Legal information and data protection provisions

We appreciate your visit to a website of economiesuisse, the Swiss business federation (hereinafter "economiesuisse", "we", "us"), or your registration for one of our newsletters, a user account or other periodic online offers. We hope to provide you with the information you want about Swiss economic policy through this offering.

We believe that you should always know what data we collect from you and how we use it, and that you should have control over both. We want to empower you to make the best possible decisions about the information you share with us: That is the purpose of this Privacy Policy.

This Privacy Policy applies to our processing in connection with our online activities and campaigns. In addition, our general privacy policy applies.

We recommend that you regularly consult the legal notices and data protection provisions on our online offering, as we always endeavor to keep these provisions up to date. We reserve the right to make changes. At the bottom of this page you will find details of the most recent update.

These provisions are the same for all our online offers. If you have any questions, you can contact us at the data protection contact address given at the end of these provisions.

The data protection provisions always apply in conjunction with our Netiquette/UGC

The rights, titles and interests (including copyrights, trademarks, patents and other intellectual property rights and other rights) in and to all information and content (including all text, data, graphics and logos) on our online services remain with us or the respective rights holder.

Please note that the Internet is a publicly accessible system. Data that you enter into the system may be lost, sent to the wrong addressee or fall into the hands of unauthorized persons.

We attach great importance to your privacy and the protection of your personal data. Accordingly, we are responsible for the legally compliant collection, processing and use of your personal data. We are committed to responsible handling. Consequently, we consider it a matter of course to comply with the legal requirements of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and, where applicable, the provisions of the EU General Data Protection Regulation (GDPR) and other provisions of Swiss and European data protection law. We would therefore like to take this opportunity to inform you about how we process and protect the data we collect about you.

The following data protection provisions describe the following:

• What data do we collect?
• How do we protect your data?
• For what purposes and on what legal basis do we process your data (purpose of data processing)?
• How and when do we use cookies?
• Which tracking tools do we use?
• What other tools and plugins do we use?
• Which retargeting tools do we use?
• Which social media functionalities do we make available to you?
• Which customer relationship management (CRM) tools and content management systems (CMS) do we use?
• Personalization and automated decision-making
• When and how we share your data with third parties
• How long your data is stored
• What rights you have as a data subject
• How you can contact us

If you provide us with data of other persons (e.g. family members, data of employees, etc.)

We process your personal data. Personal data is any information relating to an identified or identifiable natural person ("data"). You are identifiable if you can be identified, directly or indirectly, for example by your name, an identification number, location data or an online identifier.

We process the data that is generated as part of the use of our online offering or the data that you provide (e.g. as part of a newsletter subscription).

If permitted, we may receive such data from publicly accessible sources, companies, authorities or other third parties.

Specifically, we process the following data from you, whereby we always inform you which data is mandatory for the specific case and which data you can provide to us on a voluntary basis.

Data that you provide to us directly:

• Contact data, such as title, first name, surname, company, address, zip code, city, email and telephone numbers. We generally process this data if you provide it to us via a form on our online offering, for example when using the contact form, our research service, the appointment calendar or a telephone number/email address to contact us.
• Content data, such as your text entries, photographs, videos or other content that you share with us. We usually process this data when you use a comment function, one of our online forms or contact us by email or telephone.
• Login data, such as your user name or password. We process this data when you use e-net.
• Online application data, such as your first name, surname, address, email address, telephone number and information from the documents (CV, certificates, etc.) that you provide to us. We process this data when you apply for an advertised position with us.
  

Data that is processed automatically without any action on your part when you interact with our online offering:

• Log file data when you access our website. When our website is accessed, a log file is generated which contains the IP address of the requesting computer, the date and time of access, the name and URL of the data accessed, the website from which our domain was accessed, the operating system of your computer and the browser you are using, the country from which our website is accessed and the name of your internet access provider.
  Usage data, such as websites visited, interest in content, file names of the files accessed, access times, functions used, location data. We generally process this data using tracking technology or cookies (see section 3.1. and section 4.1.).
• Meta/communication data, such as your IP address, the MAC addresses of the devices used, such as smartphones or computers, and other device and settings information. We generally process this data using tracking technology or cookies (see section 3.1. and section 4.1.).
• Social media data, such as IP address, names, profile pictures, etc., are processed by us. We process this data when you use one of the implemented social media functions (e.g. the "Like" button from Facebook or the "Follow" function from Twitter [so-called social plugins, see section 4.2.] or when you log in to us via your social media login). In order to increase the protection of your data, the social plugins are integrated into the website in such a way that they generally only process your personal data when you click on them.
  

Data that we collect from other sources:

The data that we receive from other sources, such as Google, or which is publicly accessible, is explained in detail below in this privacy policy.

We take appropriate technical, organizational or contractual measures to protect your data from unauthorized access and misuse. We only collect the data that is necessary for the performance of our business activities or the provision of our services.

We also take our own internal data protection very seriously. Our employees and the service companies commissioned by us are committed to data security and compliance with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary.

