Thank you for your interest in our company and our services.

With this privacy policy we, the emineo AGhow we collect and process personal data.
This data protection declaration is not an exhaustive description; other data protection declarations may regulate specific matters.
For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable person.

1. Responsible body and contact

Unless otherwise stated in individual cases, emineo AG is responsible for the data processing described here.
Inquiries about data protection can be sent by letter to emineo AG, enclosing a copy of the ID or passport identifying the user, Grabenstrasse 2, CH-6340 Baar, or by e-mail to datenschutz@emineo.ch with the reference “Data protection”.

2. Contact details of the person responsible for data protection (DSG) or the data protection officer (DSGVO)

We have appointed a data protection advisor in accordance with Art. 10 DSG.
This also complies with the requirements of a data protection officer acc.
Art. 37 GDPR.
You can reach this person using the following contact details

emineo AG
Andreas Petralia
Grabenstrasse 2
CH-6340 Baar
E-Mail: datenschutz@emineo.ch

3. Collection and processing of personal data

We process personal data in the following categories of processing in particular:

• Customer data of customers for whom we provide or have provided services;
• Personal data that we have received indirectly from our customers during the provision of services;
• when you visit our website;
• when participating in one of our events;
• when we communicate or a visit takes place;
• in other contractual relationships, e.g. with suppliers, service providers or consultants;
• for applications;
• if we are obliged to do so for legal or regulatory reasons;
• if we are exercising our duty of care or other legitimate interests, e.g. to avoid conflicts of interest, prevent money laundering or other risks, ensure data accuracy, check creditworthiness, ensure security or enforce our rights.

More detailed information can be found in the description of the respective categories of processing under point 4.

4. Categories of personal data

The personal data we process depends on your relationship with us and the purpose for which we process it.
In addition to your contact details, we also process other information about you or about people who have a relationship with you.
Under certain circumstances, this information may also be particularly sensitive personal data.

Depending on the purpose of processing, we collect the following categories of personal data:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Customer information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, AHV number);
• Risk assessment data (e.g. credit rating information, commercial register data);
• Financial information (e.g. data on bank details);
• Mandate data, depending on the mandate, e.g. tax information, business data (articles of association, minutes, projects, contracts), employee data (e.g. salary, social insurance), accounting data, beneficial owners, ownership structure;
• Website data, e.g. IP address, device information, browser information, website usage (analysis and use of plugins, etc.);
• Application data (e.g. CV, references);
• Marketing information (e.g. newsletter registration);
• Security and network data (e.g. visitor lists, access controls, network and mail scanners, telephone call lists).

Insofar as this is permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, Internet) or receive such data from our clients and their employees, from authorities, (arbitration) courts and other third parties.
In addition to the data that you provide to us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we obtain in connection with official and court proceedings, information in connection with your professional functions and activities (so that we can, for example to conclude and process transactions with your employer with your help), information about you in correspondence and meetings with third parties, creditworthiness information, information about you that people from your environment (family, advisors, legal representatives, etc.) give us so that we can conclude or process contracts with you or with your involvement (e.g. references, your address for deliveries, powers of attorney), information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours on the use or provision of services by you (e.g. payments made, purchases made), information from the media and the Internet on your person (insofar as this is appropriate in the specific case, e.g. as part of a job application, etc.).e.g. in the context of a job application etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location data).

5 Purposes of data processing and legal basis

Personal data is processed in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).

5.1 Provision of services

We primarily process the personal data that we receive from our clients and other business partners in the context of our client relationships and other contractual relationships with them and other persons involved.

The personal data of our customers includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information);
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, AHV number, family circumstances, etc.);
• Risk assessment data (e.g. credit rating information, commercial register data, sanctions lists, specialized databases, data from the Internet);
• Financial information (e.g. data on bank details, investments or holdings);
• Mandate data, depending on the mandate, e.g. tax information, business data (articles of association, minutes, projects, contracts), employee data (e.g. salary, social insurance), accounting data, etc.;
• Particularly sensitive personal data: This personal data may also include particularly sensitive personal data, such as data relating to health, religious beliefs or social assistance measures.
  Data relating to health, denomination or religious beliefs or social assistance measures, in particular if we provide services in the area of payroll processing or accounting.

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, incl.
  Contract initiation and any enforcement (e.g. consulting, fiduciary services);

• Fulfillment of a legal obligation, e.g. obligation to disclose information;
• Safeguarding legitimate interests, e.g. for administrative purposes, to improve quality, ensure security, operate risk management, enforce our rights, defend against claims or review conflicts of interest;
• Consent, e.g. to send you marketing information.

5.2. Indirect data processing from service provision

When providing services to our customers, we may also process personal data that we have not collected directly from the data subjects or personal data of third parties. These third parties are usually employees, contact persons, family members or persons who have a relationship with the customers or the data subjects for other reasons. We require this personal data in order to fulfill contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose are informed by our customers that we are processing their data. Our customers can refer to this privacy policy for this purpose.

The personal data of persons who have a relationship with our customers includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information, marketing data);
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, AHV number, family circumstances, etc.);
• Financial information (e.g. data on bank details, investments or shareholdings);
• Client data, depending on the mandate, e.g. tax information, business data (articles of association, minutes, projects, contracts) employee data (e.g. salary, social insurance), accounting data;
• Particularly sensitive personal data: This personal data may also include particularly sensitive personal data, such as data relating to health, religious beliefs or social assistance measures.
  This personal data may also include particularly sensitive personal data, such as data relating to health, denomination or religious beliefs or social assistance measures, particularly if we provide services in the area of payroll processing or accounting.

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or performance of a contract with or for the benefit of the data subject (e.g. when we fulfill our contractual obligations);
• Fulfillment of a legal obligation, e.g. obligation to disclose information;
• Safeguarding legitimate interests, in particular our interest in providing our customers with an optimal service.

5.3. Use of our website

No personal data needs to be disclosed in order to use our website. However, the server collects a range of user information with each visit, which is temporarily stored in the server’s log files.

When using this general information, no assignment to a specific person takes place. The collection of this information or data is technically necessary to display our website and to ensure its stability and security. This information is also collected in order to improve the website and analyze its use.

This includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• further information that you send us via the website;
• technical information automatically transmitted to us or our service providers, information on user behavior or website settings (e.g. IP address, device type, browser, number of clicks on the page, opening the newsletter, clicking on links, etc.).

We process this personal data for the purposes described on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services);
• Consent (e.g. to the use of cookies).

5.4. Participation in events

If you participate in an event organized by us, we collect personal data in order to organize and carry out the event and, if necessary, to send you additional information afterwards. We also use your information to inform you about other events. You may be photographed or filmed by us at these events and we may publish this image material internally or externally.

This includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Personal information (e.g. profession, function, title, employer company, eating habits);
• Pictures or videos;
• Payment information (e.g. bank details).

We process this personal data for the purposes described on the basis of the following legal bases:

• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, incl.
  Contract initiation and possible enforcement (enabling participation in the event);
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organization);
• Consent (e.g. to send you marketing information or create image material).

5.5. Direct communication and visits

When you contact us (e.g. by telephone, e-mail or chat) or we contact you, we process the personal data required for this. We also process this personal data when you visit us. In this case, you may have to leave your contact details before your visit or at reception. We store this data for a certain period of time in order to protect our infrastructure and our information.

To conduct telephone conferences, online meetings, video conferences and/or webinars (“online meetings”), we use the service “Microsoft Teams”, “Google Meet” or “Zoom”.

We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Edge data for communication (e.g. IP address, duration of communication, communication channel);
• Recordings of conversations (e.g. during video conferences);
• Other information that the user uploads, provides or creates while using the video conferencing service and metadata used for the maintenance of the service provided Additional information on the processing of personal data by “Microsoft Teams”, “Google Meet” or “Zoom” can be found in their privacy policies;
• Personal information (e.g. profession, function, title, employer company);
• Time and reason for the visit.

We process this personal data for the purposes described on the basis of the following legal bases:

• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, incl.
  Contract initiation and possible enforcement (provision of a service);
• Safeguarding legitimate interests (e.g. security, traceability, processing and administration of customer relationships).

5.6. Applications

You can submit your application for a position with us using the form on our website or by e-mail.
The application documents and all personal data disclosed to us will be treated in strict confidence, will not be disclosed to third parties and will only be processed for the purpose of processing your application for employment with us.
The legal basis for the processing of your data is your consent, the fulfillment of the contract with you and our legitimate interests.

We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Personal information (e.g. profession, function, title, employer company);
• Application documents (e.g. letter of motivation, certificates, diplomas, CV);
• Assessment information (e.g. assessment of personnel consultants, reference information, assessments).

We process this personal data for the purposes described on the basis of the following legal bases:

• Protection of legitimate interests (e.g. recruitment of new employees);
• Consent.

5.7. Suppliers, service providers, other contractual partners

When we enter into a contract with you to provide a service for us, we process personal data about you or your employees. We need this data in order to communicate with you and to make use of your services. We may also process this personal data to check whether there could be a conflict of interest and to ensure that we do not enter into any unwanted risks, e.g. with regard to money laundering or sanctions.

We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, employer company)
• Financial information (e.g. data on bank details).

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, incl.
  Contract initiation and possible enforcement
• Protection of legitimate interests, e.g. avoidance of conflicts of interest, protection of the company, enforcement of legal claims.

6. Tracking technologies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

To optimize user-friendliness, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies enable us to automatically recognize that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

7. Web analysis

We use Google Analytics as a web analysis tool and re-targeting technology to obtain information about the use of our website, to improve our Internet offering and to be able to address you with advertising on third-party websites or on social media.

These tools are provided by third-party providers. As a rule, the information collected for this purpose about the use of a website is transmitted to the server of the third-party provider through the use of cookies or similar technologies. Depending on the third-party provider, these servers may be located abroad.

The data is normally transmitted by shortening the IP addresses, which prevents the identification of individual end devices. This information is only transmitted by third-party providers on the basis of legal regulations or as part of order data processing.

7.1. Google Analytics

We use Google Analytics (Google Signals), the web analysis service of Google LLC, Mountain View, California, USA, on our websites; Google Limited Ireland (“Google”) is responsible for Europe. To deactivate Google Analytics, Google provides a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses cookies. These are small text files that make it possible to store specific user-related information on the user’s device. These enable Google to analyze the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there.

We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure an anonymized collection of IP addresses (so-called IP masking). If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may associate your IP address with other data held by Google. For data transfers to the USA, Google has undertaken to sign and comply with the EU standard contractual clauses.

7.2. Google Maps

On our website we use Google Maps (API) from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; responsible for Europe is Google Limited Ireland, “Google”). Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. By using this service, you are shown our location and it is easier for you to find us. Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the Google Maps map is integrated. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists.
If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.

For data transfers to the USA, Google has undertaken to sign and comply with the EU standard contractual clauses.

7.3. Google Ads

On our website, we use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com Website: https://www.google.com/ . Die Bearbeitung findet gemäss Einschätzung von Schweizer Behörden in sicheren Drittländern statt. Die Staatenliste der Schweiz sowie weiterführende Informationen finden Sie unter folgendem Link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html .
Die Übermittlung personenbezogener Daten erfolgt auch in die USA. Im Hinblick auf die Übermittlung personenbezogener Daten in die USA besteht ein Angemessenheitsbeschlusses zum EU-US Data Privacy Framework der EU Kommission im Sinne des Art. 45 DSGVO (nachfolgend: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). Der Betreiber des Dienstes ist im Rahmen des DPF zertifiziert, so dass für die Übermittlung das übliche Schutzniveau der DSGVO gilt.

