Privacy policy

Disclaimer: This is a translation. Only the German privacy policy is legally valid.

We, Olmero AG, operate the website www.olmero.ch and are the provider of the services offered on the website and the associated platform. Data protection is an important concern for us. We process your data only in compliance with the relevant legal provisions. The following information refers to the Swiss Data Protection Act (DSG) – as far as applicable – while simultaneously taking into account the DSGVO (EU General Data Protection Regulation; GDPR). In the following, we are considered the responsible party for the collection, use and processing of your data.

You can contact us at any time by e-mail and letter post:

Olmero AG

Data Protection Officer

Europa-Strasse 30

8152 Glattbrugg

datenschutz@olmero.ch

In the following we will show you, if and how we process your data:

1. Overview

Source: Privacy Icons

2. Data processing, storage and deletion

We only process personal data that we collect directly via our website, the associated applications, via our platforms, via so-called “landing pages” or in the context of the business relationship with our customers and other business partners. Processing only takes place after consent has been given or if there is a corresponding legal basis.

Within the scope of the consent granted by you, we will only process your data within the limits of this granted consent, unless one of the legal bases mentioned below applies. We expressly point out that you can revoke the consent you have given at any time, whereby – lawful – processing actions that have already taken place are not affected by this.

The following reasons come into question as a legal basis:

• Consent of the data subject;

• Fulfilment of the contract with the data subject as a contractual party or necessary pre-contractual measures at the request of the data subject;
• Fulfilment of necessary legal obligations of our company;
• Performance or exercise of a task in the public interest;
• Legitimate interests of our company, provided that the interests of the data subject or their fundamental rights are not overridden.

The personal data collected will be deleted as soon as we no longer need it for the stated purpose or the purpose of storage no longer applies. On the other hand, storage must take place if the Swiss or European legislator provides for a corresponding obligation in the respective laws or regulations. Such obligations arise, among other things, from contract and tax law as well as from the provisions on commercial accounting. Business documents, contracts or accounting vouchers require a retention period of 10 years. This data, which also includes personal data but which we no longer need to provide our services, is blocked and subsequently used solely for accounting and tax purposes.

3. Disclosure to third parties

In the course of order processing, it may be necessary to use the services of third parties. In this case, it may be necessary to pass on data to these external service providers in order to provide the services in accordance with the contract. The legal basis for passing on data is identical to the legal basis for lawful processing and can be found under point 2. In any case, we contractually ensure that third parties commissioned to process your data comply with the requirements of data protection. Finally, under certain circumstances we may also be obliged by official and court order to hand over data to third parties or government agencies.

4. Provision of our services and creation of log files

Our system automatically collects and stores – as soon as you call up our website or are redirected to one of our “landing pages” – information in so-called log files. These are:

• Browser type and version
• operating system
• IP address
• Internet service provider
• Date and time

The aforementioned data cannot be directly assigned to any person. The data collected and stored in this way is not merged and stored with other personal data of yours, but is located in our system. The legal basis for the aforementioned collection and storage in log files is the legitimate interests of our company.

The storage in log files exclusively serves the functionality of our services. Furthermore, it supports the optimisation of our services and ensures the security of our information technology systems. In any case, the log files are only stored for as long as is necessary to achieve the purpose for which they were collected. Deletion is automated after each session.

The collection of your data and its storage in log files is absolutely necessary for the operation of our website; there is no possibility to object to this.

5. Cookies

We use cookies on our website. These are small text files that your browser stores on your computer (in the corresponding browser folder or under the programme data).

This makes it possible to uniquely identify the browser when you call up our website again. The display settings as well as login information are stored in the cookies and transmitted in each case. We use cookies for the user-friendly and secure design of our website. The legal basis for this is the legitimate interests of our company. Apart from that, you can decide for yourself in the cookie banner whether you only want to allow the necessary cookies.

Due to the fact that cookies are stored on your computer system, you have full control over their use. By changing the settings in your browser, you have the option of deactivating or restricting the transmission of cookies. You can also delete stored cookies at any time via your browser settings; this can also be done automatically. We would like to point out that deactivating cookies may mean that you can no longer use all the services on our website.

6. Google Analytics

We use Google Analytics on our website, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called cookies (cf. explanations in section 5), which are stored on your computer and enable an analysis of your use of our website. As a rule, the information generated by the cookie (such as browser type, operating system, IP address, referrer URL) is transmitted to a Google-owned server in the USA and stored there. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted within the scope of Google Analytics will not be merged by Google with other data – collected by Google – outside our website.

Data collection by Google signals is activated. Google signals are session data that Google links to users who are logged into their Google account and have activated personalised advertising.

