This privacy statement applies to all data processing carried out by ChangeCockpit GmbH, including through our website, and is intended to comply both with the Swiss Federal Act on Data Protection (nFADP).

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website or use our services. Personal data is any information through which you can be personally identified. Detailed information on data protection can be found in the privacy policy listed below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the site’s legal notice.

How do we collect your data?

Your data is collected partly when you provide it to us. This may include data you enter in a contact form.
Other data is collected automatically by our IT systems when you visit our website. These are primarily technical data (e.g. browser type, operating system, time of page visit). This data is collected automatically when you enter our website.

What do we use your data for?

Some of the data is collected to ensure the website works properly. Other data may be used to analyze your user behavior.

What are your data protection rights?

ou have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this and other questions about personal data, you can contact us at any time at the address provided in the legal notice. You also have the right to lodge a complaint with the responsible supervisory authority. In certain circumstances, you have the right to request the restriction of processing of your personal data. Details can be found in the privacy policy section “Right to restriction of processing”.

Analytics Tools and Third-Party Toolsn Drittanbietern

When you visit our website, your surfing behavior can be statistically evaluated. This takes place mainly using cookies and analytics programs. The analysis is generally anonymous and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objection can be found in the following privacy policy.

2. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is information through which you can be identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose that happens. We would like to point out that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of your data from access by third parties is not possible.

Note on the responsible entity

The responsible entity for data processing on this website is:

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can withdraw your consent at any time by sending us an informal email. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct advertising

If the data processing is based on legally recognized interests, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The legal basis on which data processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing serves the assertion, exercise, or defense of legal claims.

If your personal data is processed for direct advertising purposes, you have the right at any time to object to the processing of personal data concerning you for such advertising; this also applies to profiling where it is related to such direct advertising. If you object, your personal data will no longer be used for direct advertising. (Objection pursuant to Article 21(2) GDPR)

Right to complain to a supervisory authority

In case of violations of applicable data protection law, the individuals concerned have a right to complain to a supervisory authority, in particular in the country of their usual residence, their workplace, or the location of the suspected violation. The right to complain exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format and to have it sent to yourself or a third party. If you request the direct transfer of the data to another controller, this will only occur as far as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. A secure connection is shown by changing the address line of the browser from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Right to information, blocking, deletion, and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing, and, if applicable, a right to correction, blocking, or deletion of this data. For this purpose and for other questions about personal data, you can contact us at any time at the address given in the legal notice.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of the personal data we hold about you, we usually need time to verify this. While we are checking, you have the right to request the restriction of processing of your personal data.
• If the processing of your personal data was/is unlawful, instead of deletion you can request the restriction of data processing.
• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
• If you have lodged an objection, a balance must be struck between your and our interests. As long as it is not clear whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of substantial public interest.

Objection to advertising emails

The use of contact data published in compliance with legal notice requirements for sending unsolicited advertising and information material is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited mailing of advertising information, such as spam emails.

3. 3. Data Collection on our Website

Cookies

Our websites sometimes use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies help make our offering more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your browser. Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies let us recognize your browser the next time you visit. You can set your browser to inform you about the use of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them, as well as activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website. Cookies necessary for the electronic communication process or for providing specific functions you request (e.g. shopping cart) are stored based on legitimate interests. The website operator has a legitimate interest in storing cookies for the user-friendly and optimized provision of its services. Any other cookies (e.g. for analyzing your browsing behavior) are treated separately in this privacy policy.

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically sends to us. These are:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

This data is not combined with data from other sources. The collection of this data is based on legitimate interests. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this, server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, the information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing your inquiry and for follow-up questions. We do not share this data without your consent. The processing of the data entered in the contact form occurs only on the basis of your consent. You may revoke this consent at any time by sending us an informal email. The lawfulness of data processing carried out until the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions – particularly retention periods – remain unaffected.

Inquiry by Email, Telephone or Fax

If you contact us by email, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent. The processing of these data is carried out either for the fulfillment of a contract or pre-contractual measures, or based on your consent, or on legitimate interests in handling requests effectively. The data you send to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – especially legal retention periods – remain unaffected.

