We, adbodmer AG (Gotthardstrasse 3, 6300 Zug, Schweiz), are the operator of the www.adbodmer.ch website (Website) and, unless otherwise stated below, are responsible for the data processing listed in this privacy policy.

To help you understand what personal data we collect from you and for what purposes we use it, please read the information below. When it comes  to data protection, we are  guided by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP), as well as those of the EU General Data Protection Regulation (GDPR), the provisions of which may be applicable in individual cases.

Please note that the following information will be reviewed and changed from time to time. We therefore recommend that you consult this privacy policy regularly. Furthermore, other companies are responsible for individual data processing processes listed below or jointly responsible with us, so that in these cases the information of these providers is also authoritative.

If you contact us via our contact addresses and channels (e.g. by email or telephone), your personal data will be processed. The data that you have provided to us, such as: Your name, email address or telephone number and your request. In addition, the time of receipt of the request is documented. We process this data in order to implement your request (e.g. to provide you with information about our services, support in the execution of the contract, to include your feedback in the improvement of our services, etc.).

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in receiving and implementing requests or, if your request is directed at the conclusion or processing of a contract, the necessity for the implementation of the necessary contractual measures within the meaning of Art. 6 (1) (b) GDPR.

If you apply to us for employment in our company spontaneously or in response to a specific job advertisement, we will process the personal data you provide (e.g. personal details, CV and contact details). We use this to check your application and suitability for employment. The legal basis for this data processing is the necessity for the implementation of the necessary (pre-) contractual measures within the meaning of Art. 6 (1) (b) GDPR. Application documents of applicants who are not considered will be deleted at the end of the application process, unless you explicitly agree to a longer retention period or we are not legally obliged to keep them longer.

When you visit our website, the web servers temporarily store every access in a log file. The following data will be collected without your intervention and stored by us until it is automatically deleted:

• IP address of the requesting computer;
• Date and time of access;
• Name and URL of the retrieved file;
• Website from which the access was made, possibly with the search term used;
• Your computer's operating system and the browser you are using (including type, version, and language setting);
• Device type in case of access by mobile phones;
• city or region from which the access was made; and
• Name of your Internet access provider.

The collection and processing of this data is carried out for the purpose of enabling the use of our website (establishing a connection) and ensuring system security and stability in the long term. Furthermore, data processing serves the purpose of error and performance analysis as well as optimization of our website on the basis of statistical evaluations and the target group-specific presentation of the website (esp. preset of the language version of our website).

In the event of an attack on our data processing equipment or in the event of suspicion of unauthorized or improper use of the website, the IP address and other data for the purpose of Reconnaissance and defense and, if necessary, used in the context of civil or criminal proceedings to identify the user in question. For further data processing to protect our interests, we refer to No. 7.

In the purposes described above, our legitimate interest within the meaning of Art. 6 (1) (f) GDPR exists and thus the legal basis for data processing.

For data processing, we use the services of Hostpoint AG (Neue Jonastrasse 60, 8640 Rapperswil, Schweiz); (Provider)). Therefore, your data may be stored in a database of the Provider, which makes it possible for it to access your data if necessary for the provision of the Services and to assist in the use of the Services. Information on the processing of data by third parties and any transfer abroad can be found under No. 7 of this Privacy Policy. The legal basis for this processing is our legitimate interest within the meaning of Article 6 (1) (f) of the EU GDPR in the use of third-party services.

It may be that the Provider wishes to use some of this data for its own purposes (e.g. for statistical analyses). The Provider is the controller for this data processing and must ensure compliance with the data protection regulations in connection with this data processing. Information about data processing by the Provider can be found under https://www.hostpoint.ch/hostpoint/kontakt-agb.html#datenschutz.

Finally, when we visit our website, we use cookies as well as applications and tools to which one based on the use of cookies. In this context, the data described here may also be processed. Further information on this can be found in the other following sections of this data protection declaration, in particular the following section 5.2.

We use cookies on our website. Cookies are information files that your web browser stores on your device's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.

Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary for your desired use of the website, i.e. "technically necessary". For example, we use cookies for various technical functions, such as so-called load balancing, i.e. the distribution of the performance load of the site to different web servers, in order to relieve the servers. Cookies are also used for security purposes, e.g. to prevent the unauthorized posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in providing a user-friendly and up-to-date website.

Most web browsers automatically accept cookies. You may also be able to configure your browser so that cookies are not stored on your computer or that you always see a notice when you receive a new cookie. On the following pages you will find explanations on how you can configure the processing of cookies in selected browsers.

• Google Chrome for desktop
• Google Chrome for Mobile
• Apple Safari
• Microsoft Edge
• Mozilla Firefox

Disabling cookies may mean that you will not be able to use all the functions of our website.

If a clear assignment to your person is possible, we will use the data described in this privacy policy, i.e. in particular. Store and link your personal details, your contact details, your surfing behaviour and your surfing behaviour on our website in a central database. This serves the efficient management of customer data, allows us to process your requests adequately and enables the efficient provision of the services you request and the processing of the associated contracts.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in the efficient management of user data.

