Part I: When do we collect personal data? What type of personal data?

Personal data is any information relating to an identified or identifiable natural person ('data subject'). Below are some categories of personal data that we may collect and information on how we use this data. We collect personal data from individuals who visit our website, use our web shop, create an account, subscribe to our newsletter, submit an application, make a media request, or apply for a job.

When you visit our website, your visit, like any other website, is logged. Initially, the following automatic log data ('log data') is primarily collected, which your browser/device transmits to us:

the IP address currently used by your device or router
date and time of the visit
browser type, version, and language
the operating system of your device
the pages you view,
access status / HTTP status code
name and size of the requested file(s)
and, if applicable, the URL of the referring website

This data is collected solely for data security purposes, to improve our website, and for error analysis.
Please read our cookie policy, online tracking, and online advertising techniques in Part V to learn how we use cookies.

Part II: Who controls your personal data?

We want our visitors and customers to be able to effectively exercise their rights as data subjects. You have the right to know who controls your data and to whom you can address requests in your country. It is also important for us that you understand the purpose of collecting and processing your personal data and the legal basis for doing so. As the data controller of your personal data, we are responsible for the processing of your personal data on our side. Finally, Local Auction collaborates with other companies to provide you with an outstanding customer experience. For this reason, we share your data with third parties. You have the right to know who these third parties are and how we protect your data privacy rights when transferring your personal data.

The data controller for your data is:
Local Auction, Privacy, Schönegg 17, 6300 Zug, privacy@localauction.ch

As the data controller, Local Auction determines the purpose and means of processing your personal data. Questions about your data can be directed here.

Part III: What is the purpose and legal basis for processing your personal data?

We process your data for the purposes described below. More information regarding online data can be found in Part V.

We process your data: 

• To establish and initiate, manage, and execute contractual relationships with you and other business partners (e.g., service providers) and to provide and maintain the functions of our website and platform.
• For all purposes related to communication between us and you (e.g., customer service, consultation, use of the website, information about changes to our service or new services, newsletter distribution, etc.), particularly when handling inquiries or follow-up questions or when you exercise your rights according to Part VII. Your data is stored for the documentation of our communication, for training purposes, quality assurance, or in case of further inquiries.
• For marketing purposes, e.g., sending advertisements for other products or services from us or conducting other marketing activities (e.g., sweepstakes, events). You can object to such contact at any time or withdraw previously given consent at any time.
• For market research, to develop and improve our services and products.
• To ensure the proper functioning of our website and platform, including troubleshooting and testing.
• to process your application
• For risk management and corporate governance, such as processing contract and financial data to monitor claims and liabilities.

Part IV: Who and where are the recipients of personal data?

To provide our services, we rely on the internal and external sharing of personal data. This primarily involves the following parties:

• Service providers (as legally permitted, e.g., payment service providers, IT service providers), including data processors.
• Business partners and subcontractors who contribute to the provision of our services.
• Domestic and foreign authorities, agencies, or courts, if there is a legal obligation.
• The public, including visitors to websites and social media, if you share content through public functions.
• Communication partners when you communicate with us or through our platform.
• Buyers or interested parties in acquiring business units, companies, or other parts of our company.
• Industry organizations, associations, organizations, and other bodies, if necessary to fulfill our services.
• To fulfill legal obligations or to protect the rights, property, or safety of our company, our customers, or third parties.

If necessary for the provision of our services, personal data will be transferred to the above-mentioned parties within Switzerland and the EU.
When we transfer data to a third country, we ensure, as legally required, that appropriate safeguards are in place (namely based on the so-called standard contractual clauses of the European Commission) or so-called Binding Corporate Rules to ensure an adequate level of protection.

Part V: What online tracking, online advertising techniques, and social networks do we use?

Currently, we use the following services from the following providers (third parties):

• Google Analytics: Google Analytics is a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, the data processing by Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as 'Google.' Google Analytics uses performance cookies that enable the analysis of website usage by the site visitor. The information generated by the cookie about the use of this website by the visitor (including the shortened IP address) is usually transferred to a Google server and stored there. Google Analytics is used exclusively with the '_anonymizeIp()' extension on this website. This extension ensures anonymization of the IP address through truncation, thus excluding direct personal reference. The IP address transmitted by the corresponding browser as part of Google Analytics will not be merged with other data from Google. Google will use this information on behalf of the site operator to evaluate the use of the website, compile reports on website activity, and provide other services related to website and internet usage to the site operator. The legitimate interest in data processing lies in optimizing this website, analyzing its usage, and adjusting content. Users' interests are adequately protected by pseudonymization. Google LLC provides a guarantee based on standard contractual clauses to ensure an adequate level of data protection. Data sent and associated with cookies, user IDs (e.g., User-ID), or advertising IDs will be automatically deleted after 50 months. The deletion of data that has reached its retention period occurs automatically once a month. The collection of data by Google Analytics can be prevented by adjusting the cookie settings for this website. The corresponding browser plugin can be downloaded and installed from the following link: https://tools.google.com/dlpage/gaoptout. Further information on data usage by Google, settings, and objection options can be found in Google's privacy policy (https://policies.google.com/privacy) as well as in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

• Google Ads Conversion Tracking: For online marketing purposes, we use, among other things, Google Ads from Google Ireland Limited to promote our products. If the data controller for this website is located outside the European Economic Area or Switzerland, data processing by Google Ads is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as 'Google.' In this context, we use conversion tracking on our website. When you click on an ad placed by Google, a cookie for conversion tracking is set. These cookies are valid for 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads user receives a different cookie. The information collected with the help of the cookie is used to create statistics for Google Ads customers who have opted for conversion tracking. We learn the total number of users who clicked on our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that personally identifies these users. If you do not want to participate in tracking, you can opt-out of this use by disabling the Google conversion tracking cookie in your internet browser under user settings. You will not be included in the conversion tracking statistics in this case. Further information on Google Ads and Google Conversion Tracking can be found in Google's privacy policy at: https://policies.google.com/privacy.

