Privacy Policy

This policy describes which personal data MK Groups Schweiz processes when you visit this website, for what purpose, and which rights you have. It is based on the Swiss Data Protection Act and, where applicable, the General Data Protection Regulation of the EU.

01

Controller

MK Groups Schweiz, Grünrain 9, 6026 Rain LU, Switzerland

The entity named above is responsible for the processing described in this policy. For questions about data protection and to exercise your rights, you can reach us at:

Email: info@mk-groups.ch

02

Scope and applicable law

This policy covers this website and the communication initiated through it. Websites, platforms and applications that we build or operate for clients, as well as third party offerings that we link to or embed, are governed by the terms published there.

The Swiss Data Protection Act (FADP) applies. We take the General Data Protection Regulation of the EU (GDPR) into account where it is mandatorily applicable to a specific processing operation; statements in this policy that follow the GDPR do not establish any further submission to foreign law. Our offering is directed primarily at companies and individuals in Switzerland.

To the extent permitted by law, questions relating to this policy are governed exclusively by Swiss law, excluding its conflict of law rules; the place of jurisdiction is our registered office.

03

Principle

We process personal data in good faith, transparently and only to the extent necessary to operate the website, to respond to enquiries, to initiate and perform business relationships and to meet legal obligations. Data is treated confidentially and is not sold.

Where you provide us with data about other people, such as employees or contact persons, we assume that you are entitled to do so and have informed them about the processing.

04

Purposes and legal bases

We process personal data in particular for the following purposes:

  • providing, operating and securing the website
  • responding to enquiries and communicating with prospects, clients and partners
  • initiating, concluding and performing contracts and business relationships
  • analysing usage in aggregated form and developing our website and services further
  • informing about our own services, projects and ventures, where permitted
  • safeguarding our rights, asserting and defending claims and preserving evidence
  • meeting legal, regulatory and official obligations

This list is not exhaustive. We base the processing on our legitimate interests in the purposes stated, on the performance of a contract or on a legal obligation; where the GDPR applies, this corresponds in particular to Art. 6(1)(b), (c) and (f) GDPR.

Where we obtain your consent for a processing operation, that consent is the governing basis. You may withdraw consent at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected.

05

Data collected when visiting the site

When the website is accessed, your browser transmits technically necessary information that is stored in server log files:

  • IP address of the requesting device
  • date and time of access
  • page requested and volume of data transferred
  • browser type, version and operating system
  • referring website, where available

This data serves the secure and stable operation of the website and is not merged with other data sources to build user profiles.

In the event of disruptions, misuse or attacks, we reserve the right to analyse and retain these log files and, where necessary, to pass them on to law enforcement or supervisory authorities.

06

Contact and business relationships

If you contact us through the form or by email, we process the details you provide in order to answer your enquiry. The form on this website opens your own email client, so no content is stored on our servers in the process. Your message then reaches us as an ordinary email.

Within a business relationship we additionally process the data required for that purpose, in particular contact and company details, role, correspondence, contract, service and billing data.

Correspondence and related documents are retained for as long as required for handling the matter, for documenting our business activity and for statutory retention periods.

07

Cookies and local storage

This website sets no marketing or tracking cookies. Your browser's local storage only holds your choice of language and appearance so the site looks the same on your next visit. This information does not leave your device and can be deleted at any time in your browser settings.

Should we use cookies or comparable technologies that are not technically necessary in future, we will state this here and, where required, obtain your consent in advance.

08

Audience measurement

For audience measurement we use a self-hosted instance of the analytics software Umami on our own infrastructure. The data collected stays with us and is not passed on to third parties for their own purposes. Umami sets no cookies and stores nothing on your device.

A hash value is derived from the IP address, browser identifier and a server side secret, allowing repeat views within a short period to be recognised without the IP address being stored permanently. What is recorded is essentially the page requested, the referring source, the approximate region of origin, device type, browser and operating system. We reserve the right to switch to comparable, data-minimising methods.

09

External services and embedded content

Typefaces are loaded from Google Fonts, which transmits your IP address to Google. For the map in the work section we obtain geodata from a public data set and program libraries via content delivery networks. In each case the transfer serves solely the technical delivery of that content.

In the work section we show websites from our environment as a scaled-down preview that your browser loads directly from the servers of the respective site. The processing of personal data there is the responsibility of the respective controller. The same applies to links to external websites: by following them you leave our area of responsibility.

We have no influence over the data processing carried out by these providers and accept no responsibility for it. We reserve the right to change, replace or add to the services used at any time.

10

Hosting and processing on our behalf

For the operation of the website, for email and for other IT services we use carefully selected providers that process personal data on our behalf and according to our instructions. They are contractually bound to confidentiality, appropriate data security and compliance with applicable data protection law, and may not use the data for their own purposes. The website is operated on servers in data centres in Switzerland or the European Economic Area.

For security reasons we do not name the providers used or the details of our infrastructure here. We reserve the right to change providers, locations and technologies at any time, provided an adequate level of protection is maintained. On request we inform data subjects, within the limits of the law, about the categories of processors engaged.

11

Disclosure to third parties and abroad

We disclose personal data to third parties only where this is necessary for the purposes stated, where you have consented or where we are legally entitled or obliged to do so. Recipients may in particular be: providers of IT, hosting, communication and payment services, legal, fiduciary and audit advisors, partner companies within joint projects, insurers and banks, as well as authorities and courts.

Disclosure may also take place abroad, including to countries whose legislation does not provide a level of data protection recognised as adequate. In such cases we rely on appropriate safeguards, in particular the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner, on an adequacy decision or on a statutory exception, for example where the disclosure is necessary to perform a contract or where you have consented.

In the event of a restructuring, merger or transfer of business units or holdings, personal data may be passed on to the companies involved.

12

Retention and deletion

We retain personal data for as long as the respective purpose, statutory retention obligations and our legitimate interests require, in particular until the limitation periods for potential claims have expired. For business correspondence and accounting records the statutory period in Switzerland is generally ten years.

Thereafter the data is deleted or anonymised, unless legal obligations or overriding interests prevent this. Technical log data is deleted after a short period or kept only in aggregated form.

13

Data security

Transmission is encrypted via HTTPS. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse, and review those measures periodically.

Despite all care, complete protection during transmission over the internet is not possible. We cannot accept any liability for data you send us unencrypted, in particular by email; please do not send us particularly sensitive data by this route.

14

Automated decisions

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, and we do not carry out high-risk profiling. Should we use such procedures in future, we will state this here in advance.

15

Your rights

Within the limits of applicable law you have the right to information about the personal data we process about you, as well as to rectification, deletion or restriction of processing. You may also object to processing, withdraw any consent given at any time and, where the conditions are met, request the release or transfer of certain data in a common electronic format.

These rights may be restricted or excluded where legal obligations, overriding interests of third parties or our own overriding interests conflict with them, in particular the protection of business secrets. We may request suitable proof of identity; manifestly unfounded or excessively repeated requests may be refused or, where permitted, charged for at a reasonable rate.

You further have the right to lodge a complaint with a competent supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC) in Bern.

Requests to: info@mk-groups.ch

16

Minors

Our offering is directed at companies and adults. We do not knowingly collect data from children and young people under the age of 16. If we become aware that such data has been transmitted to us without the necessary consent, we delete it.

17

Changes

We may amend this policy at any time and without prior notice, in particular where the processing of personal data, our services or the legal requirements change. The version published on this page, with the date shown, applies.

Last updated: August 2026