1. DATA PRIVACY AT A GLANCE
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. For detailed information on data privacy, please refer to our data privacy statement provided below.
DATA COLLECTION ON OUR WEBSITE
Who is responsible for collecting data on this website?
Data processing on this website is done by the website operator. You will find relevant contact details in the Publisher Information provided on this website.
How do we collect your data?
On the one hand, your data are collected by you communicating it to us. This may, for example, be data you enter in a contact form.
Other data are automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or the time at which you open our site). These data are collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to make sure that the website is provided in error-free form. Other data can be used to analyse your user behaviour.
What rights do you have in connection with your data?
You have the right at any time to receive information from us free of charge about the origin, recipient and purpose of the data stored about your person. You also have to right to demand that these data be rectified, made unavailable or erased. For this purpose and for further information on data privacy, you can contact us at any time at the address given in the Publisher Information. Furthermore, you are entitled to lodge a complaint with the responsible supervisory authority.
Under certain circumstances, you also have the right to demand a restriction on the processing of your personal data. For pertinent details please refer to the data privacy statement under "Right to restriction of processing".
ANALYSIS TOOLS AND TOOLS OF THIRD-PARTY PROVIDERS
When you visit our website your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. Analysis of your surfing behaviour is usually done anonymously; surfing behaviour cannot be traced back to you.
You can object to such analysis or prevent such by not using specific tools. Detailed information on these tools and on the ways in which you can object to them being used is provided in the following data privacy statement.
2. GENERAL INFORMATION AND MANDATORY DETAILS
The operators of these pages take the privacy of your personal data very seriously. We shall treat your personal data confidentially and in compliance with the statutory data protection regulations as well as this data privacy statement.
Various personal data will be collected when you use this website. Personal data are all data with which you can be personally identified. This data privacy statement explains which data we collect and what we use them for. It also explains how this is done and for which purpose.
Please note that the transmission of data via the Internet (for example, when communicating via e-mail) may have security vulnerabilities. Data cannot be fully protected from access by third parties.
INFORMATION ON THE CONTROLLER
The controller responsible for processing data on this website is:
FIR Group AG
Phone: +41 62 288 15 55
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses etc.).
REVOKING YOUR CONSENT TO DATA PROCESSING
Many data processing operations can only be performed with your express consent. Any consent you have given may be revoked at any time. This can be done by sending us an informal e-mail message. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.
RIGHT TO OBJECT TO DATA BEING COLLECTED IN SPECIFIC INSTANCES AS WELL AS FOR DIRECT MARKETING PURPOSES (GDPR ARTICLE 21)
If data are processed on the basis of GDPR Article 6 (1) (e) or (f), you shall have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data; this also applies to any profiling based on these provisions. The relevant legal basis on which processing is based is given in this data privacy statement. If you lodge any objection, we shall no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for processing such which override your interests, rights and freedoms, or for establishing, exercising or defending legal claims (objection under GDPR Article 21 (1).
If your personal data are processed for the purpose of direct marketing, you shall have the right to object at any time to the processing of personal data concerning you for such marketing; this shall include profiling to the extent that it is related to such direct marketing. If you object, your personal data shall thereafter no longer be processed for the purpose of direct marketing (objection under GDPR Article 21 (2)).
RIGHT TO COMPLAIN TO THE RESPONSIBLE SUPERVISORY AUTHORITY
In the event of any infringement of the GDPR, the data subject concerned shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, workplace or place of presumed infringement. The right of appeal shall exist without prejudice to other administrative and judicial redress.
RIGHT TO DATA PORTABILITY
You have the right to have the data that we process automatically on the basis of your consent or in fulfillment of a contract handed out to you or to third parties in a commonly used, machine-readable format. If you require the data to be transmitted directly to another controller, this will only be done to the extent technically feasible.
SSL OR TLS ENCRYPTION
For security reasons and to protect the transmission of confidential content, e.g. orders or requests, that you send to us as a site operator, this website uses SSL or TLS encryption. An encrypted connection can be recognised by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
When SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
INFORMATION, MAKING UNAVAILABLE, ERASURE AND RECTIFICATION
You have the right at any time to request at no charge information on your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to these data being rectified, made unavailable or erased. For this purpose and for further information on the subject of personal data, you can contact us at any time at the address given in the Legal Information.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to demand that the processing of your personal data be restricted. For this purpose you can contact us at any time at the address given in the Publisher Information. The right to restriction of processing exists in the following cases:
- If you contest the accuracy of the personal data stored with us, we will usually need time to check this. For the duration of this check, you have the right to demand that the processing of your personal data be restricted.
- If the processing of your personal data has taken/is taking place unlawfully and you oppose the erasure thereof, you can demand that data processing be restricted instead.
- If we no longer need your personal data, but such are required by you for the exercise, establishment or defence of legal claims, you have the right to demand that the processing of your personal data be restricted instead of having them deleted.
- If you have objected to processing pursuant to GDPR Article 21(1), a balance must be struck between your and our interests. Pending verification of whose interests override, you have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
OBJECTION TO ADVERTISING E-MAILS
The use of contact information published in the context of the Legal Information obligation for sending unsolicited advertising and information materials is hereby rejected. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam e-mails.
3. DATA COLLECTION ON OUR WEBSITE
Most of the cookies which we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your terminal device until you erase them. These cookies let us identify your browser the next time you visit our website.
You can set your browser to inform you that cookies are being set and only permit cookies in a particular instance, to accept cookies for specific instances or always exclude them as well as activate the automatic erasure of cookies on closing the browser. Deactivating cookies can restrict the functionality of our website.
Cookies that are required for performing the electronic communication process or for providing specific functions to wish to use (e.g. shopping basket function) will be stored on the basis of DGPR Article 6 (1) (f). The website operator has a legitimate interest in storing cookies for ensuring the technically flawless and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, such are treated separately in this data privacy statement.
SERVER LOG FILES
The provider of these pages automatically collects and stores information in so-called server log files which your browser automatically communicates to us. This information covers:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of server request
- IP address
These data will not be merged with other data sources.
These data will be collected on the basis of GDPR Article 6 (1) (f). The website operator has a legitimate interest in ensuring the technically flawless display and optimisation of its website – this makes it necessary to collect the server log files.
If you send us requests via contact form, your details from the request form, including the contact details you provided there, will be stored for the purpose of processing the request and for the event that we need to ask you any questions at a later date. We will not share these data without your consent.
Consequently, the data entered in the contact form shall only be processed on the basis of your consent (GDPR Article 6 (1) (f)). You may revoke this consent at any time. This can be done by sending us an informal e-mail message. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by said revocation.
The data you enter on the contact form will remain with us until such time as you ask us to erase them, revoke your consent to store them or the purpose for which they are stored ceases to exist (e.g. after we have finished dealing with your request). This shall not affect any mandatory statutory provisions – in particular statutory retention periods.
REQUEST BY E-MAIL, TELEPHONE OR FAX
If you contact us by e-mail, telephone or fax, your request, including all of the personal data provided therein (name, request) will be stored and processed by us for the purpose of dealing with your concern. We will not share these data without your consent.
These data will be processed on the basis of GDPR Article 6 (1) (b) if your request is connected with fulfilling a contract or needs to be made for implementing pre-contractual measures. In all other instances, processing shall be based on your consent (GDPR Article 6 (1) (a)) and / or on our legitimate interests (GDPR Article 6 (1) (f)) since we have a legitimate interest in effectively processing requests submitted to us.
The data you send us by contact requests will remain with us until such time as you ask us to erase them, revoke your consent to store them or the purpose for which they are stored ceases to exist (e.g. after we have finished dealing with your concern). This shall not affect any mandatory statutory provisions – in particular statutory retention periods.
4. ANALYSIS TOOLS AND ADVERTISING
This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics cookies are stored on the basis of GDPR Article 6 (1) (f), such also being the basis on which this analysis tool is used. The website operator has a legitimate interest in analysing user behaviour with a view to optimising its website as well as its advertising.
We have activated the IP anonymisation function on this website. This means that Google shortens your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in cases of exception will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with using the website and the Internet. The IP address communicated from your browser within Google Analytics will not be pooled with other data from Google.
You can set your browser software to prevent cookies from being stored. We do, however, point out that you may then not be able to use all of the functions available on this website. Furthermore, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being forwarded to and processed by Google by downloading and installing the browser plug-in provided in the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: deactivate Google Analytics.
We have entered a contract with Google for order processing and fully meet the stringent requirements of the German data protection authorities when using Google Analytics.
Data stored by Google at user and event level that are linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) shall be anonymised or erased after 50 months. Details in this regard can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en
5. PLUG-INS AND TOOLS
Our website uses plug-ins from the YouTube site operated by Google. The operator of the sites is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our sites that is provided with a YouTube plug-in, a connection will be made to YouTube's servers. This tells the YouTube server which of our pages you have visited.
YouTube may also store various cookies on your terminal device. YouTube can use these cookies to receive information on visitors to our website. This information is used, for example, to collect video statistics, improve user friendliness and prevent attempted fraud. Other cookies remain on your terminal device until you erase them.
While you are logged in to your YouTube account, you provide YouTube with the capability of matching up your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of displaying our online offerings in an appealing manner. This constitutes a legitimate interest within the meaning of GDPR Article 6 (1) (f).
6. OWN SERVICES
We provide you with the opportunity to apply for a job with us (e.g. by e-mail, postal service or via the online application form). Below we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in compliance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of collecting data
When you submit an application to us, we will process your associated personal data (e.g. contact and communication details, application documents, notes made during job interviews, etc.) insofar as such is necessary for reaching a decision on establishing an employment relationship. The legal basis for this is Section 26 of the revised German Federal Data Protection Act (BDSG-neu) under German law (initiation of an employment relationship), GDPR Article 6 (1) (b) (general contract initiation) and – if you have given your consent – GDPR Article 6 (1) (a). Consent may be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 of the revised Federal Data protection Act (BDSG-neu) and DGPR Article 6 (1) (b) for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data being processed or ask us to erase the data, the data communicated by you, including any remaining physical application documents, will be stored or, as the case may be, kept for a maximum of 6 months after completing the application process (retention period) in order to provide the capability of tracing the details of the application process in the event of any discrepancies (GDPR Article 6 (1) (f).
YOU MAY OBJECT TO SUCH STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OVERRIDE OUR INTERESTS.
On expiry of the retention period, the data will be erased unless there is any legal obligation to retain them or any other legal ground for continued storage. If it is evident that it will be necessary to retain your data after the retention period expires (e.g. on the grounds of an impending or pending legal dispute), erasure will only take place once the data have become irrelevant. Other statutory retention obligations shall remain unaffected.