This Privacy Policy applies to the following websites operated by Korff AG:
The controller responsible for processing personal data in connection with these websites is:
Korff AG
Niedermattstrasse 35
4538 Oberbipp
Switzerland
Phone: +41 (0) 32 636 33 32
Email: info@korff.ch
Represented by:
Yannick Erb, President of the Board of Directors, with sole signatory authority
If you have any questions regarding data protection, you may contact our Data Protection Advisor / Data Protection Officer:
Stefan Müller
Datenschutz Institut Baden
Phone: +49 (0) 151 46444408
Email: s.mueller@datenschutz-institut-baden.de
For data protection matters in the United Kingdom, you may contact our UK Data Protection Representative:
dib global Ltd.
Saltford House, High St, Saltford
Bristol BS31 3ED
United Kingdom
Phone: +44 (0) 117 439 0150
Email: info@dib-global.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the associated implementing provisions.
Where the European Union General Data Protection Regulation (GDPR) applies to individual processing activities, personal data is additionally processed in accordance with the requirements of the GDPR.
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, names, contact details, IP addresses, device information and information you provide to us when making an enquiry.
We process personal data in particular for the following purposes:
providing and operating our websites
ensuring the security and stability of our systems
processing customer and other enquiries
initiating and performing contractual relationships
communicating with customers, prospective customers and business partners
analysing and improving our online services
complying with legal obligations
establishing, exercising and defending legal claims
Where the GDPR applies, processing is based, depending on the individual circumstances, in particular on:
Article 6(1)(a) GDPR – consent
Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures
Article 6(1)(c) GDPR – compliance with a legal obligation
Article 6(1)(f) GDPR – legitimate interests
Our legitimate interests include, in particular, the secure and efficient operation of our websites, communication with customers and business partners, the improvement of our services and the establishment, exercise or defence of legal claims.
Personal data is disclosed to third parties only where this is necessary for the respective purposes, required by law or otherwise permitted under applicable data protection law.
Recipients may include, in particular:
hosting and IT service providers
service providers responsible for maintaining and supporting our websites and IT systems
analytics and statistics providers
communications and social media providers
affiliated companies where this is necessary to process an enquiry or perform a contract
consultants and other service providers
public authorities and other public bodies where disclosure is required by law
Where service providers process personal data on our behalf, we contractually require them to process such data in compliance with applicable data protection requirements and to implement appropriate technical and organisational security measures.
In the course of our business activities and the operation of our websites, personal data may also be disclosed to recipients outside Switzerland or processed in other countries.
This concerns in particular countries within the European Union and the European Economic Area, the United Kingdom and, in connection with certain international service providers, the United States of America.
Where data is transferred to a country for which the Swiss Federal Council has recognised an adequate level of data protection, the transfer may be made on this basis.
For appropriately certified organisations in the United States, the Swiss-U.S. Data Privacy Framework may in particular provide a basis for data transfers.
Where the recipient country is not recognised as providing an adequate level of data protection, we ensure an appropriate level of protection by means of suitable contractual safeguards, such as recognised standard contractual clauses, or rely on an applicable statutory exception.
We retain personal data only for as long as necessary for the respective processing purpose or for as long as statutory or contractual retention obligations apply.
Once the purpose for processing no longer applies, personal data is deleted or anonymised unless statutory, contractual or other legitimate reasons require further retention.
We implement appropriate technical and organisational security measures to protect personal data, in particular against loss, misuse, unauthorised access, unauthorised alteration and disclosure.
Our security measures are regularly reviewed and adapted to technological developments and the respective risks.
Our websites use SSL/TLS encryption. This means that data transmitted between your browser and our server is encrypted.
An encrypted connection can be identified in particular by the use of “https” in your browser’s address bar.
When you access our websites, the web server may automatically collect technical information.
This may include in particular:
IP address
date and time of access
page or file accessed
amount of data transferred
referrer URL
browser type and browser version
operating system used
host name or device information
This information is processed in particular to provide the websites technically, ensure the stability and security of our systems and detect and investigate technical errors and misuse.
As a general rule, this information is not combined with other data sources unless this is necessary to investigate a security incident, defend against an attack or comply with a legal obligation.
The data is retained only for as long as necessary for the purposes described above.
Where the GDPR applies, processing is based on our legitimate interest in the secure and reliable operation of our websites pursuant to Article 6(1)(f) GDPR.
If you contact us using a contact form, by email, telephone or by other means, we process the information you provide in order to handle your enquiry.
Where a contact form is provided, the following information may in particular be processed:
name
street and house number
postal code and city
country
company
telephone number
email address
content of your enquiry or comments
Mandatory fields are identified accordingly.
The information is processed in order to respond to your enquiry, communicate with you and, where applicable, initiate or perform a contractual relationship.
Where the GDPR applies, contract-related enquiries are processed on the basis of Article 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in processing and responding to enquiries pursuant to Article 6(1)(f) GDPR.
Personal data is disclosed only where this is necessary to process your enquiry or otherwise permitted by law.
Data collected in connection with an enquiry is deleted once it is no longer required for handling the enquiry and no statutory or contractual retention obligations require further storage.
Our websites use cookies and similar technologies.
Cookies are small files or pieces of information that can be stored on or accessed from your device. They may be required to provide essential website functions, store preferences or statistically analyse the use of our websites.
We distinguish in particular between technically necessary cookies and cookies or similar technologies used for analytics, statistics, functionality or marketing purposes.
