1. Responsibility for the Online Offering
Judit Villiger

2. Processing of Personal Data
2.1 Terms
Personal data is all information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing encompasses any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, collection, deletion, storage, modification, destruction, and use of personal data.

2.2 Legal Basis
We process personal data in accordance with Swiss data protection law, in particular the Federal Data Protection Act (FADP) and the Ordinance to the Federal Data Protection Act (VDSG).

2.3 Type, Scope, and Purpose
We process the personal data necessary to provide our online offering in a permanent, user-friendly, secure, and reliable manner. Such personal data may fall into the categories of inventory and contact data, content data, usage data, and peripheral data, as well as contract data and payment data.

We process personal data for the period required for the respective purpose(s) or by law. Personal data whose processing is no longer required will be anonymized or deleted.

We generally only process personal data with the consent of the data subject, unless processing is permitted for other legal reasons, for example, to fulfill a contract with the data subject and for corresponding pre-contractual measures, to protect our overriding legitimate interests, because processing is evident from the circumstances, or after prior notification.

In this context, we process, in particular, information that a data subject voluntarily and independently provides to us when contacting us – for example, by letter, email, contact form, social media, or telephone – or when registering for a user account. We may store such information, for example, in an address book or using similar tools. If you transmit personal data from third parties to us, you are obligated to guarantee data protection towards such third parties and to ensure the accuracy of such personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect when providing our online services, if and to the extent that such processing is permitted for legal reasons.

Personal data obtained from applications is only processed to the extent that it relates to suitability for an employment relationship or is necessary for the subsequent execution of an employment contract. The personal data required for an application is derived from the information requested or provided, for example, in the job description. Applicants have the opportunity to voluntarily provide additional information for their respective applications.

2.4 Processing of personal data by third parties, including abroad
We may have personal data processed by third parties, such as contract processors, or process it jointly with or with the assistance of third parties, or transmit it to third parties. Such third parties include, in particular, providers whose services we use. We also guarantee appropriate data protection for such third parties.

Such third parties are generally located in Switzerland and the European Economic Area (EEA), including the European Union (EU). Such third parties may also be located in other countries on Earth and elsewhere in the universe, provided that their data protection laws ensure adequate data protection in the opinion of the Federal Data Protection and Information Commissioner (FDPIC), or if adequate data protection is ensured for other reasons, such as through an appropriate contractual agreement, in particular based on standard contractual clauses, or through appropriate certification. For third parties in the United States of America (USA), certification under the Privacy Shield may ensure adequate data protection. Exceptionally, such a third party may be located in a country without adequate data protection, provided that the data protection requirements, such as the express consent of the data subject, are met.

3. Rights of Data Subjects
Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information as well as the right to rectification, erasure, or blocking of the personal data processed.

Data subjects whose personal data we process have a Right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

4. Data Security
We take appropriate and suitable technical and organizational measures to ensure data protection and, in particular, data security. However, despite such measures, the processing of personal data on the Internet can always have security gaps. We therefore cannot guarantee absolute data security.

Access to our online offering is via transport encryption (SSL/TLS with HTTPS).

Access to our online offering is subject – as is generally the case with any Internet use – to mass surveillance without cause or suspicion, as well as other surveillance by security authorities in Switzerland, the European Union (EU), the United States of America (USA), and other countries. We have no direct influence on the corresponding processing of personal data by secret services, police authorities, and other security authorities.

5. Use of the Website
5.1 Cookies
We may use cookies for our website. Cookies – including those from third parties whose services we use (third-party cookies) – are text files stored in your browser. Cookies cannot run programs or transmit malware such as Trojans and viruses.

Cookies may be stored temporarily in your browser as "session cookies" when you visit our website or for a specific period of time as so-called permanent cookies. "Session cookies" are automatically deleted when you close your browser. Permanent cookies, in particular, enable us to recognize your browser the next time you visit our website and thus, for example, measure the reach of our website. Permanent cookies can also be used for online marketing, for example.

You can deactivate or delete cookies in your browser settings at any time, in whole or in part. Without cookies, our online offering may no longer be fully available. We will ask for your consent to the use of cookies – if and to the extent necessary.

For cookies used for performance and reach measurement or for advertising, a general opt-out is possible for numerous services via the Networking Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

5.2 Log Files
We may collect the following information for each access to our website, provided it is transmitted from your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual page accessed and amount of data transferred, last website accessed (referrer).

We store such information, which may also constitute personal data, in log files. This information is required to ensure the long-term, user-friendly, and reliable provision of our online services, as well as to ensure data security and, in particular, the protection of personal data – including through or with the assistance of third parties.

6. Third-Party Services
We may use third-party services to ensure the long-term, user-friendly, secure, and reliable provision of our online services. Such services also serve to embed content into our online services. Such services – for example, hosting and storage services, video services, and payment services – require your Internet Protocol (IP) address, as otherwise such services cannot transmit the corresponding content. Such services may be located outside Switzerland and the European Economic Area (EEA), including the European Union (EU), provided that adequate data protection is guaranteed.

For their own security-related, statistical, and technical purposes, third-party services may also process data related to our online services and from other sources in an aggregated, anonymized, or pseudonymized manner – including using cookies, log files, and tracking pixels. Such data is not used to directly contact data subjects in connection with our online offering.

6.1 Maps
We use Google Maps to embed maps into our website. Cookies are also used for this purpose. Google Maps is a service provided by the American company Google LLC, for users in the European Economic Area (EEA) and Switzerland. For example, the Irish company Google Ireland Limited is responsible. Further information about the type, scope, and purpose of data processing can be found in Google's Privacy and Security Principles and Privacy Policy, in the Google Products Privacy Policy (including Google Maps), in the information on how Google uses data from websites that use Google services, and in Google's information on cookies. You also have the option to object to personalized advertising.

6.2 Performance and Reach Measurement
We use Google Analytics to analyze how our website is used. This allows us to measure, for example, the reach of our website and the success of third-party links to our website. This is a service provided by the American company Google LLC; for users in the European Economic Area (EEA) and Switzerland, the Irish company Google Ireland Limited is responsible.

Google also attempts to track individual visitors to our website when they use different browsers or devices (cross-device tracking). Cookies are also used for this purpose. Google Analytics requires your Internet Protocol (IP) address, which will not be merged with other Google data.

In any case, we anonymize your Internet Protocol (IP) address before analysis by Google. As a result, your full IP address is generally not transmitted to Google in the USA.

Further information about the type, scope, and purpose of data processing can be found in Google's Privacy and Security Principles and Privacy Policy, the Guide to Data Protection in Google Products (including Google Analytics), the Information on How Google Uses Data from Websites That Use Google Services, and the Information on Cookies on Google. You also have the option of using the "Google Analytics Opt-Out Browser Add-on" and objecting to personalized advertising.

7. Final Provisions
We may adapt and supplement this Privacy Policy at any time. We will inform you of such adaptations and additions in an appropriate manner, in particular by publishing the current Privacy Policy on our website.