Imprint

1.1 Scope

This privacy statement applies to all pages of our online network that link to this statement.

The overarching disclosures can be found on our main privacy page.

1.2 Purpose of data collection

The purpose of the data collection is the optimization of the website, the error analysis, the individual tailoring to your needs, the offer to contact you and, if necessary, the sale of goods and services.

1.3 General information on data processing

As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services or to the extent that you as a user make this data available to us through voluntary input. The collection and use of personal data by you as a user is regularly only carried out after consent or for the justification and execution of a legal transaction. An exception applies in those cases where obtaining prior consent is not possible or disproportionate for factual reasons and the processing of the data is permitted by another legal provision.

1.4 Legal basis for the processing of your data:

The processing of personal data is based on the Swiss Data Protection Act (DSG) and the European General Data Protection Regulation (DSGVO).

If the Swiss Data Protection Act applies, the legal basis for data processing is to be found in Art. 6 DSG.

Insofar as we obtain the consent of the data subject for processing operations of personal data within the scope of the GDPR, Art. 6 (1) lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

Legitimate interests can be in particular:

• Answering inquiries
• The implementation of direct marketing measures
• The provision of services and/or information intended for you
• The processing and transfer of personal data for internal or administrative purposes
• The operation and management of our website
• The technical support of the users
• The prevention and detection of fraud and crime
• The protection against payment defaults when obtaining credit information for requests for supplies and services
• Ensuring network and data security, to the extent that these interests are in each case consistent with applicable law and with the rights and freedom of the user
• Achieving efficiency gains by bundling services in individual Group companies (in particular marketing, IT, procurement)

1.5 Recipient categories

Service providers for website optimization, online marketing service providers and tools, service companies for information and communication technology, companies for software and equipment maintenance, partly described in more detail below social networks and communities' Internal recipients based on the "need to know" principle

Usage data/server log files

Each time you visit our website, our systems automatically collect data and information from the computer system of the calling computer.

The following types of data are collected: Browser type, version used, user's operating system, host name, Internet service provider, user's IP address, date and time of access, websites from which the user's system has accessed our website or to which the user has accessed from our website.

The legal basis for the temporary storage of the data and the log files is Art. 6 DSG as well as Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing also lies in these purposes. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. We further reserve the right to check the files if, based on concrete indications, there is a justified suspicion of illegal use or a concrete attack on the pages. In that case, our legitimate interest is the processing for the purpose of clarification and prosecution of such attacks and illegal uses.

1.6 Use of cookies

We use cookies. Cookies are data that are stored in the Internet browser or by the Internet browser on the user's computer system when visiting a website and can be retrieved again. Cookies can contain a characteristic string of characters that enables the browser to be uniquely identified when the website or a service integrated in it is called up again. We use cookies to enable the operation of our website (technically necessary cookies), to make our website more user-friendly (functional cookies), and for marketing and advertising purposes (advertising cookies).

Technical cookies: Some elements of our website require that the calling browser can be identified even after a page change. The purpose of their use is to enable the function of the website in the first place. Examples of technically necessary cookies are the provision of a shopping cart or the login as a registered user. The processing is therefore based on Art. 6 DSG as well as Art. 6 para. 1 lit. b or f DSGVO.

Functional cookies: There may be functions that are not absolutely technically necessary for the operation of our website, but significantly simplify its use, such as the adoption of language settings or font sizes, remembering search terms, etc. The processing is also based on Art. 6 DSG as well as Art. 6 para. 1 lit. b or f DSGVO.

Advertising cookies: On some of our websites, we also use cookies that enable an analysis of the user's surfing behavior. In this way, for example: search terms entered in search engines, frequency of page views, use of website functions, and information about operating system and browser, etc. are transmitted. The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 DSG and, if the user has given his consent in this regard - e.g. by selecting in a cookie opt-in banner - Art. 6 para. 1 lit. a DSGVO, otherwise Art. 6 para. 1 lit. f DSGVO in conjunction with. EC 47. If third-party services are integrated, the processing by these is governed by their respective data protection provisions, which are mentioned and/or linked below.

1.7 General statements about WebBeacons / tracking pixels

WebBeacons are invisible graphics with the size of a pixel. These are used by partner companies, in particular for the purpose of tracking a user across various web pages for profiling for use in advertising tailored to the user (targeting). A pixel embedded in the webpage is loaded from the partner's server when the webpage is called up. The partner thus receives your IP address, as well as information about your browser and its version, as well as browser plug-ins used (browser fingerprint), about your operating system and about your network operator. For the integration of external services through web beacons / tracking pixels or other scripts, the information for advertising cookies applies accordingly.

1.8 Contents of external providers

On our website, we use active JavaScript content and fonts, which may also come from external providers such as Google. By calling up our website, these providers may receive information about your visit to our website, for example by transmitting your IP address. You can prevent this transmission by installing a JavaScript blocker such as the browser plugin 'NoScript' or disabling JavaScript in your browser. However, this may lead to functional restrictions.

Some of our websites integrate third-party content within the offer, such as videos from YouTube, map material from Google Maps, images, texts and multi-media files, RSS feeds or other services from other websites. This always requires a transmission of your IP address to the providers of this content. We cannot make any statement about the use of your data by these providers and have no influence on the further processing. In particular not about whether the data is used for further purposes, such as profiling. Please refer to the corresponding data protection notices of the respective third-party providers.

One of the ways you can protect yourself against further tracking by tracking pixels from these providers is by turning off acceptance for third-party cookies in your browser settings.

The legal basis for the transmission of personal data when integrating third-party providers is Art. 6 DSG and, if the user has given his consent in this regard – e.g., by selecting in a cookie opt-in banner – Art. 6 para. 1 lit. a DSGVO, otherwise Art. 6 para. 1 lit. f DSGVO in conjunction with. EC 47.

1.8.1 Data sharing

A transfer of your personal data from us to third parties takes place only to the service partners involved in the context of the contract, such as the logistics company entrusted with the delivery and the credit institution entrusted with payment matters. In cases where your personal data is passed on to third parties, however, the scope of the data transferred is limited to the minimum required.

A transfer of your data in the above-mentioned cases is governed by the provisions of Art. 6 DSG. In the area of application of the DSGVO, a transfer only takes place if:

• you have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a DSGVO,
• the disclosure is necessary in accordance with Art. 6 para. 1 p. ;1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• – in the event that a legal obligation exists – for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, and
• this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.
• consent is obtained from you to share your data with third parties as part of the ordering process.

1.8.2 Google Analytics 4

Some of our websites use Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics may be merged with other data from Google. The legal basis for the processing of the users' personal data is Art. 6 DSG as well as Art. 6 para. 1 lit. a DSGVO. We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded, and the personal data is thus immediately deleted. In cases where personal data is transferred to the USA, standard contractual clauses apply.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

User conditions: https://marketingplatform.google.com/about/analytics/terms/us/
The data protection declaration: https://policies.google.com/privacy?hl=en

You have the right to revoke your consent granted in accordance with Art. 6 DSG as well as Art. 6 para. 1 lit. a DSGVO at any time. To do this, you can prevent the storage of cookies by selecting the appropriate technical settings of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en  

To prevent the collection by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. For more information on terms of use and data protection, please visit https://policies.google.com/

1.8.3 Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. Personal data is transmitted to Google (IP address, time of request, content of request, amount of data transmitted, website from which the request came, language and version of the browser, information about the operating system). This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The legal basis for the data processing is Art. 6 para. 1 lit. a) DSGVO.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: https://policies.google.com/privacy?hl=en. For the exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.4 YouTube

On some of our web pages YouTube videos are embedded, which are stored on https://www.youtube.com/ and can be played directly from our website.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. The images displayed on YouTube are loaded automatically via Google Photos. We have no influence on this.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en. Für the exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.5 Abacus Umantis AG

Our website contains links to our applicant platform Abacus Umantis AG in various places.

By visiting the website, Abacus Umantis AG receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted.

For more information on the purpose and scope of data collection and processing by Abacus Umantis AG, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.abacus.ch/en/data-protection. For exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.6 Yousty

Our website contains links to the Swiss apprenticeship placement platform Yousty in various places.

By visiting the website, Yousty receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted.

For more information on the purpose and scope of data collection and processing by Yousty, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.yousty.ch/de-CH/privacy (German only).

1.9 Other ways in which we may receive your private data

1.9.1 Contact form and e-mail contact

Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are Name, address, mail address, telephone number, etc. Not all of them must be mandatory data. At the time of sending the message, the following data will also be stored: IP address, date, and time. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing according to DSG is Art. 6 DSG.

The legal basis for processing in the field of application of the GDPR is:

• For the receipt of data because of sending the contact form as consent pursuant to Art. 6 para. 1 lit. a in conjunction with. Art. 5 (expected processing) DSGVO or alternatively based on the legitimate interest of answering your contact request according to Art. 6 para. 1 lit. f DSGVO.
• For the processing of data transmitted while sending an e-mail, Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.
• If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
• The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended and there is no reason for further storage. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. There may be retention periods under commercial and tax law.

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

1.9.2 Data collection during registration and registered use

Some of our websites require or offer registration. The data collected in the process will be used for the purposes of using the respective websites and services, unless otherwise described and explicitly consented to during registration. The collected data results from the input mask in the context of registration, the processing is based on Art. 6 para. 1 lit. b DSGVO. All other data that you may provide later to complete your profile is optional and voluntary and based on the legal basis of Art. 6 para. 1 lit. a DSGVO. After registration, we may inform you about relevant circumstances related to our offer, for which you have registered, by means of the deposited email address.

1.9.3 Data in user-generated content

If you post comments or contributions, upload files to our servers, publish images or use other services, your IP address and - if you are logged in - your user data will be stored for our security. Due to the large amount of illegal content that is posted on the Internet every day, we reserve the right to use this information to defend ourselves in legal disputes or for criminal prosecution, i.e. also to hand it over to claimants, law enforcement agencies as well as courts. The legal basis for the content provided is Art. 6 para. 1 lit a and/or b DSGVO, for all other data collected in the process Art. 6 para. 1 lit f DSGVO.

1.10 Data sharing

If you provide us with personal data, this will only be passed on to third parties if this is necessary to process the contractual relationship or if another legal reason legitimizes this transfer. However, we provide certain services with the cooperation of service providers. We have carefully selected these service providers and taken appropriate measures to protect your personal data.

1.11 Storage periods

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract. 

1.12 Revocation of your consent

You can revoke your consent at any time by changing your settings.

2.1 YouTube channel

We operate one or more corporate websites on the social media network YouTube of Google Inc., in particular for self-presentation, but also for recruiting.

According to the ruling of the European Court of Justice (ECJ) of 05.06.2018, Ref. C-210/16, the operator of social media sites is at least jointly responsible for the data processing, at least in the case of Facebook fan pages, within the meaning of Art. 26 DSGVO.

We suspect an analogous applicability of this decision to other social networks, including YouTube. So far, we are not aware of YouTube offering an agreement that meets the requirements of Art. 26.

We would like to point out that you use the YouTube channel offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g., sharing, liking, disliking, commenting).

We only process your data if you contact us via the YouTube platform. In this case, YouTube collects your data and makes it available to us.

In this case, storage and further processing by us may also take place. The processing of your personal data is then governed by one of our other data protection statements, depending on which group of data subjects you belong to.

Furthermore, we may collect data from visitors to our company website, provided that the display as a visitor can be defined as processing. However, we do not store this data on our own systems, nor are they systematically processed beyond an occasional notice.

The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you according to Art. 6 para. 1 lit. b) DSGVO (e.g., in case of questions about products or services) or based on our legitimate interest in communicating with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 lit. f) DSGVO.

If you have given your consent to the social network provider for the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a) DSGVO.

Our information regarding the controller, the data protection officer, and the declaration of your rights as a data subject apply to these processing steps.

We point out that for any further processing on our YouTube channels, the privacy policy of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 or alternatively Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is applicable.

We have no sustainable knowledge and no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. We also have no effective control options available in this regard.

You can find more information about the processing of personal data by YouTube here:

User terms: https://policies.google.com/terms?hl=en

Privacy Policy: https://policies.google.com/privacy?hl=en

Standard contractual clauses apply in cases where personal data is transferred to the USA.

3.1   Information on data processing

As a customer, prospective customer or other affected party, we process your personal data primarily for the purpose of establishing and fulfilling a contractual relationship with you or on the basis of a legitimate interest. We collect, store and, if necessary, pass on your data to the extent necessary to provide the contractually agreed service, to provide information, to carry out direct marketing activities or to carry out other activities of our business operations. Failure to provide this data may result in the contract not being concluded. Furthermore, we only process your data if you have consented to the processing or if there is another legal basis for doing so.

3.2    Purpose of data processing

We process your personal data for the following purposes in connection with the initiation and execution of a contractual relationship or other activities in the interest of the company:

• Identification
• Initiation, administration and execution of contractual relationships
• to communicate with business partners about services and projects and to respond to enquiries
• to advertise to existing customers, use as a selection criterion for direct marketing
• to manage our customer and supplier relationships
• for quality management
• to improve and develop intelligent and innovative services
• for customer analysis for market and opinion research
• reporting on our company
• compliance with legal or contractual requirements
  Beyond this, we only process your data with your express consent.

3.3    Types of data that we process

The following personal data will be processed if you actively disclose it:

• Contact details; name, address, email address Identification/payment details; account number, ID details for money laundering-related transactions, if applicable
  Communication content such as emails, logs, etc.
• Geodata: addresses, delivery conditions,
• Image data: photos and video recordings of events in the context of company events, trade fairs or portrait photos in the context of acquiring new customers on the one hand. On the other hand, image data containing personal information may be collected in projects. These images are archived on a project-specific basis and deleted after 5 years.
• Other data: further information required in relation to the business relationship, information provided voluntarily and information from publicly available sources.

3.4    Disclosure to third parties

Data will only be passed on to third parties if this is necessary for the fulfilment of the contract. In such cases, an explicit assurance will be obtained from the receiving party that the personal data will be protected accordingly and that no further access to it will be permitted. In addition, personal data will be passed on to third parties if there is a legal obligation to do so or if you have expressly consented to such disclosure in advance.

