Privacy Policy
wattss Holding AG, Frauenfeld
wattss Holding AG (hereinafter “we” or “us”) is pleased that you are visiting our website www.wattss.group (hereinafter the “Website”). Protecting your personal data is important to us. Below, we inform you which personal data we process when you visit our Website and for what purposes.
1. Controller and scope
The controller responsible for data processing on this Website within the meaning of the Swiss Federal Act on Data Protection (FADP) and—where applicable—the EU General Data Protection Regulation (GDPR) is:
wattss Holding AG
Maurerstrasse 6
CH-8500 Frauenfeld, Switzerland
Phone: +41 58 590 20 50
Email: info@wattss.group
This Privacy Policy applies to the website www.wattss.group operated by wattss Holding AG. For the areas of individual group companies accessible via the navigation (e.g., capital.wattss.group, services.wattss.group), the company named in the legal notice is responsible as an independent controller. Additional or different privacy notices may apply in these areas.
You can reach our contact point within the EU via wattss germany GmbH, Line-Eid-Strasse 6, DE-78467 Konstanz, info@wattss.de.
2. Contact for data protection matters
If you have questions about data protection or wish to exercise your rights, you can contact the following office at any time:
Marco Rüegg
wattss Holding AG
Maurerstrasse 6
CH-8500 Frauenfeld, Switzerland
Email: info@wattss.group
3. What is personal data?
Personal data (or personal data within the meaning of the GDPR) is any information relating to an identified or identifiable natural person. This includes, for example, name, address, telephone number, date of birth, email address, or IP address. Information that does not allow any link to a person (e.g., through anonymization) is not considered personal data. Processing of personal data includes any handling of such data, in particular collecting, storing, using, disclosing, or deleting it.
4. Applicable law and principles
As a Swiss company, we are primarily subject to the revised Swiss Federal Act on Data Protection (FADP). To the extent that we process personal data of individuals in the EU or the EEA in connection with offering goods or services or monitoring their behavior, the GDPR may also apply. We always process personal data in good faith, proportionately, for specific purposes, and only to the extent necessary for the stated purposes. Where legal bases under the GDPR are mentioned below, they apply only if and to the extent the GDPR is applicable.
5. Provision of the website and server log files
Scope and purpose
As a rule, we collect and use personal data only to the extent necessary to provide a functional website and our content and services. When you access our Website, information is automatically recorded that your browser transmits to our server and is temporarily stored in so-called log files:
- IP address of the requesting device
- date and time of access
- name and URL of the file accessed
- website from which access is made (referrer URL)
- browser used and, where applicable, the operating system, as well as the name of your access provider
This data is used to ensure a smooth connection setup, secure and convenient use of the Website, and to ensure system security and stability.
Legal basis
Where the GDPR applies, this processing is based on Art. 6(1)(f) GDPR (legitimate interest in providing the Website in a technically flawless and secure manner). Under Swiss law, the processing is based on our overriding legitimate interest.
Retention period
The log file data is deleted as soon as it is no longer required for the stated purpose. Any further storage takes place only if required by law.
6. Contact by email
Type and scope
You can contact us by email. In doing so, we process the personal data you provide (e.g., salutation, name, message content) as well as your email address in order to handle and respond to your inquiry. This data is not shared with third parties.
Legal basis
Where the GDPR applies, processing is based on Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). If the contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is the legal basis. Under Swiss law, we rely on our legitimate interest or the initiation and performance of a contract.
Retention period
We delete the data as soon as your inquiry has been fully processed, unless statutory retention obligations prevent this or the data is still needed to perform a contract.
7. Applications
Type and scope
If you apply to us (e.g., via an application form or by email), we process the personal data transmitted as part of the application, in particular:
- Name
- Email address
- Telephone number
- desired start date
- salary expectations
- LinkedIn profile (optional)
- CV
- references and certificates
- cover letter
We use this data exclusively to process your application and to carry out the application process. It is not shared with third parties.
Legal basis
Where the GDPR applies, processing is based on Art. 6(1)(b) GDPR (initiation of an employment relationship). Under Swiss law, processing is based on the initiation of a contract or our legitimate interest in conducting the selection process.
Retention period
If the application results in an employment relationship, the data is transferred to the personnel file. Otherwise, we generally delete the application documents within six months after completion of the process, unless you have consented to longer retention and no statutory obligations prevent deletion.
