Data Privacy

Privacy Policy Swiss Global Cert GmbH

1 What is this privacy policy about?

Swiss Global Cert GmbH (hereinafter also “we”, “us”) obtains and processes personal data relating to you or also other persons (so-called third parties). We use the term “data” here synonymously with “personal data”.

In this privacy policy, we describe what we do with your data when you visit http://www.swissglobalcert.com, obtain our services or products, otherwise interact with us under a contract, communicate with us, or otherwise deal with us. Where appropriate, we will provide you with timely written notice of additional processing activities not mentioned in this privacy policy.

If you submit or disclose information about others to us, we will assume that you are authorized to do so and that such information is accurate. By submitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”) and the Swiss Data Protection Act (“DPA”). However, whether and to what extent these laws are applicable depends on the individual case.

2 Who is responsible for the processing of your data?

Swiss Global Cert GmbH, Gartenstrasse 7, 6300 Zug, (the “Swiss Global Cert GmbH”) is responsible for the data processing of Swiss Global Cert GmbH described in this privacy policy, unless otherwise communicated in individual cases.

In sections 3, 7 and 12 you will find further information about third parties with whom we cooperate and who are responsible for their processing. If you have any questions or wish to exercise your rights vis-à-vis these third parties, please contact them directly.

You can contact us for your data protection concerns and to exercise your rights under section 11 as follows:

Swiss Global Cert GmbH

Gartenstrasse 7

CH-6300 Zug

info@swissglobalcert.com

3 What data do we process?

We process different categories of data about you. The main categories are the following:

  • Technical data: When you use our website or other electronic services, we collect the IP address of your terminal device and other technical data to ensure the functionality and security of these services. This data also includes logs in which the use of our systems is recorded. In order to ensure the functionality of these services, we may also assign an individual code to you or your end device (e.g. in the form of a cookie, cf. section 12). The technical data in itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person). Technical data includes, among other things, the IP address and information about the operating system of your terminal device, the date, region and time of use, and the type of browser you use to access our electronic services. This can help us to transmit the correct formatting of the website.
  • Registration Data: Certain offers and services can only be used with a user account or registration, which can be done directly with us or through our external login service providers. In doing so, you must provide us with certain data and we collect data about the use of the offer or service.
  • Communication Data: When you are in contact with us via the contact form, email, telephone, letter or other means of communication, we collect the data exchanged between you and us, including your contact details and the boundary data of the communication. If we want or need to establish your identity, we collect data to identify you (e.g. a copy of your ID).
  • Master Data: We refer to Master Data as the basic data that we need, in addition to Contractual Data (see below), to process our contractual and other business relationships or for marketing and promotional purposes, such as name, contact details and information about, for example, your role and function, bank account(s), date of birth, customer history, powers of attorney, signature authorizations and consent forms. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to address you for our own purposes or the purposes of a contractual partner (e.g. as part of marketing and advertising, with invitations to events, with vouchers, etc.). We receive master data from you yourself (e.g. when making a purchase or as part of a registration), from bodies for which you work, or from third parties such as our contractual partners, associations and from publicly accessible sources such as public registers or the Internet.
  • Contract data: This is data that arises in connection with the conclusion or execution of a contract, e.g., information about contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information about reactions. As a rule, we collect this data from you, from contractual partners and from third parties involved in the processing of the contract, but also from third-party sources and from publicly accessible sources.
  • Behavioral and preference data: Depending on our relationship with you, we try to get to know you and better tailor our products, services and offers to you. To do this, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we may also supplement this information with information from third parties – including publicly available sources. Based on this, we can, for example, calculate the probability that you will use certain services or behave in a certain way. The data processed for this purpose is partly known to us (e.g. when you use our services), or we obtain this data by recording your behavior (e.g. how you navigate on our website). We anonymize and delete this data when it is no longer meaningful for the purposes pursued.
  • Other data: We also collect data from you in other situations. We may receive or produce photos, videos and sound recordings in which you may be recognizable (e.g., at events).

You disclose much of the data mentioned in this section 3 to us yourself. You are not obliged to do so, subject to individual cases, e.g. within the framework of binding protection concepts. If you wish to conclude contracts with us or claim services, you must provide us with data, in particular master, contract and registration data, as part of your contractual obligations under the relevant contract. When using our website, the processing of technical data is unavoidable.

Insofar as this is not inadmissible, we also take data from publicly accessible sources or receive data from authorities and other third parties.

4 For what purposes do we process your data?

We process your data for the purposes we explain below. You will find further information for the online area in sections 12 and 13. These purposes or the underlying objectives represent legitimate interests of us and, where applicable, of third parties. You will find further information on the legal basis for our processing in section 5.

We process your data for purposes related to communication with you, in particular to respond to inquiries and assert your rights (section 11) and to contact you in the event of queries. For this purpose, we use communication data and master data in particular. We retain this data to document our communication with you, for training purposes, for quality assurance and for follow-up inquiries.

We process data for the conclusion, administration and processing of contracts within the scope of our offers, services and business relationships.

