Privacy Statement

Version 1.0, Revision 1

Data security is our business and therefore obviously our top priority. See here how we keep your data safe and private.

INSTA appreciates your visit to this website and your interest in our services and products. Protecting your privacy when using our website ( is particularly important to us. Therefore, we are providing you below with detailed information on the processing of your personal data. INSTA Holding AG is responsible for the following data processing. When using and processing personal data, INSTA Holding AG strictly adheres to the applicable data-protection laws and regulations. INSTA Holding AG is entitled to use personal and anonymous data to the extent legally permissible, subject to the data subject rights described below.

This Privacy Statement applies to (, but not to websites controlled and operated by third parties. Please review the privacy statements for websites controlled and operated by third parties, since these websites are beyond our control and INSTA Holding AG is not responsible for their content and data protection measures.

We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Statement as we undertake new personal data practices or adopt new privacy policies.

Data security

INSTA Holding AG has taken appropriate technical and organisational measures to protect your data against loss, manipulation or unauthorised access. The measures taken are subject to regular review and are continuously adapted to the state of the art. However, no data transmissions over the Internet can be guaranteed to be 100 percent secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to INSTA Holding AG is done at your own risk. Should there be a violation of the protection of your personal data, which will probably result in a high risk for your rights and freedoms, we will notify you immediately and, if possible, within 72 hours.

How we collect and use (process) your personal information?
Personal Information you give us

Communications, based on INSTA Holding AG legitimate interest (Art. 6 para. 1 f GDPR): If you correspond with us or fill out a form on our website with data, you acknowledge that the data you enter onto the form will be processed for the purposes described below.

Marketing and public relations, based on your consent (Art. 6 para. 1 a GDPR): If you are a visitor of our website, we may, by way of cookies and web beacons automatically processes the following data for the below stated purposes:

  • Browser type/version
  • Operating system used
  • Browser software language and version
  • Host name of the end device accessing the website
  • IP address
  • Requesting website
  • Content of the request (specific page)
  • Date and time of the server request
  • Access status/HTTP status code
  • Referrer URL (last page visited)
  • Quantity of data transferred
  • Time zone difference to Greenwich Mean Time (GMT)
Personal information from public and commercial databases

Marketing and public relations, based on your consent (Art. 6 para. 1 a GDPR): From time to time, INSTA Holding AG receives personal information about individuals from commercial and public databases.

Processing of data

Personal data submitted to us through this website and personal data we collected from you or public sources will be used for the following purposes:

  • For technical administration, research and development of the website
  • For customer and user administration and marketing
  • To maintain business relationships
  • To conduct research and analysis regarding our business relationships
  • To inform you about events, products and news when you visit the website or when you subscribe to our newsletter or contact form
  • For fraud prevention and detection
  • To comply with any legal obligations (e.g. tax, accounting and administrative obligations)
Data transfer

In order to conduct the processing described above, your data may be transferred to other employees of subsidiaries of the INSTA group. This processing may take place outside of the European Economic Area (EEA) subject to restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. These data will not be combined with data from other sources.

When we transfer your personal data outside the EEA, we will protect your personal data as described in this Privacy Statement and in accordance with applicable laws, such as by entering into the European Commission’s Standard Contractual Clauses for the transfer of personal data to a processor located outside of the EEA.

How long do we retain the data?

We retain personal data for as long as necessary to fulfil the purposes for which we collect or receive the personal data, except if required otherwise by applicable law. Typically, we will retain most of the personal data for the duration of your use of the website, until you have deleted your account, unless a longer applicable statutory retention period applies.


We may update this Privacy Statement from time to time by publishing a new version on this website.

As privacy laws, interpretations of state bodies, recommendations of privacy authorities change and improve from time to time, this Privacy Statement is expected to change as well. We reserve the right to amend the Privacy Statement at any time, for any reason, without notice to you, other than the posting of the amended documents at this website. Any changes to our Privacy Statement will be posted on this page so that you are always aware of our policies.


We automatically collect data through the use of cookies. A cookie is a small text file which stores internet settings. Almost all websites use this technology. It is downloaded by your internet browser when you first visit a website. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. In this case when the website is next visited with the same terminal, the cookie and the information stored therein is either sent back to the website that created it (first-party cookie) or to another website to which it belongs (third-party cookie). This allows the website to detect that it has already been visited with this browser and in some cases it changes the content displayed.

The legal ground for this processing is Art. 6 para1 f GDPR. Our legitimate interest is in ensuring the functionality of our website. The user data collected by technically required cookies are not used to create user profiles. This safeguards your interest in data protection. The cookies, which are a technically necessity, are generally deleted when the browser is closed. Persistent cookies have a lifespan which varies between a few minutes and several years.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Should you not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may limit the functionality of our website. You can also delete persistent cookies via your browser at any time.

Analytics and third-party tools

When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and third-party analytics. The analysis of your surfing behavior is anonymous, i.e. we will not be able to identify you from this data as it has been pseudonymized. Detailed information can be found below.

The legal ground for this processing is Art. 6 para1 f GDPR. Our legitimate interest is in ensuring the functionality of our website. The user data collected by technically required cookies are not used to create user profiles. This safeguards your interest in data protection. You can configure your browser to object to this analyses or prevent it by not using certain tools.

What rights do you have regarding your data?

The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights regarding the data processing:

Right to information: You may request confirmation of whether and to what extent your personal data are being processed.

Right to correction: If we are processing incomplete or incorrect personal data about you, then you may request that they be corrected or supplemented.

Right to deletion: You may request the deletion of your personal data as long as the purpose for which they were collected has ceased to apply, the processing is unlawful, the processing disproportionately interferes with your legitimate interests in protection or the data processing is based on your consent and you have withdrawn this. In this regard, it is necessary to consider that there may be other reasons that may prevent immediate deletion of your data e.g. legally regulated retention requirements, pending proceedings, asserting, exercising or defending legal claims etc.

Right to restricted processing: You have the right to request that processing of your data be restricted if

  • you dispute the accuracy of your data, namely for a period which enables us to review the accuracy of the data,
  • the processing of your data is unlawful, but you reject deletion and instead request that use of the data be restricted,
  • we no longer need the data for the envisaged purpose, but you still require this data to assert, exercise or defend legal claims, or
  • you have objected to the processing of the data.

Right to data portability: You may ask us to provide your data, which you have made available to us, in a structured, common and machine-readable format, provided we are processing the data on the basis of your consent or in order to satisfy a contract between us and processing occurs with the help of an automatic process.

Right to object: If we process your data in order to perform tasks that are in the public interest, to exercise official authority or, when processing the data, we invoke the necessity of safeguarding our legitimate interest, you can object to this data processing provided there is a predominant interest in the protection of your data. At any time, you may object without providing grounds to the sending of advertising.

Right to complain: If you think we have breached applicable data protection law when processing your data and have violated your rights as a result, we ask that you contact us in order to be able to clarify any questions. Of course, you also have the right to complain to the respective data protection authority or a European supervisory authority.

Right to withdraw: All the declarations of consent you have given may be withdrawn independently from one another at any time. The result of withdrawal is that, from this date, we will no longer process the data for the purposes specified in the declaration of consent and, consequently, that the corresponding rights, benefits etc. can no longer to used.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR). Should you have a complaint, we would be grateful if you would contact us first to address the matter!

Contact details

INSTA Holding AG is headquartered in Lucerne, Switzerland. INSTA Holding AG has appointed an internal data protection officer for you to contact if you have any questions or concerns about our personal data policies or practices. The email of the INSTA Holding data protection officer is

INSTA Holding AG
Büttenenring 1a
6006 Lucerne

arrow-up icon