Technically necessary cookies are used where required for the operation and basic functionality of the respective website.
Non-essential cookies and similar technologies are only used after you have given your consent via the consent banner, where such consent is required.
You can make your selection via the consent banner. You may change or withdraw consent at any time with effect for the future using the cookie settings provided on the respective website.
Refusing or withdrawing consent does not prevent you from using the basic functions of our websites. However, certain individual functions may be restricted.
On www.korff.ch, we use Google Tag Manager.
The provider for users in Switzerland and the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Tag Manager is used to technically manage and control website tags. In particular, analytics and other services can be integrated and managed using this service.
Google Tag Manager does not itself generally create separate user profiles. However, technical connection data, in particular the IP address and information about the device and browser used, may be transmitted to Google as part of the technical provision of the service.
Services requiring consent that are integrated via Google Tag Manager are activated only after the relevant consent has been given.
As part of providing its services, Google companies may also process data outside Switzerland and the European Economic Area. The safeguards described under “Disclosure of Personal Data Abroad” apply to such transfers.
We use Google Analytics on our websites for statistical analysis and to improve our online services.
The provider for users in Switzerland and the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics enables us to collect and analyse information about how visitors use our websites.
The information processed may include, in particular:
pages viewed
date, time and duration of visits
interactions with the website
technical device and browser information
approximate geographical information
referrer information
technical identifiers and cookie information
Google Analytics is activated only after you have given the relevant consent via the consent banner.
Where the GDPR applies, processing is based on Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future using the cookie settings on the respective website.
In connection with the use of Google Analytics, data may also be processed by Google LLC and other Google companies in the United States or other countries. Google uses recognised adequacy mechanisms and contractual safeguards for international data transfers where applicable.
Our websites contain links to third-party websites and services.
When you click on such a link, you leave our website. The respective third-party provider is generally responsible for the subsequent processing of personal data on its website.
We have no influence over which personal data third-party providers collect after you access their services or how they process such data.
We maintain company profiles on social networks and online platforms. These are used in particular to provide information about our company, products and services and to communicate with prospective customers, customers and business partners.
When you visit our profiles, personal data may be processed by the respective platform providers. This may include, in particular, usage, device, contact and profile data, IP addresses and cookie information.
If you communicate with us through such a platform or interact with our content, we also process information you provide or make publicly available to the extent necessary to communicate with you and maintain our company profiles.
We maintain a company profile on LinkedIn.
The provider for users in Switzerland and the European Economic Area is:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
When you visit or interact with our LinkedIn page, LinkedIn may process profile, device, usage and connection data and may provide us with statistical information about the use of our company page.
If you interact with our LinkedIn page, for example by commenting on or sharing posts or by sending us a message, we may also process the information you provide.
Further processing is carried out by LinkedIn under its own responsibility and in accordance with its privacy policy.
LinkedIn may also process data in the United States and other countries. According to LinkedIn, international data transfers are safeguarded, among other things, through the Swiss-U.S. Data Privacy Framework where applicable and through standard contractual clauses.
We maintain a company profile on Instagram.
The provider for users in Switzerland and the European Economic Area is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland
When you visit our Instagram page, Meta may process information including profile information, IP addresses, device information, usage behaviour and interactions.
Meta may provide us with statistical and aggregated information about the use of our Instagram presence.
If you interact with our Instagram profile, for example by commenting on a post, liking content or sending us a message, we may also process the information you provide.
Further processing is carried out by Meta under its own responsibility and in accordance with its privacy policy.
As part of providing its services, data may also be processed by companies within the Meta group in the United States or other countries.
We maintain a company channel on YouTube.
YouTube is a Google service. The provider for users in Switzerland and the European Economic Area is in particular:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When you visit our YouTube channel, Google may process information including your IP address, device information, usage data and information about content you have viewed or rated.
If you are signed in to a Google or YouTube account, these activities may be associated with your user account.
If you interact with our YouTube channel or content published there, we may also process information you make publicly available.
Further processing is carried out in accordance with the privacy policies of Google and YouTube.
Data may also be processed in the United States and other countries.
Under applicable data protection law, data subjects have in particular the right to request information as to whether and which personal data relating to them is being processed.
Subject to the applicable statutory requirements, you may in particular have the right to:
request access to your personal data
have inaccurate personal data corrected
request the deletion or destruction of personal data
object to certain processing of personal data
request the release or transfer of certain personal data in a commonly used electronic format
withdraw consent at any time with effect for the future
Where the GDPR applies, additional rights may include, in particular, the rights to rectification, erasure, restriction of processing, data portability and objection, subject to the applicable statutory requirements.
To exercise your rights, you may contact Korff AG or our Data Protection Advisor / Data Protection Officer.
We reserve the right to request appropriate proof of identity before processing a request.
Statutory restrictions on these rights remain unaffected.
For data protection matters in Switzerland, you may in particular contact the:
Federal Data Protection and Information Commissioner (FDPIC)
Where the GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority in the European Union or the European Economic Area in accordance with the applicable statutory requirements.
We may amend this Privacy Policy if our processing activities, the services we use or the applicable legal requirements change.
The version currently published on our website applies.
Last updated: August 2026
Korff AG uses cookies and similar technologies to analyse and improve our website. By clicking on "accept all", you agree to the use of these cookies.
Cookies that are indispensable for the functionality of the site, such as the one in which your privacy options are stored, cannot be deactivated here. The settings become active after reloading the page.