Privacy policy of Generis AG
1. What is this privacy policy about?
Generis AG (hereinafter also “we”, ‘us’) obtains and processes personal data concerning you or other persons (so-called “third parties”). We use the term “data” here synonymously with “personal data” or “personal information”. In this Privacy Policy, we describe what we do with your data when you use https://generis.ch/, other websites of ours or our apps (hereinafter collectively referred to as “Website”), purchase our services or products, are otherwise in contact with us under a contract, communicate with us or otherwise deal with us. Where appropriate, we will provide you with timely written notice of additional processing activities not mentioned in this Privacy Policy. In addition, we may inform you separately about the processing of your data, e.g. in declarations of consent, contractual terms, additional data protection declarations, forms and notices. If you transmit or disclose data about other persons, e.g. family members, work colleagues, etc., we assume that you are authorized to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed of this Privacy Policy. This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (‘DPA’) and the revised Swiss Data Protection Act (“revDSG”). However, whether and to what extent these laws are applicable depends on the individual case.
2. Who is responsible for processing your data?
Generis AG, Schaffhausen (“Generis AG”), is responsible under data protection law for the data processing of Generis AG described in this data protection declaration, unless otherwise communicated in individual cases. For each data processing operation, there are one or more bodies responsible for ensuring that the processing complies with the requirements of data protection law. This body is called the controller. It is responsible, for example, for responding to requests for information (section 11) or for ensuring that personal data is secured and not used in an unauthorized manner. Other bodies may also be jointly responsible for the data processing described in this privacy policy if they are involved in deciding on the purpose or structure. All Group companies come into question. If you would like details of the individual controllers for a specific data processing operation, you are welcome to request information from us within the scope of the right to information (Section 11). Generis AG remains your primary contact, even if there are other joint controllers. In section 3, section 7 and section 12 you will find further information on third parties with whom we work and who are responsible for their own processing. If you have any questions or wish to exercise your rights vis-à-vis these third parties, please contact them directly. A list of third parties to whom we may disclose your data or who may be jointly responsible for the processing of your data can be found in section 12. You can contact us as follows for your data protection concerns and to exercise your rights in accordance with section 11:
Generis AG
Freier Platz 10
CH-8200 Schaffhausen
generis-it@generis.ch
We have created the following additional positions:
Data Protection Officer pursuant to Art. 37 ff. DSGVO:
Generis AG
Patrik Li
Freier Platz 10
CH-8200
Schaffhausen
generis-it@generis.ch
Data protection advisor pursuant to Art. 10 revDSG:
Generis AG
Patrik Li
Freier Platz 10
CH-8200
Schaffhausen
generis-it@generis.ch
You can also contact these offices for data protection issues.
3. What data do we process?
We process various categories of data about you.
The main categories are as follows:
1. Technical data
When you use our website or other electronic services (e.g. free Wi-Fi), we collect the IP address of your end device and other technical data to ensure the functionality and security of these services. This data also includes logs in which the use of our systems is recorded. We generally store technical data for 12 months. To ensure the functionality of these offers, we can also assign you or your end device an individual code (e.g. in the form of a cookie, see section 12). The technical data itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person).
The technical data includes the IP address and information about the operating system of your end device, the date, region and time of use as well as the type of browser you use to access our electronic offers. This can help us to transmit the correct formatting of the website or, for example, to show you a website adapted to your region. Although we know from the IP address which provider you are using to access our offers (and therefore also the region), we cannot usually deduce who you are from this. This changes if you create a user account, for example, because personal data can then be linked to technical data. Examples of technical data include logs that are generated in our systems (e.g. the log of user logins on our website).
2. Registration data
Certain offers, e.g. competitions and services (e.g. login areas of our website, newsletter dispatch, free WLAN access, etc.) can only be used with a user account or registration, which can be done directly with us or via our external login service providers. In doing so, you must provide us with certain data and we collect data on the use of the offer or service. Registration data may be collected during access controls to certain systems; depending on the control system, biometric data may also be collected. As a rule, we retain registration data for 12 months after the end of use of the service or the termination of the user account.