We process collected data for various purposes. Please note that you can object to any of these processing operations at any time. We use the data we collect for the following purposes:

• To provide you with our online offering, its functions and content, and to further develop or optimize it. For this purpose, we process your data based on our legitimate interest in the analysis, optimization and economic operation of our websites (Art. 6 para. 1 lit. f GDPR).
• In order to answer your contact inquiries via the various channels of our online offer, such as the contact forms on our websites, the telephone or e-mail, and to communicate with you. For this purpose, we process your data based on our legitimate interest in responding to your contact request (Art. 6 para. 1 lit. f GDPR).
• To check your online application for an open position with us. For this purpose, we process your data as part of pre-contractual measures or the performance of a contract (Art. 6 para. 1 lit. b GDPR).
• To send you our mailings (e.g. political newsletters, info mails, campaign mails). For this purpose, we process your data based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future (e.g. by using the unsubscribe button at the end of each mailing).
• In order to analyze your use of our offer, understand your needs, evaluate them and, if necessary, combine them with other data so that we can provide you with an offer that is more relevant to you. For this purpose, we process your data based on our legitimate interest in the analysis, optimization and economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).
• In order to make our marketing activities, in particular online advertising or when organizing events, relevant and personal. For this purpose, we process your data based on our legitimate interest in efficient and needs-based marketing (Art. 6 para. 1 lit. f GDPR).
• To optimize our campaigns and provide you with more relevant information in this regard. For this purpose, we process your data based on your express consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future
• to ensure the security of your data and our websites. For this purpose, we process your data based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).
• To assert legal claims and ensure defense in connection with legal disputes and official proceedings. For this purpose, we process your data based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on the hard disk of your end device when you visit our website. Most of the cookies we use are "session cookies". These are automatically deleted at the end of your visit.

Other cookies remain stored on your end device until they are actively deleted. The latter are used to recognize you the next time you visit our website. We use cookies, for example, to temporarily store your entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another subpage or to show you a personal website view, for example.

Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in the most common browsers:

• Microsoft Edge
• Mozilla Firefox
• Google Chrome for Desktop
• Google Chrome for Mobile
• Apple Safari for Desktop
• Apple Safari for Mobile

Disabling cookies may prevent you from using all the features of our websites.

We also use technologies similar to cookies, such as pixel tags, fingerprints and other technologies to store data in the browser. Pixel tags are small, usually invisible images or program code that are loaded by a server and thereby transmit certain information to the server operator, e.g. whether and when a website was visited. Fingerprints are information that is collected when you visit a website via the configuration of your end device or your browser and that make your end device distinguishable from other devices. Most browsers also support other technologies for storing data in the browser, similar to cookies, which we may also use (e.g. "web storage").

You can configure your browser in the settings so that it blocks certain similar technologies or deletes other data stored in the browser. You can also add software (so-called "plug-ins") to your browser that blocks tracking by certain third parties. You can find out more about this in the help pages of your browser (usually under the heading "Data protection"). Please note that our websites may no longer function to their full extent if you block similar technologies.

Mailchimp

We only send political newsletters, emails and other electronic notifications with advertising information (hereinafter "mailing") with the consent of the recipient. We use email marketing services from Mailchimp (The Rocket Science Group LLC d/b/a Mailchimp (USA) as a subsidiary of Intuit Inc. (USA), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) to send our mailings. The mailing data is stored both on the hosting server of the website and on a Mailchimp server in the USA.

Our mailings may contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber.

For each mailing sent, there is information on the address file used, the subject and the number of mailings sent. It is also possible to see which addresses have not yet received the mailing, to which address the mailing was sent and for which addresses the mailing failed. The opening rate can also be discussed, including information on which addresses have opened the mailing and which addresses have unsubscribed from the newsletter mailing list. Data on click behaviour within an automatically sent newsletter mailing can also be collected.

We use this data for statistical purposes and to optimize future mailings in terms of content and structure. This enables us to better tailor the information and offers in our mailings to your individual interests. The tracking pixel is deleted when you delete the newsletter. We base this data processing on Art. 6 para. 1 lit. f EU GDPR. This authorization permits the processing of personal data within the scope of our legitimate interest. The legitimate interest lies in direct marketing and analyzing the use of mailings. You can object to this data processing at any time if there are reasons relating to your particular situation that speak against data processing.

For more information on the collection and use of your data by Mailchimp, please refer to their privacy policy: https://mailchimp.com/legal/ or https://www.intuit.com/privacy/statement/

In order to prevent the use of the web beacon in our mailings, please set your mail program so that no HTML is displayed in messages, if this is not already the case by default. On the following pages you will find explanations on how to make this setting in the most common email programs.

• Microsoft Outlook
• Mail for Mac ("Load remote content in messages")

mailXpert

We only send political newsletters, emails and other electronic notifications containing advertising information (hereinafter "mailing") with the consent of the recipient. We use email marketing services from mailXpert GmbH (Schulstrasse 37, 8050 Zurich, Switzerland) to send our mailings. The mailing data is stored both on the website's hosting server and on mailXpert's encrypted servers in Switzerland.

Our mailings may contain a web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber.

For each mailing sent, there is information on the address file used, the subject and the number of mailings sent. It is also possible to see which addresses have not yet received the mailing, to which address the mailing was sent and for which addresses the mailing failed. The opening rate can also be discussed, including information on which addresses have opened the mailing and which addresses have unsubscribed from the newsletter mailing list. Data on click behavior within an automatically sent newsletter mailing can also be collected. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). However, this information is only collected in pseudonymized form and cannot be assigned to the respective newsletter recipient.

We use this data for statistical purposes and to optimize future mailings in terms of content and structure. This enables us to better tailor the information and offers in our mailings to your individual interests. The tracking pixel is deleted when you delete the newsletter. We base this data processing on Art. 6 para. 1 lit. f EU GDPR. This authorization permits the processing of personal data within the scope of our legitimate interest. The legitimate interest lies in direct marketing and analyzing the use of mailings. You can object to this data processing at any time if there are reasons relating to your particular situation that speak against data processing.

