Coratec , Inc. Privacy Policy
Version dated August 25, 2026
In this Privacy Policy, we— Coratec AG—explain how we collect and otherwise process personal data. This is not an exhaustive description; other privacy policies may govern specific matters. Personal data refers to any information relating to an identified or identifiable individual.
If you provide us with personal data about other individuals (e.g., family members, coworkers), please ensure that these individuals are familiar with this Privacy Policy and only share their personal data with us if you are authorized to do so and if the personal data is accurate. This Privacy Policy is designed to comply with the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DSG”), and the revised Swiss Data Protection Act (“revDSG”). However, whether and to what extent these laws apply depends on the specific circumstances of each case.
1. Data Controller / Data Protection Officer / Representative
The representative under Art. 27 is also the data protection officer under Art. 37: Coratec AG, Industriestrasse 33, 4617 Gunzgen, is responsible for the data processing we carry out here, unless otherwise specified in individual cases. If you have any data protection concerns, you can contact us at the following address: Coratec AG, Industriestrasse 33, 4617 Gunzgen, coratec@coratec.ch.
You can contact our Data Protection Officer, as required by Article 37 of the GDPR, at Coratec AG, Industriestrasse 33, 4617 Gunzgen, coratec@coratec.ch. He also serves as our representative in the EEA pursuant to Article 27 of the GDPR (where required).
2. Collection and Processing of Personal Data
We primarily process personal data that we receive from our customers and other business partners—as well as from other individuals involved in our business relationships with them—or that we collect from users of our websites, apps, and other applications as part of our operations.
To the extent permitted, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registries, commercial registries, the press, the Internet) or receive such data from other companies within the Coratec AG, from government agencies, and from other third parties. In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, information from public registers, information we obtain in connection with administrative and judicial proceedings, information related to your professional roles and activities (so that we can, for example, conclude and process business transactions with your employer with your assistance), information about you contained in correspondence and meetings with third parties, credit reports (to the extent that we conduct business with you personally), information about you provided to us by individuals in your circle (family, advisors, legal representatives, etc.) so that we can enter into or execute contracts with you or involving you (e.g., references, your shipping address, powers of attorney, information regarding compliance with legal requirements such as anti-money laundering regulations and export restrictions, information from banks, insurance companies, distribution partners, and other contractual partners of ours regarding your use of or provision of services (e.g., payments made, purchases made), information about you from media and the internet (to the extent this is appropriate in a specific case, e.g., in the context of a job application, press review, marketing/sales, etc.), your addresses and, if applicable, interests and other sociodemographic data (for marketing purposes), data related to your use of the website (e.g., IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of your visit, pages and content accessed, features used, referring website, location data).
3. Purposes of Data Processing and Legal Bases
We use the personal data we collect primarily to enter into and fulfill our contracts with our customers and business partners—in particular, in connection with lightweight panels with our customers and the purchase of products and services from our suppliers and subcontractors—as well as to comply with our legal obligations both domestically and abroad. If you work for such a customer or business partner, your personal data may of course also be affected in this capacity. In addition, we process your personal data and that of other individuals—to the extent permitted and as we deem appropriate—for the following purposes, in which we (and, at times, third parties) have a legitimate interest commensurate with the purpose:
Offering and further developing our products, services, websites, apps, and other platforms on which we are present;
Communication with third parties and handling their inquiries (e.g., job applications, media inquiries);
Review and optimization of processes for needs analysis for the purpose of directly approaching customers, as well as the collection of personal data from publicly available sources for the purpose of customer acquisition;
Advertising and marketing (including the organization of events), provided you have not objected to the use of your data (if we send you advertising as an existing customer, you may object at any time, and we will then place you on a block list to prevent further advertising communications);
Market and opinion research, media monitoring;
Asserting legal claims and defending against legal disputes and administrative proceedings;
Prevention and investigation of criminal offenses and other misconduct (e.g., conducting internal investigations, data analysis to combat fraud);
Guarantees regarding our operations, in particular our IT systems, websites, apps, and other platforms;
Video surveillance to enforce property rights and other measures related to IT, building, and facility security, as well as the protection of our employees, other individuals, and assets owned by us or entrusted to us (such as access controls, visitor logs, network and email scanners, and telephone recordings);
The purchase and sale of business units, companies, or parts of companies, and other corporate transactions, as well as the associated transfer of personal data, measures for business management, and, to the extent necessary, compliance with legal and regulatory obligations and internal policies of Coratec AG.
