1. Privacy Policy

With this Data Protection Statement we, EcoSense Data Insight Lab – Garg (hereinafter we or us), describe how we collect and further process personal data. Your personal data as website user (hereinafter referred to as “you” and “your”) is processed in compliance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR).

The term “personal data” in this Data Protection Statement to shall mean any information that identifies, or could reasonably be used to identify any person.

If you provide us with personal data of other persons (such as family members, work colleagues), please make sure the respective persons are aware of this Data Protection Statement and only provide us with their data if you are allowed to do so and such personal data is correct.

This Data Protection Statement is in line with the EU General Data Protection Regulation (GDPR). Although the GDPR is a regulation of the European Union (EU), it may be relevant for us.

This privacy policy explains the type, scope, and purpose of data processing and how your data is handled. It also outlines your rights concerning the processing of your data.

2. Person responsible – Representative and Competent supervisory authority

EcoSense Data Insight Lab – Garg
Obergrundstrasse 94
6005 Luzern
Switzerland
Telephone: +41 76 741 1306
Email: info@ecosense360.com
Registration number: CHE-389.701.703

The Data Protection Authority is the regulatory body responsible for overseeing data protection in Switzerland, as established by the General Data Protection Regulation (GDPR) and the Data Protection Directive for the law enforcement sector.

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1
CH – 3003 Bern
Tel.:+41 (0)58 462 43 95
E-Mail: info@admin.ch

3. Objection to advertising emails

The use of contact data published as part of the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam emails.

4. Hosting

This website is hosted by an external provider, and all personal data collected on this site—such as IP addresses, contact requests, metadata, communications, contract details, names, website activity, and other data generated through the website—are stored on the host’s servers.

We utilize a data center located in Paris, which adheres to sustainable practices, ensuring that our hosting services are environmentally responsible. The use of this external hosting is necessary to fulfill contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and to ensure the secure, fast, and efficient delivery of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been given, data processing will be carried out based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, especially when it involves the storage of cookies or accessing information on the user’s device (e.g., device fingerprinting) under the TTDSG. This consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfill their contractual obligations and will follow our instructions regarding the handling of such data.

We use the following host:

HOSTINGER Operations, UAB
Švitrigailos str. 34,
Vilnius 03230,
Lithuania.

5. Collection of Data

Collection and Processing of Personal Data

We primarily collect personal data from our clients, business partners, and other individuals through our business relationships or via interactions with our websites and applications. Additionally, where permissible, we obtain personal data from publicly accessible sources such as debt registers, land registries, commercial registers, and the internet. We may also receive personal data from affiliated companies of EcoSense Data Insight Lab (EcoSense360), as well as from authorities or other third parties.

Beyond the data you provide directly to us, we may receive information from third parties including, but not limited to, details from public registers, professional information (e.g., for contract negotiations), correspondence with third parties, information provided by associates (such as legal representatives or consultants), compliance-related information (e.g., anti-money laundering regulations), bank details, and data from distributors or business partners related to service orders or deliveries. Additionally, we collect information from media or online sources (where relevant), address details, interests, socio-demographic data for marketing, and usage data from our websites (e.g., IP addresses, device information, cookies, and browsing activity).

Website Visits

When you visit our website, your browser automatically sends data that is stored in our server logs. This data includes:

• Browser type and version
• URL of the accessed file
• Date and time of the request
• HTTPS response code
• Operating system
• Referrer URL
• Websites accessed through our site
• Internet service provider
• IP address (anonymized)

We analyze this data anonymously to improve our website and address errors. For security, non-anonymized data helps identify issues and detect unauthorized access. This data is kept for 7 days, then deleted, except when required for legal reasons.

Contact Form

When you use our contact form, we collect and store your contact details to handle your request and follow up if needed. You must provide your name and email address. Optional information, such as industry, job title, phone number, and any additional message, can be provided to better address your request.

Processing of this data is based on contract performance (Art. 6(1)(b) GDPR) or our legitimate interest in managing inquiries (Art. 6(1)(f) GDPR). You can withdraw your consent at any time. Your data remains with us until you ask for its deletion or it is no longer needed.

Requests by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, we store and process your request and related data. We do not share this data without your consent.

