data protection
Privacy policy for website visitors
Our processing of personal data of our users is limited to those data that are necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is only carried out for the purposes listed below and if there is a legal basis (according to Art. 6 para. 1 GDPR). Only such personal data is collected that is actually required for the implementation and processing of our tasks and services or that you have voluntarily provided to us.
Name and address of the controller The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Cotta Collection AG
Industriestrasse 4
9487 Bendern
Liechtenstein
+423 377 32 90
Description and scope of data processing
Visitor and usage data
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- IP address
- Remote identity
- User
- Duration of request
- Site accesses
- Status of request
- Transmitted data (volume)
- Referrer
- User agent
We store this information for a period of 14 days. The storage is done for data security reasons to ensure the stability and operational security of our system.
Web analysis tool
We analyse the use of our website with the web analysis tool Matomo, (https://matomo.org/privacy-policy). This is used exclusively to optimise the website in terms of user-friendliness and to provide useful information about our services. This data is not combined with other personal data sources or passed on to third parties.
The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.
The analyses are based on pseudonymised data records. The statistical evaluations are kept for 3 years.
Cookies
We use cookies on our website to make our offer user-friendly. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. The cookies remain stored until you delete them. This allows us to recognise your browser the next time you visit.
If you do not wish to do this, you can set up your browser so that it informs you about the setting of cookies and you allow them in individual cases. However, we would like to point out that deactivating cookies means that you will not be able to use all the functions of our website.
Contact
If you send us an email or other electronic message, your details will only be stored for the purpose of processing the enquiry, possible related further questions and will only be used within the scope of the enquiry. The legal basis for processing your enquiry is Art. 6(1)(a) or (b) GDPR. We will delete your personal data after processing your request.
File downloads
We do not require you to provide any personal information in order for you to download files from our website.
Data security
When visiting our website, we use the common SSL procedure in conjunction with the highest encryption level supported by your browser. You can see whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the address bar of your browser.
In addition, we apply further appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Your rights (data subject rights)
You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, data transfer, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling.
You also have the right to revoke any consent you may have given to use your personal data at any time.
You can exercise your aforementioned rights at any time by contacting us at the contact address provided.
If you are of the opinion that the processing of your personal data by us is in conflict with the applicable data protection regulations, you have the possibility to complain to the data protection authority of the Principality of Liechtenstein.
tracking
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
Information on data protection for website visitors
We take the protection of your data seriously and would like to inform you in accordance with the Data Protection Act about our data processing as follows:
a) the processing purposes and their legal bases
b) the type of personal data categories, the origin of the data, the retention period and any transfer of the personal data abroad
c) the legal basis for data forwarding
d) Information on automated individual decision-making
e) Your rights
a) The processing purposes and their legal bases
| Processing purpose | Legal basis |
| Business communication | Art. 6 (1) f, GDPR |
b) Description of data categories and their processing
Business communication
| Data category | Description | Retention period | Origin | Transfer abroad |
| e-mail address | e-mail address | after fulfillment of purpose | collected directly | no |
c) Legal basis for data forwarding
No data is transferred.
d) Information on automated individual decision-making
On the basis of your personal data, we will not make any decisions which are based exclusively on the automated processing of your data and which are associated with a legal consequence for you or which significantly affect you.
e) Your rights
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation of consent and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority.
Note: If you provide us with data from third parties, we assume that they have been informed of this by you.
Data protection information for job applicants
We take the protection of your data seriously and would like to inform you in accordance with the Data Protection Act about our data processing as follows:
a) the processing purposes and their legal bases
b) the type of personal data categories, the origin of the data, the retention period and any transfer of the personal data abroad
c) the legal basis for data forwarding
d) Information on automated individual decision-making
e) Your rights
a) The processing purposes and their legal bases
| Processing purpose | Legal basis |
| Business communication | Art. 6 (1) f, GDPR |
| Application management | Art. 6 (1) f, GDPR |
b) Description of data categories and their processing
Business communication
| Data category | Description | Retention period | Origin | Transfer abroad |
| e-mail address | e-mail address | after fulfillment of purpose | collected directly | no |
| Applications | Applications | after rejection | collected directly | no |
Application management
| Data category | Description | Retention period | Origin | Transfer abroad |
| Applicant data | First name, last name, address, phone, e-mail, | after rejection | collected directly, employment agencies | no |
| Application file | Resume, certificates, cover letter, continuing education | after rejection | collected directly, employment agencies | no |
c) Legal basis for data forwarding
No data is transferred.
