Privacy policy

OPED AG
Hinterbergstrasse 26
6312 Steinhausen
Switzerland/Suisse/Svizzera
E-Mail: contact@oped.ch

You can reach our external data protection officer at

DATA Security AG
Mr. Slobodan Mikulovic
E-mail: s.mikulovicdata-security.ch

We receive and process personal data from you that you have sent to us via our contact form, for example, or that we receive through the use of our internet or social media.
This may involve the following types of data

• Inventory data (name, address).
• Contact data (email, telephone numbers).
• Content data (text entries, photographs, videos).
• Usage data (websites visited, interest in content, access times).
• Meta/communication data (device information, IP addresses).

We may also process other data comparable with the categories mentioned.
Data is also stored in server log files, which are collected and automatically stored by the provider and are largely transmitted to us by your browser. These are

• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• Name of the requested file
• Page from which the corresponding file was requested
• Web browser and operating system used
• (Full) IP address of the requesting computer
• Amount of data transferred

We may process other data comparable to the categories mentioned.

The legal basis for the temporary storage of this data or the log files is Art. 31 FADP. We collect the data listed in order to ensure a smooth connection to the website and to enable users to use our website conveniently. The log file is used to evaluate system security and stability as well as for administrative purposes.

We currently also offer the following social media channels

• LinkedIn
• YouTube
• Instagram
• Facebook
• Xing

Through social media use, we can retrieve statistical usage data from the respective social media company. This may include information about page views and activities, views of individual articles, videos and services, etc.

We process personal data in accordance with the provisions of the Federal Act on Data Protection (FADP).

Where necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. We collect the data already listed above in order to ensure a smooth connection to the website and to enable convenient use by users. The log file is used to evaluate system security and stability as well as for administrative purposes. We also store your data for technical security reasons, in particular to defend against attempted attacks on our web server.

Examples in this context:

• Provision of the online offer, its functions and content
• Answering contact requests and communicating with users
• Testing and optimizing procedures for needs analysis and direct customer contact
• Advertising or market and opinion research, e.g. through the use of cookies, provided you have not objected to the use of your data
• Assertion of legal claims and defense in legal disputes
• Ensuring IT security and IT operations
• Measures for business management and further development of services and products

Social media companies use your usage behavior to create so-called usage profiles, which are used to display advertisements. Cookies are usually stored on your computer for this purpose.

We are also subject to legal requirements. Insofar as data is processed in this context, this is done exclusively on the basis of legal regulations.

• to fulfill our services and carry out contractual measures and respond to inquiries, Art. 31 para. 2 FADP
• for the fulfillment of legal obligations, Art. 31 FADP
• in the event that vital interests of the data subject or another natural person require the processing of personal data
• for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Art. 31 para. 1 FADP

The processing of data for purposes other than those for which it was collected is governed by the provisions of Art. 31 FADP.
The processing of special categories of data is governed by the provisions of Art. 5 FADP.

Within the company, only those departments receive your data that are also required to fulfill our contractual and legal obligations. Processors employed by us (Art. 9 FADP) may also receive data for the aforementioned purposes. These are companies in the categories of IT services, telecommunications, advice and consulting as well as sales and marketing.

When passing on data to recipients outside the company, please note that we will only pass on your data if this is permitted or required by law, if you have given your consent or if we are authorized to provide information. Recipients of personal data in this context may be, for example, public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities) if there is a legal or official obligation.

Data will only be transferred abroad if this is required by law, if you have given us your consent or if this is necessary to carry out our social media services. Should this be required by law, we will inform you separately about further details.

Basics:

A cookie is a small data record that is created when you visit a website and is temporarily stored on the website user's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.

Detailed information about cookies and which cookies are used on this website can be found in the cookie settings, which you can access at any time by clicking on the icon at the bottom left of the screen.

Deleting cookies:

You can reject every cookie category, with the exception of technically necessary cookies. To do this, click on the icon at the bottom left of your web browser and make the desired settings in the cookie settings.

You can also delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox
• Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416
• Opera: http://www.opera.com/help
• Safari: https://support.apple.com/guide/safari/sfri11471/mac

You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Use of technically necessary cookies

Type and purpose of processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• Consent management

Cookie provider: google.com and youtube.com:

Used to determine whether the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website's GDPR compliance. Saves the user's consent status for cookies on the pages on which YouTube videos are embedded.