For more information on the collection and use of your data by mailXpert, please refer to their privacy policy: https://www.mailxpert.ch/datenschutz

To prevent the use of the web beacon in our mailings, please set your mail program so that no HTML is displayed in messages, if this is not already the case by default. On the following pages you will find explanations on how to make this setting in the most common email programs.

• Microsoft Outlook
• Mail for Mac ("Load removed content in messages")

If you no longer wish to receive political newsletters from mailXpert, you can unsubscribe at any time. We provide a link for this purpose in every political newsletter. You can also unsubscribe from the political newsletter at any time.

Google Analytics

We use the web analysis service of Google Analytics for the purpose of designing and continuously optimizing our websites to meet your needs. In this context, pseudonymized user profiles are created and cookies are used (see section 3.1.). The information generated by the cookie about your use of this website is transmitted to the servers of the providers of these services, stored there and processed for us. We may process the following information:

• the navigation path that a visitor takes on the website
  the time spent on the website or subpage
• the subpage on which the website is left
• the country, region or city from which access is made
• the end device (type, version, color depth, resolution, width and height of the browser window)
• Returning or new visitor

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website.

The provider of Google Analytics is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Before the data is transmitted to the provider, the IP address is shortened by activating IP anonymization ("anonymizeIP") on this website within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these cases, we use contractual guarantees to ensure that Google complies with an adequate level of data protection. According to Google, under no circumstances will the IP address be associated with other data relating to the user.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

Further information about the web analysis service used can be found on the Google website: https://policies.google.com/privacy

You can find instructions on how to prevent your data from being processed by the web analysis service here: https://tools.google.com/dlpage/gaoptout

Google Tag Manager

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our websites. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool is a cookie-free domain and, according to Google, does not collect any personal data. The tool triggers other tags, which in turn collect personal data. According to Google, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. You can prevent the setting of tags at any time.

The legal basis for the processing of data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

For more information on the collection and use of your data by Google Tag Manager from Google, please refer to their privacy policy: https://marketingplatform.google.com

Clickdimension

We use the web analytics service ClickDimensions (ClickDimensions LLC, 5901 Peachtree Dunwoody Road, NE, Suite C-370, Atlanta, GA 30328) within our online offering. This service allows us to analyze the activity of visitors to our websites. ClickDimensions uses cookies for this purpose. The information collected by ClickDimensions about your use of this website (e.g. the pages visited on our website) is transferred to a ClickDimensions server in Germany, stored there, analyzed and the result made available to us.
The information collected may be transferred by ClickDimensions to third parties if this is required by law or if third parties process this data on behalf of ClickDimensions. You can prevent the installation of cookies by setting your browser software accordingly.

The legal basis for the aforementioned data processing lies in your express consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.

For more information on the collection and use of your data by ClickDimensions, please refer to their privacy policy: https://clickdimensions.com/about/privacy-policy/

We use third-party plugins within our online offering (e.g. YouTube, Vimeo, Google Maps). These are content or service offers from third-party providers, such as videos and articles, in order to integrate them. We also use other third-party tools to generate our content, which may be based on artificial intelligence (e.g. ChatGPT).

ChatGPT

We sometimes use Chat GPT (OpenAI OpCo LLC, 3180 18th Street, San Francisco, California, 94110, USA) to generate our content. However, we do not use any personal data for prompts, which we also ensure through an internal policy on the use of such tools. Should we do so in exceptional cases, we will inform you separately. We then check the generated content for accuracy.

For more information on the collection and use of data by OpenAI, please refer to their privacy policy: https://openai.com/policies/privacy-policy, as well as the additional terms of use for ChatGPT: https://openai.com/policies/terms-of-use.

Google Maps

We use Google Maps API (Application Programming Interface, "Google Maps"; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our websites to visually display geographical information (maps). By using Google Maps, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there (see section 5.2.).

It is possible to deactivate the Google Maps service and prevent the transfer of data to Google by deactivating JavaScript in your browser. However, we would like to point out that you will not be able to use the map display in this case.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by Google and your rights in this regard, please refer to their privacy policy: https://policies.google.com/privacy, as well as the additional terms of use for Google Maps and Google Earth at https://www.google.com/intl/de_de/help/terms_maps/.

WhatsApp

If you contact us via WhatsApp (WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041, USA) or become part of one of our WhatsApp groups, you send us your telephone number. According to WhatsApp, this is stored on secure servers and is not passed on to third parties.

We only use the number for WhatsApp communication with you and for analysis purposes. If you install and use WhatsApp on your cell phone, you agree to WhatsApp's terms and conditions. These include, among other things, that you grant WhatsApp Inc. access to your phone number and the contacts stored on your phone. For questions of a personal or confidential nature (i.e. with content involving personal data), an email address or telephone number should be provided for further correspondence, as we do not answer such questions via WhatsApp.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offering (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by WhatsApp, please refer to their privacy policy: https://www.whatsapp.com/legal

Gender API

We use the Gender API (Markus Perl IT Solutions, Hermann-Mayrhofer-Str. 3, 94036 Passau, Germany) to determine the gender of first names in our database. This API enables us to better personalize our communication and interaction with our users. All services of Gender-API.com are carried out in accordance with the General Data Protection Regulation (GDPR). The servers of Gender API are located in Germany, and data processing takes place within the European Union.

The legal basis for the aforementioned data processing lies in our legitimate interest in optimizing the way we address our users and making our services more effective (Art. 6 para. 1 lit. f GDPR).

For more information about the Gender API, please refer to its privacy policy: https://gender-api.com/de/privacy-policy.

Facebook Connect

On our websites, you can register to create an account using the social plugin "Facebook Connect" of the social network Facebook (Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin, Ireland), as part of the so-called single sign-on technology, if you have a Facebook profile. You can recognize the social plugins of "Facebook Connect" on our websites by the button with the Facebook logo and the inscription "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook".