Google will use the stored information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity or internet usage.
By changing the settings in your browser, you have the option to disable or restrict the transfer of cookies. You can also delete stored cookies at any time via your browser settings; this can also be done automatically. We would like to point out that deactivating cookies may mean that not all services of our website can be used.

In addition, you can prevent the collection of the information generated by the cookie and related to your use of our website to Google as well as its processing by Google.

For this purpose, the following browser add-on for deactivating Google Analytics has been developed and can be downloaded and installed directly from Google itself via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information regarding Google Analytics can be found in the Google Analytics Terms and Conditions (https://marketingplatform.google.com/about/analytics/terms/de/), the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de) and the associated Privacy Policy (https://policies.google.com).

7. HubSpot

We use HubSpot, a company of the same name, 1 Sir Jon Rogerson’s Quay, Dublin 2, Ireland, for our website. HubSpot may also process your data in the USA, among other places.

The legal basis for the use of HubSpot is your consent as a data subject. In addition, we have a legitimate interest in the use of HubSpot; this serves to optimise our website and our offer. The basis for data processing and data transfer to the USA are so-called standard contractual clauses (cf. Art. 46 para. 2 and para. 2 DSGVO). Through these clauses, HubSpot undertakes to comply with the applicable European law and the level of data protection. This also applies if the data is processed in a third country, such as the USA.

Further information on HubSpot: https://legal.hubspot.com/de/privacy-policy.

8. Contact form

Our website has various electronic contact forms. These are used so that you can get in touch with us. Depending on the form, the following data provided by you will be transmitted to us and stored: first and last name, telephone number, e-mail address, subject and message. In the career section, you also have the option of uploading your CV, which will then also be stored by us.

The information you provide us with is used solely to process your enquiry/message. By sending the enquiry/message, you consent to the data processing described. The legal basis for this is your consent. You can revoke your consent at any time. Data processing that has already taken place is not affected by such a revocation.

9. Social-Media-Plug-In: Facebook

We use so-called social plug-ins from Facebook on our website from the company of the same name, Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. You can recognise the corresponding plug-ins by the Facebook logo, the “Like” button or the “Share” button on our site.

You can find a corresponding overview under the link https://developers.facebook.com/docs/plugins. As soon as you visit our website, the respective plug-in creates a connection from your browser to the Facebook server. Regardless of whether you are logged in to Facebook or whether you even have a corresponding Facebook account, Facebook thereby receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged in to Facebook while visiting our website, Facebook can assign your visit to your profile.

We would like to point out that Facebook may use this information for the purposes of advertising, market research or for other purposes such as adjusting the advertisements displayed; we have no influence over this. If you do not wish your account to be associated with Facebook, please log out of your Facebook account before visiting our website. You can find more information on this in the corresponding Facebook privacy policy: https://www.facebook.com/about/privacy.

10. Social-Media-Plug-In: Instagram

We use so-called social plug-ins from Instagram from the company of the same name Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA on our website. You can recognise the corresponding plug-ins by the Instagram logo or the “camera” button on our website. As soon as you visit our website, the respective plug-in creates a connection from your browser to the Instagram server. Irrespective of whether you are logged in to Instagram or whether you even have a corresponding account, Instagram thereby receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged in on Instagram while visiting our website, Instagram can assign your visit to your profile.

Information regarding the purpose and scope of the respective data collection, the further processing and use of your data by Instagram as well as your rights and setting options can be found in the respective privacy notices of Instagram: https://help.instagram.com/155833707900388.
If you do not want Instagram to be able to assign the data collected on our website directly to your account, you must log out of Instagram before accessing our website. The loading of Instagram plug-ins can also be completely prevented with an add-on for your browser.

11. Social-Media-Plug-In: LinkedIn

We use so-called social plug-ins from LinkedIn of the company of the same name LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA on our website. You can recognise the corresponding plug-ins by the LinkedIn logo or the “Recommend” button on our website. As soon as you visit our website, the respective plug-in creates a connection from your browser to the LinkedIn server.

Regardless of whether you are logged in to LinkedIn or whether you even have a corresponding account with LinkedIn, LinkedIn receives the information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you click the “Recommend” button while logged into your account, you can share our pages on your profile. In the absence of knowledge of the information transmitted and details on data collection as well as your rights and setting options, we refer to the data protection declaration of LinkedIn: http://www.linkedin.com/legal/privacy-policy.

12. Social-Media-Plug-In: YouTube

We use so-called social plug-ins from YouTube from the company of the same name YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA on our website. You can recognise the corresponding plug-ins by the YouTube logo on our website.

