Privacy Policy

1. Privacy at a glance

General notes
The following notes summarise what happens to your personal data when you visit our website. Personal data is all data which enables you to be personally identified. For detailed information on how we protect your data, please refer to our Privacy Notice below.
Data collection on our website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the Legal Notice on this website.
How do we collect your data?
On the one hand, your data is collected by you communicating it to us. For example, this might be data you provide in a contact form.
Other data is collected automatically by our IT systems when you visit our website. This primarily concerns technical data (e.g. internet browser, operating system or the time at which the site was visited). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some of the data is collected to ensure that the website operates without fault. Other data may be used to analyse your user behaviour.
What are your rights in respect of your data?
You are entitled, at any time and free of charge, to receive information about the origin, recipient and purpose of the personal data we store about you. You also have the right to request that this data be rectified, blocked or erased. You may contact us at any time at the address specified in the Legal Notice should you have any questions about this or other matters relating to privacy. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
Under certain circumstances you are also entitled to request that the processing of your personal data be restricted. For details please refer to ‘Right to restriction of processing’ in the Privacy Notice.
Analysis tools and third-party tools
When you visit our website, statistical analyses of your surfing behaviour may be drawn up. This is done primarily using cookies and analytics programs. As a rule, analysis of your surfing behaviour is anonymous, meaning it cannot be traced back to you.
You may object to this analysis or prevent it by not using certain tools. The Privacy Notice below provides detailed information about these tools and the possibilities for objecting.

2. General notes and obligatory information
Privacy
Protecting your personal data is a matter we take very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Notice.
When you use this website, various types of personal data are collected. Personal data is data which enables you to be personally identified. This Privacy Notice explains which data we collect and what we use it for. It also explains how this is done and for what purpose.
We draw your attention to the fact that data transmission over the internet (e.g. communication by email) may pose security risks. It is not possible to guarantee absolute protection of the data against access by third parties.
Controller

The Controller responsible for data processing on this website is:
SWISSCONSULT Deutschland GmbH
Grafenberger Allee 125
40237 Düsseldorf
Germany
Phone: +49 (0)211 176076-40
Email: sc-d@swissconsult.org

The Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses and the like).
Withdrawing your consent to data processing
Many data processing procedures are only possible with your express consent. You may withdraw your previously granted consent at any time. Informal notification by emailing us is sufficient for this purpose. The lawfulness of data processing carried out prior to the withdrawal of consent shall remain unaffected by its withdrawal.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
Where data is processed based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to processing of your personal data; this shall also apply to profiling based on these provisions. The relevant legal grounds on which processing is based can be found in this Privacy Notice. When you object, we shall no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercising or defence of legal claims (right to object pursuant to Art. 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data about you for such marketing, which includes profiling to the extent that it is related to such direct marketing. When you object, your personal data will subsequently no longer be used for direct marketing purposes (right to object pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with the relevant supervisory authority
In the event of infringement of the GDPR, the party concerned has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint shall be without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. Where you request that data be transferred directly to another controller, this shall take place only insofar as is technically feasible.
SSL/TLS encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content such as orders or requests that you send to us as the site operator. An encrypted connection is indicated by the address line of the browser changing from “http://” to “https://” and by the padlock icon in your address bar.
When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, blocking, erasure and rectification
Within the scope of the applicable statutory provisions, you have the right, at any time and free of charge, to receive information about the personal data stored about you, its origin and recipient, and the purpose of data processing, and, where applicable, a right to rectification, blocking or erasure of this data. You may contact us at any time at the address specified in the Legal Notice should you have any questions about this or other matters relating to personal data.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. In order to do so, you may contact us at any time at the address specified in the Legal Notice. The right to obtain restriction of processing exists in the following cases:
• When you contest the accuracy of the personal data we store about you, we generally need time to verify this. For the duration of this verification process, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure.
• When we no longer need your personal data, but you require it for exercising, defending or asserting legal claims, you have the right to request restriction of processing of your personal data instead of erasure.
• Where you have objected to processing pursuant to Art. 21(1) GDPR, your interests have to be weighed against ours. Until it has been established whose interests shall prevail, you have the right to request that the processing of your personal data be restricted.
Where you have restricted processing of your personal data, this data may – with the exception of storage – only be processed with your consent or for asserting, exercising or defending legal claims or for protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Objection to advertising emails
We hereby object to contact data published in the context of the Legal Notice obligation being used to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, for instance by means of spam emails.

