Privacy policy

With this Privacy Policy, Gudo AG (hereinafter: "Gudo AG" or "we") provides information on what personal data we process, for what purpose, how and where, in particular in connection with our website and our other services. This Privacy Policy also provides information about the rights of persons whose data we process.

Responsibility and contact address

Gudo AG is responsible for the data processing described here. Inquiries about data protection can be sent to us by letter or e-mail:

Gudo AG
Enrico Maraffio
Gass 12
5242 Lupfig

Phone: +41 44 929 69 30
Email: info@gudo.com

General note

We process personal data in the following categories of processing in particular.

• Customer data of customers for whom we provide or have provided services;
• Personal data that we receive indirectly from our customers during the provision of services;
• When you visit our website;
• When participating in one of our events;
• When we communicate;
• In the case of other contractual relationships, e.g. as a supplier, service provider or consultant;
• For applications;
• If we are obliged to do so for legal or regulatory reasons;
• When we exercise our due diligence or other legitimate interests, e.g. to avoid conflicts of interest, avoid risks, ensure data accuracy, ensure security or enforce our rights.

More detailed information can be found in the following descriptions of the respective categories of processing.

Processing of personal data

Personal data is all information relating to an identified or identifiable person.

We process personal data in accordance with Swiss data protection law. In addition, we process personal data - to the extent and insofar as the EU GDPR is applicable - in accordance with the following legal bases in connection with Art. 6 (1) GDPR:

• Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO) - The data subject has given their consent to the processing of their personal data for one or more specific purposes.
• Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO) - The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO) - The processing is necessary for compliance with a legal obligation to which the controller is subject.
• Protection of vital interests (Art. 6 para. 1 p. 1 lit. d. DSGVO) - Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

We process personal data for the duration required for the respective purpose or purposes or by law, i.e. for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) and beyond in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period during which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). Personal data whose processing is no longer required will be anonymized or deleted. Persons whose data we process have a fundamental right to erasure.

Safety measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, safeguarding of availability and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

Transfer of personal data to third parties and international transfers

We may have personal data processed by commissioned third parties or process it jointly with third parties or with the help of third parties or transmit it to third parties. Such third parties are, in particular, providers whose services we use. We also guarantee appropriate data protection for such third parties.

The following categories of recipients may receive personal data from us:

• Service providers (e.g. other IT service providers, hosting providers, suppliers, consultants, lawyers, insurance companies);
• Third parties within the scope of our legal or contractual obligations, authorities, state institutions, courts.

Such third parties are in principle in Switzerland and in the European Economic Area (EEA). However, such third parties may also be located in other countries and worldwide, provided that their data protection law complies with Assessment by the Federal Data Protection and Information Commissioner (FDPIC) guarantees adequate data protection, or if adequate data protection is guaranteed for other reasons, such as through a corresponding contractual agreement, in particular on the basis of standard contractual clauses, or through corresponding certification. Exceptionally, such a third party may be located in a country without adequate data protection, provided that the data protection requirements, such as the express consent of the data subject, are met.

Purposes of data processing

We may process your personal data for several purposes. Primarily, we process it in order to be able to provide our services to you.

Provision of services

We primarily process the personal data that we receive in the context of our contractual relationships with our customers and other contractual relationships with business partners from these and other persons involved.

The personal data of our customers includes the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information);
• Personal information (e.g. date of birth, profession, title, job title, passport / ID number, AHV number, etc.);
• Financial information (e.g. data on bank details);
• Contract master data (e.g. contractual relationship, product or contractual interest);
• Supplier information, contact details (e.g. information on suppliers including contact persons);
• Order history (e.g. records of previous orders and transactions);
• Electronic identification data (e.g. user data, IP address, electronic signature, connection and log data, cookies);
• Application and employment data (e.g. social security data, salary data, work schedules, working hours, vacation and sick days).

We process this personal data for the purposes described on the basis of the following legal bases:

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, including contract initiation and any enforcement (e.g. advice);
• To comply with a legal obligation (e.g. if we are performing our duties or are obliged to disclose information).
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, ensure security, manage risk, enforce our rights, defend ourselves against claims or to check for potential conflicts of interest)
• Consent (e.g. to send you marketing information).

Use of our website

No personal data needs to be disclosed in order to use our website. However, the server collects a range of user information with each visit, which is temporarily stored in the server's log files.

When using this general information, no assignment to a specific person takes place. The collection of this information or data is technically necessary to display our website and to ensure its stability and security. This information is also collected in order to improve the website and analyze its use.

This includes the following information in particular:

• Information that you transmit to us via the website;
• Technical information automatically transmitted to us or our service providers, information on user behavior or website settings (e.g. IP address, date and time of the query, UDI, device type, browser, number of clicks on the page, opening the newsletter, clicking on links, etc.).

We process this personal data for the purposes described on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services);
• Consent (e.g. to the use of cookies or the newsletter).

Direct communication, visits and events

When you contact us (e.g. by telephone, e-mail, contact form or chat) or we contact you, we process the personal data required for this. We also process this personal data when you visit us. In this case, you may have to leave your contact details before your visit or at reception. We store this data for a certain period of time in order to protect our infrastructure and our information.

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

We use appropriately secure applications to conduct telephone conferences, online meetings, video conferences and/or webinars ("online meetings").

When organizing and holding events, we process personal data for event management and participant support, including the administration of registrations, communication with participants and coordination with service providers.

We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Edge data for communication (e.g. IP address, duration of communication, communication channel);
• Other information that the user uploads, provides or creates while using the video conferencing service as well as metadata used for the maintenance of the service provided;
• Personal information (e.g. profession, function, title, employer company);
• Time and reason for the communication or visit.

We process this personal data for the purposes described on the basis of the following legal bases:

• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (provision of a service);
• Safeguarding legitimate interests (e.g. security, traceability, processing and administration of customer relationships);
• Consent.

Newsletter

On the basis of your express consent, we will regularly send you our newsletter or similar information by e-mail to the e-mail address you have provided.

To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances that are relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances).

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your wish to do so via the contact option provided at the end of this privacy policy.

Applications

You can submit your application for a position with us by post or via the e-mail address provided on our website. The application documents and all personal data disclosed to us will be treated as strictly confidential, will not be disclosed to third parties and will only be processed for the purpose of processing your application for employment with us. Without your consent to the contrary, your application dossier will either be returned to you or deleted/destroyed after the application process has been completed, unless it is subject to a statutory retention obligation. The legal basis for the processing of your data is your consent, the fulfillment of the contract with you and our legitimate interests.

We process the following information in particular:

• Contact information (e.g. surname, first name, address, telephone number, e-mail);
• Personal information (e.g. profession, function, title, employer company);
• Application documents (e.g. letter of motivation, certificates, CV);
• Assessment information (e.g. assessment of personnel consultants, reference information, assessments).

We process this personal data for the purposes described on the basis of the following legal bases:

• Safeguarding legitimate interests (e.g. hiring new employees); incl. contract initiation and possible enforcement;
• Consent.

Duration of storage of personal data

We process personal data for the duration required for the respective purpose(s) or by law, i.e. for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) and beyond in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). Personal data whose processing is no longer required will be anonymized or deleted. Persons whose data we process have a fundamental right to erasure.

Rights of data subjects

Data subjects whose personal data we process have the rights set out in the relevant data protection laws. You have the following rights in connection with our processing of personal data:

• Right to information about your personal data stored by us, the purpose of processing, the origin and recipients or categories of recipients to whom personal data is disclosed;
• Right to rectification if your data is incorrect or incomplete;
• Right to restriction or omission of future processing or disclosure of your personal data to third parties;
• right to request the deletion of the processed personal data;
• Right to data portability;
• right to object to data processing or to revoke consent to the processing of personal data at any time for the future without giving reasons;

To assert these rights, please contact the address given above.

Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Please note that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so or need it to assert claims.

Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Use of social media

We are present on social media platforms and other online platforms in order to communicate with interested parties and provide information about our services. Personal data may also be processed outside Switzerland and the European Economic Area.

The General Terms and Conditions (GTC) and terms of use as well as data protection declarations and other provisions of the individual operators of such online platforms apply. These provisions provide information in particular about the rights of data subjects, including in particular the right to information.

Use of the website

SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

We may use cookies for our website. Cookies - both our own cookies (first-party cookies) and cookies from third parties whose services we use (third-party cookies) - are data that are stored in your browser. Such stored data need not be limited to traditional cookies in text form. Cookies cannot execute programs or transmit malware such as Trojans and viruses.

When you visit our website, cookies can be stored temporarily in your browser as "session cookies" or for a certain period of time as so-called permanent cookies. "Session cookies" are automatically deleted when you close your browser. Permanent cookies have a specific storage period. In particular, they make it possible to recognize your browser the next time you visit our website and thus, for example, to measure the reach of our website. Permanent cookies can also be used for online marketing, for example.

You can completely or partially deactivate and delete cookies in your browser settings at any time. Without cookies, our website may no longer be fully available. We actively request your express consent for the use of cookies, if and to the extent necessary.

Below you will find links to the support documents of the most important web browsers, which describe how you can manage and delete cookies.

Chrome: https://support.google.com/accounts/answer/32050

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectslug=delete-cookies-remove-info-websites-stored

Internet Explorer: https://support.microsoft.com/de-de/topic/lschen-von-cookiedateien-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc

If you use a different web browser, please read the official support documents for your browser.

Server log files

We may collect the following information for each access to our website, provided that this information is transmitted by your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed including amount of data transferred, last website accessed in the same browser window (referrer).

The information is required in order to provide our online offer in a permanent, user-friendly and reliable manner and to ensure data security and thus in particular the protection of personal data - also by third parties or with the help of third parties.

Third party services

We use third-party services in order to provide our website in a permanent, user-friendly, secure and reliable manner. Such services are also used to embed content in our website. Such services - for example hosting and storage services, video services and payment services - require your Internet Protocol (IP) address, as otherwise such services cannot transmit the corresponding content. Such services may be located outside Switzerland and the European Economic Area (EEA), provided that adequate data protection is guaranteed.

For their own security-related, statistical and technical purposes, third parties whose services we use may also process data in connection with our offer and from other sources - including cookies, log files and tracking pixels - in aggregated, anonymized or pseudonymized form.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".

The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under "My data", "Personal data".

The legal basis for the use of Google Analytics is your consent. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" in order to ensure anonymized collection of IP addresses. This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Deactivate Google Analytics.

Furthermore, you can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics. This stores an opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your end device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set for each browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

Use of Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus, for example, integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal user data. With regard to the processing of users' personal data, please refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

General disclaimer

All information on our website has been carefully checked. We make every effort to ensure that the information we provide is up-to-date, correct and complete. Nevertheless, the occurrence of errors can not be completely excluded, so we can not guarantee the completeness, accuracy and timeliness of information, including journalistic-editorial nature. Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website applies. Insofar as the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

Questions about data protection

If you have any questions about data protection, please write us an e-mail or contact directly the responsible person in our organization listed for data protection at the beginning of the privacy policy.

Status: Jan 2024