When you visit one of our websites that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

Only if you give your express consent in accordance with Art. 6 para. 1 lit. a GDPR before the login process on the basis of a corresponding notice about the exchange of data with Facebook, we will receive the general and publicly accessible information stored in your profile when using the "Facebook Connect" button from Facebook, depending on your personal data protection settings on Facebook. This information includes the user ID, name, profile picture, age and gender.

We would like to point out that following changes to Facebook's privacy policy and terms of use, your profile pictures, the user IDs of your friends and the friends list may also be transferred when you give your consent if they have been marked as "public" in your privacy settings on Facebook. The data transmitted by Facebook will be stored and processed by us for the use of the comment function with the necessary data, if this has been released by you on Facebook (title, first name, surname, address data, country, e-mail address, date of birth). Conversely, based on your consent, data (e.g. information about your surfing or purchasing behavior) may be transferred from us to your Facebook profile. You can revoke your consent at any time with effect for the future.

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information: http://www.facebook.com/policy.php

YouTube

We use plugins from the video portal YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) on our websites. YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use this plugin to improve the user experience by means of videos.

Every time you visit a page that offers one or more YouTube video clips, a direct connection is established between your browser and a YouTube server in the USA. This stores information about your visit and your IP address. By interacting with the YouTube plugins (e.g. clicking the start button), this information is also transmitted to YouTube and stored by YouTube. If you have a YouTube user account and do not want YouTube to collect data about you via this website and link it to your membership data stored on YouTube, you must log out of YouTube before visiting this website.

In addition, YouTube calls up the analysis tool Google Analytics via an iFrame in which the video is called up (see section 4.1.). This is YouTube's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by YouTube, please refer to the privacy policy of YouTube or Google: https://policies.google.com/privacy

Vimeo

We use the plugin of the video portal Vimeo (Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA) on our websites to improve the user experience by means of videos.

Every time you visit a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. This stores information about your visit and your IP address. By interacting with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored by Vimeo. If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website.

In addition, Vimeo calls up the Google Analytics analysis tool via an iFrame in which the video is called up (see section 4.1.). This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by Vimeo, please refer to their privacy policy: https://vimeo.com/privacy

Typeform

We use the survey service Typeform (TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, 1-2, Spain) to improve the user experience by means of attractively designed surveys.

Typeform collects access data (IP address) and input data. We collect the data that you enter in the form and technical data that we need for the functioning and maintenance of our service.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by Typeform, please refer to their privacy policy: https://admin.typeform.com/to/dwk6gt

SurveyMonkey

In order to better understand and address customer needs, we conduct online surveys with the help of the web provider SurveyMonkey. The surveys and the information you provide in them are processed by SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland ("SurveyMonkey"). All data entered by you in forms is encrypted and stored on the provider's servers, secured by passwords.

This data is collected and stored for us for marketing and optimization purposes. According to SurveyMonkey, the data is not merged with other personal data as part of this analysis. When you take part in a survey, SurveyMonkey collects the following personal data from you:

• Your answers in the survey;
• Your IP address;
• The date and time you took part in the survey;
• Contact data provided by you, e.g. your email address; and
• The date and time you took part in the survey.
• Cookies such as performance monitoring cookies.

SurveyMonkey reserves the right to share this information with third parties, including in other countries and the United States. For more information, please refer to the relevant sections of SurveyMonkey's privacy policy. Please note in particular that SurveyMonkey does not support "Do not track", i.e. users may be tracked.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

For more information on how SurveyMonkey handles personal data, please refer to SurveyMonkey's privacy policy: https://www.surveymonkey.de/mp/legal/privacy-policy/.

LimeSurvey

In order to better understand and address customer needs, we conduct online surveys with the help of the web provider LimeSurvey. The surveys and the information you provide in them are processed by LimeSurvey GmbH, Umfragedienste & Beratung, Papenreye 63, 22453 Hamburg, Germany ("LimeSurvey"). All data entered by you in forms is encrypted and stored on the provider's servers, secured by passwords.

This data collected in this way is collected and stored for us for marketing and optimization purposes. According to LimeSurvey, the data is not merged with other personal data as part of this analysis. When you take part in a survey, LimeSurvey collects the following personal data from you:

• Your answers in the survey;
• Your IP address;
• The date and time of your survey participation;
• Contact data provided by you, e.g. your email address; and
• The date and time of your survey participation.
• Cookies such as performance monitoring cookies.

LimeSurvey reserves the right to transfer this information to third parties, including to other countries and the USA. You can find more information on this in the relevant sections of LimeSurvey's privacy policy. Please note in particular that LimeSurvey does not support "Do not track", i.e. users may be tracked.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

For more information on how LimeSurvey handles personal data, please refer to LimeSurvey's privacy policy: https://www.limesurvey.org/de/datenschutzhinweise

EventManager

We use the event management tool EventManager (astendo GmbH, Wittestraße 30 C, 13509 Berlin-Reinickendorf, Germany). This tool allows you to plan, manage and analyze events. We collect the data that is entered in the registration form after your consent and technical data that we need for the functioning and maintenance of our service.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

https://www.astendo.de/Datenschutz.php

Intercom

We use the chat solution from Intercom for communication and interaction with our users (Intercom Inc, 55 2nd Street, 4th Floor, San Francisco, CA 94105, USA). You are responsible for the messages or content that you send to us via the chat function. We recommend that you do not transmit any sensitive information via the chat function. Personal data is only collected if you voluntarily transmit it to us in the chat. It is therefore up to you to decide what information you send us. In order to be able to answer your chat questions, we may ask you to provide us with additional information, e.g. your e-mail address, your telephone number, etc. We will only collect the personal data from you that is necessary to answer your questions or provide the services you have requested.

The legal basis for the aforementioned data processing lies in our legitimate interest in processing your chat request or message (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by Intercom, please refer to their privacy policy: https://www.intercom.com/legal/privacy

Evenito

We use the guest management tool Evenito (Evenito AG, Limmatquai 122, 8001 Zurich) to display photos. This tool allows guest photos to be shared in real time on our online offering and tagged with their name using the Evenito tagging app. We collect the data that is entered in the app form after your consent and technical data that we need for the functioning and maintenance of our service.

The legal basis for the aforementioned data processing is your consent (Art. 6 para. 1 lit. a GDPR).

For more information on the collection and use of your data by Evenito, please refer to their privacy policy: https://evenito.com/de/datenschutz/

Typekit

We use so-called web fonts from Adobe Typekit (Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA) for the uniform display of certain fonts on our website. When you access a website, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. In the course of providing the Typekit service, no cookies are placed or used to provide the fonts. To provide the Typekit service, Adobe may collect information about the font that is used to identify the website itself and the associated Typekit account.

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offering (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by Adobe Typekit, please refer to Adobe's privacy policy: https://www.adobe.com/privacy/policies/adobe-fonts.html

Mouseflow

We use Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (according to Mouseflow only with anonymized IP addresses). In particular, the web analysis tool records mouse movements, clicks, inputs masked with an asterisk, type of end device, browser used, operating system, language, page content, navigation, screen resolution, approximate location and other variables/tags. This creates a log of mouse movements and clicks with the intention of randomly analyzing individual website visits and deriving potential improvements for the website. The processed information is not passed on to third parties.

You can permanently object to Mouseflow's web analysis at any time by setting an opt-out cookie by downloading and installing the opt-out cookie available at the following link: https://mouseflow.com/opt-out/

You can consent to the use of Mouseflow via the cookie banner settings if you accept third-party cookies. This consent constitutes our legal basis for the processing of your data within the meaning of Art. 6 para. 1 lit. a GDPR.

For more information on the collection and use of your data by Mouseflow, please refer to their privacy policy: https://mouseflow.com/de/privacy-shield/

AddToAny

We offer you the option of sharing content on social media networks via the AddToAny service (AddToAny LLC, San Francisco, CA, USA). Data is only processed if you access these services yourself. As you can only use these services if you have a user account there and have to log in with your access data, the responsibility no longer lies with us from this point onwards, as the creation of user accounts, i.e. membership of a social media network, requires your consent. AddToAny does not store any personal data according to its privacy policy. We also do not receive any data from AddToAny or data resulting from the use of the share buttons. AddToAny provides an opt-out option for a large number of advertising networks. You can opt out directly via this link: https://optout.networkadvertising.org

The legal basis for the aforementioned data processing lies in our legitimate interest in the economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

For more information on the collection and use of your data by AddToAny, please refer to their privacy policy: https://www.addtoany.com/privacy

Adform

On our website we use the technology of Adform, Silkegade 3B, ST &1 93001, 1113 Copenhagen, Denmark. Adform offers a technology known in the advertising industry as Demand Side Platform (DSP). In simple terms, this means that digital advertising campaigns can be managed across a variety of channels such as websites, apps, audio platforms and smart TVs. Cookies are used to collect and transmit pseudonymized data and data that does not serve to identify individuals to Adform. This includes in particular, but is not limited to, your shortened and thus pseudonymized IP address, date and time of the website visit, location of the device you use to access our website (e.g. through the GPS signal of the device used, Bluetooth or the WLAN signal), page views and interaction with the page and the referring page (referrer). This data is transmitted to the Demand Side Platform and linked to your pseudonymous ID. This happens across all websites on all platforms that use this technology. The purpose of data collection and processing is to only deliver advertisements to you that are based on your previous interests and are therefore more relevant to you. Your personal data is pseudonymized before it is transmitted to Adform's demand-side platform. The data will not be passed on to third parties.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

Further information on the collection and use of your data by Adform can be found here: https://site.adform.com/privacy-center/overview/

Hotjar

On our websites, we use the tracking tool from Hotjar Ltd (St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta). By using Hotjar, mouse clicks, mouse and scroll movements as well as keystrokes can be recorded. The purpose of processing this data is to continuously improve and expand our website.

Hotjar uses a tracking code to collect and transmit your data. As soon as you visit our website, the Hotjar tracking code automatically collects the data based on your activity and stores it on the Hotjar servers in Ireland. In addition, the cookies placed on your computer or device by the website also collect data. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. If you would like to object to the collection of data by Hotjar (opt-out), please click here: https://www.hotjar.com/privacy/do-not-track/

The legal basis for the processing of data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

For more information on the collection and use of your data by Hotjar, please refer to their privacy policy: https://www.hotjar.com/legal/policies/privacy

curator.io

We use the services of curator.io (Curator Group Pty Ltd, 69 Ruthven Street, Bondi Junction, NSW 2022, Australia) to display content from our online offering. When you access a page that integrates content from curator.io, technical connection data is transmitted to the curator.io servers. This includes, in particular, your IP address, the date and time of access, the page accessed and browser information. This data is used to deliver the content provided by curator.io and to compile usage statistics.

The legal basis for the aforementioned data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The data may also be transferred to countries outside the European Union, in particular to the curator.io servers in Australia. The legal basis for this is your consent in accordance with Art. 49 para. 1 lit. a GDPR.