3. Communication data
If you contact us via the contact form, by email or telephone, by letter or by other means of communication, we record the data exchanged between you and us, including your contact details and the marginal data of the communication. If we record or listen in on telephone conversations or video conferences, e.g. for training and quality assurance purposes, we will make you aware of this. Such recordings may only be made and used in accordance with our internal guidelines. You will be informed if and when such recordings take place, e.g. by a display during the relevant video conference. If you do not wish to be recorded, please let us know or end your participation. If you simply do not wish your image to be recorded, please switch off your camera. If we want or need to establish your identity, e.g. if you request information, apply for media access, etc., we will collect data to identify you (e.g. a copy of an ID card). We generally store this data for 10 months from the last exchange with you. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. E-mails in personal mailboxes and written correspondence are generally stored for at least 10 years. Recordings of (video) conferences are generally retained for 12 months.
Communication data is your name and contact details, the manner, place and time of communication and, as a rule, its content (i.e. the content of e-mails, letters, chats, etc.). This data may also contain information about third parties. For the purpose of identification, we may also process your ID number or a password you have set or your press card. For secure identification, the following mandatory information must be provided for media inquiries: Publisher, name of the publication, title, first name, surname, postal address, e-mail address and telephone number of the reporting person.
4. Master data
We define master data as the basic data that we require in addition to the contract data (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information, e.g. about your role and function, your bank account(s), your date of birth, customer history, powers of attorney, signature authorizations and declarations of consent. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to contact you for our own purposes or the purposes of a contractual partner (e.g. as part of marketing and advertising, with invitations to events, with vouchers, with newsletters, etc.). We receive master data from you yourself (e.g. when you make a purchase or register), from bodies for which you work or from third parties such as our contractual partners, associations and address dealers and from publicly accessible sources such as public registers or the internet (websites, social media, etc.). We may also process health data and information about third parties as part of master data. We may also collect master data from our shareholders and investors. We generally store this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons.
The master data includes, for example, data such as name, address, e-mail address, telephone number and other contact details, gender, date of birth, nationality, details of associated persons, websites, social media profiles, photos and videos, copies of ID cards; furthermore, details of your relationship with us (customer, supplier, visitor, service recipient, etc.), details of your status with us, classifications and distribution lists, details of our interactions with you (possibly a history of these with corresponding entries), reports (e.g. from the media), information about your relationship with us (e.g. from the media), information about your personal data. We also collect information about your relationship with us (customer, supplier, visitor, service recipient, etc.), information about your status with us, assignments, classifications and distribution lists, information about our interactions with you (possibly a history of these with corresponding entries), reports (e.g. from the media) or official documents (e.g. extracts from the commercial register, authorizations, etc.) that relate to you. We collect payment details such as your bank details, account number and credit card details. Consent or blocking notices are also part of the master data, as is information about third parties, e.g. contact persons, recipients of services, advertising recipients or representatives. In the case of contact persons and representatives of our customers, suppliers and partners, we process master data such as name and address, information on role, function in the company, qualifications and, if applicable, information on superiors, employees and subordinates and information on interactions with these persons. Master data is not collected comprehensively for all contacts. Which data we collect in detail depends in particular on the purpose of the processing.
5. contract data
This is data that arises in connection with the conclusion or execution of a contract, e.g. information on contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information on reactions (e.g. complaints or information on satisfaction, etc.). We generally collect this data from you, from contractual partners and from third parties involved in the execution of the contract, but also from third-party sources (e.g. providers of credit rating data) and from publicly accessible sources. We generally store this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons.