3.5    Data retention

Personal data will be retained for up to five years after the project has been completed. If other retention periods are stipulated by law, the retention will be in accordance with these statutory periods.

3.6    Data transfer abroad

Personal data collected in Switzerland is not transferred abroad. In exceptional cases, data may be transferred to a country with an adequate level of data protection if appropriate safeguards are in place in accordance with Art. 16 of the DSG or if you have expressly consented to the transfer.

Personal data collected outside Switzerland may be transferred to Switzerland in certain cases. This transfer is based on the intercompany agreement between the various companies of the Gruner Group.

3.7    Your rights

As the owner of your personal data, you have the following rights under the DSG and GDPR, which you can exercise:

• Information about the personal data processed about you
• Correction of incorrect or outdated data
• Deletion of data processed unlawfully
• Restriction of or objection to certain processing
• Data disclosure or transfer, where technically feasible.
  To do so, please contact the data protection officer listed above.

3.8    Data security

We protect your data with appropriate technical and organisational measures against unauthorised access, loss or misuse.

3.9    Newsletter

On some of our websites, you can subscribe to a free newsletter with advertising content. Our newsletters contain information about our services, promotions, events, job offers, and articles. However, newsletters do not include messages without advertising information that are sent within the scope of our contractual or other business relationship. This includes, for example, the sending of service emails with technical information and queries about orders, events, competition notifications or similar messages. When you register for the newsletter, the data from the input mask is transmitted to us. In addition, the IP address of the calling computer and the time of the call are recorded. Your consent is obtained during the registration process for the processing of the data and reference is made to this privacy policy. If you provide your email address on our website, we reserve the right to send you newsletters with direct advertising for our own similar products. No data will be passed on to third parties in connection with the processing of data for the purpose of sending newsletters. The data will be used exclusively for sending the newsletter. The legal basis for processing the data after the user has registered for the newsletter is Art. 6 DSG and Art. 6 para. 1 lit. a GDPR, provided that the user has given their consent.

The user's email address is collected for the purpose of delivering the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used. The newsletter subscription can be cancelled by the user at any time. For this purpose, a corresponding link is provided in every newsletter. This also serves to revoke consent to the newsletter being sent.

An analysis of reading behaviour takes place on some of our pages in anonymised form and to the extent that it can be determined whether the recipients have opened the newsletter and clicked on the links. However, we only use this function to check user activity and make appropriate optimisations. For this purpose, the newsletter contains a so-called ‘web beacon’, a pixel-sized file that is retrieved from our server when the newsletter is opened. This web beacon is also anonymised.

When you apply for a position at our company, we process and store your personal data. We take your privacy very seriously and would therefore like to inform you here about how we handle your application data.

Our online application portal is operated by Abacus Umantis AG, Unterstrasse 11, CH 9001 St. Gallen. Abacus Umantis AG only provides software and computing capacity and has no influence on the application process. This constitutes order processing in accordance with Art. 9 DSG and Art. 28 GDPR. This data is stored by Abacus Umantis AG exclusively for technical reasons and is not assigned to a specific person at any time.

4.1    Purpose of data collection

Before you join our company or during the application process, we process your personal data exclusively for the purpose of establishing a contractual relationship to the extent necessary.

4.2   Types of data that we process

The following types of personal data are regularly processed:

• Applicant data; name, date of birth, CV, nationality/work permit, etc. for the selection and recruitment process, entry and exit management,
• Private contact details; address, telephone number, email address (for the purpose of contacting you),
• Data within the scope of personnel screening (e.g. police clearance certificate, reliability check (ZUP));
• Where applicable, data subject to professional secrecy; e.g. data on health suitability and any restrictions
• Other data in personnel administration: severe disability (if relevant), driving licence
• Video/image data
• We do not require any information from you that is not usable under the General Equal Treatment Act (AGG) (race, ethnic origin, gender, pregnancy, information on physical or mental illness, membership of a trade union, religion or ideology, disability, age, sexual identity or sex life).

We ask that you do not send us any such data. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, ancillary copyrights or other intellectual property rights, personal rights, press rights or general rights of third parties).

4.3    Deletion periods

Once the respective purpose has been achieved, your data will be deleted. However, data will be retained for as long as necessary to defend legal claims. The storage period is usually 6 months. If your profile was sent to us by a personnel service provider and this service provider has commission claims, the storage period may be extended until these claims have been fulfilled or have become statute-barred. If processing relevant for accounting purposes has been carried out, such as the reimbursement of travel expenses, the data required for this purpose will be deleted in accordance with the statutory retention periods, which are generally 6 or 10 years. If your application is successful and we conclude a contract with you, we will transfer the data collected during the application process to our personnel file.

For employees, please refer to Gruner's internal privacy policy.