Comment Feature on this Website

For the comment function on this page, in addition to your comment, information about the time the comment was created, your email address, and, if not posted anonymously, the username you chose will be stored.

Storage of IP Addresses

Our comment function stores the IP addresses of users who post comments. Since we do not review comments prior to posting, we need this data to take action against the author in case of legal violations (such as insults or propaganda).

Retention Duration for Comments

Comments and related data (e.g. IP address) are stored and remain on our website until the commented content is completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal Basis

Storage of comments is based on your consent. You may revoke this consent at any time by sending us an informal email. The lawfulness of data processing already performed remains unaffected by the revocation. (Article 6(1)(a) GDPR)

Processing Data (Customer and Contract Data)

We collect, process, and use personal data only insofar as this is necessary for the establishment, content arrangement, or amendment of the legal relationship (inventory data). This occurs based on the fulfillment of a contract or precontractual measures. Personal data relating to the use of our website (usage data) will only be collected, processed, and used as necessary to enable or bill the user for the use of the service.

Customer data collected will be deleted after completion of the order or termination of the business relationship. Mandatory legal provisions, especially retention periods, remain unaffected.

Transfer of Data at Contract Conclusion for Services and Digital Content

We transfer personal data to third parties only if this is necessary within the scope of contract processing, for example to the financial institution responsible for processing payments.(Article 6(1)(b) GDPR). No further transmission of data shall take place, or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without explicit consent, for example for advertising purposes. The basis for data processing is the fulfillment of a contract or precontractual measures.

4. Social Media

Facebook Plugins (Like & Share-Button)

Our website includes plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize Facebook plugins by the Facebook logo or the “Like Button” on our site. An overview of Facebook plugins is available at: https://developers.facebook.com/docs/plugins/?locale=en_US.

When you visit our website, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like Button” while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our site with your user account. We point out that, as the provider of the website, we have no knowledge of the content of the transmitted data nor Facebook’s use of it. More information can be found in Facebook’s privacy policy: https://en-us.facebook.com/privacy/explanation.

If you do not want Facebook to assign your visit to our pages to your Facebook user account, please log out of your Facebook account before using our website. The use of Facebook plugins is based on legitimate interests. The website operator has a legitimate interest in a visible presence in social media.

Twitter Plugin

Functions of the Twitter service are integrated into our website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Using Twitter and the “Re-Tweet” function links the websites you visit to your Twitter account and makes them known to other users. This also transfers data to Twitter. We point out that, as the provider of the website, we have no knowledge of the content of the transmitted data nor Twitter’s use of it. Details can be found in Twitter’s privacy policy: https://twitter.com/en/privacy.

You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.

Google+ Plugin

AProvided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can publish information worldwide using the Google+ button. The Google+ button gives you and other users personalized content from Google and partners. Google stores information that you have given +1 for content, and information about the page you viewed when clicking +1. Your +1 may appear together with your profile name and photo in Google services, such as search results or your Google profile, or elsewhere on websites and ads on the internet. Google records information on your +1 activities to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile that must contain at least the chosen profile name. This name is used in all Google services. Your Google profile identity may be shown to users who know your email address or other identifying information. Besides the above usages, the information you provide is used in accordance with Google’s privacy policies. Google may publish aggregated statistics about +1 activities or share them with users, partners, or others. The use of Google+ plugins is based on legitimate interests. The website operator has a legitimate interest in visibility in social media.

Instagram Plugin

Our website includes functions of Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

When logged into your Instagram account and clicking the Instagram button, you can link content from our site to your Instagram profile. This allows Instagram to associate your visit to our website with your account. We point out that, as the provider, we have no knowledge of the content or Instagram’s use of the data. For more info, see Instagram’s privacy policy: https://instagram.com/about/legal/privacy/. The use of the Instagram plugin is based on legitimate interests. The website operator has a legitimate interest in social media visibility.