Cookie provider: Cookiebot:

Saves the user's consent status for cookies on the current domain.

Technically necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

Legal basis and legitimate interest:

In this respect, data processing is carried out solely on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in conjunction with Section 25 para. 2 TDDDG (Telecommunications Digital Services Data Protection Act - TDDDG) in a user-friendly design of our website and in the documentation of consent.

Recipients:

We use technical service providers for the operation and maintenance of our website, who act as our processors. All service providers are contractually obliged to treat your data confidentially.

Storage period:

Details on the storage duration of cookies can be found in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.

Provision prescribed or required:

The provision of the aforementioned personal data is not required by law or contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection:

Please read the information on your right to object under Art. 21 GDPR below.

Use of technically unnecessary cookies

Type and purpose of processing:

We also use cookies on the website that enable an analysis of the user's surfing behavior. These cookies are used to make the use of the website more efficient and attractive. We use web analysis technologies from the following providers:

• Google such as Google Analytics
• YouTube

Further details and information about the technical functioning of the cookies and tools used by all the individual cookie providers we use, together with an explanation of the purpose of each cookie, can be accessed by clicking on the icon at the bottom left of the screen (the so-called cookie consent banner).

Legal basis:

The legal basis for this processing is your consent in each case, Art. 6 para. 1 lit. a) GDPR.

Recipients:

We use technical service providers for the operation and maintenance of our website, who act as our processors. All service providers are contractually obliged to treat your data confidentially.

Further recipients and details on the technical functioning of the tools used and information on how you can prevent data transmission (tracking) can be found in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.

Further information on the recipients can be found in the information on the “Analysis tools used” further down in this section.

Third country transfers:

We also process data in countries outside the European Economic Area in so-called third countries or transfer data to recipients in these third countries. Please note that some of the services we use may transfer data to a country that does not offer an adequate level of data protection. As a result, there is a risk that your data may be processed by authorities for control and monitoring purposes without you having any legal recourse. Please also note that for some of these third countries, there is currently no adequacy decision by the EU Commission that these third countries generally have an adequate level of data protection.

Storage duration:

Details on the storage duration of cookies and the technologies used in the context of these tracking tools can be found in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.

Provision mandatory or required:

The provision of your data is voluntary, based solely on your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Provision prescribed or required:

The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent:

You can withdraw your consent at any time. To do so, click on the icon at the bottom left of the screen and make the desired settings in the cookie consent banner that opens.

Profiling:

Web analysis tools can be used to evaluate the behavior of visitors to the website and analyze their interests. We create a pseudonymous user profile for this purpose.

a. Google Analytics
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies to help the website analyze how users use the site. The information collected is usually transferred to a Google server in the USA and stored there.

OPTIONAL: We use Google signals: Google signals are session data from websites and apps. With their help, we can collect additional information about website visitors who are logged into their Google account and have activated personalized advertising. By linking data, cross-device remarketing campaigns can be delivered to these users.

In Google Analytics 4, automatic anonymization of IP addresses is activated by default. Due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to the information provided by Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to our website, your user behavior is recorded in the form of so-called events, such as

• Page views
• Start of a session
• Length of stay
• User engagement
• First visit to a website
• Scrolls (when a visitor scrolls 90% to the bottom of the page)
• Clicks on external links
• Ads viewed or clicked on
• Internal searches
• Interaction with video content
• downloads
• Language settings

The following information is also recorded:

• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information such as browser, internet provider, end device and screen resolution
• Source of origin (referrer URL) of your visit (i.e. via which website or advertising medium you came to us)

You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.  

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

The legal basis for this data processing is your consent.

As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA.  As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To ensure an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/  

The recorded data is stored together with the randomly generated user ID to enable the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 10 months. Other data remains stored in aggregated form indefinitely.

You can revoke your consent for the future at any time in the cookie consent banner. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to deactivate Google Analytics.

b. YouTube
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page on our website that has a YouTube video embedded, a connection to the YouTube or Google servers is automatically established. Depending on the settings, various data is transmitted (e.g. your IP address). If a YouTube video is started, the provider sets cookies that store your IP address and URL, for example.