To the extent that you have given us consent to process your personal data for specific purposes (for example, when you sign up to receive newsletters or undergo a background check), we will process your personal data within the scope of and based on this consent, provided that we have no other legal basis and that such a basis is required. Consent that has been given may be revoked at any time; however, this will not affect any data processing that has already taken place.
4. Persistent Cookies / Tracking and Other Technologies Related to the Use of Our Website
We typically use "cookies" and similar technologies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website. When you visit this website again, this allows us to recognize you, even if we do not know who you are. In addition to cookies that are used only during a session and deleted after your visit to the website (“session cookies”), cookies may also be used to store user preferences and other information for a specific period of time (e.g., two years) (“persistent cookies”). However, you can configure your browser to reject cookies, store them only for a single session, or delete them early. Most browsers are set by default to accept cookies. We use persistent cookies so that we can better understand how you use our services and content, and so that we can display offers and advertisements tailored to you (which may also occur on other companies’ websites; however, these companies do not learn from us who you are—if we even know that ourselves—because they only see that the same user who visited a specific page on our site is also on their website). Some of the cookies are set by us, while others are set by business partners with whom we collaborate. If you block cookies, certain features (such as language selection, shopping cart, and checkout processes) may no longer function.
In our newsletters and other marketing emails, we sometimes include visible and invisible image elements—to the extent permitted—that, when retrieved from our servers, allow us to determine whether and when you have opened the email. This enables us to measure and better understand how you use our offerings and tailor them to your needs. You can block this in your email program; most are set by default to do so.
For all technologies that are not necessary for the operation of this website, we obtain your consent via the notice that appears when you first visit the site. The relevant services will not load until you have given your consent. You can change or withdraw your selection there at any time. For newsletters and other marketing emails, the consent you provided upon registration applies; you can withdraw it at any time.
We occasionally use Google Analytics or similar services on our websites. These are third-party services that may be located in any country in the world (in the case of Google Analytics, it is Google Ireland [based in Ireland], which relies on Google LLC [based in the U.S.] as a data processor [both “Google”], www.google.com), which allows us to measure and analyze website usage (non-personally identifiable). For this purpose, persistent cookies set by the service provider are also used. We have configured the service so that visitors’ IP addresses are truncated by Google in Europe before being transmitted to the U.S., thereby preventing them from being traced. We have disabled the “Data Sharing” and “Signals” settings. Although we can assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles, and link this data to these individuals’ Google accounts. If you have registered with the service provider yourself, the service provider also knows who you are. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its privacy policy. The service provider merely informs us about how our respective website is used (no information about you personally).
Specifically, we use the following third-party services on this website. The services listed below are not loaded until you have consented in the cookie notice:
Google Analytics, provided by Google Ireland Limited, Ireland (parent company: Google LLC, U.S.): Measurement of reach and analysis of how our website and our panel configurator are used. See the preceding paragraph for details.
Microsoft Clarity, provided by Microsoft Ireland Operations Limited, Ireland (parent company: Microsoft Corporation, USA): records the course of individual sessions—mouse movements, clicks, and scrolling behavior—and analyzes this data so that we can identify usability barriers.
Metricool by Metricool S.L., Spain: Visitor Statistics.
LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Ireland (parent company: Microsoft Corporation, USA): Measuring the success of our campaigns on LinkedIn and creating target audiences for future campaigns.
Without your consent—because it is necessary for the operation of the website—we use:
Google Tag Manager by Google Ireland Limited, Ireland: controls which of the above services are loaded and implements your selections from the cookie notice.
Weglot by Weglot SAS, France: Translation of this website into English and French. The service is integrated upstream of the operation, which is why every page view is routed through its servers.
jsDelivr: Delivery of a library that speeds up page loading.
We use services provided by BunnyWay d.o.o., Ljubljana, Slovenia (EU) to deliver videos, documents, and other files. When you visit a page, a connection is established to their servers; for technical reasons, your IP address is transmitted during this process. The data is processed within the EU. The service does not store cookies or place anything in your browser, which is why it operates without your consent. The legal basis is our legitimate interest in providing our content quickly and securely. For more information: https://bunny.net/privacy
Our panel configurator only saves a configuration if you explicitly use the function to save a link. The panel’s configuration and a random identifier are then stored—no contact information; the data is stored by Supabase Inc. on servers in Frankfurt am Main (Germany). If you submit a request via the configurator, we will forward your information—name, company, email address, phone number, and the selected configuration—to us via email; we use the Brevo service provided by Sendinblue SAS, France, for this purpose. In both cases, the legal basis is the processing of your request.