6. behavioral and preference data
Depending on our relationship with you, we try to get to know you and tailor our products, services and offers to you better. To do this, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we may also supplement this information with information from third parties, including from publicly accessible sources. Based on this, we can, for example, calculate the probability that you will use certain services or behave in a certain way. We anonymize or delete this data when it is no longer relevant for the purposes pursued, which can be between 0 weeks (for movement profiles) and 12 months (for product and service preferences), depending on the type of data. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. We describe how tracking works on our website in section 12.
7. other data
We also collect data from you in other situations. In connection with official or court proceedings, for example, data is collected (such as files, evidence, etc.) that may also relate to you. We may also collect data for health protection reasons (e.g. as part of protection concepts). We may receive or produce photos, videos and audio recordings in which you may be recognizable (e.g. at events, through security cameras, etc.). We may also collect data about who enters certain buildings or has access rights to them and when (including in the case of access controls, based on registration data or visitor lists, etc.), who participates in events or campaigns and when, or who uses our infrastructure and systems and when. The retention period for this data depends on the purpose and is limited to what is necessary. This ranges from a few days for many of the security cameras and usually a few weeks for contact tracing data to visitor data, which is usually stored for 12 months, to reports on events with images, which can be stored for several years or longer.
You provide us with much of the data mentioned in this Section 3 yourself (e.g. via forms, in the context of communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, subject to individual cases, e.g. as part of binding protection concepts (legal obligations). If you wish to conclude contracts with us or make use of services, you must also provide us with data as part of your contractual obligation in accordance with the relevant contract, in particular master data, contract data and registration data. When using our website, the processing of technical data is unavoidable. If you wish to gain access to certain systems or buildings, you must provide us with registration data. In the case of behavioral and preference data, however, you always have the option of objecting or not giving your consent.
Insofar as this is not impermissible, we also obtain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, media or the internet, including social media) or receive data from other companies within our group, from authorities and from other third parties (such as credit agencies, address dealers, associations, contractual partners, internet analysis services, etc.).
4. For what purposes do we process your data?
- We process your data for the purposes explained below. Further information for the online area can be found in sections 12 and 13. These purposes and the underlying objectives represent legitimate interests of us and, where applicable, of third parties. You will find further information on the legal basis of our processing in Section 5.
- We process your data for purposes related to communication with you, in particular to respond to inquiries and assert your rights (Section 11) and to contact you in the event of queries. In particular, we use communication data and master data and, in connection with offers and services used by you, registration data. We retain this data in order to document our communication with you, for training purposes, for quality assurance and for follow-up questions.
- We process data for the establishment, administration and processing of contractual relationships.
- We process data for marketing purposes and to maintain relationships, e.g. to send our customers and other contractual partners personalized advertising about our products and services and those of third parties (e.g. advertising contractual partners). This may, for example, take the form of newsletters and other regular contacts (electronically, by post, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing campaigns (e.g. events, competitions, etc.) and may also include free services (e.g. invitations, vouchers, etc.). You can refuse such contacts at any time (see the end of this section 4) or refuse or revoke your consent to being contacted for advertising purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see section 12). Finally, we also want to enable our contractual partners to contact our customers and other contractual partners for advertising purposes (see section 7).
- We continue to process your data for market research, to improve our services and operations and for product development.
- We may also process your data for security purposes and for access control.
- We also process data for the purposes of our risk management and in the context of prudent corporate governance, including business organization and corporate development.
- We may process your data for other purposes, e.g. as part of our internal processes and administration or for training and quality assurance purposes.
5. On what basis do we process your data?
If we ask for your consent for certain processing (e.g. for the processing of particularly sensitive personal data, for marketing mailings, for the creation of personalized movement profiles and for advertising control and behavior analysis on the website), we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time with effect for the future by sending us written notification (by post) or, unless otherwise stated or agreed, by email; our contact details can be found in Section 2. For the revocation of your consent for online tracking, see Section 12. If you have a user account, revocation or contact with us can also be carried out via the relevant website or other service. Once we have received notification of the withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.