3. Data collection on our website
Cookies
We sometimes use cookies on our website. Cookies do not damage your computer and do not contain viruses. They serve to enhance your experience in using our website and to improve performance and security. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies”. These are automatically deleted once you have left our site. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, to exclude cookies in certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies might restrict the functionality of this website.
Cookies which are necessary for carrying out electronic communication processes or for providing certain functions you have requested (e.g. shopping basket function) are stored on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the storage of cookies in order to provide an optimised and technically fault-free service. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this Privacy Notice.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This concerns:
• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address
This data is not merged with other data sources.
This data is recorded on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in optimising his website and ensuring that it is displayed without technical fault. The server log files are necessary for this purpose.
Contact form
When you use the contact form to send us a request, we store the information you provide in the form, including the contact details you specify in it, for the purposes of handling your request and dealing with any follow-up queries. We do not pass this data on to third parties without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. Informal notification by emailing us is sufficient for this purpose. The lawfulness of the data processing procedures carried out prior to the withdrawal of consent shall remain unaffected by its withdrawal.
We shall continue to store the data you entered in the contact form until you request that we erase it or withdraw your consent to its storage, or until the purpose for which it was stored no longer applies (e.g. once the processing of your request has been completed). Mandatory statutory provisions – in particular retention periods – shall remain unaffected.
Requests by email, telephone or telefax
When you contact us by email, telephone or telefax, we store and process your request, including all personal data it contains (name, request), in order to deal with your enquiry. We do not pass this data on to third parties without your consent.
Processing of this data takes place on the basis of Art. 6(1)(b) GDPR insofar as your request is related to the performance of a contract or is necessary for implementing pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the requests sent to us being processed effectively.
We shall continue to store the data you sent to us in the contact request until you request that we erase it or withdraw your consent to its storage, or until the purpose for which it was stored no longer applies (e.g. once the processing of your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – shall remain unaffected.

4. Analysis tools and advertising
Google Analytics
This website uses functions of the web analytics service Google Analytics. This service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.
Storing of Google Analytics cookies and the use of this analytics tool take place on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both his web service and his advertising.
IP anonymisation
The IP anonymisation function is activated on this website. This ensures that in Member States of the European Union or other parties to the Agreement on the European Economic Area, your IP address is truncated by Google prior to being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to the use of the website and the internet for the website operator. The IP address transmitted from your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent the storage of cookies by setting your browser software appropriately, however please note that in doing so you might not be able to use all functions of this website to their full extent. In addition, you can prevent data generated by the cookie and relating to your usage of the website (incl. your IP address) from being collected and processed by Google by downloading and installing a browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objecting to data collection
You can prevent your data from being collected by Google Analytics by clicking on the following link. An opt-out cookie is then set which prevents your data from being collected when you visit this website in the future: Disable Google Analytics.
More information on how Google Analytics handles user data can be found in Google’s Privacy Notice: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have entered into an order processing contract with Google and fully implement the strict requirements of the German data protection authorities in using Google Analytics.
Duration of storage
User-level and event-level data stored by Google that is linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised and deleted after 14 months. For details please follow this link: https://support.google.com/analytics/answer/7667196?hl=de

5. Plugins and tools
Google web fonts
To ensure the uniform presentation of fonts, this website uses so-called web fonts provided by Google. The Google fonts are installed locally. No connection is established with Google servers in this respect.
Google Maps
This website uses the map service Google Maps via an API. This service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the Google Maps functions to be used, your IP address has to be stored. This information will generally be transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The Google Maps service is used to enable attractive presentation of our online service and so that the places indicated by us on the website can be located easily. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
More information on how user data is handled can be found in Google’s Privacy Notice: https://policies.google.com/privacy?hl=de.

6. Our own services
Job applications
We invite you to submit job applications by email, post or by using our online application form. The following information explains the scope, purpose and use of the personal data we collect about you during the application process. We assure you that your data will be collected, processed and used in accordance with current data protection law and all other statutory provisions, and that your data will be treated in strict confidence.
Scope and purpose of data collection
When you send us an application, we process your personal data associated with it (e.g. contact and communication details, supporting documents, notes taken during interviews, etc.) insofar as is necessary in deciding whether an employment relationship is to be established. The legal basis for this is provided by Sec. 26 of the new German Privacy Act (BDSG-new) under German law (entering into an employment relationship), Art. 6(1)(b) GDPR (generally entering into a contract) and – if you have given your consent – Art. 6(1)(a) GDPR. Consent may be withdrawn at any time. Your personal data will only be passed on internally in our organisation to persons involved in dealing with your application.
In the event of your application being successful, the data you have provided to us will be stored in our data processing system on the basis of Sec. 26 of the new German Privacy Act (BDSG-new) and Art. 6(1)(b) GDPR for the purposes of performing the employment relationship.

Data retention period
If we are unable to offer you a job, or if you reject a job offer, withdraw your application, withdraw your consent to data processing or request that we erase the data, the data you have transmitted, including any remaining physical supporting documents, will be stored or retained for a maximum of six months following completion of the application procedure (retention period) in order to be able to trace the details of the application procedure in the event of disagreement (Art. 6(1)(f) GDPR).
YOU MAY OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS WHICH OUTWEIGH OUR INTERESTS.
Following expiry of the retention period, the data will be erased unless a statutory retention obligation or other legal grounds for further storage exist. If it is evident that the storage of your data will be necessary following expiry of the retention period (e.g. due to an impending or pending legal dispute), erasure will only take place once the data has become irrelevant. Other statutory retention obligations shall remain unaffected.