We process data for marketing purposes and relationship management, e.g. to send our customers and other contractual partners personalized advertising on products and services from us and from third parties. You can refuse such contacts at any time or refuse or revoke consent to be contacted for advertising purposes. With your consent, we can target our online advertising on the internet more specifically to you.

We continue to process your data for market research, to improve our services and operations, and for product development.

We may also process your data for security and access control purposes.

We process personal data to comply with laws, directives and recommendations from authorities and internal regulations (“compliance”).

We also process data for the purposes of our risk management and prudent corporate governance, including business organization and development.

We may process your data for other purposes, e.g. as part of our internal processes and administration.

5 On what basis do we process your data?

If we ask for your consent for certain processing, we will inform you separately about the corresponding purposes of the processing. You can revoke consent at any time by written notice with effect for the future; you will find our contact details in section 2. For revocation of your consent for online tracking, see section 12. Where you have a user account, revocation or contact with us can also be carried out via the relevant website or other service, if applicable. Once we have received notification of the withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Where we do not ask you for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, so in particular in order to pursue the purposes and related objectives described above under section 4 and to be able to implement appropriate measures. Our legitimate interests also include compliance with legal requirements, to the extent that this is not already recognized as a legal basis by the applicable data protection law in each case (e.g., in the case of the GDPR, the law in the EEA and Switzerland).

If we receive sensitive data (e.g. health data, information on political, religious or ideological views or biometric data for identification purposes), we may also process your data based on other legal grounds, e.g. in the event of disputes due to the need for processing for any litigation or the enforcement or defense of legal claims. In individual cases, other legal grounds may come into play, which we will communicate to you separately where necessary.

6 What applies to profiling and automated individual decisions?

We may automatically evaluate (“profile”) certain of your personal characteristics for the purposes mentioned in section 4 using your data (section 3), if we want to determine preference data, but also to determine abuse and security risks, to perform statistical evaluations or for operational planning purposes. For the same purposes, we may also create profiles, i.e. we may combine behavioral and preference data, but also master and contract data and technical data assigned to you, in order to better understand you as a person with your different interests and other characteristics. In both cases, we pay attention to the proportionality and reliability of the results and take measures against misuse of these profiles or profiling. If these can have legal effects or significant disadvantages for you, we generally provide for a manual review.

7 Who do we disclose your information to?

In connection with our contracts, the Website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes listed in section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:

  • Service providers: We work with service providers in Germany and abroad who process data about you on our behalf or in joint responsibility with us, or who receive data about you from us in their own responsibility.
  • Contractual partners incl. customers: This initially refers to customers and other contractual partners of ours, because this transfer of data results from these contracts. If you work for such a contractual partner yourself, we may also transfer data about you to them in this context. Recipients further include contractual partners with whom we cooperate.
  • Authorities: We may disclose personal data to offices, courts and other authorities in Germany and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us under their own responsibility.
  • Other persons: This refers to other cases where the involvement of third parties arises from the purposes pursuant to section 4.

All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict the processing by certain third parties, but not by other third parties.

8 Does your personal data also end up abroad?

As explained in section 7, we also disclose data to other entities. These are not only located in Switzerland. Your data may therefore be processed both in Europe and, in exceptional cases, in any country in the world.

If a recipient is located in a country without adequate legal data protection, we contractually obligate the recipient to comply with the applicable data protection law, unless the recipient is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exception. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the performance of a contract requires such disclosure, if you have consented or if it is a matter of data made generally available by you, the processing of which you have not objected to.

9 How long do we process your data?

We process your data for as long as our processing purposes, the legal retention periods and our legitimate interests in processing for documentation and evidence purposes require or storage is technically necessary. If there are no legal or contractual obligations to the contrary, we delete or anonymize your data after the storage or processing period has expired as part of our normal processes.

10 How do we protect your data?

We take reasonable security measures to maintain the confidentiality, integrity and availability of your personal information, to protect it against unauthorized or unlawful processing, and to protect against the risks of loss, accidental alteration, unauthorized disclosure or access.

11 What rights do you have?

Applicable data protection law grants you the right to object to the processing of your data under certain circumstances.

To help you control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

  • The right to request information from us as to whether and what data we are processing from you;
  • The right to have us correct data if it is inaccurate;
  • The right to request that we delete data;
  • The right to request that we release certain personal data in a commonly used electronic format or transfer it to another data controller;
  • The right to withdraw consent where our processing is based on your consent;
  • The right to obtain, upon request, further information necessary to exercise these rights.

If you wish to exercise the above rights against us, please contact us in writing or by e-mail; you will find our contact details in section 2. In order for us to exclude abuse, we must identify you.

Please note that conditions, exceptions or restrictions apply to these rights under applicable data protection law (e.g. to protect third parties or trade secrets). We will inform you accordingly if necessary.

If you do not agree with our handling of your rights or data protection, please let us know. In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to complain to the data protection supervisory authority in your country.

12 Do we use online tracking?

On our website, we use various techniques with which we and third parties engaged by us can recognize you during your use and possibly also track you over several visits. In this section, we inform you about this.

