1. Introduction

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DPA) as well as the EU General Data Protection Regulation (GDPR), every person has the right to protection of their privacy and protection against misuse of their personal data. The protection of your personal data is important to us. You can expect us to handle your data sensitively and carefully and to ensure a high level of data security.

This Privacy Policy explains the collection and further processing of personal data by the ITRIS Group, insofar as this does not result from the circumstances or is regulated by law.

2. Name and Address of the Controller

The controller within the meaning of the Swiss Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR) is:

ITRIS Group
Industriestrasse 169
8957 Spreitenbach
Phone: +41 56 418 65 65
Email: datenschutz@itris.ch
Website: www.itris.ch

The ITRIS Group has not appointed a data protection advisor or data protection officer within the meaning of Art. 10 DPA or Art. 37 GDPR. Any data protection inquiries, claims, or requests for information should be directed to the aforementioned contact details of the controller.

3. Categories of Personal Data Processed

The following categories of personal data may be processed by us in connection with our services:

• Master Data: Master data refers to the basic data that we require, in addition to contract data (see below), for the processing of our contractual and other business relationships or for marketing and advertising purposes. This includes, but is not limited to, first name, last name, gender, place of residence (private and/or business), date of birth, information on function and professional or other interests;
• Communication Data: If you contact us via the contact form, by email, phone, letter, or other means of communication, we collect the data exchanged between you and us, including contact details and communication metadata. This includes, for example, phone number, email address (private and/or business, respectively), fax number if applicable, communication content (e.g., emails, letters, faxes), preferred communication channel, and correspondence language;
• Contract Data: This refers to data arising in connection with the conclusion or processing of a contract. This includes, but is not limited to, information on previous business transactions, information on business transactions, inquiries, quotes, offers, terms and conditions, and contracts for products and services supplied and sold, as well as ordered and purchased, information in connection with inquiries, complaints, and disputes regarding products and services or the contracts concluded for them, such as warranty and guarantee cases, withdrawals, etc.;
• Device Data, which can be uniquely associated with individuals on the customer side, such as applications, hostname, IP address, domain, location, etc.;
• Financial Data, such as payment information, billing and delivery addresses, etc.;
• Data in connection with the marketing of products and services: This includes, but is not limited to, information about marketing activities, received documents, invitations and participation in events and special activities, etc. In some cases, we also acquire addresses from third parties for our advertising and acquisition activities;
• Data in connection with website usage: This includes, but is not limited to, IP address and other identifiers (e.g., username on social media, MAC address of smartphone or computer, cookies, web beacons, pixel tags, log files, local shared objects (Flash cookies) or other technologies that automatically collect personal data), date and time of visit or use of the websites, pages and content accessed, referring websites, etc. Further information on this can be found below under Section 8 “Automated Data Collection and Processing on our Website”;
• Registration Data: Certain offers and services (e.g., free Wi-Fi access) can only be used after registration. In doing so, you must provide us with certain data, and we collect data about the use of the offer or service. Registration data may be collected for access controls to certain facilities; depending on the control system, this may also include biometric data.
• Behavioral and Preference Data: Depending on our relationship with you, we try to get to know you and tailor our products, services, and offers better to you. For this purpose, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we may also supplement this information with information from third parties – including from publicly accessible sources. Based on this, we can, for example, calculate the probability that you will use certain services or behave in a certain way. The data processed for this purpose is partly already known to us (e.g., if you use our services), or we obtain this data by recording your behavior (e.g., how you navigate our website). How tracking works on our website is described in Section. 8.
• Voluntary Information: This includes data that you voluntarily provide to us without us explicitly asking for it, such as special marketing preferences, etc.
• Third-Party Data: Insofar as you provide us with personal data of third parties (e.g., subcontractors, employees, etc.) in the course of a business transaction, we also process this data.

