Data Privacy

General Information on Data Processing

Extent of Processing of Personal Data

We only ever process our users’ personal data where this is necessary to provide a properly functioning website, along with our content and services. Our users’ personal data is processed regularly and only with the users’ consent. An exception applies in cases where it might not be possible to obtain the prior consent of users for de facto reasons, but data processing is permitted by statutory regulations.

Data Deletion and Storage Period
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. The data might be stored for longer if this has been stipulated by the European or national legislators within Union regulations, laws or other requirements to which the responsible party is subject. The data is also blocked or deleted if a storage period stipulated by the standards mentioned expires, unless there is a continued need to store the data in order to enter into a contract or for the performance of a contract.

Making the Website Available and Creating Log Files
Each time our website is visited, our system automatically collects the data and information from the operating system of the requesting computer. The following data enables assignment to a user and is collected at this point:

Type and version of the browser used, user’s operating system, user’s IP address, date and time of access

The data is also stored in our system’s log files. This data is not stored together with other personal data pertaining to the user.

The IP address needs to be stored by the system in order to make the website available to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose. In addition, the data is stored in log files, in order to ensure the functionality of the website. The data is used to optimize the website and to ensure the security of our IT systems. These purposes also include our legitimate interest in data processing. The legal basis is thus Article 6 Paragraph 1 Point f of the GDPR (EU’s General Data Protection Regulation).

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where the data is stored in order to make the website available, this takes place when the respective session is ended. In the case of log files, the data is stored in rolling log files, with older entries being automatically deleted. The storage duration is thus dependent on the circumstances and cannot be restricted accordingly in terms of time. In general, it can be assumed that the data will be deleted after one year at the latest, although storage beyond this time is possible.

It is vital to store the data in order to make the website available, and the data must be stored in log files in order to operate the website. Users therefore have no possibility to file an objection.

Our website uses cookies. Cookies are text files that are stored in the user’s computer system in the Internet browser or by the Internet browser. If a user visits a website, a cookie can be stored in their operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified the next time the website is visited.

Technically Necessary Cookies
The user data collected by technically necessary cookies is not used to create user profiles. The purpose of using technically necessary cookies is to make it simpler for users to use websites. Some of the functions on our website cannot be provided if we do not use cookies. For this purpose, the browser must be recognized even after a page change.

Google Services
This website uses various services provided by the US company Google LLC and, for European users, the Irish company Google Limited Ireland. Please refer to the respective data privacy statement for details on data processing by Google: https://policies.google.com/privacy?gl=de
We have concluded a contract with Google for order data processing.

Google Analytics
We use the service Google Analytics on our website. This service uses cookies (see above). The information created in this manner through the use of the website is usually transmitted to a Google server in the USA, where it is stored.

Google uses this information on our behalf to evaluate the use of the website, compile reports on website activities and to provide services associated with the use of the website and the use of the Internet for us. The IP address transmitted by the browser in Google Analytics is not merged with other data from Google.

Google DoubleClick
We use Google’s DoubleClick function on our website to evaluate the use of the website and to enable us, Google, and other advertisers who work with DoubleClick to be able to present user-relevant advertising to users. A cookie is installed on your computer’s hard drive for this purpose. Using this cookie, a pseudonymous identification is assigned to the user’s browser and information is collected on the advertisements displayed in the browser and how they are called up. The information collected by the cookie on usage is usually transmitted to a Google server in the USA, where it is stored. Based on the information collected, interest-relevant categories are assigned to the user’s browser. These categories are used for interest-related advertising.

You can prevent cookies from being stored by making a corresponding setting in the browser software you use, but you might then not be able to use all of the functions of this website to the full extent.

In addition to the changes in browser settings, you can also use a browser plug-in to permanently deactivate the DoubleClick cookie by installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

You can also prevent the collection of  generated data related to the use of the website (including IP address) as well as the processing of this data by Google by installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

The storage of Google Analytics cookies is based on our legitimate interest in the analysis of user behavior to optimize our website and our advertising. The legal basis is consequently Article 6 Paragraph 1 Point f of the GDPR.

 
Google Maps
On our website, we also use the service “Google Maps” by Google to display our location and to create directions. When a website with an integrated Google Maps component is visited, a connection is established to a Google server that might be located in the USA. This enables Google to determine the website from which the request has been sent and the IP address to which the directions must be transmitted. In addition, Google stores a cookie on the end device via the Internet browser. You can find more detailed information in the terms of use for Google Maps at https://www.google.com/intl/de_de/help/terms_maps.html as well as in Google’s data privacy statement at https://policies.google.com/privacy?hl=de.

The use of Google Maps is based on our legitimate interest in optimizing the functionality of our Internet presence and in finding the locations given on our website more easily. The legal basis is thus Article 6 Paragraph 1 Point f of the GDPR.

Google Fonts
To display external fonts, we use Google’s service “Google Fonts”. These web fonts are integrated by calling up a server, usually a Google server in the USA. This enables Google to determine the website from which the request has been sent and the IP address to which the display of the font must be transmitted. You can find more detailed information at https://fonts.google.com/about# as well as in Google’s data protection notices at https://www.google.com/policies/privacy/.

The use of Google Fonts is based on our legitimate interest in the standardized and appealing presentation of our website. The legal basis is thus Article 6 Paragraph 1 Point f of the GDPR. Our legitimate interest lies in the optimization and the commercial operation of our website.

search.ch
We use a map component of the service search.ch from Swisscom Directories AG in order to display our Swiss locations on our website. When you visit the respective websites, a connection with a search.ch server is established, which can be used to determine the website from which the request has been sent and to which IP address the directions are to be transmitted. You can find more detailed information on data processing by search.ch in their data privacy statement at https://www.search.ch/privacy.html.

The use of search.ch is based on our legitimate interest in optimizing the functionality of our Internet presence and in finding the locations given on our website more easily.

On our website we allow users to register by providing personal data. The data is entered into an input field, transmitted to us and stored. The data will not be passed on to third parties. The following data is collected during the registration process:

• UserID
• First name and last name
• E-mail address
• Company
• Project/Resource
• Language

At the time of registration and future logins, the user's IP address as well as the date and time of registration are also stored. Additionally, personal data is processed as part of the two-factor authentication process using the AdNovum Access App (see below for details on data processing). The registration and continuation of a user account is required to ensure that certain content and services are available on our website, in order to execute a contract with the user or to carry out pre-contractual measures. The aforementioned also justifies the processing of data (legal basis is Art. 6 para. 1 lit. (b) EU-GDPR).

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This is usually the case when the data are no longer necessary for the execution of the contract. However, it may also be necessary after the conclusion of the contract to store personal data of the contractual partner in order to comply with contractual or legal obligations. In these cases, an early deletion of the data is not possible.

With our AdNovum Access App we offer two-factor authentication (2FA). The app is powered by cloud services from NEVIS Security AG, Zurich. The following data is processed when the app is started and used:

• Name of the device on which the app is stored
• Username/e-mail
• In case of logins: service to be logged in and time of login

This processing of personal data is necessary for the correct functioning of the AdNovum Access App. Also, data on individual logins is further processed in order to maintain and improve the functionality and security of the service, as well as for compliance reasons. It is on these grounds that we have a legitimate interest in data processing (Art. 6 para. 1 lit. (f) EU-GDPR). At the time of registration, we request the user's consent (Art. 6 para. 1 lit. (a) EU-GDPR).

The user can revoke his/her consent or object to the data processing at any time. However, since the use of our services requires data processing, the user can only demand the complete deletion of his user account. After deletion, the data will be stored for a period of approximately 90 days in backups and log files.

Newsletter
You can subscribe to a free newsletter on our website. The data from the input screen is transmitted to us when you apply for the newsletter. In addition to the e-mail address, the IP address of the computer to be called up, as well as the date and time of registration are collected.

The data required for dispatch (last name, first name, e-mail) is entered via the US service MailChimp from The Rocket Science Group, LLC. This service is privacy shield-certified. In addition, we have concluded a contract for order data processing with the provider. Using MailChimp, we also collect data, specific to the user, on whether and when our newsletter has been opened and whether the links it contains have been clicked (performance measurement by means of opening and click rates).

The user’s e-mail address is collected in order to deliver the newsletter. The data entered in conjunction with the performance measurement is used to further optimize our content in the future.

With the exception of processing via MailChimp, no data is transferred to third parties in connection with data processing for the dispatch of newsletters. The data is only used for dispatching the newsletter.

For the presented processing of data, your consent is obtained during the dispatch process, and you are referred to this data privacy statement.

The legal basis is thus Article 6 Paragraph 1 Point a of the GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s e-mail address is therefore stored as long as the subscription to the newsletter is active. The user concerned can cancel the subscription to the newsletter at any time. Each newsletter contains a corresponding link for this purpose.

Contact Form and E-Mail Contact
Our website provides forms enabling you to contact us by electronic means. If you take advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:

• First name and last name
• Company and position
• Address (Street, ZIP code, City, Country)
• E-mail address
• Phone number
• Individual message
• Reason for contact
• Interests

To process the data, your consent is obtained during the transmission process, and you are referred to this data privacy statement.   

Alternatively, you can make contact using the e-mail address provided. In this case, your personal data transmitted to us in the e-mail is stored..

We only process personal data from the input screen in order to process establishing contact. If you contact us via e-mail, this also constitutes the required legitimate interest pursued in processing the data. The other personal data processed during the transmission procedure is used to prevent the contact form from being misused and to ensure that our IT systems are secure. Depending on the circumstances, data processing is based on the consent of the user, the implementation of pre-contractual measures, the performance of a contract and/or to safeguard our legitimate interests. The legal basis for data processing is accordingly Article 6 Paragraph 1 Points a, b and/or f of the GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. With regard to the personal data from the input screen of the contact form and the data that has been sent by e-mail, this is the case once the respective conversation has ended with the user. The conversation is considered ended once it has been established from the circumstances that the matter in question has been fully clarified.

Users can revoke their consent to the processing of their personal data at any time. If a user contacts us via e-mail, they can object to the storage of their personal data at any time. The conversation may not be continued in such cases. All personal data that has been stored during contact is then deleted, unless it needs to be stored in order to comply with contractual or legal obligations.

If your personal data is processed, you are the person concerned and you have the following rights against the responsible party:

• Right to confirm whether the data concerning you should be processed, right to information on the processed data, right to further information on data processing as well as right to copies of the data (Article 15 of the GDPR);
• Right to correct and complete incorrect or incomplete data (Article 16 of the GDPR);
• Right to immediate deletion of data concerning you, or, if further processing is necessary, to restriction of processing (Articles 17 and 18 of the GDPR);
• Right to receipt of data concerning you and provided by you and to transmit this data to other providers/responsible parties (Article 20 of the GDPR);
• Right to receive the personal data concerning you that you have provided to the responsible party in a structured, current and machine-readable format.