We also evaluate this data in order to further develop our services in line with your needs and to be able to display and suggest the most relevant information and offers possible. We also use methods that predict potential interests and future orders based on your use of our website. Some of these analyses can also be assessed as profiling (with or without high risk). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in carrying out marketing activities.

We use software for data processing der Integration Appliance, Inc (3101 Park Blvd, Palo Alto, CA 94306, USA; (Provider])). Therefore, your data may be stored in a database of the Provider, which makes it possible for it to access your data if this is necessary for the provision of the Software and to assist in the use of the Software. Information on the processing of data by third parties and any transfer abroad can be found under No. 7 of this Privacy Policy. The legal basis for this processing is our legitimate interest within the meaning of Article 6 (1) (f) of the EU GDPR in the use of third-party services.

It may be that the Provider wishes to use some of this data for its own purposes (e.g. for statistical analyses). The Provider is the controller for this data processing and must ensure compliance with the data protection regulations in connection with this data processing. Information about data processing by the Provider can be found under 

https://www.intapp.com/privacy/

. 

Finally, the data mentioned in this privacy policy may also be processed if this is necessary to comply with legal obligations or to safeguard, defend and enforce our legal interests, or the rights and interests of third parties, in particular other customers or our employees. This includes, for example, the review of incidents, the preparation and implementation of legal steps (e.g. lawsuits or complaints) or the provision of information to authorities such as tax and employment offices. For these purposes, the data may also be disclosed to other authorities and third parties, such as courts, debt collection offices, supervisory authorities or lawyers, tax advisors or accountants and auditors.  

The legal basis for this data processing, if it is covered by a legal provision of EEA law or a Member State, is the fulfilment of a legal obligation within the meaning of Art. 6 (1) (c) GDPR, or our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in complying with our legal obligations and safeguarding our legal interests. 

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to share some of your personal data with these companies. It will be passed on to selected third-party service providers and only to the extent necessary for the optimal provision of our services.

Recourse to service providers is also indispensable for the use and administration of our infrastructure and the fulfilment of internal tasks, and therefore other third parties may have access to your data to the extent necessary for the use of the services, such as providers of software solutions (e.g. for word processing or e-mail sending), providers of IT services (e.g. hosting providers,  telecommunications providers such as Internet access services), agencies (e.g. in the field of marketing) or security services. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in the use of third-party services.

In addition, your data may also be passed on to protect our rights and obligations (see section no. 7). Data may also be shared if another company intends to acquire or invest in our business, or parts of it, and such disclosure is necessary to conduct due diligence or to consummate the transaction.

The legal basis for the latter data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR in the sale of our company or shares thereof.

We are also entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing specified in this privacy policy. Of course, the legal regulations on the disclosure of personal data to third parties are complied with. The countries to which data are transferred include those that have an adequate level of data protection in accordance with the decision of the Federal Council and the EU Commission (such as the member states of the EEA or, from the EU's point of view, Switzerland), but also those states (such as the USA) whose level of data protection is not considered adequate (cf. Annex 1 of the Data Protection Regulation (DSV) and the Website of the EU Commission). If the country in question does not have an adequate level of data protection, we will ensure that your data is adequately protected by these companies by means of appropriate guarantees, unless an exception is specified in the individual case (cf. Art. 49 GDPR) in the individual data processing. Unless otherwise stated, this is the choice of companies that are subject to the Privacy Framework Agreement certified or, in some cases additionally, standard contractual clauses within the meaning of Art. 46 (2) (c) GDPR, which are available on the website of the Eidg. Data Protection and Information Officer (FDPIC) and the EU Commission can be accessed. If you have any questions about the measures taken, please contact our contact person for data protection (see section 2). 

Unless expressly stated otherwise, we will only retain personal data for as long as is necessary to carry out the processing explained in this Privacy Policy within the scope of our legitimate interest, or, if the legal basis is your consent, until its withdrawal. In the case of contract data, storage is prescribed by statutory retention obligations. Requirements that oblige us to store data result from the provisions on accounting and tax regulations. According to these regulations, in particular, business communications, concluded contracts and accounting documents must be kept for up to 10 years. Insofar as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any obligation to retain data and there is no longer a legitimate interest in storing it. 

We use appropriate technical and organisational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and to maintain data protection. In addition, these individuals are granted access to personal data only to the extent necessary for the performance of their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot therefore guarantee the security of information transmitted in this way.

If the legal requirements are met, you have the following rights as a data subject:

Right to information: You have the right to request access to your personal data stored by us at any time, free of charge, when we process it. This gives you the opportunity to check what personal data we process about you and whether we process it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will also inform the recipients of the data concerned about the adjustments we have made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased in certain circumstances. In individual cases, especially in the case of statutory retention obligations, the right to erasure may be excluded. In this case, if the conditions are met, the deletion may be replaced by a blocking of the data.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data portability: You have the right to receive from us, free of charge, the personal data you have provided to us in a readable format.

Right to object: You can object to data processing at any time, in particular in the case of data processing in connection with direct marketing (e.g. marketing emails).

Right of withdrawal: In principle, you have the right to revoke your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

To exercise these rights, please contact us using the information provided in the section 2 address(es) provided.  

Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way in which your personal data is processed.