We collect and process data from the following persons (hereinafter “Business Partners”):

• Registered and unregistered visitors to our website;
• Contact persons and employees of manufacturers, suppliers, dealers, sellers, and providers of the products and services we request;
• Customers, buyers, and recipients/beneficiaries or interested parties (potential customers) of our products and services (including warranty, repair, and service services) or their contact persons and employees;
• Contact persons and employees of business partners and affiliated companies, employment agencies and temporary employment agencies (as well as seconded employees) and other commercial and economic partners;
• Participants in market research and opinion surveys conducted by us; participants in courses, seminars, and events offered by us;
• Users of the Wi-Fi offered in our business premises and other locations.

The aforementioned personal data is generally collected directly from the data subjects when using the website, when requesting or using products or services, participating in market or other surveys, at our events, or in direct communication with us via email, telephone, or other means.

However, data can also be collected indirectly, particularly when transactions are made for the benefit of a business partner or for delivery to them by another business partner, on the recommendation of third parties (e.g., recommendation by acquaintances of the business partner) or by obtaining or purchasing supplementary information from third-party data sources (e.g., social media, address dealers).

4. Purpose of Processing and Legal Basis

We process the data of business partners – insofar as permitted by applicable law – in particular, but not limited to, for the following purposes:

• For the conclusion and processing of your contractual relationship and for processing your inquiries or orders (Art. 30 and Art. 31 para. 1 and para. 2 lit. a DPA / Art. 6 para. 1 lit. b GDPR): The purposes of data processing are determined by the intended business. We collect this data to be able to provide our services to you or to obtain them from you;
• For the operation of our website (Art. 30 and Art. 31 para. 1 and para. 2 lit. b DPA / Art. 6 para. 1 lit. b and f GDPR): This includes, in particular, the management of website users and activities carried out on it, the operation and further development of the website, ensuring a smooth connection, evaluating system security and stability, and other administrative purposes.
• For process and offer optimization (Art. 30 and Art. 31 para. 1 and para. 2 lit. e DPA / Art. 6 para. 1 lit. a and f GDPR): This includes quality control, the creation of statistics, budgets, and management information, as well as their evaluation, market research, the further development of products and services, and of the company and its processes;
• For marketing and advertising purposes (Art. 30 and Art. 31 para. 1 DPA / Art. 6 para. 1 lit. a and f GDPR): This includes customer acquisition, customer retention, the implementation of customer loyalty programs, the optimization of customer offers, market or opinion research, and the organization of customer events. You can object to any processing or use of your data for direct marketing purposes at any time. The objection must be addressed to the controller;
• For security purposes and access control (Art. 30 and Art. 31 para. 1 DPA / Art. 6 para. 1 lit. a and f GDPR): We continuously review and improve the adequate security of our IT and other infrastructure (e.g., buildings). Like all companies, we cannot rule out data security breaches with absolute certainty, but we do our part to reduce the risks. We therefore process data, for example, for monitoring, controls, analyses, and tests of our networks and IT infrastructures, for system and error checks, for documentation purposes, and as part of security backups. Access controls include, on the one hand, control of access to electronic systems (e.g., logging into user accounts), but also physical access control (e.g., building access). For security purposes (preventive and for clarifying incidents), we also keep access logs or visitor lists and use surveillance systems (e.g., security cameras).
• For internal group administration and support: We want to make our internal processes efficient. We therefore also process personal data for the internal group administration of the ITRIS Group (see Section 5 for the ITRIS Group). For this purpose, we process master data, contract data, and technical data, but also behavioral and transaction data, as well as communication data. Internal group administration includes, in particular, the management of IT and real estate, accounting and financial reporting, data archiving and management of our archives, central storage and management of data used by several companies of the ITRIS Group (e.g., CRM), telephony, and human resources administration.

• For compliance with legal and regulatory requirements (Art. 30 and Art. 31 para. 1 DPA / Art. 6 para. 1 lit. c GDPR): We process your data to fulfill the legal obligations to which we are subject. This includes the processing of data in the context of information obligations towards authorities and compliance with tax and/or commercial law regulations (e.g., retention obligations for business and accounting records);
• For the sale or purchase of business units, companies or parts of companies and other corporate transactions (Art. 30 and Art. 31 para. 1 DPA / Art. 6 para. 1 lit. a and f GDPR).

Our legitimate interest in processing personal data according to Art. 31 para. 1 DPA or Art. 6 para. 1 lit. f GDPR also lies in the aforementioned purposes.

