Menü
EN
DEFRIT

Data protection

Privacy policy Wellauer AG

1. what is it about?

This statement explains how Wellauer AG ("we") processes personal data when you use our websites wellauer-tabak.ch, wellauer.abacuscity.ch and store.wellauer-tabak.ch (together "website"), purchase our products/services, communicate with us or have a contractual relationship with us. If you transmit data of third parties, you confirm that you are authorized to do so and that you have informed these third parties of this declaration.
This declaration takes into account the GDPR, DSG and revDSG; the applicability depends on the individual case.

2. responsible person & contact

Wellauer AG
Administration and distribution center, Thalerstrasse 67, 9424 Rheineck, Switzerland
E-Mail: info@wellauer-tabak.ch - Phone: +41 71 571 11 66

3 What data do we process?

  1. Technical data (e.g. IP, log files, cookies/IDs) to ensure operation & security; generally stored for up to 6 months.
  2. Communication data (e.g. contact data, content/marginal data) from e-mail, telephone, forms; e-mails/letters generally at least 10 years.
  3. Master data (e.g. name, address, role, payment details, authorizations, consents, history).
  4. Contract data (e.g. contract content, services, pre-contract data, reactions/complaints); generally stored for 10 years from the last activity.
  5. Behavioral & preference data for improvement and personalization (e.g. use of the website, interests); deletion/anonymization typically after 2-24 months (depending on type), longer if legally required.
  6. Other data (e.g. participation in events, security records, official procedures); storage for a specific purpose and limited to what is necessary.

We receive a lot of data from you; in some cases also from public sources or from third parties (e.g. credit information, service providers).

4 Why do we process data?

  1. Communication and processing of requests/rights

  2. Contract initiation/processing

  3. Marketing & relationship management (incl. newsletter, invitations; can be canceled at any time)

  4. Market research, product & service improvement

  5. Security & access control

  6. Legal/compliance obligations

  7. Risk management & corporate governance

  8. Internal administration, quality & training

5. legal bases

  1. Consent (e.g. for certain analyses/tracking or particularly sensitive data); revocable for the future.

  2. Contract/contract-like measures

  3. Legitimate interests (e.g. operation, safety, marketing, improvement, evidence)

  4. Legal obligations and legal enforcement/defense.

6. profiling & automated decisions

We may analyze data in order to carry out preferences, security risks or statistical evaluations ("profiling") and to create profiles. We pay attention to proportionality and reliability; in the event of significant effects, a manual check is always carried out.

7. disclosure to third parties

  1. Service providers (e.g. IT, shipping, advertising, payment, debt collection)

  2. Contractual partners/customers & cooperation partners (e.g. for marketing/analyses; advertising only with consent)

  3. Authorities, courts (if mandatory/authorized)

  4. Other recipients according to purpose.
    Third parties may use subcontractors.

8. data transmission abroad

Recipients may also be located outside Switzerland/EU (e.g. USA). Where necessary, we ensure appropriate protection (e.g. standard contractual clauses) or rely on exceptions (e.g. contract, consent, data made public, legal proceedings).

9. storage periods

We only store data for as long as required for purposes, legal obligations, evidential interests or technical reasons. Thereafter, deletion or anonymization as part of our routines (for details see section 3 and cookies below).

10. data security

We take appropriate technical and organizational measures to protect the confidentiality, integrity and availability of your data.

11. your rights

Depending on the right: Information, rectification, erasure, data disclosure/transfer, withdrawal of consent, objection (in particular to direct marketing/profiling) and further information.
Contact in accordance with section 2; proof of identification may be required. Legal restrictions/exceptions apply. You can also lodge a complaint with a supervisory authority.

12. cookies, online tracking & advertising

We use cookies and similar technologies on the website:

  1. Necessary cookies (operation/functions; partly session, partly up to 24 months)

  2. Performance/analysis cookies (usage & optimization; up to 24 months)

Third-party tools (selection):

  • Google Analytics (Google Ireland/Google LLC): Reach measurement; IP truncation in the EU; data can be linked to Google accounts. Info/opt-out: Google support/policy pages.

  • Google Tag Manager: Management of tags (even without personal reference), integrated tags can collect data.

  • Google Ads / Remarketing: Display of interest-based advertising; personal data may be processed.

  • Cookie First: Management of consents/cookie settings.

  • Cloudflare (CDN/security): Processing of IP, system/log information, among other things; cookies such as _cfduid/cf_clearance; possible transmission to the USA (with DPF/SCCs).

Your options:
You can manage/revoke consent in the cookie banner and block/delete cookies in the browser. Without necessary cookies, the website may not function properly.

13. social networks

We operate presences on Facebook, LinkedIn, Instagram and a Google company profile, among others. We and the platforms receive data from interactions; the platforms process this data on their own responsibility (e.g. for advertising/statistics).
We use aggregated insights/statistics to improve our content and reserve the right to delete inappropriate content. Details on data processing and your rights can be found in the privacy policies of the respective platforms.

14. applications

We process application data (contact, professional and voluntary information) to carry out the selection process. Access is only granted to those involved internally. After completion, we delete/anonymize data in accordance with legal requirements.

15. changes

This privacy policy is not part of the contract and can be amended at any time. The version published on the website applies.

Last update: 26.09.2025