Our website processes the data provided by Google Ads in order to analyze and improve our advertising measures and to calculate any remuneration that may be due. The service or we collect the following data for processing: Data on the advertising interests of site visitors, interactions of site visitors with advertisements relating to our website, data on visits to our website by site visitors who have previously clicked on Google Ads advertisements and reached our website, data on the end device used, the IP address and browser of the user and other data from Google services for the provision and refinement of Google advertisements relating to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads are used on our website, Google may transmit and process information from other Google services in order to provide background services for the improvement and individualization of Google advertising. For this purpose, data may also be processed by other Google services such as Google Apis, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform and Google Fonts in accordance with the Google Privacy Policy under Google’s own data protection responsibility.
You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

7.4. Google Tag Manager

On our website, we use the Google Tag Manager service provided by Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com , Website: https://www.google.com/ (hereinafter: Google Tag Manager).
Google Tag Manager provides a technical platform for executing and controlling other web services and web tracking programs in a bundled manner by means of so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and, if web tracking tools are executed using Google Tag Manager, analyzes your surfing behavior (so-called “tracking”). This data sent by individual tags integrated in Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. When using our website with activated integration of Google Tag Manager tags, data, such as in particular your IP address and your user activities, are transmitted to servers of Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager before transmission by means of IP anonymization of the source code. Google Tag Manager only enables the anonymized collection of IP addresses (so-called IP masking).

On our behalf, Google will use the information obtained via Google Tag Manager to evaluate your visit to this website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

Google will store the data relevant to the function of Google Tag Manager for as long as it is necessary to fulfill the booked web service.
Data collection and storage is anonymized. If there is any personal reference, the data will be deleted immediately, provided that it is not subject to any statutory retention obligations. In any case, the deletion takes place after expiry of the retention obligation.

7.5. Social Media Plugins

Social media plugins (“plugins”) from third-party providers are used on our website. The plugins can be recognized by the logo of the respective social network. We offer you the opportunity to interact with the social networks and other users via the plugins. We use the following plugins on our website: LinkedIn and YouTube. When you visit our website, your browser establishes a direct connection to the third-party provider’s servers.
The content of the plugin is transmitted directly to your browser by the respective third-party provider and integrated into the page.

The transfer of data for the display of content takes place regardless of whether you have an account with the third-party provider and are logged in there. If you are logged in with the third-party provider, your data collected by us will also be assigned directly to your existing account with the third-party provider. If you activate the plugins, the information will also be published on the social network and displayed to your contacts there.
The purpose and scope of the data collection and the further processing and use of the data by the third-party providers as well as your rights in this regard and setting options to protect your privacy can be found in the third-party providers’ data protection notices. The third-party provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is also carried out in particular for users who are not logged in to display needs-based advertising and to inform other users of the social network about your activities on our website. If you wish to prevent the third-party providers from assigning the data collected via our website to your personal profile in the respective social network, you must log out of the respective social network before visiting our website. You can also prevent the plugins from loading with specialized add-ons for your browser, such as “Ghostery” ( https://www.ghostery.com/) or “NoScript” (http://noscript.net/) completely.

8. Special functions of the website

Our website offers you various functions that collect, process and store personal data when you use them.
We explain below what these are:

8.1. Login Extranet

Certain pages and their content are not publicly accessible.
Certain users can gain access to the protected area via the login area on our website.
It is not possible to use the content protected by the login area without entering personal data.
If you wish to use our login area, you must complete the fields marked as mandatory (e-mail and password).
The entry of the data requires the existence of a user account.
Registration is not possible if the data you enter is incorrect.
If you enter the data incorrectly or not at all, the protected area cannot be used.
However, the rest of the site can still be used without a login.
If required, we can send you your login details or the option to reset your password by e-mail on request.

8.2. Newsletter registration form

By registering for the newsletter on our website, we will receive the email address you enter in the registration field and, if applicable, other contact details, provided that you provide them to us via the newsletter registration form.
The data entered in the registration form for our newsletter will be used by us exclusively for sending our newsletter, in which we provide information about all our services and news.
After you have registered, we will send you a confirmation e-mail containing a link that you must click on to complete your registration for our newsletter (double opt-in).
By doing so, you give your consent to data processing in accordance with Art. 6 para.
6 DSG.