Processing of personal data for purposes other than those described will only take place if a legal provision permits this or if you have consented to the changed purpose of data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes before further processing and provide you with all relevant information for this.

5. Categories of Data Recipients

In principle, your personal data will only be passed on to the recipients listed below without your express prior consent:

• Group companies: A list of our group companies can be found at www.itris.ch/unternehmen. The group companies may use the data according to this Privacy Policy for the same purposes as we do (cf. Section 4). Primarily, however, we only share data within the framework of the joint operation of CRM, IT infrastructure, telephony, accounting, and human resources administration, etc.
• Public bodies and authorities: If it is necessary to clarify an unlawful use of our services or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if applicable, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public bodies upon request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines, and tax authorities. The transfer of this data is based on our legitimate interest in combating abuse, prosecuting criminal offenses, and securing, asserting, and enforcing claims, Art. 30 and Art. 31 para. 1 DPA as well as 6 para. 1 lit. f GDPR.
• Processors: For the provision of our services, we rely on contractually bound external companies and external service providers (“processors”). In such cases, personal data is passed on to these processors to enable them to carry out further processing. These processors are carefully selected and regularly reviewed by us. The processors may use the data exclusively for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this Privacy Policy and the applicable data protection laws.

Specifically, we use the following processors:

• Subcontractors and cooperation partners engaged by us to provide the services owed to you;
• Companies for the purpose of central order processing and financial accounting;
• Logistics service providers for shipping the products, marketing materials, or other items you ordered from us;
• Payment service providers for processing payments from you to us or vice versa;
• Service providers for collection services, advertising and marketing, or conducting customer surveys;
• IT service providers for providing cloud services, software and hardware, and for carrying out maintenance work;
• Software providers for the use of communication offers with customers, especially for the implementation of event offers.

The transfer of data to processors is based on Art. 9 DPA or Art. 28 para. 1 GDPR, subsidiarily on our legitimate interest in the economic and technical advantages associated with the use of specialized processors and the circumstance that your rights and interests in the protection of your personal data do not outweigh this, Art. 31 para. 1 DPA or Art. 6 para. 1 lit. f GDPR.

• Suppliers: In the context of controls and audits regarding compliance with manufacturer specifications (e.g., for billing or compliance with credit limits), we grant suppliers access to the data processed by us (Art. 31 para. 1 and para. 2 lit. a DPA / Art. 6 para. 1 lit. b GDPR).

6. Data Transfer Abroad

Your personal data is generally processed in Switzerland. However, it may happen that we transfer your data to trusted recipients in third countries (both in Europe and worldwide).

This is done on the basis of a so-called adequacy decision by the Federal Council or the European Commission. If a recipient is located in a country without adequate legal data protection, we oblige them to comply with the applicable data protection on the basis of suitable guarantees in accordance with Art. 16 para. 2 DPA or Art. 46 para. 2 GDPR, in particular through so-called standard contractual clauses, which have also been issued by the European Commission or recognized, issued, or approved by the Federal Data Protection and Information Commissioner (FDPIC). We may refrain from such an obligation if we can rely on an exception. An exception may apply, in particular, to legal proceedings abroad, but also in cases of overriding public interests or if contract processing requires disclosure abroad, if you have consented, or if the data is generally accessible by you and you have not objected to its processing.

In the present case, it cannot be ruled out that we transfer personal data to recipients in the USA. Please also note that data exchanged via the internet is often routed through third countries. Your data may therefore also reach other countries even if the sender and recipient are in the same country.

7. Duration of Storage

We store your personal data until the purpose underlying the processing (see Section 4 above) no longer applies. If we are legally obliged to store personal data, storage takes place for the duration of the legal obligation. For commercial documents, which include financial accounting and related records (inter alia, invoices), this is up to 10 years. If necessary, your data will be blocked for ongoing operations during this period, provided there is no other purpose for processing.