For more information on the collection and use of your data by curator.io, please refer to curator.io's privacy policy: https://curator.io/privacy-policy

We use retargeting technologies to personalize our online offering for you. This technology makes it possible to address Internet users who have already shown an interest in our websites and the offers presented there with targeted advertising. In retargeting, the advertising material is displayed on the basis of a cookie-based analysis of previous user behavior. We use Facebook Pixel, Twitter Pixel, Google and LinkedIn Pixel for this purpose.

Facebook Pixel

On our websites, we use the so-called "Facebook Pixel" of the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin, Ireland).

With the help of the Facebook pixel, Facebook can determine the visitors to our websites as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display Facebook ads placed by us only to those Facebook users who have also shown an interest in our websites or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The Facebook pixel is integrated directly when you visit our website and can store a so-called cookie on your device. If you subsequently log in to Facebook or visit Facebook while logged in, the visit to our website will be noted in your profile. The data collected about you is anonymous to us and does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The data can therefore be used by Facebook for its own market research and advertising purposes.

If we transmit data to Facebook for comparison purposes, it is encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of establishing a comparison with the data encrypted in the same way by Facebook.

The legal basis for the aforementioned data processing is your consent (Art. 6 para. 1 lit. a GDPR).

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising. We are jointly responsible with Facebook for the exchange of data that Facebook collects or receives via the pixel or comparable functions, for the display of advertising information that matches your interests, the improvement of ad delivery and personalization of functions and content (but not further processing). We have therefore concluded a corresponding additional agreement with Facebook: https://www.facebook.com/legal/controller_addendum. You can therefore address requests for information and other data subject requests in connection with joint responsibility directly to Facebook.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative. Further opt-out options can be found here:

• https://optout.aboutads.info
• http://www.youronlinechoices.com

In addition, you can exercise your opt-out option by clicking here.

For more information on the collection and use of your data by Facebook, please refer to their privacy policy: https://www.facebook.com/privacy/explanation

Twitter pixel

On our websites we use the so-called Twitter pixel (Twitter International Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland) for conversion tracking.

The pixel enables us to statistically record the use of our websites in order to optimize them. With conversion tracking, a cookie is set on your device by Twitter when you visit our website by clicking on a Twitter ad. Conversion tracking is used to compile statistics and not to identify you personally. We only want to know which Twitter ads or interactions bring users to our website. This information allows us, for example, to better control the placement of banner ads and target them to specific websites on the Internet.

The legal basis for the aforementioned data processing is your consent (Art. 6 para. 1 lit. a GDPR).

You can prevent the storage of cookies by setting your browser accordingly. In addition, you can make settings to receive advertising in your personal Twitter account: www.twitter.com/settings/personalization. Further information can be found at: www.business.twitter.com/de/help

For more information on the collection and use of your data by Twitter, please refer to their privacy policy: https://twitter.com/en/privacy

Google Ads and Google Conversion Tracking

The legal basis for the aforementioned data processing lies in our legitimate interest in the analysis, optimization and economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).

You can prevent the storage of cookies by setting your browser accordingly. Further information can be found at: https://policies.google.com/privacy

For more information on the collection and use of your data by Google, please refer to their privacy policy: https://policies.google.com/privacy

LinkedIn pixel

We use the so-called LinkedIn pixel for conversion tracking on our websites (LinkedIn Ireland Unlimited Company, Attn: Legal Dept., Privacy Policy and User Agreement, Wilton Plaza, Wilton Place, Dublin 2, Ireland). The pixel enables us to statistically record the use of our websites in order to optimize them. With conversion tracking, a cookie is set on your device by LinkedIn when you visit our website by clicking on a LinkedIn ad. Conversion tracking is used to compile statistics and not to identify you personally. We only want to know which LinkedIn ads or interactions bring users to our website. This information enables us to better control the placement of banner ads, for example, and to target them to specific websites on the Internet.

The legal basis for the aforementioned data processing is your consent (Art. 6 para. 1 lit. a GDPR).

You can prevent the storage of cookies by setting your browser accordingly. Further information can be found at: www.linkedin.com/help/linkedin

For more information on the collection and use of your data by LinkedIn, please refer to their privacy policy: https://www.linkedin.com/help/linkedin

Sizmek (formerly Rocket Fuel)

On our websites, we use the technology of the provider Sizmek Inc (formerly Rocket Fuel) (401 Park Avenue S, 10016 New York City, USA ("Sizmek"), which enables us to present you with relevant and targeted advertising material and advertisements, including for third-party offers, based on your interests and usage behavior on our websites. We also use Sizmek to measure and statistically evaluate the success of our advertisements (e.g. interaction with or clicks on an advertisement).

For this purpose, cookies are used to analyze and evaluate your usage behavior (e.g. clicks) and interaction with advertisements. The data collected includes usage-related data (e.g. clicks on advertisements, web pages, time and duration of visit) and browser data (e.g. language setting, screen resolution), which, according to Sizmek, do not allow any conclusions to be drawn about your person.

The legal basis for the aforementioned data processing lies in our interest in the personalized and interest-based advertising of our offer (Art. 6 para. 1 lit. f GDPR).

You can object to the use of Sizmek at any time using the opt-out tool at https://www.sizmek.com/privacy-policy-de/.