In essence, this is so that we can distinguish accesses by you (via your system) from accesses by other users, so that we can ensure the functionality of the website and carry out evaluations and personalizations. In doing so, we do not want to infer your identity, even if we can do so to the extent that we or third parties engaged by us can identify you through combination with registration data. Even without registration data, however, the techniques used are designed to recognize you as an individual visitor each time you access a page, for example by our server (or the servers of third parties) assigning you or your browser a specific recognition number (a so-called “cookie”).

We use such techniques on our website and allow certain third parties to do so as well. You can program your bowser to block, deceive, or delete existing cookies from certain cookies or alternative techniques. You can also enhance your browser with software that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the keyword “Privacy”) or on the websites of the third parties that we list below.

The following cookies are distinguished:

  • Necessary cookies: Some cookies are necessary for the functioning of the website as such or certain functions. For example, they ensure that you can switch between pages without losing information entered in a form. They also ensure that you remain logged in. These cookies only exist temporarily (“session cookies”). If you block them, the website may not work. Other cookies are necessary so that the server can save decisions or entries made by you beyond one session (i.e. one visit to the website) if you request this function (e.g. language selected, consent given, the function for automatic login, etc.).
  • Performance Cookies: In order to optimize our website and corresponding offers and to better adapt them to the needs of the users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this through the use of third-party analytics services. We have listed these below.

We may also integrate further third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (e.g. by clicking a button), the corresponding providers can determine that you are on our website. If you have an account with the social media provider, they can assign this information to you and thus track your use of online offers. These social media providers process this data under their own responsibility.

We currently use offers from the following service providers and advertising contract partners (insofar as they use data from you or cookies set at your site for advertising purposes):

  • Google Analytics: Google Ireland (based in Ireland) is the provider of the “Google Analytics” service and acts as our order processor. Google Ireland relies on Google LLC (based in the USA) as its order processor (both “Google”) for this purpose. Google uses performance cookies (see above) to track the behavior of visitors to our website (duration, frequency of pages viewed, geographic origin of access, etc.) and compiles reports for us on the use of our website on this basis. If you agree to the use of Google Analytics, you explicitly consent to such processing, which also includes the transfer of personal data (in particular usage data for the website and app, device information and individual IDs) to the USA and other countries. Information on the data protection of Google Analytics can be found here: https://support.google.com/analytics/answer/6004245 and if you have a Google account, you can find further details on processing by Google here: https://policies.google.com/technologies/partner-sites?hl=de.
  • Maps of the service “Google Maps” of the third party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: http://www.google.com/policies/privacy/, Opt-Out: google.com/settings/ads/.
  • Videos from the “YouTube” platform of the third-party provider YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Privacy policy: http://www.google.com/policies/privacy/, Opt-Out: google.com/settings/ads/.

13 What data do we process on our pages in social networks?

We may operate pages and other online presences (“fan pages”, “channels”, “profiles” etc.) on social networks and other platforms operated by third parties and collect the data about you described in section 3 and below there. We receive this data from you and the platforms when you come into contact with us via our online presence (e.g., when you communicate with us, comment on our content or visit our presence). At the same time, the platforms evaluate your use of our online presences and link this data with other data about you known to the platforms (e.g., about your behavior and preferences). They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes (e.g. to personalize advertising) and to control their platforms (e.g. which content they show you).

We process this data for the purposes described in section 4, in particular for communication, marketing purposes (including advertising on these platforms, see section 12) and market research. You will find information on the relevant legal basis in section 5. We may ourselves disseminate content published by you (e.g. comments on an announcement) (e.g. in our advertising on the platform or elsewhere). We or the operators of the platforms may also delete or restrict content from or to you in accordance with the usage guidelines (e.g. inappropriate comments).

For more information about the edits of the operators of the platforms, please refer to the privacy notices of the platforms. There you will also learn in which countries they process your data, which rights of access, deletion and other data subject rights you have and how you can exercise these or obtain further information. We currently use the following platforms:

  • Facebook: The responsible body for the operation of the platform for users from Europe is Facebook Ireland Ltd, Dublin, Ireland. Their privacy policy is available at http://www.facebook.com/policy. Some of your data will be transferred to the USA. Objection regarding advertising is possible here: http://www.facebook.com/settings?tab=ads. With regard to the data collected and processed when visiting our site for the creation of “Page Insights”, we are jointly responsible with Facebook Ireland Ltd, Dublin, Ireland. As part of Page Insights, statistics are compiled about what visitors do on our site (comment on posts, share content, etc.). This is described at http://www.facebook.com/legal/terms/information_about_page_insights_data. It helps us understand how our site is being used and how we can improve it. We only receive anonymous, aggregated data. We have defined our responsibilities regarding data protection according to the information on http://www.facebook.com/legal/terms/page_controller_addendum geregelt.
  • LinkedIn: The responsible entity for the operation of the platform for users from Europe is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For more information, please see LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

14 Can this privacy policy be changed?

This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.

Last updated: October13, 2023