre-contractual measures;
-
compliance with legal obligations;
-
our legitimate interests, provided your interests do not prevail.
In some circumstances you may be required to provide certain personal data so we can initiate or maintain business relations. Without such data, we are generally unable to perform a contract. The website also cannot normally be used if certain information necessary to ensure data traffic—such as your IP address—is not disclosed.
How can you withdraw consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of that consent, provided no other justification applies.
You may withdraw your consent at any time with effect for the future by sending an e-mail to the address stated in the legal notice. Processing that has already taken place remains unaffected and valid.
When do we disclose your data to third parties?
a. General
We may rely on third parties or affiliated companies to provide services and commission them to process your data (so-called processors). Categories of recipients include in particular:
-
Accounting, fiduciary and audit firms;
-
Consulting companies (legal, tax, etc.);
-
IT service providers (web hosting, support, cloud services, website design, etc.);
-
Payment service providers (only with your prior consent);
-
Providers of tracking, conversion and advertising services.
We ensure that data is disclosed only with your express consent where this is not order processing. We also ensure that such third parties and our affiliates comply with data protection requirements and treat your data confidentially. In certain cases, we may be obliged to disclose your personal data to authorities.
b. Disclosure to partners and cooperation companies
We sometimes work with different companies and partners whose offers are displayed on our website. It is identifiable to you that this is a third-party offer (labelled as “advertising”).
If you use such an offer, we will transmit your personal data to the relevant partner or cooperation company (e.g. name, role, communications, etc.) whose offer you wish to use, provided you have expressly consented beforehand. These partners and cooperation companies are independently responsible for the personal data they receive. After transmission, the partner’s privacy policy applies.
c. Transfers abroad
In the context of order processing, your personal data may be transferred to companies abroad. These companies are obliged to the same level of data protection as we are. Transfers may take place worldwide.
If the level of data protection does not correspond to that of Switzerland, we will conduct a prior risk assessment and contractually ensure an equivalent level of protection (e.g. using the EU Commission’s Standard Contractual Clauses or other legally prescribed measures). If our risk assessment is negative, we implement additional technical measures to protect your data. You can access the EU Commission’s Standard Contractual Clauses at the following link.
How long do we retain your data?
We store personal data only as long as necessary to fulfil the purposes for which it was collected.
We retain contractual data for longer due to legal requirements. In particular, we must keep business correspondence, concluded contracts and accounting records for up to 10 years. Where we no longer require such data to provide services, it will be restricted for further processing and used only for accounting and tax purposes.
Specific Processing Activities
Provision of the website and creation of log files
By merely visiting kraabe.ch—without registering or otherwise providing information—only the data that your browser automatically transmits to our server is collected. This data is technically necessary for operating the website.
What data do we process?
For providing the website and creating log files, we in particular process:
-
Name of the internet service provider;
-
IP address;
-
Technical information such as browser, operating system, or screen resolution;
-
Date and time of access;
-
Referrer URL.
This data cannot be attributed to a specific person and is not combined with other data sources.
For what purpose do we process the data?
Log files are processed to ensure the functionality of the website and the security of our IT systems.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data.
How can you prevent processing?
Data is stored only as long as necessary to achieve the purpose of its collection and is deleted after each session. Storage of log files is essential for operating the website; therefore, you cannot object except by refraining from visiting our website.
Contact
You can contact us in various ways. When you contact us and provide personal data, processing by us occurs. This includes any oral, written or other form of contact.
What data do we process?
We process all data you provide, in particular:
-
Name;
-
E-mail address;
-
Content and time of your contact;
-
Contact details.
Certain data may be mandatory in order to contact us (e.g. via a contact form or when requesting a callback).
For what purpose do we process the data?
The purpose follows from the nature of the contact. We do not use the data for unforeseen purposes. The most common purposes are communication and feedback, customer service and handling business enquiries.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data. If necessary for your request, we pass on your data to third parties to the required extent.
How can you prevent processing?