If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).  

The legal basis for this data processing is your consent.

As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA.  As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To establish an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

a. Webinars about Microsoft Teams

Purpose of the processing

Registration and follow-up:

The personal data provided during registration (name, e-mail address, etc.) will be processed exclusively for the purpose of conducting the webinar. Following a webinar, we will send you a one-off follow-up email together with a reference to our services and the most important information from the webinar.

Conducting the webinar:

We use Microsoft Teams to conduct the live webinars. Microsoft Teams is a feature of Microsoft 365 and a service of Microsoft Ireland Operations Ltd (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). An encrypted connection is established between you and Microsoft Teams. For more information on encryption technology, see Using end-to-end encryption for Microsoft Teams calls - Microsoft Support. A list of the categories of data collected and processed by Microsoft Teams and the exact purpose of the processing can be found at Microsoft Privacy Statement - Microsoft Privacy.
When using Microsoft Teams, various personal categories of data are processed. The scope of the data also depends on the information you provide before or when participating in a webinar.

Registration and follow-up:

The personal data provided during registration (name, e-mail address, etc.) will be processed exclusively for the purpose of conducting the webinar. In

The following personal data may be processed:

• User details: display name, e-mail address, IP address
• Meeting metadata: e.g. date, start and end time, meeting ID, telephone number, location
• [Optional] Text, audio and video data: Profile picture, audio and video data are processed during the online meeting. You can also use the chat function during an online meeting. In this case, the text entries you make are processed in order to display them in the online meeting.

We make recordings of the webinars to give you and participants who are not present the opportunity to view the webinar afterwards. Only the organizers of the webinars are authorized to record online meetings. All cameras and microphones are deactivated before the webinar starts. This means that your text, audio and video data will only be processed if you activate them and/or use the chat function.

Legal basis:

We process your registration data based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, the practicable and user-friendly implementation of the webinar, including a good user experience for the purpose of external presentation of the company.
Data that may be processed by you during the recording is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You give your consent by actively switching on the camera or microphone and/or using the chat. Consent is voluntary; not giving it does not prevent you from participating in the webinar.

Recipients:

The recipients of your data are technical service providers for conducting the webinar as part of order processing. In the case of the Microsoft Teams solution, this is Microsoft Ireland Operations Ltd (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland).
All service providers are contractually obliged to treat your data confidentially.

Third country transfer:

Data traffic at Microsoft Ireland Operations Ltd. is primarily routed via European data centers. As Microsoft is headquartered in the USA, data may be transferred via servers in third countries, in particular the USA, particularly in the event of outages or capacity bottlenecks. Microsoft has concluded standard contractual clauses for this, which are part of our agreements with Microsoft Ireland Operations Ltd.

Storage period:

If OPED GmbH makes a recording of the webinar, it is generally stored for a maximum of 365 days.

Provision prescribed or required:

The provision of your personal data is voluntary. You can only participate in the webinar if you provide the necessary data.

Withdrawal of consent:

You can revoke your consent to the processing of your text, audio and video data at any time for the future by sending an email to datenschutz@oped.de. We will then remove this data from the recordings or make your person unrecognizable by pixelating it. If this is not possible, the corresponding recordings will be irrevocably deleted from our servers.

b. Registration/registration for events

Type and purpose of processing:

We offer you the opportunity to register for OPED GmbH events by providing personal data.

Legal basis:

We process the data provided by you on the basis of Art. 6 para. lit. b) in order to register you for participation in the desired event and to inform you of any changes regarding the time and location of the event.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Third country transfer:

Due to the use of Microsoft Dynamics 365 to provide the registration form, processing in the USA cannot be ruled out.

Storage period:

Data is deleted in compliance with the statutory retention periods, in relation to business letters after six years and in relation to invoicing after ten years.

Provision prescribed or required:

The provision of your personal data is voluntary. However, you can only participate in the events if you provide the relevant data.

We link to the following social media channels via our website:

a. LinkedIn

We operate the following LinkedIn page:
https://www.linkedin.com/company/3313304/admin/dashboard/

We operate on the social media platform LinkedIn, a service of LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”), Wilton Place, Dublin, Ireland.