Use of cookies
Type and scope
We use cookies on our Website. Cookies are small text files stored on your device that enable your browser to be recognized. We use only technically necessary cookies that are required to operate the Website—especially for correct language delivery:
_icl_visitor_lang_js
Purpose: Stores the visitor’s most recently selected language (for the JS-based language switch).
Category: technically necessary
Retention period: session
wp-wpml_current_language
Purpose: Stores the active language of the current session so that the correct language version is delivered consistently across pages.
Category: technically necessary
Retention period: session
wpml_browser_redirect_test
Purpose: Technical test cookie that checks whether browser cookies are enabled before a language redirect is performed; prevents redirect loops.
Category: technically necessary
Retention period: session
Legal basis
Where the GDPR applies, the use of these technically necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest in a functional, user-friendly Website). Under Swiss law, the use is based on our legitimate interest. No consent is required for technically necessary cookies.
Management and browser settings
You can configure your browser to accept cookies only to a limited extent or not at all, or to delete cookies that have already been stored. If cookies are disabled, you may not be able to use all functions of the Website (e.g., the language switch) to their full extent.
9. Social media and social plugins
We are present on social networks and include links on our Website to the networks “LinkedIn”, “X”, “Instagram” and “Facebook”. The integration is designed so that no data is transmitted to the respective providers when you merely access our Website. Only when you actively click the relevant element do you leave our Website and a direct connection to the servers of the respective provider is established. The provider may then associate the transmitted data with your user account there. We have no influence on the type and scope of data collected by the providers; their privacy policies apply.
Provider:
- LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- X: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
- Instagram / Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland
The legal basis—where the GDPR applies—is our legitimate interest in an appealing public presence and in communicating with interested parties and customers (Art. 6(1)(f) GDPR); under Swiss law, this is also based on our legitimate interest.
10. Recipients of personal data
Within our company, only those departments have access to your personal data that need it to fulfill the stated purposes. Data is disclosed to third parties only if there is a legal basis, if it is necessary to perform a contract, or if you have given your consent. Recipients may include in particular:
- Processors: carefully selected service providers (e.g., in the areas of IT infrastructure, hosting, maintenance) who process data exclusively on our instructions and on the basis of a data processing agreement;
- Group companies of the wattss Group, insofar as this is necessary to fulfill the stated purposes;
- public bodies and authorities, insofar as we are legally obliged to disclose data or this is necessary to safeguard legitimate interests.
11. Disclosure abroad
We generally process personal data in Switzerland and in the EEA. In individual cases, data may be transferred to service providers in countries outside Switzerland and the EEA (“third countries”), in particular in connection with the technical services used.
A transfer to a third country takes place only if an adequate level of data protection is ensured. This may be based in particular on:
- an adequacy decision (for Switzerland: inclusion of the relevant country in the Federal Council’s country list; for the EU: an adequacy decision by the European Commission under Art. 45 GDPR);
- for transfers to the USA: the recipient’s certification under the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework;
- the conclusion of standard contractual clauses together with any required additional measures (Art. 46 GDPR) or other appropriate safeguards (e.g., binding corporate rules).
Upon request, we will provide you with information about the safeguards in place.
12. Retention period
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. After that, the data is deleted or anonymized.
13. Data security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access, and we adapt these measures to technological progress. We note that data transmission over the internet (e.g., by email) may have security vulnerabilities and that complete protection against access by third parties is not possible.
14. Your rights
Under applicable law, you have the following rights with regard to your personal data:
- information about the data processed about you;
- correction of inaccurate data and completion of incomplete data;
- deletion of your data, provided there is no retention obligation or other justification;
- restriction of processing;
- data portability (provision in a commonly used electronic format);
- objection to processing based on a legitimate interest, as well as objection to direct marketing at any time;
- withdrawal of consent with effect for the future, without affecting the lawfulness of processing carried out up to the withdrawal.
To exercise your rights, it is sufficient to notify us using the contact details listed in sections 1 or 2. To ensure that no unauthorized third parties receive your data, we may request proof of your identity.
15. Complaint to the supervisory authority
If you believe that the processing of your personal data violates applicable data protection law, you can contact the competent supervisory authority.
In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch).
Where the GDPR applies, you have the right to lodge a complaint with the competent data protection supervisory authority at your place of residence (in Germany, for example, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg responsible for our German company).
16. Automated decisions
There is no automated decision-making, including profiling, with legal effect for you within the meaning of Art. 22 GDPR.
17. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services. The current version applies to your next visit.
Last updated: June 2026 · wattss Holding AG, Frauenfeld