d) Information on automated individual decision-making
On the basis of your personal data, we will not make any decisions which are based exclusively on the automated processing of your data and which are associated with a legal consequence for you or which significantly affect you.
e) Your rights
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation of consent and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority.
Note: If you provide us with data from third parties, we assume that they have been informed of this by you.
Information on data protection for customers
We take the protection of your data seriously and would like to inform you in accordance with the Data Protection Act about our data processing as follows:
a) the processing purposes and their legal bases
b) the type of personal data categories, the origin of the data, the retention period and any transfer of personal data abroad
c) the legal basis for data forwarding
d) Information on automated individual decision-making
e) Your rights
a) The processing purposes and their legal bases
| Processing purpose | Legal basis |
| Accounts receivable and accounts payable | Art. 6 (1) c, GDPR |
| Business communication | Art. 6 (1) f, GDPR |
| Business data management | Art. 6 (1) b, GDPR |
b) Description of data categories and their processing
Accounts receivable and accounts payable
| Data category | Description | Retention period | Origin | Transfer abroad |
| Company data | Company name, address, legal form, tax no., language key, currency key, payment terms, various numbers (association number, ILN no.) | 10 years after creation | collected directly | no |
| Contact details, contact persons | First name, last name, e-mail address, phone | 10 years after creation | collected directly | no |
| Invoice data | Service, products, currency, VAT no. | 10 years after creation | collected directly | no |
Business communication
| Data category | Description | Retention period | Origin | Transfer abroad |
| e-mail address | e-mail address | after fulfillment of purpose | collected directly | no |
| Orders and complaints | Orders and complaints | After transfer to the core system | collected directly | Bosnia |
| Project communication | Project communication, general business correspondence | After transfer to the core system | collected directly | no |
| Invoices | Incoming and outgoing invoices | After transfer to the core system | collected directly | no |
Business data management
| Data category | Description | Retention period | Origin | Transfer abroad |
| Company data | Company name, address, legal form, tax no., language key, currency key, payment terms, various numbers (association number, ILN no.) | 10 years after termination of contract | collected directly, forwarding from customer | Bosnia |
| Contact details, contact persons | First name, last name, e-mail address, phone | 10 years after termination of contract | collected directly, forwarding from customer | global |
| Order / purchase order data | Order / purchase order data | 10 years after termination of contract | collected directly, forwarding from customer | global |
c) Legal basis for data forwarding
| Data category | Receiver | Legal basis | Purpose |
| Order / purchase order data | Suppliers | Art. 6 (1) b, GDPR | Contract fulfillment |
| Invoice data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
| Company data | Suppliers | Art. 6 (1) b, GDPR | Contract fulfillment |
| Company data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
d) Information on automated individual decision-making
On the basis of your personal data, we will not make any decisions which are based exclusively on the automated processing of your data and which are associated with a legal consequence for you or which significantly affect you.
e) Your rights
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation of consent and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority.
Note: If you provide us with data from third parties, we assume that they have been informed of this by you.