If you contact us, processing is unavoidable. If you do not want your data to be processed, you must refrain from contacting us.
Cookies
Our website uses cookies. Cookies are text files stored on your device’s operating system via your browser when you visit our website. Cookies do not harm your computer and do not contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are “session cookies” which are deleted automatically after your visit. Other cookies remain stored on your device until you delete them or they expire.
For what purpose do we process the data?
We use cookies to make our website more user-friendly, effective and secure based on the collected data. In particular, we use cookies to store your preferences (e.g. language and location settings), to deliver content quickly and attractively (e.g. through fonts and content delivery networks) and to analyse website usage for statistical evaluation and continuous improvement (usually via third-party cookies). Details of non-essential cookies are provided in the sections below.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data. Please also note the specific processing activities below.
How can you prevent processing?
Cookies are stored on your computer. You can delete them entirely or disable/limit transmission by changing your browser settings. If cookies are disabled for our website, some functions may no longer be fully available.
Instructions for common browsers can be found here:
-
Google Chrome
-
Apple Safari
-
Microsoft Edge
-
Mozilla Firefox
For cookies used for performance and reach measurement or advertising, you can opt out via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (EDAA).
Comments
You may comment on certain content on our website.
What data do we process?
To publish a comment, you must provide:
-
Comment content;
-
Name;
-
E-mail address (not published).
For what purpose do we process the data?
We collect the comment content to enable publication. The name is collected to attribute a comment to a user; if you do not wish your name to be published, please use an alias. We use your e-mail to verify, notify you of replies, or contact you if a third party reports your comment as unlawful. To prevent unauthorised use of e-mail addresses and ensure data security, we use a double opt-in procedure. You can unsubscribe from notifications at any time via the link in the e-mail. Your personal data—including e-mail address, registration times and IP address—will be stored until you unsubscribe.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data.
How can you prevent processing?
You can only avoid collection by refraining from posting comments. If you post a comment, processing cannot be prevented.
Online Shop
You can place orders for our products in our online shop.
What data do we receive?
When completing an order, we collect in particular:
-
Name;
-
E-mail address;
-
Delivery and billing address;
-
Telephone number.
We also process any additional data you provide during checkout. If you pay via an online payment service, please refer to our notes on online payment services in this Privacy Policy.
For what purpose do we process the data?
Primarily to process and fulfil your order. We may also need the data to identify you as our customer, to correspond with you, for invoicing, to assert any claims and to manage our customer data. We may also use the data within the scope of our legitimate interests for marketing purposes. Due to commercial and tax regulations, we are obliged to retain your address, payment and order data for ten years.
To whom do we disclose your data?
Your data is treated confidentially and disclosed to third parties only as necessary for contract performance. If you purchase physical goods, your name and address must be transmitted to logistics providers for delivery. Where necessary, we may transmit required data to debt collection agencies. These act on our behalf and may not use the data for their own purposes. Please also note our explanations under Disclosure of data.
How can you prevent processing?
This processing occurs only if you place an order in our online shop. If you do not order, your data is not processed.
Web Beacons (Tracking Pixels)
We may use tracking pixels on our website or in our e-mails (also called web beacons). These are small, usually invisible images automatically retrieved when visiting our website or opening our e-mails.
What data do we process?
Tracking pixels can capture the same information as log files. They can also record movement profiles of an entire session. In particular, pixels are used by third-party services that we employ. Details of these third-party services are provided below.
For what purpose do we process the data?
To analyse website usage for statistical evaluation and continuous improvement, and for e-mail tracking.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data and the specific notes on tracking services below.
How can you prevent processing?
Install suitable browser extensions (e.g. uBlock Origin) and block external images in your e-mail client.
Google Analytics
We use Google Analytics, a service of Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, with headquarters at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”).
What data do we process?
Google Analytics collects information about website usage, including:
-
IP address;
-
Technical information (browser, operating system, screen resolution);
-
Interactions on the website;
-
Duration of visit;
-
Time and date of website access;
-
Referrer URL.