This data is processed based on contract needs (Art. 6(1)(b) GDPR) or our legitimate interest in managing requests (Art. 6(1)(f) GDPR). If consent is requested, it can be withdrawn at any time. Your data will be kept until you request its deletion or it is no longer needed.

Newsletter, Downloads, Webinars, and Demo Requests

To register for our newsletter, we collect your title, name, and email address. After registering, you will receive an email to confirm your subscription (“double opt-in”). We track email opens and newsletter reads. For downloading documents, webinars, or demos, providing your name and email is necessary. Optional details include industry, job title, and phone number.

By registering or requesting, you consent to receive tailored newsletters and marketing information. We use Hubspot CRM for these activities. You can unsubscribe at any time via the “unsubscribe” link in the newsletter. Data collected for newsletters will be used for advertising purposes only. If you unsubscribe, your data will be removed from our list, though your email may be added to a blacklist to prevent future mailings.

Sending Advertising

If you are our customer, we may send you information about campaigns and offers by mail. This helps us provide relevant updates and strengthen our relationship with you.

The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). You can opt out of receiving such information at any time. Your data will be kept until it is no longer needed for the purpose of processing.

6. Data processing

Data Processing Purposes

We use personal data for the following purposes, as defined by Art. 30 EU GDPR:

• Website Operation: Managing and maintaining our website.
• Information Delivery: Sending relevant updates and information.
• Inquiries Management: Addressing requests and inquiries from interested parties and customers.
• Appointment Scheduling: Organizing and confirming appointments.
• Marketing: Promoting our products and services.
• Product/Service Presentation: Displaying our offerings on our website.

At EcoSense Data Insight Lab – Garg, we use personal data for a range of purposes, including those outlined by Art. 30 EU GDPR:

• Website Operation: Managing and maintaining our website.
• Information Delivery: Sending relevant updates and information to you.
• Inquiries Management: Addressing requests and inquiries from interested parties and customers.
• Appointment Scheduling: Organizing and confirming appointments.
• Marketing: Promoting our products and services.
• Product/Service Presentation: Displaying our offerings on our website.

In addition to these core purposes, we also process personal data to:

• Manage Contracts: Conclude and process agreements with clients and business partners, including the operation of our Internet of Things (IoT) and ESG platform and procurement of products and services.
• Legal Compliance: Adhere to domestic and international legal obligations.
• Service Development: Enhance and develop our services, websites, applications, and other platforms.
• Communication: Handle interactions with third parties, such as job applications and media inquiries.
• Customer Acquisition: Improve customer outreach and obtain data from public sources for acquiring new customers.
• Marketing: Conduct advertising and organize events, provided you haven’t opted out. If you’re part of our customer base, you may object to further marketing communications, and we will add you to a blacklist to prevent future mailings.
• Market Research: Perform market and opinion research, and media monitoring.
• Legal and Compliance: Enforce legal claims, defend in legal disputes, prevent and investigate criminal activities, and ensure compliance with regulations.
• Operational Efficiency: Manage IT systems, websites, and services, including monitoring product usage and conditions.
• Business Transactions: Handle acquisitions, sales, and other corporate transactions, including the transfer of personal data related to these activities.

If you have given consent for specific purposes (such as receiving newsletters or background checks), we will process your data based on this consent, unless another legal basis applies. You can withdraw your consent at any time, but this will not affect data processed before the withdrawal.

Legal basis for data processing

We process personal data based on the following legal grounds:

• Art. 6(1)(a) EU GDPR: The data subject has given explicit consent for their data to be processed for one or more specific purposes.
• Art. 6(1)(b) EU GDPR: The processing is necessary for fulfilling a contract with the data subject or for taking steps at their request before entering into a contract.
• Art. 6(1)(c) EU GDPR: The processing is required to comply with a legal obligation to which we are subject.
• Art. 30 EU GDPR: The processing is necessary for maintaining records of processing activities as required by the GDPR.
• Art. 49(1)(a) EU GDPR: The data subject has explicitly consented to the data transfer after being informed of the potential risks associated with transferring data without an adequacy decision or appropriate safeguards (e.g., using platforms or social media services based outside the EU, such as Facebook or Instagram).
  Based on your express consent (Art. 6 Para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with Section 107 Para. 2 TKG), we will regularly send you our newsletter or similar information by e-mail to the e-mail address you provided.
• Data categories
  • e-mail address
  • Last name
  • First name
• Recipient
  • Employees of the IT and marketing department
  • Service provider for sending the newsletter
  to storage if your interests outweigh our legitimate interest.
• Legal / contractual requirement
  The provision of your personal data is voluntary and solely based on your consent. Unfortunately, we cannot send you our newsletter without your consent.
• Third country transfer
  Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
• Revocation of consent
  You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.
• Automated decision-making and profiling
  As a responsible company, we do not use automated decision-making or profiling in this data processing.
• Order processing
  We have concluded a data processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law that guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

7. Storage period of Your Personal Data

We retain your personal data as long as necessary to fulfill our contractual obligations and comply with legal requirements. This covers the entire duration of our business relationship—from the start, through the execution of the contract, until its termination. After this period, we may keep your data to meet legal retention and documentation requirements.

Your data may also be retained for as long as there are potential claims against our company or if required by other legal obligations. Additionally, we may retain data if it serves legitimate business interests, such as for evidence or documentation purposes.

If you request the deletion of your data or revoke your consent to data processing, we will delete your data unless we have other lawful reasons to retain it, such as statutory retention periods under tax or commercial laws. In such cases, we will delete the data once these reasons are no longer applicable.

Once your data is no longer needed for the aforementioned purposes, it will be deleted or anonymized, where possible. Generally, operational data, such as system logs, is retained for no longer than twelve months.

The data collected via Hostinger may be stored on various servers worldwide. Hostinger servers are located in the Lithunia and this website data center are located in Paris.

For details, please see Hostinger privacy policy: https://www.hostinger.com/legal/privacy-policy.

This is a contract required by data protection law that guarantees that the company only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

If you contact us by email or telephone, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this was requested; the consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

8. Use of Cookies and Tracking Technologies

Overview of Cookies and Their Purposes

At EcoSense Data Insight Lab – Garg, we utilize cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device by your browser when you visit our site. These files help us recognize your browser or device during your current visit and subsequent visits, even if we do not directly know your identity.

Cookies can be categorized into two main types: session cookies and permanent cookies. Session cookies are temporary and are deleted once you close your browser. These are essential for the website’s operation and navigation. Permanent cookies, on the other hand, remain on your device for a longer duration, allowing us to remember your preferences, such as language settings, and provide a more personalized experience.

Types of Cookies We Use

1. Technically Necessary Cookies (First-Party Cookies):
   • These cookies are essential for the basic functionality of our website. They enable core features such as navigation and access to secure areas. These cookies are session-based and do not remain on your device after you close your browser.
2. Functional Cookies:
   • Functional cookies store information such as your username or language preference, allowing us to offer personalized features and enhance your user experience.
3. Performance Cookies:
   • Performance cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. They enable us to track visits and activities on our site, aiding in statistical analysis and improving site performance.
4. Marketing and Third-Party Cookies:
   • These cookies are used to deliver relevant advertisements to you, track the effectiveness of our marketing campaigns, and understand your interests by monitoring your activity across websites. Third-party cookies, such as those from advertising partners, are included in this category.

Legal Basis for Processing

• The use of technically necessary cookies is based on our legitimate interest in ensuring the proper functioning and optimization of our website as outlined in Art. 6(1)(f) of the GDPR. These cookies do not require user consent.
• For non-essential cookies (functional, performance, and marketing cookies), we rely on your explicit consent as required by Art. 6(1)(a) of the GDPR. You can manage your cookie preferences through our Cookie Consent Management Tool, which is displayed upon your first visit to our website.

Data Categories Processed

When cookies are used, we may collect the following data:

• IP address
• Browser type and version
• Operating system
• Internet connection details
• Session ID associated with the cookie

Third-Party Involvement and Data Recipients

Certain cookies, such as those used by Google Analytics and Hotjar, may involve third-party service providers who assist us in analyzing website usage and improving user experience. These providers may collect and process data on our behalf, including anonymized or pseudonymized information.