We are jointly responsible with LinkedIn for data protection. The basis for this is the so-called “Joint Controller Addendum” from LinkedIn. You can view this under the following link:
https://legal.linkedin.com/pages-joint-controller-addendum

The link to our company LinkedIn page enables us to publish feeds and share content of interest to the user directly via our presence there. If LinkedIn obtains the consent of visitors to data processing (e.g. by ticking a checkbox or clicking a button), the legal basis for data processing is your consent.

We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect.

LinkedIn stores data until it is no longer needed to provide the services and LinkedIn products, or until the visitor account is deleted. This is a case-by-case determination and depends on criteria such as the type of data, why it is collected and processed, and the relevant legal or operational storage requirements.

Further information on this and the available setting options can be found on the following LinkedIn support pages:
https://www.linkedin.com/help/linkedin/answer/125463/managecookie-preferences?lang=en

b. XING

We operate the following XING page:
https://www.xing.com/pages/opedgmbh

XING is a social network operated by XING SE, based in Hamburg. Members can use it primarily to manage their professional and private contacts and to make new contacts. Organizations can set up a page with a logo and short profile, post news and initiate discussion groups.

A personal profile with administrator rights must be assigned to the company profile. The dialog in groups can only take place via the personal profile of a natural person.

To use the network functions, you must be registered as a user. There is a free basic version and a paid version with additional functions. In contrast to other social networks, XING is based more on a combination of personal and electronic contact and is less commercial and less visual. The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, XING is often used by companies and other organizations to recruit personnel and present themselves as attractive employers. For this purpose, XING is linked to the employer rating platform kununu.

The processing of the data is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR, which you have given to XING as part of your registration.

XING provides further information: https://corporate.xing.com/de/unternehmen/.

You can find the latest information on data protection at https://privacy.xing.com/de/datenschutzerklaerung.

c. Facebook

We operate the following Facebook page:
https://www.facebook.com/OPED.Deutschland

We operate on the social media platform Facebook, a service of LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”), Wilton Place, Dublin, Ireland.

We are jointly responsible with LinkedIn for data protection. The basis for this is the so-called “Joint Controller Addendum” from LinkedIn. You can view this under the following link: https://legal.linkedin.com/pages-joint-controller-addendum.

The link to our company LinkedIn page enables us to publish feeds and share content of interest to the user directly via our presence there. If LinkedIn obtains the consent of visitors to data processing (e.g. by ticking a checkbox or clicking a button), the legal basis for data processing is your consent.

We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect.

LinkedIn stores data until it is no longer needed to provide the services and LinkedIn products or until the visitor account is deleted. This is a case-by-case determination and depends on criteria such as the type of data, why it is collected and processed and the relevant legal or operational storage requirements.

Further information on this and the available setting options can be found on the following LinkedIn support pages:
https://www.linkedin.com/help/linkedin/answer/125463/managecookie-preferences?lang=en

d. Instagram

We operate the following LinkedIn page:
https://www.instagram.com/opedgmbh/

We operate on the social media platform Instagram, a service of LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”), Wilton Place, Dublin, Ireland.

We are jointly responsible with LinkedIn for data protection. The basis for this is the so-called “Joint Controller Addendum” from LinkedIn. You can view this under the following link: https://legal.linkedin.com/pages-joint-controller-addendum

The link to our company LinkedIn page enables us to publish feeds and share content of interest to the user directly via our presence there. If LinkedIn obtains the consent of visitors to data processing (e.g. by ticking a checkbox or clicking a button), the legal basis for data processing is your consent.

We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect.

LinkedIn stores data until it is no longer needed to provide the services and LinkedIn products, or until the visitor account is deleted. This is a case-by-case determination and depends on criteria such as the type of data, why it is collected and processed, and the relevant legal or operational storage requirements.

Further information on this and the available setting options can be found on the following LinkedIn support pages:
https://www.linkedin.com/help/linkedin/answer/125463/managecookie-preferences?lang=en

e. Youtube

We operate the following Youtube channel:
https://www.youtube.com/user/Medizinpark

When you visit our YouTube channel, Google processes your personal data and uses it to compile statistics on general user behavior on our channel. Google provides us with these statistics, if necessary in anonymized form.