8. Automated Data Collection and Processing on Our Website

Our website uses the technologies and tools described below, with which we and third parties engaged by us can recognize you during your use and, under certain circumstances, track you across multiple visits. If you do not wish to use them, we will provide you with various options and settings for each tool to prevent their use. Unless otherwise noted, the processing of your personal data in this regard is based on the legal basis of your consent in accordance with Art. 31 para. 1 DPA or Art. 6 para. 1 lit. a GDPR. In this case, you can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal.

a) Cookies

Our website uses cookies. These are small text files that make it possible to store specific, user-related information on the user’s device while they are using the website. Cookies enable, in particular, the determination of usage frequency and user numbers of the pages, the analysis of website usage behavior, and also the design of our offer to be more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when the page is visited again. Before we use cookies beyond what is necessary (e.g., for performance or marketing), we ask for your consent, which you can withdraw at any time via the cookie settings. Alternatively, you can set your internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website www.aboutads.info or the EU website www.youronlinechoices.com. Furthermore, the storage of cookies can be prevented by deactivating them in the browser settings. Please note that in this case, not all functions of this online offer may be fully usable.

b) SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from http:// to https:// and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

c) Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and for follow-up questions.

By clicking the submit button, you consent to the corresponding processing of your data. You can withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal. We do not pass on the data from the contact form to third parties without your consent.

d) Google Maps

Our website uses the Google Maps service. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish the assignment with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Further information on the purpose and scope of data collection and its processing by Google, as well as further information on your rights in this regard and setting options for protecting your privacy, can be found at: www.google.de/intl/de/policies/privacy.

e) Google Ads

Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, a “cookie” (see Section 8. a. above) will be placed on your computer by Google Ads. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across Ads customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users.

If you do not wish to participate in tracking, you can refuse the necessary setting of a cookie – for example, by a browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

The legal basis for the processing of personal data using Google Ads is Art. 30 and Art. 31 para. 1 DPA as well as Art. 6 para. 1 lit. f GDPR.

f) Google reCAPTCHA

Our website uses the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland “Google”). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes the sending of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. If we issue a corresponding order, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. Your data may also be transmitted to the USA. By clicking the submit button, you consent to the corresponding processing of your data. The processing therefore takes place on the basis of Art. 31 para. 1 DPA or Art. 6 para. 1 lit. a GDPR with your consent.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://policies.google.com/privacy?hl=de.

g) Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for our website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC (based in the USA). Google LLC and Google Ireland Limited are hereinafter referred to as “Google.”

Through the statistics obtained, we can improve our offer and make it more interesting for you as a user. Our website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data,” “personal data.”

We have configured the service so that IP addresses are truncated by Google in Europe before being forwarded to the USA and thus cannot be traced back. We have switched off the “data sharing” and “signals” settings. Although we can therefore assume that the information we share with Google is not personal data for Google, it is possible that Google may draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles, and link this data with the Google accounts of these individuals. If you agree to the use of Google Analytics, you explicitly consent to such processing, which also includes the transfer of personal data (in particular usage data for the website and app, device information, and individual IDs) to the USA and other countries. The legal basis for the use of Google Analytics is therefore your consent in accordance with Art. 31 para. 1 DPA and Art. 6 para. 1 lit. a GDPR.

Google Analytics uses cookies. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

In addition, you can prevent the use of Google Analytics by clicking on this link. This will store a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all your cookies in your browser, these opt-out cookies will also be deleted, meaning that you will have to set the opt-out cookies again if you wish to continue preventing this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be activated separately for each browser, computer, or other device.

h) LinkedIn and XING

Within our online offering, we use the marketing services of the social networks LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”), and XING, Grosse Bleichen 27, Kaisergalerie, 20354 Hamburg, Germany (“XING”).

These use cookies to analyze the use of the website. For example, we can measure the success of our ads and show users products they have previously shown interest in. This collects, for example, information about the operating system, the browser, the website you previously visited (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website.

The information generated by the cookie about your use of this website is pseudonymized and transmitted to a server of LinkedIn and XING, including to the European Union and the USA, and stored there. LinkedIn and XING therefore do not store the name or email address of the respective user. Rather, the above-mentioned data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn or XING to process data without pseudonymization or has a LinkedIn and/or XING account.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also object to the use of your data directly with LinkedIn and XING:

LinkedIn: www.linkedin.com/psettings/guest-controls/retargeting-opt-out

XING: privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen

We use LinkedIn Analytics to analyze and regularly improve the use of our website. Through the statistics obtained, we can improve our offer and make it more interesting for you as a user.