For more information on the collection and use of your data by LinkedIn, please refer to their privacy policy: https://www.sizmek.com/privacy-policy-de/

Our own social media presences

Within our online offering you will find links to social media networks. These are not plugins provided by the social media network, which already transmit data to the provider when the page is loaded without the user having any influence. The buttons for the social media networks merely contain a link to our presence on the social media network. No user data is transmitted from the website to the social media network. The links lead to our presence on the following networks:

• Facebook (Facebook by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• X (X Corp., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
• LinkedIn (LinkedIn Ireland Unlimited Company Attn: Legal Dept. (Privacy Policy and User Agreement) Wilton Plaza Wilton Place, Dublin 2 Ireland)
• Instagram (Facebook by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• YouTube (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA)
• WhatsApp (WhatsApp Inc. Attn: WhatsApp Copyright Agent 1601 Willow Road Menlo Park, California 94025 USA, [email protected])
• TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)

When you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while you are logged into your account with the relevant network, the content of our site may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the relevant links. An assignment takes place in any case if you log in to the relevant network after clicking on the link.

Social plugins

We use social plugins ("plugins") from social networks on our website. In order to increase the protection of your data when you visit our website, the plugins are integrated into the page in such a way that it is ensured that no connection is established with the servers of the provider of the respective social network when you access a page of our website that contains such plugins. Only when you activate the plugins and thus give your consent (Art. 6 para. 1 lit. a GDPR) to data transmission will your browser establish a direct connection to the servers of the respective social network. The content of the respective plugin is then transmitted directly to your browser by the relevant provider and integrated into the page.

If you click on the relevant social network icons, you will be linked to the relevant social network in order to perform the selected functionality, e.g. to share content on Facebook or tweet on Twitter. To do this, however, you must log into your user account or already be logged in. If you select one of the functions provided and click on the symbol of the relevant social network, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a social network while you are logged into your account with the social network in question, the content of our website can be linked to your profile on the social network. This means that the social network can assign your visit to our websites directly to your user account. If you wish to prevent this, you should log out before clicking on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link. We provide you with plugins from the following social networks:

• Facebook (Facebook by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• X (X Corp., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
• LinkedIn (LinkedIn Ireland Unlimited Company Attn: Legal Dept. (Privacy Policy and User Agreement) Wilton Plaza Wilton Place, Dublin 2 Ireland)
• Instagram (Facebook by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• YouTube (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA)
• WhatsApp (WhatsApp Inc. Attn: WhatsApp Copyright Agent 1601 Willow Road Menlo Park, California 94025 USA, [email protected])
• TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)

For the purpose and scope of the data collection and the further processing and use of the data by the respective social network, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of the social network.

Bemany - Swiss Campaigning Tools

We use the Swiss CRM tool Bemany - Swiss Campaigning Tools (economiesuisse, Hegibachstrasse 47, Zurich, Switzerland) within our online offering. We use this in conjunction with mailXpert (mailXpert GmbH, Schulstrasse 37, 8050 Zurich, Switzerland). The user and mailing data are stored both on the hosting server of the website and on encrypted servers of mailXpert in Switzerland.

Bemany allows us to create user profiles for personalization by first using the email address, name or other information that you have submitted to our website. In addition, the campaign tool can also track your user activity using the analysis function. This data can also be matched with your publicly available information (such as social media profiles) and used to build a personal profile, which we can display and use to improve our website or provide you with more relevant information. We do not use the automated social matching function as standard. The campaign tool may also provide for the sending of timed messages to you, such as e-mails, which we link to actions relevant to you.

The legal basis for the aforementioned data processing is your express consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.

In addition to the services listed, the CRM tool also uses its own necessary cookies, e.g. to enable logging in and to recognize users.

Cobra

We use the CRM tool Cobra (cobra computer's brainware AG, Bahnstrasse 1, 8274 Tägerwilen, Switzerland) within our online offering.

Cobra allows us to create user profiles for personalization by first using the email address, name or other information that you have transmitted to us. The tool can also track your user activity using the analysis function. This data can also be matched with your publicly available information (such as social media profiles) and used to build a personal profile, which we can display and use to improve our website or provide you with more relevant information. We do not use the automated social matching function as standard. The tool may also provide for the sending of timed messages to you, such as e-mails, which we link to actions relevant to you.

The legal basis for the aforementioned data processing is your express consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future.

For more information on the collection and use of your data by Cobra, please refer to their privacy policy: https://www.cobraag.ch/datenschutz/

Drupal

We use the open source CMS solution from Drupal (Drupal Association, 3439 NE Sandy Blvd 269, Portland, OR 97232, USA) to manage the content of our online offering.

Drupal allows us to create user profiles for personalization by first using the email address, name or other information you have submitted to our website. The tool can also track your user activity using the analysis function. This data can also be matched with your publicly available information (such as social media profiles) and used to build a personal profile, which we can display and use to improve our website or provide you with more relevant information. We do not use the automated social matching function as standard. The tool may also provide for the sending of timed messages to you, such as e-mails, which we link to actions relevant to you.

The legal basis for the aforementioned data processing is your express consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.

For more information on the collection and use of your data by Drupal, please refer to their privacy policy: https://www.drupal.org/privacy

Wordpress

We use the open source CMS solution from WordPress (WordPress Foundation, 660 4th Street, Box 119, San Francisco, CA 94107, United States, Employer Identification Number (EIN): 20-5498932) to manage the content of our online offer.

Wordpress allows us to create user profiles for personalization by first using the email address, name or other information you have submitted to our website. The tool can also track your user activity using the analysis function. This data can also be matched with your publicly available information (such as social media profiles) and used to build a personal profile, which we can display and use to improve our website or provide you with more relevant information. We do not use the automated social matching function as standard. The tool may also provide for the sending of timed messages to you, such as e-mails, which we link to actions relevant to you.

The legal basis for the aforementioned data processing is your express consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.