IP addresses are anonymised by Google Analytics so that no personal reference is possible. On a first visit, Google Analytics may generate an identifier to recognise returning visitors. If you are logged into your Google account, processing may occur across devices.
For what purpose do we process the data?
Your IP address is used to determine approximate location and assess regional relevance of our offers, and to determine where visitors came from. Technical information ensures proper display across devices. Interaction and session data help evaluate and optimise our marketing campaigns and offers and understand user behaviour. Referrer URLs are processed to measure and analyse the effectiveness of different marketing channels.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data. As a transnational company, Google may transfer your data worldwide, including to the USA, where legislation may not ensure an adequate level of protection.
Google Tag Manager
We use Google Tag Manager (Google Ireland Ltd./Google LLC). Google Tag Manager manages various tracking tags (e.g. Facebook Pixel, Google Analytics, Hotjar). Google Tag Manager itself does not collect data; the tags it manages are described in this Privacy Policy.
Vimeo
We embed videos from Vimeo on our website.
How does embedding work?
Embedding is via a plug-in. When you visit a page with such a plug-in, a connection to Vimeo’s servers is established and informed which of our pages you visited. For more information, see Vimeo’s Privacy Policy: https://vimeo.zendesk.com/hc/de/sections/203915088-Datenschutz.
Why are we allowed to embed this content?
To make our offering accessible to a broader audience—this is our legitimate interest.
What information do you share with providers?
If you are logged into a user account with a provider, your browsing behaviour may be associated with your personal profile. We have no knowledge of the precise content or use of transmitted data. If you do not want providers to associate your visit with your user account, please log out before using our website.
HubSpot
We use HubSpot on the website to improve conversion rates. HubSpot provides a single platform to collect and manage data and analytics on website visitors (e.g. landing pages, forms, e-mail campaigns) to reach prospects and customers.
reCAPTCHA
We use Google reCAPTCHA (Google Ireland Ltd./Google LLC).
What data do we process?
-
IP address;
-
Technical information (browser, operating system, screen resolution);
-
Interactions with the CAPTCHA.
IP addresses are anonymised by reCAPTCHA. On a first visit, reCAPTCHA may generate an identifier to recognise returning visitors.
For what purpose do we process the data?
To analyse approximate location, prevent suspicious activity (e.g. IPs associated with spam), adapt the CAPTCHA to the device/browser, detect anomalies, and distinguish human behaviour from bots. Data is not used to personally identify you.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data. Google may transfer your data worldwide, including to the USA, where legislation may not ensure an adequate level of protection.
Site Kit
Site Kit is a WordPress plugin by Google that brings various Google tools and insights into a website. It offers analytics in the WordPress dashboard (Google Analytics), search performance insights (Search Console), PageSpeed Insights for performance evaluation, and optional AdSense integration.
HubSpot Analytics
HubSpot Analytics tracks and analyses visitor behaviour on a website, offering insights into performance, interactions and the effectiveness of marketing measures (e.g. traffic sources, behaviour flows, conversion rates, A/B testing).
PrivacyBee
We use PrivacyBee (PrivacyBee AG, Laupenstrasse 1, 3008 Bern, Switzerland) to detect all privacy-relevant services and generate an individual privacy policy for the website.
What data do we process?
To provide this service via JavaScript, the following may be processed:
-
IP address;
-
Browser type and version;
-
Operating system;
-
Date and time of access to our privacy policy.
For what purpose do we process the data?
To correctly display the privacy policy for your device configuration and ensure content is accurate and up-to-date.
To whom do we disclose the data?
Disclosure follows our explanations under Disclosure of data. Data collected through PrivacyBee remains with PrivacyBee.
How can you prevent processing?
You can disable JavaScript in your browser; however, some website functions may no longer be fully available. There is no specific opt-out for PrivacyBee since it is essential for providing our privacy policy.
Will our Privacy Policy always remain the same?
We may amend this Privacy Policy at any time. Changes will be published at https://info.stiftung-silea.ch/datenschutz. You will not be notified separately.