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter.
Your data will be deleted by us immediately after you unsubscribe, provided that there are no statutory retention obligations.
Your data will also be deleted by us immediately if your registration is not completed.
We reserve the right to delete your data without giving reasons and without prior or subsequent information.

If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link.
The newsletter registration details are required in order to make use of the newsletter offer.
The information is used exclusively for sending our newsletter.
If you do not complete the mandatory fields, we will not be able to provide you with our newsletter service.

8.3. Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will only pass this data on to third parties either with your consent or if this is necessary for the fulfillment of a contract with you or pre-contractually due to an inquiry you have made for its processing (e.g. logistics service providers such as DHL, Swiss Post). The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

8.4. Google Font

We use the Google Fonts service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com Website: https://www.google.com/ . Die Bearbeitung findet gemäss Einschätzung von Schweizer Behörden in sicheren Drittländern statt. Die Staatenliste der Schweiz sowie weiterführende Informationen finden Sie unter folgendem Link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Die Übermittlung personenbezogener Daten erfolgt auch in die USA. Im Hinblick auf die Übermittlung personenbezogener Daten in die USA besteht ein Angemessenheitsbeschlusses zum EU-US Data Privacy Framework der EU Kommission im Sinne des Art. 45 DSGVO (nachfolgend: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). Der Betreiber des Dienstes ist im Rahmen des DPF zertifiziert, so dass für die Übermittlung das übliche Schutzniveau der DSGVO gilt.

For the processing itself, the service or we collect the following data: Data on fonts, IP address of the site visitor, statistics on the use of fonts and other data from Google services related to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud and Google Ads in accordance with the Google Privacy Policy.
You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

9. Data transfer and data transmission

We only pass on your data to third parties if this is necessary for the provision of our services, if these third parties provide a service for us, if we are legally or officially obliged to do so or if we have an overriding interest in passing on the personal data. We will also pass on personal data to third parties if you have given your consent or requested us to do so. Not all personal data is transmitted in encrypted form as standard. Unless explicitly agreed otherwise with the customer, data such as tax and accounting data, salary administration data, payslips and salary statements are transmitted unencrypted.

The following categories of recipients may receive personal data from us:

• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants, lawyers, insurance companies);
• Third parties within the scope of our legal or contractual obligations, authorities, state institutions, courts.

We conclude contracts with service providers who process personal data on our behalf, obliging them to guarantee data protection.
The majority of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA (e.g. Google Analytics data) or, in exceptional cases, to other countries worldwide. If it is necessary to transfer data to other countries that do not have an adequate level of data protection, this is done on the basis of the EU standard contractual clauses (e.g. in the case of Google) or other suitable instruments.)

10. Duration of storage of personal data

We process and store your personal data for as long as is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. Shorter retention periods of twelve months or less generally apply to operational data (e.g. system protocols, logs).

11. Data security

We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization and controls.

12. Obligation to provide personal data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfillment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data).
Without this data, we will not be able to enter into or perform a contract with you (or the entity or person you represent). The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.

13 Your rights

You have the following rights in connection with our processing of personal data:

• Right to information about your personal data stored by us, the purpose of processing, the origin and recipients or categories of recipients to whom personal data is disclosed;
• Right to rectification if your data is incorrect or incomplete;
• Right to restrict the processing of your personal data;
• right to request the deletion of the processed personal data;
• Right to the disclosure of certain data for the purpose of transfer to another body (so-called data portability);
• right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons;
• Right to lodge a complaint with a competent supervisory authority, if provided for by law.

To assert these rights, please contact us at the address given under paragraph 2 above.

Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or require it for the assertion of claims. If you incur costs, we will inform you in advance.

14. amendment of the privacy policy

We expressly reserve the right to amend this privacy policy at any time.

Last change: September 2024