LinkedIn Plugin

UOur website uses functions of LinkedIn, provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

On pages containing LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn receives information that you have visited our site with your IP address. If you click the “Recommend Button” while logged into your LinkedIn account, LinkedIn can associate your visit to our site with your user account. We do not know the content of transmitted data nor LinkedIn’s use of it. More info is in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

XING Plugin

Our website uses functions of the XING network, provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time you access a page with XING functions, a connection to XING servers is established. According to our knowledge, no personal data is stored; in particular, no IP addresses or usage behavior are recorded. The use of the XING plugin is based on legitimate interests. The operator has a legitimate interest in visibility in social media. More details are in XING’s privacy policy: https://www.xing.com/app/share?op=data_protection.

Pinterest Plugin

We use social plugins from Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA.

When you call up a page containing a plugin, your browser connects directly to Pinterest servers. The plugin transmits log data to Pinterest in the USA. This may include your IP address, the address of visited websites, browser type and settings, date and time of request, your Pinterest usage, and cookies. The use is based on legitimate interests. The operator has a legitimate interest in social media visibility. Details on further processing and your privacy rights can be found in Pinterest’s privacy information: https://policy.pinterest.com/en/privacy-policy.

5. Analytics Tools and Advertising

Google Analytics

Our website uses functions of the web analytics service Google Analytics, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses “cookies” — text files placed on your computer to help analyze how you use the website. Information generated by the cookie about your use of this website is typically transmitted to and stored on a Google server in the USA. The storage of Google Analytics cookies and use of this tool are based on legitimate interests. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and advertising.

IP Anonymization

We have enabled the IP anonymization feature on this website; this causes Google to shorten your IP address within the member states of the European Union or other contracting states of the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address sent to and abbreviated in Google’s servers in the USA. On behalf of the operator, Google will use this information to evaluate your use of the website, create reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the storage of cookies through a corresponding setting in your browser; however, doing so may prevent full use of all the website’s functions. Additionally, you can prevent collection of data (including your IP address) generated by the cookie relating to your use of the website and processing of this data by Google by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to Data Collection

You can prevent your data from being collected by Google Analytics by clicking the following link. An opt-out cookie is set which prevents your data from being collected on future visits to this website: Google Analytics deactivate. More information about handling user data in Google Analytics is available in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en. We have entered into a data processing agreement with Google and fully implement the strict requirements of Swiss authorities when using Google Analytics.

Demographic Features

This website uses the “demographic features” function of Google Analytics. This allows reports to be generated containing statements about age, gender, and interests of site visitors. These data come from interest-based advertising by Google and third-party visitor data. The data cannot be linked to any individual person. You can disable this feature in your Google account ad settings or prohibit the data collection as described in “Objection to Data Collection”.

Retention Period

Data stored by Google relating to users/events linked with cookies, user IDs, or advertising IDs is anonymized or deleted after 14 months. Details are available at: https://support.google.com/analytics/answer/7667196?hl=en.

Google AdWords and Conversion Tracking

This website uses Google AdWords, an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google AdWords’ conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. These cookies expire after 30 days and do not identify users personally. If you visit certain pages of this website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across AdWords customers’ websites. Information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. They do not receive information that personally identifies users. If you do not wish to participate in tracking, you may refuse the setting of cookies by adjusting your browser software. You will then not be included in conversion statistics. Storage of “conversion cookies” and use of tracking is based on legitimate interests in optimizing website and advertising. More information about Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Facebook Pixel

To measure conversions, our website uses the visitor action pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

This tool makes it possible to track the actions of visitors after clicking a Facebook ad and being redirected to the provider’s website. This helps evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising. The data collected is anonymous for us as website operators; we cannot draw conclusions about users’ identity. However, Facebook stores and processes the data so a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes as outlined in the Facebook Data Use Policy. This enables Facebook to display ads on Facebook and off Facebook. As a website operator, we cannot influence this data use. The use of Facebook Pixel is based on legitimate interests in effective advertising including within social media. For more details about privacy on Facebook, visit: https://en-us.facebook.com/about/privacy/. You may also disable the “Custom Audiences” remarketing function in your ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (must be logged in). If you do not have a Facebook account, you may opt out of Facebook-based advertising at http://www.youronlinechoices.com/en/praferenzmanagement/.