Google Services

• Google Analytics: Helps us understand how visitors use our website. The data collected is generally transferred to and stored on Google’s servers in the USA. More details can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en.
• Google Fonts: We use Google Fonts to ensure a uniform and attractive appearance on our website. For more details, see the Google Fonts FAQ at https://developers.google.com/fonts/faq and Google’s privacy policy at https://policies.google.com/privacy.
• Google Maps: Used to provide interactive maps on our website. Information on user data handling can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en.

Storage and Management of Cookies

Cookies are stored on your device for varying periods, depending on their type. You can manage your cookie settings, including blocking or deleting cookies, through your browser settings. However, please note that disabling cookies may impact the functionality of our website.

International Data Transfers

Cookies processed by third-party providers, such as Google, may involve the transfer of data to countries outside the European Union (EU) or the European Economic Area (EEA). While we strive to ensure adequate protection for your data, please be aware that transferring data to third countries, such as the United States, may carry certain risks.

Consent Revocation and Your Rights

You have the right to revoke your consent to the use of non-essential cookies at any time. This can be done through your browser settings or by accessing our Cookie Consent Management Tool. Once consent is withdrawn, we will stop processing your data based on that consent, except where legally permissible reasons justify continued processing.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling based on cookie data, except for the use of tracking tools like Google Analytics, which help us understand user behavior and preferences to improve our services.

8. Use of Google reCAPTCHA

To protect against misuse of our web forms and against spam, EcoSense Data Insight Lab – Garg uses the Google reCAPTCHA service on some of our website forms. Google reCAPTCHA is designed to verify that an input is made by a human rather than by an automated program (bot). This helps safeguard our website against abusive activities and ensures the security of your interactions on our site.

Google reCAPTCHA works by embedding a JavaScript code into the webpage, which then uses various methods, such as cookies, to analyze your interaction with the page. The information collected by reCAPTCHA, including your IP address and possibly other user data, is generally transmitted to Google servers in the USA for evaluation.

Legal Basis for Processing

The use of Google reCAPTCHA is based on our legitimate interest in ensuring the security and functionality of our website, as permitted by Art. 6(1)(f) of the GDPR.

Data Categories Processed

When Google reCAPTCHA is used, the following data may be collected:

• IP address
• Referrer URL (the address of the page on which the captcha is used)
• Information about the operating system
• Browser type and settings
• Keyboard and mouse movements
• Date and time of the interaction
• Screen resolution and language settings

Third-Party Involvement and Data Recipients

The data collected through Google reCAPTCHA may be transmitted to Google LLC servers in the USA for processing. Google may use this data to enhance the security and functionality of their services. The data processing activities are governed by Google’s privacy policy, which can be found at https://policies.google.com/privacy.

Storage and Management of reCAPTCHA Data

The data collected through reCAPTCHA is not used to personally identify you but is stored and analyzed for the purpose of security. You can manage your preferences regarding the use of such technologies in your browser settings, but disabling reCAPTCHA might limit your ability to interact with certain parts of our website.

International Data Transfers

The use of Google reCAPTCHA may involve the transfer of data to Google servers located in countries outside the EU or EEA, including the USA. While we ensure that appropriate safeguards are in place, please be aware that the data transfer may carry certain risks.

Revocation of Consent and Your Rights

You have the right to object to the processing of your data by Google reCAPTCHA at any time. However, doing so may affect your ability to use certain features of our website, particularly those requiring form submissions.

For more information on how Google reCAPTCHA works and how it processes your data, you can visit Google’s privacy policy at https://policies.google.com/privacy.

9. Data Transfer and International Data Sharing

In line with our business operations and the purposes outlined in Section 3, EcoSense Data Insight Lab – Garg may transfer data to third parties where such transfers are permissible and deemed appropriate. This enables these third parties to process data on our behalf or for their own purposes. The potential recipients of such data transfers include, but are not limited to:

• Service Providers: These include entities like banks, insurance companies, and IT providers.
• Suppliers and Subcontractors: Business partners who collaborate with us on various projects.
• Clients: Entities with whom we do business.
• Government Authorities or Courts: Both domestic and international.
• The Public: Including users of our websites and social media platforms.
• Business Acquirers: Parties interested in acquiring parts of our business.
• Legal Participants: Other parties involved in ongoing or potential legal proceedings.

These recipients may be located in Switzerland or any other country worldwide. In particular, data may be transferred to countries where our service providers and business partners, such as Google, Mixpanel, Intercom, and HubSpot, are based. If data is transferred to a country without adequate legal data protection, we ensure an appropriate level of protection through the use of contracts, specifically those based on the European Commission’s standard contractual clauses, or by relying on legal exceptions such as consent, contract performance, legal claims, public interest, or the protection of the individuals involved. You may request a copy of these contractual safeguards from the contact provided in Section 1. However, we may redact copies for confidentiality or data protection reasons or provide only excerpts.

Use of Third-Party Tools and Data Transfers Outside the EU/EEA

We utilize various technologies and tools provided by companies located in third countries outside the EU or European Economic Area (EEA), which may not offer the same level of data protection as the EU. This includes tools from US-based providers that are not certified under the Data Protection Framework (DPF). If these tools are activated, your data may be transferred to and processed in these third countries.

Please note that these third countries, which may lack robust data protection laws, do not guarantee a level of data protection comparable to the EU. However, the US, as a secure third-party country, generally maintains a data protection level similar to the EU. Data transfers to the US are permissible if the recipient is DPF-certified or offers equivalent assurances. Further details on data transfers to third-party countries, including information on data recipients, are provided in this Data Privacy Policy.

10. Our Social Networks in Detail

YouTube

Our website integrates videos from our YouTube channel, which is a service provided by Google. We utilize YouTube in “expanded data protection mode,” which, according to YouTube, prevents the storage of information about website visitors before they watch a video. However, this does not entirely rule out the possibility of data being shared with YouTube partners due to this mode. Regardless of whether a video is being watched, YouTube always establishes a connection with the Google DoubleClick network.

When you start playing a YouTube video on our website, a connection to YouTube’s servers is established, and the YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account while visiting our site, YouTube can directly link your browsing behavior to your profile. You can prevent this by logging out of your YouTube account.

Additionally, once you start playing a video, YouTube may place various cookies on your device or use comparable technologies for recognition (e.g., device fingerprinting). This enables YouTube to gather information about visitors to this website, which is used for generating video statistics, improving user experience, and preventing fraud.

Further data processing operations may occur when you start playing a YouTube video, which are beyond our control.

The use of YouTube is based on our legitimate interest in presenting our online content in an appealing manner, as per Art. 6 (1) lit. f) GDPR. If appropriate consent has been obtained, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and Section 25 (1) TTDSG, in so far as the consent includes the storage of cookies or access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

LinkedIn, LinkedIn Insight Tag, and LinkedIn Ads

We maintain a profile on LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Additionally, we use the LinkedIn Insight Tag to gather information about visitors to our website. If a visitor is registered with LinkedIn, we can analyze key occupational data (e.g., career level, company size, country, location, industry, job title) to better tailor our site to the relevant audience. The Insight Tag also allows us to measure conversions (e.g., purchases or other actions) across devices (e.g., from PC to tablet) and features a retargeting function that enables us to display targeted advertising (LinkedIn Ads) to visitors outside of our website. This is done for marketing and optimization purposes, specifically to analyze usage and continuously improve individual functions and the user experience. According to LinkedIn, no personal identification of the advertising recipient takes place.

LinkedIn also collects log files (URL, referrer URL, IP address, device, and browser characteristics, and time of access). The IP addresses are shortened or hashed (pseudonymized) if they are used to reach LinkedIn members across devices. LinkedIn deletes direct identifiers of members after seven days, and the remaining pseudonymized data is deleted within 180 days. LinkedIn may store the data collected from website visitors on its servers in the US and use it for its own purposes. For more details, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy#choices-oblig.

If your approval (consent) has been obtained, the use of the above-mentioned service occurs based on Art. 6 (1) lit. a) GDPR and Section 25 TTDSG. This consent may be revoked at any time. If consent was not obtained, the service is used based on Art. 6 (1) lit. f) GDPR, as we have a legitimate interest in effective advertising, including the use of social media.

We have concluded a Joint Controller Addendum for the use of the above-mentioned service. Data transmission to the US is based on the SCC of the EU Commission. Details can be found at https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

We have also concluded a LinkedIn Ads Agreement for the use of LinkedIn Ads: https://www.linkedin.com/legal/sas-terms .

The agreement with LinkedIn, including those concerning joint responsibility, primarily indicates that information requests and the enforcement of further rights of the data subject should most appropriately be directed to LinkedIn. As the provider of LinkedIn, they have direct access to and control over the necessary information to process your requests. LinkedIn can also take the required measures directly and provide information. However, if you require our support, please feel free to contact us at any time.

You can object to LinkedIn’s analysis of user behavior and targeted advertising and prevent the installation of cookies in your web browser settings at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. LinkedIn members can also control the use of their data for promotional purposes in their account settings. To prevent LinkedIn from linking information collected on our site to your LinkedIn account, please log out of your LinkedIn account before visiting our site.

Twitter

We also have a profile on Twitter. The service provider is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The data you share on our Twitter profile will be processed and stored by Twitter, in accordance with its data privacy policy. Twitter uses this data to provide insights and services to users, including for personalized advertising. For more information, refer to Twitter’s privacy policy: https://twitter.com/en/privacy.

If your approval (consent) has been obtained, the use of Twitter’s services occurs based on Art. 6 (1) lit. a) GDPR and Section 25 TTDSG. This consent may be revoked at any time. If consent was not obtained, the service is used based on Art. 6 (1) lit. f) GDPR, as we have a legitimate interest in effective advertising and communication through social media platforms.

Storage Period

Unless specifically stated otherwise, we store data only as long as necessary to fulfill the purposes for which it was collected. In some cases, it is required to store data to comply with legal obligations, such as tax or commercial law. In these cases, we continue to store the data for these legal purposes but do not process it in any other way, and we delete it after the legal retention period has expired.

Data Security

We make every effort to ensure the security of your data within the scope of applicable data protection laws and technical capabilities.

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website provider, this website uses the SSL (Secure Socket Layer) encryption system. However, we would like to point out that data transmission over the Internet (e.g., email communication) can have security gaps, and complete protection of data from third-party access is not possible.

To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually adapt to current technological standards.

Furthermore, we do not guarantee that our service will be available at all times; disruptions, interruptions, or failures cannot be entirely ruled out.

Profiling

We may partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling). In particular, profiling allows us to inform and advise you about products possibly relevant for you more accurately. For this purpose, we may use evaluation tools such as Intercom that enable us to communicate with you and advertise you as required, including market and opinion research.

11. Your Rights

Under applicable laws, such as the GDPR, you have the following rights as a data subject:

• Right to Information (Art. 15 GDPR): Access to your personal data and information about its processing.
• Right to Rectification (Art. 16 GDPR): Correct or update inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): Request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18 GDPR): Limit the processing of your personal data in specific situations.
• Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used format and transfer it to another controller.
• Right to Object (Art. 21 GDPR): Object to the processing of your personal data based on legitimate interests or direct marketing.
• Right to Revoke Consent (Art. 7 Para. 3 GDPR): Withdraw any consent previously given for data processing. This does not affect the legality of processing carried out before the withdrawal.

You also have the Right to Lodge a Complaint with a supervisory authority (Art. 77 GDPR) if you believe that your data protection rights have been violated.

Please note that exercising these rights might be subject to statutory restrictions, such as legal obligations to retain data or the need to process data for the establishment or enforcement of claims. If there are costs associated with exercising your rights, we will inform you in advance. The exercise of these rights may also conflict with contractual obligations, which could result in consequences like early termination of the contract or additional costs. We will notify you of such consequences in advance, unless they are already covered by our contract.

To assert these rights, you generally need to prove your identity, for instance, by providing identification documents if your identity is not otherwise evident. Contact us at the addresses provided in Section 1 to exercise your rights.

In addition, every data subject has the right to enforce his/her rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority of Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

12. Amendments of this Data Protection Statement

We may amend this Data Protection Statement at any time without prior notice. The current version published on our website shall apply. If the Data Protection Statement is part of an agreement with you, we will notify you by e-mail or other appropriate means in case of an amendment.