If we ask for consent for the use of “LinkedIn” and “XING,” the legal basis for the processing of the corresponding data is Art. 31 para. 1 DPA and Art. 6 para. 1 lit. a GDPR. Information from the third-party provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; www.linkedin.com/help/linkedin/answer/3537/aktualisierte-nutzervereinbarung-und-datenschutzrichtlinie?lang=de.

i) YouTube

Functions of the “YouTube” service are integrated into our website. “YouTube” belongs to Google Ireland Limited, a company registered and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with “YouTube” consists of the terms and conditions available at the following link: www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and “YouTube” regarding the use of the services. Google’s privacy policy explains how “YouTube” handles your personal data and protects your data when you use the service.

j) Remote Support Tools

We use remote maintenance tools to support our customers. The remote support tools we use generally collect data necessary for establishing the connection. Furthermore, data on the duration of the conference, start and end (time) of participation in the conference, the number of participants, and other “context information” related to the communication process (metadata) can be collected. In addition, the remote maintenance tools process all technical data required for online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and the type of connection. If content is exchanged, uploaded, or otherwise provided, it is also stored on the servers of the tool providers. Such content includes, in particular, device and other technical data, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, and other information shared during the use of the service.

k) Vimeo Platform

Vimeo content is integrated by embedding a JavaScript tag. By simply inserting a code provided by Vimeo into a website’s code, the content is displayed and its layout is reloaded from Vimeo’s servers. To play Vimeo content, we require your consent (Art. 31 para. 1 FADP or Art. 6 para. 1 lit. a GDPR), which you can grant—if you have not already done so as part of your cookie selection—via the button in the area of the respective video. By clicking the play button, you consent to your IP address being transmitted to Vimeo (Vimeo, LLC 555 West 18th Street New York, NY 10011 United States) and to the provider setting cookies in your browser.

l) Microsoft Clarity

This website uses Clarity, a web analysis tool from Microsoft clarity.microsoft.com, to record individual visits (only with an anonymized IP address). This creates a log of mouse movements and clicks with the intention of playing back website visits and deriving potential improvements for the website. The information is not personal and is not passed on.

m) Google Fonts

Fonts from Google Fonts are integrated into our website. This allows us to use certain fonts on all pages. By visiting our site, Google receives information that you have accessed the corresponding subpage of our website. In addition, your IP address and the HTTP header, including the user agent describing the website visitor’s web browser and operating system versions, as well as the referral URL, are transmitted to Google. However, this data is not used by Google to create end-user profiles or to serve targeted advertisements. Further information can be found at the following link: developers.google.com/fonts/faq/privacy?hl=en

n) Google Tag Manager

We use Google Tag Manager on our website. The data transmitted to Google does not contain any IP addresses or measurement IDs linked to a specific person. Google uses the collected data solely to monitor system stability and obtain data for diagnostics. Further information on this topic can be found here: support.google.com/tagmanager/answer/9323295?hl=en

o) Abacus Umantis

We use the HR recruitment tool Umantis from Abacus Umantis AG for our applicant management and to display job vacancies on our websites. When accessing the pages where our job vacancies are integrated, your access data may be transmitted to Abacus Umantis. This includes data such as the domain visited, your IP address, date, time, and duration of the visit, as well as other information such as the device or browser used. The partner Abacus Umantis AG (all in the EU plus Switzerland and India) has taken the necessary organizational and technical measures to ensure the confidentiality of your application. Thanks to automatically activated 128-bit encryption, the secure transmission of your data is ensured. This data is stored, evaluated, processed, or forwarded internally exclusively within the scope of your application. It is only accessible to employees of the HR department and the persons responsible for selection within the ITRIS Group. You can find additional information on the following page: www.abacus.ch/en/data-protection

p) Newsletter – Mailchimp

The newsletter is sent using the service provider ‘MailChimp’, a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The service provider may use the recipients’ data in pseudonymous form, i.e., without assignment to a user, to optimize or improve its own services, e.g., for the technical optimization of the dispatch and presentation of the newsletter or for statistical purposes. However, the service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Insofar as we request your consent for the use of ‘MailChimp’, the use of this service is based on your consent pursuant to Art. 31 para. 1 FADP or Art. 6 para. 1 lit. a GDPR and a data processing agreement pursuant to Art. 9 FADP or Art. 28 para. 3 GDPR.