Where we do not ask for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in it, in particular to pursue the purposes and associated objectives described above under Section 4 and to be able to carry out corresponding measures. Our legitimate interests also include compliance with statutory provisions, insofar as this is not already recognized as a legal basis by the applicable data protection law (e.g. in the case of the DSGVO, the law in the EWR and Switzerland). However, this also includes the marketing of our products and services, the interest in better understanding our markets and managing and further developing our company, including its operations, securely and efficiently.
If we receive sensitive data (e.g. health data, information on political, religious or ideological views or biometric data for identification purposes), we may also process your data on the basis of other legal grounds, e.g. in the event of disputes due to the necessity of processing for any legal proceedings or the enforcement of or defense against legal claims. In individual cases, other legal grounds may apply, which we will communicate to you separately if necessary.
6. What applies to profiling and automated individual decisions?
We may automatically evaluate certain of your personal characteristics for the purposes mentioned in Section 4 using your data (Section 3) (“profiling”) if we want to determine preference data, but also to determine abuse and security risks, to carry out statistical evaluations or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioral and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics. However, we can also create anonymous and – with your consent – personalized movement profiles of you.
In both cases, we pay attention to the proportionality and reliability of the results and take measures to prevent misuse of these profiles or profiling. If these can have legal consequences or significant disadvantages for you, we always provide for a manual review. In certain situations, for reasons of efficiency and uniformity of decision-making processes, it may be necessary for us to automate discretionary decisions concerning you with legal effects or potentially significant disadvantages (“automated individual decisions”). In this case, we will inform you accordingly and take the measures required by applicable law.
7. to whom do we disclose your data?
In connection with our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes listed in Section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:
Service providers:
We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, shipping companies, advertising service providers, login service providers, cleaning companies, security companies, banks, insurance companies, debt collection companies, credit agencies or address verifiers). This may also include health data.
Contractual partners including customers:
This initially refers to customers (e.g. service recipients) and other contractual partners of ours, because this data transfer arises from these contracts. For example, you receive registration data for vouchers issued and redeemed, invitations, etc. If you work for such a contractual partner yourself, we may also transmit data about you to them in this context. This may also include health data. The recipients also include contractual partners with whom we cooperate or who advertise for us and to whom we therefore transmit data about you for analysis and marketing purposes (these may in turn be service recipients, but also sponsors and providers of online advertising, for example). We require these partners to only send you advertising or display it based on your data if you have consented to this (for the online area, see section 12).
Public authorities:
We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. This may also include health data. The authorities process data about you that they receive from us under their own responsibility.
Other persons:
This refers to other cases where the involvement of third parties arises from the purposes set out in section 4, e.g. service recipients, media and associations in which we participate or if you are part of one of our publications.
All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
We reserve the right to disclose this data even if it concerns confidential data (unless we have expressly agreed with you that we will not disclose this data to certain third parties, unless we are legally obliged to do so). Irrespective of this, your data will continue to be subject to appropriate data protection even after disclosure in Switzerland and the rest of Europe. The provisions of Section 8 apply to disclosure to other countries. If you do not wish certain data to be disclosed, please let us know so that we can check whether and to what extent we can accommodate you (Section 2).
We also enable certain third parties to collect personal data from you on our website and at our events (e.g. media photographers, providers of tools that we have integrated on our website, etc.). Insofar as we are not decisively involved in this data collection, these third parties are solely responsible for it. If you have any concerns and wish to assert your data protection rights, please contact these third parties directly. See section 12 for the website.
8. will your personal data also be sent abroad?
As explained in section 7, we also disclose data to other bodies. These are not only located in Switzerland. Your data may therefore be processed both in Europe and in other countries around the world; in exceptional cases, however, in any country in the world.
If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with the applicable data protection law (we use the revised standard contractual clauses of the European Commission, which can be accessed here), unless the recipient is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption clause. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the performance of a contract requires such disclosure, if you have given your consent or if the data in question has been made generally accessible by you and you have not objected to its processing.