The data you submit on our YouTube channel, such as comments, chat messages, likes or dislikes, will be published by YouTube and will not be used or processed by us at any time for purposes other than those mentioned.

We process the data you enter on our YouTube channel by commenting on and sharing it where appropriate and on the basis of which we communicate with you via the social network. We reserve the right to delete content if we deem it necessary. If you contact us via our YouTube channel or send us inquiries, the data you provide will be processed exclusively for processing and responding to the contact inquiry and the associated technical administration.

If you wish to assert your rights against Google, please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. The electronic contact details and the contact details of the data protection officer can be found in the privacy policy at https://policies.google.com/privacy?gl=DE&hl=en.

We have no influence on how Google processes, uses or passes on your data.

If you send us inquiries via the contact form or e-mail, your details from the inquiry form or your e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. An e-mail address and your name are required for contact purposes. This data will not be passed on without your consent. 
We process your data on the legal basis of our legitimate interest in responding to your inquiries in accordance with Art. 31 GDPR if your inquiry is aimed at concluding a contract. After your inquiry has been processed, your data will be deleted, provided there are no statutory retention obligations.

From time to time, we advertise vacancies in our company on our website with the option of sending us an application online (using the application form). If you apply for an advertised position, your data will only be collected and processed by us as part of the application process and deleted by us after the vacancy has been filled, unless legal requirements (for example, the burden of proof under the General Equal Treatment Act) make longer storage necessary, you have expressly consented to longer storage in the event that another position is to be filled later, or we conclude an employment contract with you, in which case the data will be stored by us in the personnel file and for processing payroll accounting in compliance with the legal data protection requirements. The legal basis for data processing is Art. 31 DSG.

We process data as part of administrative tasks and the organization of our business, financial accounting and compliance with legal obligations, such as archiving. The same data that we process as part of the provision of our contractual services is processed. The legal basis for processing is Art. 31 FADP. Customers, interested parties, business partners and website visitors are affected by the processing. 
The purpose of the processing is administration, financial accounting, office organization, archiving of data, performance of our tasks and provision of our services. To ensure this, data is passed on to the tax authorities, consultants (e.g. tax consultants or auditors) and other fee offices and payment service providers. 
Based on our business interests, details of suppliers, event organizers and other business partners are also stored for the purpose of possibly contacting them at a later date.

In order to be able to provide our contractual and pre-contractual services to our contractual partners, interested parties, other clients, customers, clients, clients or contractual partners, we process data in accordance with Art 31 GDPR. We process master data of our contractual partners (e.g. names and addresses), contact data (e.g. email addresses and telephone numbers), contract data (e.g. services used, contract content, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history). 
We generally do not process special categories of personal data, but only if they are part of commissioned or contractual processing. We process the data required to establish and fulfill the contractual services. Data is only disclosed to external persons and companies if this is necessary within the scope of a contract. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements. 
If our online services are used, we may store the IP address and the time of the respective user action. This storage is based on our legitimate interest as well as the user's interest in protection against misuse and other unauthorized use.

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfill the respective purposes and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. 
This means that the data is blocked and not processed for other purposes. This applies in particular to data that must be retained for commercial or tax law reasons or due to other legal requirements.

We would like to inform you about the data subject rights granted to you vis-à-vis the controller with regard to the processing of your personal data in accordance with the General Data Protection Regulation:

a. Right to information:
In accordance with Art. 25 FADP, to request information about your personal data processed by us.

b. Right to rectification:
Pursuant to Art. 32 FADP, to immediately request the correction of incorrect or incomplete personal data stored by us.

c. Right to erasure:
Pursuant to Art. 32 FADP, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

d. Right to data portability pursuant to Art. 20 GDPR, Art. 28 FADP:
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, insofar as this is technically feasible

e. Right to lodge a complaint:
You also have the right to consult the FDPIC (Art. 23 FADP).

When using the internet or social media, you only need to provide the personal data that is required for use or that we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.

If there are links to other websites, we have neither influence nor control over the linked content and the data protection provisions there. When accessing linked websites, we recommend checking the privacy policies of these websites to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.

Status: 01.10.2024