5. Data Sharing and Data Transfer Abroad
As part of our business activities and for the purposes set forth in Section 3, we also disclose information to third parties, to the extent permitted and as we deem appropriate, whether because they process this information on our behalf or because they intend to use it for their own purposes. This applies in particular to the following entities:
Our service providers (both within Coratec AG and externally, such as banks and insurance companies), including data processors (such as IT providers);
Dealers, suppliers, subcontractors, and other business partners;
Customers;
domestic and foreign authorities, government agencies, or courts;
Media;
The general public, including visitors to websites and social media;
Competitors, industry organizations, associations, organizations, and other bodies;
Purchasers or parties interested in acquiring business units, companies, or other parts of Coratec AG;
other parties in potential or actual legal proceedings;
Other subsidiaries of Coratec AG;
All of them are recipients.
Some of these recipients are located within Germany, but they may be located anywhere in the world. In particular, you should expect your data to be transferred to all countries in which Coratec AG is represented by group companies, branches, or other offices, as well as to other European countries and the United States, where the service providers we use are located (such as Microsoft, SAP, Amazon, etc.).
.
If a recipient is located in a country without adequate legal data protection, we contractually require the recipient to comply with applicable data protection laws (for this purpose, we use the European Commission’s revised Standard Contractual Clauses, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? ), unless the recipient is already subject to a legally recognized framework for ensuring data protection and we cannot rely on an exception provision. An exception may apply, in particular, in the case of legal proceedings abroad, but also in cases of overriding public interest, or if the performance of a contract requires such disclosure, if you have given your consent, or if the data in question has been made publicly available by you and you have not objected to its processing.
6. Retention Period for Personal Data
We process and store your personal data for as long as necessary to fulfill our contractual and legal obligations or to achieve the purposes for which the data is processed; that is, for example, for the duration of the entire business relationship (from the initiation and execution of a contract through to its termination) and beyond, in accordance with statutory retention and documentation requirements. In this context, personal data may be retained for the period during which claims against our company may be asserted, and to the extent that we are otherwise legally obligated to do so or legitimate business interests require it (e.g., for evidentiary and documentation purposes). As soon as your personal data is no longer necessary for the purposes mentioned above, it will generally be deleted or anonymized to the extent possible. For operational data (e.g., system logs), shorter retention periods of twelve months or less generally apply.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as issuing guidelines, providing training, implementing IT and network security solutions, enforcing access controls and restrictions, encrypting data storage media and data transmissions, pseudonymization, and conducting audits.
8. Obligation to Provide Personal Data
As part of our business relationship, you must provide the personal data necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations (you generally have no legal obligation to provide us with data). Without this data, we will generally not be able to enter into or fulfill a contract with you (or the entity or person you represent). Furthermore, the website cannot be used if certain information required to ensure data transmission (such as your IP address) is not disclosed.
9. Profiling and Automated Decision-Making
We process your personal data, in part automatically, for the purpose of evaluating certain personal characteristics (profiling). We use profiling in particular to provide you with targeted information and advice about products. In doing so, we use analytical tools that enable us to tailor our communications and advertising to your needs, including market and opinion research. As a general rule, we do not use fully automated decision-making (as regulated, for example, in Article 22 of the GDPR) for the establishment and conduct of the business relationship or for any other purpose. Should we use such procedures in individual cases, we will inform you separately, provided this is required by law, and explain your related rights to you.
10. Rights of the Data Subject
Under the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR), you have the right to access, rectification, deletion, the right to restrict data processing, and the right to object to our data processing—in particular, processing for direct marketing purposes, profiling for direct marketing, and other legitimate interests in processing—as well as the right to receive certain personal data for the purpose of transferring it to another party (so-called data portability). Please note, however, that we reserve the right to invoke the restrictions provided for by law, for example, if we are obligated to retain or process certain data, have an overriding interest in doing so (to the extent we are permitted to invoke such an interest), or require it to assert claims. If you incur any costs, we will inform you in advance. We have already provided information regarding the option to withdraw your consent in Section 3. Please note that exercising these rights may conflict with contractual agreements and may result in consequences such as early termination of the contract or financial implications. We will inform you in advance in such cases, unless this is already governed by the contract.
Exercising these rights generally requires that you clearly prove your identity (e.g., by providing a copy of your ID if your identity is otherwise unclear or cannot be verified). To exercise your rights, you may contact us at the address provided in Section 1.
Furthermore, every data subject has the right to enforce their rights in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).
11. Changes
We may update this Privacy Policy at any time without prior notice. The most current version published on our website is the one that applies. If this Privacy Policy is part of an agreement with you, we will notify you of any updates via email or by other appropriate means.