6. Newsletter

To receive the newsletter offered on the website, we need your email address and information that allows us to verify you are the owner of the provided email address and agree to receive the newsletter. No other data is collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not disclose them to third parties. Processing of data entered in the newsletter subscription form occurs only on the basis of your consent. You may withdraw this consent at any time, for example via the “unsubscribe” link in the newsletter. Lawfulness of data processing up to the point of withdrawal remains unaffected. The data you provide for the newsletter will be stored until you unsubscribe and will be deleted after unsubscribing. Data stored for other purposes remains unaffected.

7. Plugins und Tools

YouTube (Enhanced Privacy Mode)

Our website utilizes plugins from YouTube, operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, no information about visitors to this website is stored before they play the video. Transfer of data to YouTube partners via enhanced privacy mode, however, is not necessarily excluded. YouTube — regardless of whether you view a video — connects to the Google DoubleClick network. Once you start a YouTube video, a connection to YouTube’s servers is established, and YouTube receives information about which pages you visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube may also place cookies on your device after you start a video, which may be used to collect information about visitors to our site, including for video statistics, improving user-friendliness, or preventing fraud. The cookies remain on your device until deleted. Further data processing by YouTube may occur beyond our control. Using YouTube takes place in the interest of an attractive presentation of our online offers, which is a legitimate interest. More on data privacy at YouTube: https://policies.google.com/privacy?hl=en

Vimeo

Our website uses plugins from the video portal Vimeo, operated by Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.

Visiting a page with a Vimeo plugin creates a connection to Vimeo’s servers; Vimeo learns which of our pages you visited, and your IP address is captured, even if you are not logged into Vimeo or do not have a Vimeo account. Information collected by Vimeo may be sent to Vimeo servers in the USA. If you are logged into Vimeo, Vimeo can assign your browsing directly to your personal Vimeo account. You can avoid this by logging out before visiting our website. Using Vimeo takes place in the interest of an appealing representation of our online offers, which is a legitimate interest. More on privacy at Vimeo: https://vimeo.com/privacy.

Google Web Fonts

This website uses so-called Web Fonts provided by Google for uniform font representation. The Google Fonts are installed locally. There is no connection to Google servers.

Google Maps

This site uses an API to access the Google Maps mapping service, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use Google Maps functions, it is necessary to save your IP address, which is typically transmitted to and stored by Google on servers in the USA. The provider of this site has no control over this data transmission. Using Google Maps occurs in the interest of visually appealing online services and facilitating the location of places shown on our website, which is a legitimate interest. More on user data handling at Google: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” on our websites, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entry on our website (e.g. in a contact form) is performed by a human or by an automated program. The analysis occurs automatically once the visitor enters the website and evaluates various information (for example, IP address, time spent, mouse movements). The data is sent to Google. The reCAPTCHA analysis runs entirely in the background; website visitors are not notified that analysis occurs. Data processing happens based on legitimate interests in protecting our online services against abusive automated crawling and spam. More on Google reCAPTCHA and Google’s privacy policy: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html.

8. Our Own Services

Job Applications

We offer you the opportunity to apply with us (e.g., by email, postal mail, or online application form). Below we inform you about the scope, purpose, and use of the personal data collected during the job application process. We confirm that your data will be collected, processed, and used in accordance with applicable data protection legislation and treated confidentially.

Scope and Purpose of Data Collection

When you send us a job application, we process your related personal data (e.g. contact data, application documents, notes from interviews) to the extent necessary for deciding on an employment relationship. The legal basis is employment law and contract establishment under Swiss law, and, if consent has been provided, based on your consent (which may be withdrawn at any time). Your personal data within our company will only be forwarded to persons involved in processing your application. If your application is successful, the submitted data will be stored for the purpose of establishing and managing an employment relationship.

Retention Period

If we do not make you an offer, you reject an offer, withdraw your application, withdraw your consent, or request deletion, the data provided including any remaining physical documents will be retained for up to 6 months after the conclusion of the application process (retention period) to allow clarification of possible disputes. You may object to this retention if your interests outweigh ours.

After expiry of the retention period, the data will be deleted, unless a legal obligation or other legal reason exists for further retention. If it appears retention is needed after the period (e.g. due to threatened or pending legal action), deletion will only occur when the data is no longer needed. Any other statutory retention obligations remain unaffected.