• Google Tag Manager: For our website, apps, and web interface, we also use Google Tag Manager from Google Inc. Through Google Tag Manager, we can centrally manage code snippets from the tracking tools we use. Google Tag Manager itself is a domain that does not set cookies or store data but acts only as a manager for the tags set.

Part VI: Use of the Chatbot

Use of the Chatbot: When using the AI-powered chatbot (“Chatbot”), the texts you enter as well as technical usage data (e.g., timestamps, interactions) are processed to provide the chat function.

Purpose of processing: The processing is carried out exclusively to provide the chat function, to assist with questions regarding the use of our platform, to improve user-friendliness, and to ensure security and abuse prevention.

Use of OpenAI: To provide our chatbot function, we use the services of OpenAI, L.L.C., San Francisco, USA. Your chat inputs and technical usage data are transmitted to OpenAI to generate automated responses. Data processing is based on: EU (GDPR): Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in efficient customer communication). Where required, we obtain your consent under Art. 6 (1) (a) GDPR. CH (FADP): Art. 6 (2) (b) FADP (overriding private interests in the provision of our service).

Use of service providers / data transfer to third countries: Since data is transferred to the USA, we have concluded EU Standard Contractual Clauses with OpenAI to ensure an adequate level of data protection. Further information on OpenAI’s privacy practices can be found at: https://openai.com/policies/privacy-policy.

Storage and deletion: Chat inputs and logs are only stored as long as necessary to provide the chat function. Longer storage only takes place if legal obligations exist or if you have expressly consented. Where possible, the data is anonymized or pseudonymized.

Transparency notice: Please note that the chatbot operates automatically and responses may be incorrect, incomplete, or misleading. The communication does not replace legal or professional advice.

Part VII: How long do we store your personal data?

We process your personal data as long as necessary to fulfill our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for the duration of the entire business relationship (from initiation, execution to the termination of a contract and the warranty period, as well as a subsequent support phase) and beyond, in accordance with statutory retention and documentation obligations. It is possible that personal data will be retained for the time during which claims can be asserted against us and insofar as we are otherwise legally obliged or have legitimate business interests (e.g., for evidence and documentation purposes). Once your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymized wherever possible. For operational data (e.g., system logs), shorter retention periods may apply.

Part VIII: What are your rights, and how can you exercise them?

As a data subject, you have the following rights with regard to us:

The right to withdraw consent: You have the right to withdraw your consent to data processing at any time by contacting Local Auction via the contact details, etc.

Right to object to processing: You have the right to object to the processing of personal data, including profiling, at any time, for reasons arising from your particular situation. Local Auction will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Right of access: You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access your personal data and the information related to the processing. Exercising these rights requires you to clearly prove your identity (e.g., by providing a copy of your ID if your identity is not otherwise clear or verifiable). To exercise your rights, you can contact us at the address provided in Part II.

Right to rectification: You have the right to demand that we promptly correct any inaccurate personal data concerning you. Considering the purposes of processing, you also have the right to have incomplete personal data completed, including by means of a supplementary statement.

Right to erasure ('right to be forgotten'): You have the right to request that we promptly delete your personal data unless data processing opposes it.

Right to restrict processing: You have the right to request the restriction of processing if one of the following conditions is met: if you contest the accuracy of the data, the processing is unlawful, and you request the restriction instead of deletion; if we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, or if you have objected to processing while it is not yet determined whether our legitimate grounds outweigh yours.

Right to data portability: You have the right to receive the personal data concerning you, which you provided to Local Auction, in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller without hindrance from Local Auction, to whom the personal data was provided.

Exercising your rights: You can exercise your rights by contacting Local Auction (see Part II).

What do we do with third parties to whom your personal data has been disclosed? 
Note: Local Auction will inform all recipients to whom personal data has been disclosed of any correction or deletion of the personal data or a restriction of processing, unless this proves impossible or involves disproportionate effort. We will inform you of these recipients upon request.

Part IX: What security measures are applied to protect your personal data?

Transfers over the Internet are never entirely secure or error-free, and stored data is not free of vulnerabilities. However, the technical and organizational measures applied by us and our partners ensure the adequate security and confidentiality of your personal data, including preventing unauthorized access to the data or devices used for processing. We use various security measures, including sophisticated encryption and authentication tools, to maintain the security of your personal data. Your personal information is stored behind secure networks and is accessible only to a limited number of persons who have special access rights to these systems and are required to keep the information confidential. All information you provide to us is stored on secure servers.

Part X: How can you file a complaint?

Right to lodge a complaint with our Data Protection Officer 
In the event of a complaint, please contact our local data protection partner: 
Local Auction, Privacy, Schönegg 17, 6300 Zug, privacy@localauction.ch

Right to lodge a complaint with our supervisory authority 
You also have the right to contact the supervisory authority: 
Switzerland Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern, Switzerland

Part XI: Miscellaneous

Links to other websites 
Our website may contain links to other third-party websites. We are not liable for the privacy policies of these websites.‍

Changes to the privacy policy
We may revise our privacy policies from time to time. The version published on this website is the current version.

Questions and feedback 
We always welcome your questions and feedback on our privacy policies. Feel free to contact us (see Part II.)