For more information on the collection and use of your data by Wordpress, please refer to their privacy policy: https://wordpress.org/about/privacy/

Microsoft Dynamics 365 - Sales

We use the CRM tool Microsoft Dynamics 365 - Sales (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) within our online offering.

Microsoft Dynamics 365 allows us to create user profiles for personalization by first using the email address, name or other information you have provided to us. The tool can also track your user activity using the analysis function. This data can also be matched with your publicly available information (such as social media profiles) and used to build a personal profile, which we can display and use to improve our website or provide you with more relevant information. We do not use the automated social matching function as standard. The tool may also provide for the sending of timed messages to you, such as emails, which we link to actions relevant to you.

The legal basis for the aforementioned data processing lies in your express consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.

For more information on the collection and use of your data by Microsoft Dynamics 365, please refer to their privacy policy: https://privacy.microsoft.com/de-de/privacystatement or the Microsoft Trust Center: https://www.microsoft.com/de-ch/trust-center/privacy

Nine Internet Solutions AG

We use hosting services from third parties. The website is hosted on a dedicated server of the company [Nine Internet Solutions AG, Badenerstrasse 47, 8004 Zurich, Switzerland]. Our hosting provider provides the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating our online services. We base this processing on our legitimate interest in ensuring the operation of our websites in accordance with Art. 6 para. 1 lit. f GDPR.

Your personal data may be processed partially automatically with the aim of evaluating certain personal aspects (so-called personalization). Personalization can be used in particular to provide you with targeted information and advice about products. This may involve the use of evaluation tools that enable needs-based communication and advertising, including market and opinion research.

You have the right, however, not to be subject to a decision based solely on automated processing - including personalization - that produces legal effects concerning you or similarly significantly affects you, unless you give us your express consent. You can revoke your express consent at any time with effect for the future.

We also disclose your data to third parties as part of our business activities and for the purposes set out in section 2.3, insofar as this is permitted and appears appropriate to us. This relates in particular to the following bodies:

• Service providers of ours, including contract processors (e.g. hosting services);
• advertising service providers, some of which act as our processors, others as independent or joint controllers;
• the public, including visitors to websites and social media;
• domestic and foreign public authorities, agencies or courts;
• other parties to potential or actual legal proceedings;
  (hereinafter: recipients)

These recipients are partly in Germany, but may also be located abroad. We only transfer your data to recipients in Switzerland and abroad if this is necessary in connection with the processing of your inquiries, the provision of services and marketing campaigns. In particular, you must expect your data to be transferred to all countries where the third parties commissioned by us are located (primarily the EU and the USA). The recipients of your data are explicitly named in this privacy policy. These recipients are obliged to maintain your privacy to the same extent as we do ourselves. If the level of data protection in a country is deemed inappropriate for Swiss conditions or within the meaning of the EU General Data Protection Regulation, we will ensure the protection of your personal data in an appropriate manner. For users residing in Switzerland or a member state of the EU, we would like to point out in particular that the USA does not have an adequate level of data protection from the point of view of Switzerland and the European Union.

If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection law (we use the revised standard contractual clauses of the European Commission, which available here), unless the recipient is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption provision. Please note that such contractual precautions can partially compensate for weaker or missing legal protection, but cannot completely exclude all risks (e.g. from state access abroad). In exceptional cases, the transfer to countries without adequate protection may also be permitted in other cases, e.g. based on consent, in connection with legal proceedings abroad or if the transfer is necessary for the performance of a contract.

We only process and store personal data for the period of time required to achieve the purpose. Beyond this, data is processed or stored in accordance with statutory retention or documentation obligations. It is possible that data will be stored for the period during which claims can be asserted against us or our legitimate interests make this necessary (e.g. for evidence and documentation purposes).

We only store data for as long as is necessary

• to use the aforementioned tracking services within the scope of our legitimate interest;
• to perform services that you have requested or for which you have given your consent to the extent specified above.

Data that is subject to a longer statutory retention period is retained by us for longer. Retention obligations that require us to retain data arise from accounting and tax regulations. According to these regulations, business communications, concluded contracts and accounting documents must be stored for up to 10 years. As soon as the data is no longer required for the above-mentioned purposes, it will be deleted, blocked or anonymized as far as possible.

You can object to data processing at any time, especially data processing in connection with direct advertising (e.g. against political mailings). You also have the following rights:

Right to information:

You have the right to request access to your personal data stored by us at any time free of charge if we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification:

You have the right to have incorrect or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure:

You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded.

Right to restriction of processing:

Under certain circumstances, you have the right to request that the processing of your personal data be restricted.

Right to data portability:

Under certain circumstances, you have the right to receive from us the personal data that you have provided to us in a readable format free of charge.

Right to lodge a complaint:

You have the right to lodge a complaint with a competent supervisory authority about the way in which your personal data is processed. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://edoeb.admin.ch). A list of the authorities in the EEA can be found here.

Right to withdraw consent:

You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

The exercise of the aforementioned rights generally requires that you provide clear proof of your identity (for example, in cases where your identity is not otherwise clear or cannot be verified, by means of a copy of your ID). To assert your rights, you can contact us at the address given in section 7.1.

Economiesuisse is responsible for data processing. If you have any data protection concerns, you can send them by post to the following contact address: economiesuisse, Data Protection, Hegibachstrasse 47, 8032 Zurich or by e-mail to [email protected]. These are also the contact details of our data protection officer. Our representative in accordance with Art. 27 GDPR is: VGS Datenschutzpartner GmbH, Am Kaiserkai 69, 20457 Hamburg, Germany.

As at: August 2023