Data protection information for suppliers
We take the protection of your data seriously and would like to inform you in accordance with the Data Protection Act about our data processing as follows:
a) the processing purposes and their legal bases
b) the type of personal data categories, the origin of the data, the retention period and any transfer of the personal data abroad
c) the legal basis for data forwarding
d) Information on automated individual decision-making
e) Your rights
a) The processing purposes and their legal bases
| Processing purpose | Legal basis |
| Accounts receivable and accounts payable | Art. 6 (1) c, GDPR |
| Business communication | Art. 6 (1) f, GDPR |
| Customer data management |
b) Description of data categories and their processing
Accounts receivable and accounts payable
| Data category | Description | Retention period | Origin | Transfer abroad |
| Company data | Company name, address, legal form, tax no., language key, currency key, payment terms, various numbers (association number, ILN no.) | 10 years after creation | collected directly | no |
| Contact details Contact persons | First name, last name, e-mail address, phone | 10 years after creation | collected directly | no |
| Invoice data | Service, products, currency, VAT no. | 10 years after creation | collected directly | no |
Business communication
| Data category | Description | Retention period | Origin | Transfer abroad |
| e-mail address | e-mail address | after fulfillment of purpose | collected directly | no |
| Orders and complaints | Orders and complaints | After transfer to the core system | collected directly | Bosnia |
| Project communication | Project communication, general business correspondence | After transfer to the core system | collected directly | no |
| Invoices | Incoming and outgoing invoices | After transfer to the core system | collected directly | no |
Customer data management
| Data category | Description | Retention period | Origin | Transfer abroad |
| Company data | Company name, address, legal form, tax no., language key, currency key, payment terms, various numbers (association number, ILN no.) | 10 years after termination of contract | collected directly | Serbia, Bosnia |
| Contact details, contact persons | First name, last name, e-mail address, phone | 10 years after termination of contract | collected directly | Serbia, Bosnia |
| Order / purchase order data | Order / purchase order data | 10 years after termination of contract | collected directly | Serbia, Bosnia |
c) Legal basis for data forwarding
| Data category | Receiver | Legal basis | Purpose |
| Order / purchase order data | Forwarding agencies | Art. 6 (1) b, GDPR | Contract fulfillment |
| Invoice data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
| Company data | Forwarding agencies | Art. 6 (1) b, GDPR | Contract fulfillment |
| Company data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
d) Information on automated individual decision-making
On the basis of your personal data, we will not make any decisions which are based exclusively on the automated processing of your data and which are associated with a legal consequence for you or which significantly affect you.
e) Your rights
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation of consent and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority.
Note: If you provide us with data from third parties, we assume that they have been informed of this by you.
Information on data protection for service providers
We take the protection of your data seriously and would like to inform you in accordance with the Data Protection Act about our data processing as follows:
a) the processing purposes and their legal bases
b) the type of personal data categories, the origin of the data, the retention period and any transfer of the personal data abroad
c) the legal basis for data forwarding
d) Information on automated individual decision-making
e) Your rights
a) The processing purposes and their legal bases
| Processing purpose | Legal basis |
| Accounts receivable and accounts payable | Art. 6 (1) c, GDPR |
| Business communication | Art. 6 (1) f, GDPR |
b) Description of data categories and their processing
Accounts receivable and accounts payable
| Datenkategorie | Beschreibung | Aufbewahrungsdauer | Herkunft | Transfer Ausland |
| Company data | Company name, address, legal form, tax no., language key, currency key, payment terms, various numbers (association number, ILN no.) | 10 years after creation | collected directly | no |
| Contact details, contact persons | First name, last name, e-mail address, phone | 10 years after creation | collected directly | no |
| Invoice data | Service, products, currency, VAT no. | 10 years after creation | collected directly | no |
Business communication
| Data category | Description | Retention period | Origin | Transfer abroad |
| e-mail address | e-mail address | after fulfillment of purpose | collected directly | no |
| Orders and complaints | Orders and complaints | After transfer to the core system | collected directly | Bosnia |
| Project communication | Project communication, general business correspondence | After transfer to the core system | collected directly | no |
| Invoices | Incoming and outgoing invoices | After transfer to the core system | collected directly | no |
c) Legal basis for data forwarding
| Data category | Receiver | Legal basis | Purpose |
| Invoice data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
| Company data | Audit, Tax Administration | Art. 6 (1) c, GDPR | Official notifications, revision |
d) Information on automated individual decision-making
On the basis of your personal data, we will not make any decisions which are based exclusively on the automated processing of your data and which are associated with a legal consequence for you or which significantly affect you.
e) Your rights
You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation of consent and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority.
Note: If you provide us with data from third parties, we assume that they have been informed of this by you.