9. Copyrights

The copyright and all other rights to content, images, photos, or other data on our website belong exclusively to the operator of this website or the specifically named rights holders. For the reproduction of any files, the written consent of the copyright holder must be obtained in advance.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and, if applicable, to claims for damages.

10. General Disclaimer for our Online Content

All information in our online content has been carefully checked. We endeavor to ensure that the information we provide is up-to-date, correct, and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, meaning we cannot guarantee the completeness, accuracy, and timeliness of information, including that of a journalistic-editorial nature. Liability claims for material or non-material damage caused by the use of the information provided are excluded, provided there is no demonstrable intentional or grossly negligent fault.

We may change or delete texts at our own discretion and without notice and are not obliged to update the content of this website. The use of or access to our website is at the visitor’s own risk. We, our clients, or partners are not responsible for damages, such as direct, indirect, accidental, specifically pre-determinable, or consequential damages, allegedly caused by visiting our website and therefore assume no liability for them.

We also assume no responsibility or liability for the content and availability of third-party websites that can be reached via external links on our website. The operators of the linked pages are solely responsible for their content. We thus expressly distance ourselves from all third-party content that may be relevant under criminal or liability law or that offends public decency.

11. Your Rights

Right to information (Art. 25 FADP or Art. 15 GDPR): You have the right to request information from us at reasonable intervals about your personal data processed by us. Upon request, we will provide you with a copy of the data that is the subject of the processing.

Right to rectification (Art. 32 FADP or Art. 16 GDPR): You have the right to demand that we correct incorrectly processed data.

Right to restriction of processing (Art. 30 para. 2 lit. b FADP or Art. 18 GDPR): Under certain conditions, you have the right to restrict the processing of your personal data (e.g., regarding the duration of use, the factual reference, or the purpose of processing, etc.). In such a case, we may only continue to process the data if there is a legally provided justification.

Right to erasure (Art. 30 para. 3 FADP or Art. 17 GDPR): You also have the right to demand that we delete your personal data. We are obliged to delete it, among other things, if you expressly prohibit us from processing it and there is no justification for further processing, if your personal data is no longer required for the purposes for which it was collected or otherwise processed, if you have revoked consent once given, or if the data was processed unlawfully.

Right to withdraw consent (Art. 6 para. 6 and Art. 31 para. 1 FADP or Art. 7 para. 3 GDPR), insofar as our processing is based on your consent.

Right to data disclosure and transfer (Art. 28 FADP or Art. 20 GDPR): Where we process your data automatically for the conclusion or execution of a contract or with your consent, we must disclose this data to you in a machine-readable format upon your request or—at your choice—transfer it to a third party.

Right to object (Art. 21 GDPR): If the processing of your data by us is based on the performance of a task that is in the public interest, or takes place in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e GDPR), or if the data processing is based on our legitimate interests, you have the right under the GDPR to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests in stopping the processing.

Objection to the processing of your personal data for direct marketing purposes is possible at any time without restriction.

If the data processing by us is based on your consent, you have the right to withdraw consent given to us at any time. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected by the withdrawal.

Right to report or complain (Art. 49 FADP or Art. 77 GDPR): Insofar as applicable to you, there is a right to report or complain to a competent data protection authority. The supervisory authority responsible for Switzerland can be reached at the following address: Federal Data Protection and Information Commissioner, Feldeggweg 1, CH 3003 Bern.

12. Changes to this Privacy Policy

We may adjust this privacy policy at any time without notice. The current version published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will inform you of the change in the event of an update by email or in another suitable manner.

13. Questions about Data Protection

If you have any questions about data protection, please write us an email or contact the responsible body in our organization listed for data protection at the beginning of the privacy policy directly.