As soon as you visit our website, the respective plug-in creates a connection from your browser to the YouTube server. Regardless of whether you are logged in to YouTube or whether you even have a corresponding YouTube account, YouTube thereby receives the information that you have visited our website with your IP address. This information is stored on servers in the USA. If you are logged in to YouTube while visiting our website, the platform creates an identifier/connection with your account on YouTube.

YouTube therefore also processes the data in the USA. The basis of the data processing and the data transfer to the USA are so-called standard contractual clauses. Through these clauses, YouTube undertakes to comply with the applicable European law and the level of data protection. This also applies if the data is processed in a third country, such as the USA.

We would like to point out that YouTube may use this information for the purposes of advertising, market research or for other purposes such as adjusting the advertisements displayed; we have no influence over this. If you do not wish your account to be associated with YouTube, please log out of your YouTube account before visiting our website. You can find more information on this in the corresponding YouTube privacy policy: https://policies.google.com/privacy.

13. Hotjar

We use Hotjar on our website from the company of the same name, Hotjar Limited, Level 2, St. Julians Business Centre 3, Elia Zammit Street, St. Julians STJ 1000, Malta. We use Hotjar to statistically analyse the visitors or visitor data of our website. Hotjar is an analysis and feedback tool which analyses the behaviour and feedback of our users. We would like to point out that our use of Hotjar requires your consent, which is therefore the legal basis. You can give your consent in the cookie banner. Furthermore, our company has a legitimate interest in the use of Hotjar.

Further information on Hotjar: https://www.hotjar.com/legal/policies/privacy/de/.

14. Right to information

As a data subject, you may request confirmation from us as to whether personal data relating to you is being processed by us. If this is the case, you have the right to information about the following:

• The purposes for which the personal data are processed;
• The categories of personal data being processed;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
• The planned duration of the storage of personal data concerning you or, if this is not possible, the criteria for determining this duration;
• The existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing;
• The existence of a right of appeal to a supervisory authority;
• Any available information about the origin of personal data which has not been collected from you;
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You also have the right to request information on whether personal data concerning you are transferred to a third country or an international organisation; in this case, you have the right to be informed about the appropriate safeguards in connection with the transfer.

15. Right of rectification

You have the right to request that we correct and/or complete inaccurate and/or incomplete personal data relating to you without undue delay.

16. Right to erasure

You have the right to request that we delete personal data relating to you without undue delay, provided that one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You withdraw your consent and there is no other legal basis for the processing;
• You object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing or you object to the processing for the purposes of direct marketing;
• The personal data concerning you has been processed unlawfully;
• The erasure of the personal data concerning you is necessary for compliance with a legal obligation;
• The personal data concerning you has been collected in relation to information society services offered.

17. Right to restriction of processing

You – as the data subject – have the right to request us to restrict processing if one of the following conditions is met:

• The accuracy of the personal data is disputed. The restriction may be requested for the period of time that enables us to verify the accuracy of the personal data;
• The processing is unlawful and you request restriction instead of deletion;
• We no longer need the personal data for processing, but you need it to assert, exercise or defend legal claims;
• You object to the processing.

If the processing of personal data relating to you is restricted, we may, with the exception of their storage, only process the data with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest.

If you have obtained a restriction of processing in accordance with the aforementioned conditions, you will be informed by us before this restriction is lifted.

18. Information and notification obligation vis-à-vis third parties

If we have made public the personal data concerning you and we are obliged to erase it, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the data controller processing the personal data that you have requested the erasure of any links to the personal data concerning you.

We will notify all recipients to whom personal data has been disclosed of any rectification or erasure of the personal data and of any restrictions on processing, unless this proves impossible or involves a disproportionate effort.

19. Exceptions to the right to erasure

The right to erasure does not apply where processing is necessary for the exercise of the right to freedom of expression and information and/or for the establishment, exercise and/or defence of legal claims.

20. Right to data portability

You – as a data subject – have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent or on a contract and the processing is carried out with the help of automated procedures.

You also have the right to obtain that the personal data concerning you be transferred directly from us to another controller, where this is technically feasible. This must not affect the rights and freedoms of other persons.

21. Right of objection

You have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. An additional exception is processing for the purpose of asserting, exercising or defending legal claims.

If we process personal data relating to you for the purposes of direct marketing, you have the right to object at any time to the processing for the purposes of such marketing. If you object to the processing for the aforementioned purpose, we will no longer use your personal data for this purpose.

22. Withdrawal of consent

You have the right to revoke your consent at any time. This revocation does not affect the lawfulness of the – lawful – processing that has already taken place.

23. Right to complain to a supervisory authority

You have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular at your place of residence (EU/CH), place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

Version Olmero AG, August 2022