Please also note that data exchanged via the Internet is often routed via third countries. Your data may therefore be sent abroad even if the sender and recipient are located in the same country.
9. How long do we process your data?
We process your data for as long as required by our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes or if storage is technically necessary. Further information on the respective storage and processing periods can be found in the individual data categories in section 3 or in the cookie categories in section 12. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.
10. how do we protect your data?
We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorized or unlawful processing and to counteract the risks of loss, unintentional alteration, unwanted disclosure or unauthorized access.
11. What rights do you have?
Under certain circumstances, the applicable data protection law grants you the right to object to the processing of your data, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing.
To make it easier for you to control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:
- The right to request information from us as to whether and which of your data we are processing;
- the right to request that we correct data if it is incorrect;
- the right to request the deletion of data;
- the right to request that we hand over certain personal data in a commonly used electronic format or transfer it to another controller;
- the right to withdraw consent where our processing is based on your consent;
- the right to request further information necessary to exercise these rights.
If you wish to exercise the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; our contact details can be found in section 2. In order for us to rule out misuse, we must identify you (e.g. with a copy of your ID, if this is not otherwise possible).
You also have these rights vis-à-vis other bodies that work with us on their own responsibility – please contact them directly if you wish to exercise rights in connection with their processing. You will find details of our key cooperation partners and service providers in section 7, and further details in section 12.
Please note that these rights are subject to conditions, exceptions or restrictions under the applicable data protection law (e.g. to protect third parties or business secrets). We will inform you accordingly if necessary.
If you do not agree with our handling of your rights or data protection, please let us or our data protection officer (Section 2) know. In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority in your country:
12. do we use online tracking and online advertising techniques?
We use various technologies on our website with which we and third parties engaged by us can recognize you when you use our website and, under certain circumstances, track you over several visits. We will inform you about this in this section.
In essence, we want to be able to distinguish between your access (via your system) and access by other users so that we can ensure the functionality of the website and carry out evaluations and personalization. We do not want to draw conclusions about your identity, even if we can, insofar as we or third parties engaged by us can identify you by combining this with registration data. Even without registration data, however, the technologies used are designed in such a way that you are recognized as an individual visitor each time you visit the site, for example by our server (or the servers of third parties) assigning you or your browser a specific identification number (so-called “cookie”).
We use such techniques on our website and allow certain third parties to do the same. However, depending on the purpose of these techniques, we may ask for your consent before using them. You can access your current settings here https://generis.ch/. You can program your browser to block, deceive or delete existing cookies or alternative technologies. You can also add software to your browser that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the heading “Data protection”) or on the websites of the third parties listed below. A distinction is made between the following cookies (technologies with similar functions such as fingerprinting are also included here):
Necessary cookies
Some cookies are necessary for the functioning of the website as such or for certain functions. For example, they ensure that you can switch between pages without losing the information entered in a form. They also ensure that you remain logged in. These cookies are only temporary (“session cookies”). If you block them, the website may not work. Other cookies are necessary so that the server can save decisions or entries made by you beyond a session (i.e. a visit to the website) if you use this function (e.g. selected language, consent given, function for automatic log-in, etc.). These cookies have an expiry date of up to 24 months.
Performance cookies
In order to optimize our website and corresponding offers and to better tailor them to the needs of users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this by using third-party analysis services. We have listed these below. Before we use such cookies, we will ask for your consent. You can revoke this at any time via the cookie settings. Performance cookies also have an expiry date of up to 12 months. Details can be found on the websites of the third-party providers.
Marketing-Cookies
We and our advertising contract partners have an interest in targeting advertising precisely, i.e. only displaying it to those we want to address. We have listed our advertising contract partners below. For this purpose, we and our advertising contract partners – if you consent – also use cookies with which the content accessed or contracts concluded can be recorded. This enables us and our advertising contract partners to display advertising that we can assume is of interest to you – on our website, but also on other websites that display advertising from us or our advertising contract partners. Depending on the situation, these cookies expire after a few days or up to 12 months. If you consent to the use of these cookies, you will be shown appropriate advertising. If you do not consent to these cookies, you will not see less advertising, but simply any other advertising.
In addition to marketing cookies, we use other techniques to control online advertising on other websites and thereby reduce wastage. For example, we may transmit the email addresses of our users, customers and other persons to whom we wish to display advertising to operators of advertising platforms (e.g. social media). If these people are registered there with the same email address (which the advertising platforms determine by means of a comparison), the operators will display the advertising we have placed to these people in a targeted manner. The operators do not receive personal email addresses of people who are not already known. In the case of known email addresses, however, they will find out that these people are in contact with us and what content they have accessed.
We may also integrate other third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (e.g. by clicking a button), the relevant providers can determine that you are on our website. If you have an account with the social media provider, they can assign this information to you and thus track your use of online services. These social media providers process this data on their own responsibility.
We currently use offers from the following service providers and advertising contract partners (insofar as they use data from you or cookies set by you for advertising purposes):
Rybbit
Our website uses Rybbit, a privacy-friendly open source software for analyzing visitor flows. The analysis is carried out entirely on the server side and without the use of cookies. Rybbit helps us to better understand and continuously improve the use of our website – without having to rely on third-party providers.
The data is processed on our own server in Switzerland and is not transmitted to third parties. No personal profiles are created and individual visitors are not identified.
The following information is collected anonymously:
- Shortened IP address (e.g. by removing the last octet)
- Date and time of access
- Pages accessed and length of visit
- Origin of the visitor (e.g. referring website or campaign)
- Device type, browser and operating system used
Your rights and privacy
In accordance with the revised Swiss Data Protection Act (revDSG), you have the right to request information about the data stored about you at any time and, if necessary, to request its correction or deletion.
As Rybbit does not store any personal data and does not set any cookies, an opt-out is not technically necessary. The collection of data is completely anonymized.
Microsoft Dynamics
Microsoft Dynamics
Our website uses functions of Microsoft Dynamics, a Customer Relationship Management (CRM) system from Microsoft Corporation. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Dynamics enables us to manage customer relationships, improve communication and make business processes more efficient. Personal data may be collected and processed in the process. This includes, for example, contact data, communication histories and interactions with our website.
The processing of data by Microsoft Dynamics is based on our legitimate interests in accordance with Art. 6 Abs. 1 lit. f DSGVO. Our interests lie in optimizing our customer relationships and business processes. According to Microsoft, your data is hosted on servers in Switzerland.
Data protection with Microsoft Dynamics
Microsoft Dynamics is committed to complying with data protection regulations and has taken appropriate technical and organizational measures to ensure the protection of your personal data. Microsoft Dynamics is certified according to internationally recognized data protection standards.
Your personal data may be transferred within the Microsoft Group and to external service providers working on our behalf. All necessary measures are taken to ensure the protection and security of your data.
Revocation and information
You have the right to receive information about the personal data collected by Microsoft Dynamics at any time. You can also object to the processing and, under certain circumstances, request the deletion or correction of your data.
Please contact our data protection officer for information or concerns regarding your data processing.
Cloudflare
We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO). A CDN is a network of globally distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in Cloudflare server log files. Please refer to the explanations under “Hosting”.
Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 Abs. 1 S. 1 lit. f DSGVO not to operate a content delivery network ourselves.
You have the right to object to the processing. Whether the objection is successful must be determined as part of a balancing of interests. The processing of the data specified in this section is not required by law or contract. The functionality of the website is not guaranteed without the processing. Your personal data will be stored by Cloudflare for as long as is necessary for the purposes described.
Further information on objection and removal options vis-à-vis Cloudflare can be found at: Cloudflare DPA
Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). Further information can be found at: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf
13. can this privacy policy be changed?
This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.
Last update: 2025