Privacy policy
Personal data (hereinafter mostly referred to as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered therein.
According to Article 4 (1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
This privacy policy informs you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data where we either alone or jointly with others determine the purposes and means of processing. In addition, we inform you below about third-party components used for optimisation purposes and to improve user experience, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The controller responsible for this website within the meaning of data protection law is:
SKR Beteiligungs AG
Töpferstrasse 5
6004 Lucerne
SWITZERLAND
Managing Partner: Rico Back
Board of Directors: Markus Waldispühl
II. Rights of users and data subjects
With regard to the processing of personal data described below, users and data subjects have the right to:
- confirmation as to whether data concerning them is being processed, access to such data, further information on data processing, and copies of the data (see also Article 15 GDPR);
- rectification or completion of inaccurate or incomplete data (see also Article 16 GDPR);
- immediate deletion of their data (see also Article 17 GDPR), or, alternatively, where further processing is necessary pursuant to Article 17 (3) GDPR, restriction of processing under Article 18 GDPR;
- receipt of their data and transmission of such data to other controllers (see also Article 20 GDPR);
- lodge a complaint with the supervisory authority if they believe that data concerning them is being processed in violation of data protection regulations (see also Article 77 GDPR).
The controller is also obliged to inform all recipients to whom data has been disclosed of any correction, deletion or restriction of processing pursuant to Articles 16, 17 (1), 18 GDPR, unless this proves impossible or involves disproportionate effort. Users also have the right to obtain information on these recipients.
Furthermore, under Article 21 GDPR, users and data subjects have the right to object to the future processing of their data where it is processed by the controller pursuant to Article 6 (1) (f) GDPR. In particular, objections to processing for direct marketing purposes are permitted.
III. Information on data processing
Data processed during the use of our website will be deleted or blocked as soon as the purpose of storage ceases, unless statutory retention obligations prevent deletion or unless otherwise stated below for specific processing procedures.
Cookie manager
To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.
Upon accessing the website, a cookie containing the settings is stored on the user’s device so that the consent request does not have to be repeated on subsequent visits.
This cookie is necessary to obtain legally compliant user consent.
Users can prevent or terminate the installation of cookies via their browser settings.
Cookies
a) Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. These cookies process certain information about you, such as your browser or location data or your IP address, to an individual extent.
This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping basket function.
The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as these cookies process data for the purpose of initiating or executing a contract.
If the processing does not serve the purpose of contract initiation or contract processing, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, our website also uses cookies from partner companies with whom we collaborate for the purposes of advertising, analysis or the functionality of our website.
For details on this, in particular on the purposes and legal basis for the processing of such third-party cookies, please refer to the following information.
c) Opt-out
You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific internet browser you are using. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support service. However, the processing of so-called Flash cookies cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, however, this may mean that not all functions of our website can be used to their full extent.
Contact requests / Contact options
If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. The provision of this data is necessary for us to process and respond to your enquiry – without it, we will be unable to respond to your enquiry, or only to a limited extent.
The legal basis for this processing is Art. 6 (1) (b) GDPR.
Your data will be deleted once your enquiry has been answered and there are no legal retention obligations preventing deletion, such as in the case of any subsequent contract processing.
Online job applications / publication of job advertisements
We offer you the opportunity to apply for jobs with us via our website. In the case of these digital applications, we collect and process your applicant and application data electronically for the purpose of handling the application process.
For applications from Switzerland, processing is carried out on the basis of the Swiss Data Protection Act (DSG). The legal basis for processing applications from the European Union is Art. 6 (1) lit. b) GDPR and Art. 88 (1) GDPR.
If an employment contract is concluded after the application process, we will store the data you provided in your application in your personnel file for the purposes of the usual organisational and administrative processes – naturally in compliance with further legal obligations.
If an application is rejected, we will store the data provided to us for a limited period of time after the application process has been completed. This period is usually up to three months. The data is stored for the purpose of safeguarding legitimate interests, in particular the defence or enforcement of possible legal claims.
The legal basis for this is our overriding private interest in accordance with Art. 31 of the Swiss Data Protection Act (DSG) for applicants from Switzerland and Art. 6 (1) (f) GDPR for applicants from the EU.
If you expressly consent to the longer storage of your data, e.g. for inclusion in an applicant or prospect database, the data will be further processed on the basis of your consent. The legal basis is then Art. 6 (1) (a) GDPR or Art. 6 (6) DSG. However, you can of course revoke your consent at any time by notifying us, with effect for the future.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or our web space provider by your internet browser. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our internet presence that you visit, the date and time of each access, and the IP address of the internet connection from which you are using our website.
The data collected in this way is stored temporarily, but not together with other data about you.
This storage is based on the legal basis of Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is necessary for evidence purposes. Otherwise, the data will be excluded from deletion in whole or in part until an incident has been finally clarified.
LinkedIn 1
We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospective customers. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this regard, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may pose increased risks for users in that, for example, subsequent access to user data may be more difficult. We also have no access to this user data. Access is exclusively available to LinkedIn.
LinkedIn’s privacy policy can be found at https://www.linkedin.com/legal/privacy-policy
LinkedIn 2
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’, on our website.
Google Analytics helps us analyse the use of the website and measure the effectiveness of our marketing campaigns. The legal basis for this is Art. 6 (1) (a) GDPR. The user can revoke their consent to the use of Google Analytics at any time for the future in accordance with Art. 7 (3) GDPR via the ‘Cookie settings’ on our website.
Information such as the time, place and frequency of website visits and interactions with the website (e.g. click paths, ads viewed/clicked, clicks on links), including the user’s IP address, is transmitted to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the Data Privacy Framework, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also collects ‘demographic characteristics’ and can compile statistics that provide information about the age, gender and interests of website visitors. This is done through the automated analysis of advertising and information from third-party providers.
If the user has enabled personalised ads in their Google account and agrees to Google Analytics, Google can analyse usage behaviour across devices – i.e. across all devices that the user has linked to their Google account. Google creates models for cross-device conversions; we only receive anonymous statistics for this purpose, no personal data.
If the user wishes to deactivate this cross-device analysis, they can disable the ‘Personalised advertising’ function in their Google account settings at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en
We use Google Analytics with an anonymisation function. This shortens the user’s IP address by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area (EEA).
Google uses the collected data to evaluate the user’s website visit and compile reports on website activity for us. The data is also used to provide other services related to website and internet usage. Google may pass this information on to third parties if required by law or if third parties process this data on behalf of Google.
According to its own information, Google will never link the user’s IP address with other Google data. Further information and options for preventing data use are available from Google here:
https://policies.google.com/technologies/partner-sites
If the user does not agree to the collection of data, they can prevent this by installing the browser add-on to deactivate Google Analytics.
Google Tag Manager
We use Google Tag Manager to integrate various functions on our website. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’.
Google Tag Manager is used exclusively to integrate certain content into our website and to enable the management of these functions via an interface provided by Google.
When the website is accessed, the corresponding functions are loaded from a Google server, which may also be located in the United States. The user’s IP address is processed in order to provide the functions.
The functions used are listed in full in our privacy policy. The consents not given by the user for certain functions are also respected when using Google Tag Manager.
Google LLC is also part of the Data Privacy Framework, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR: