Privacy Policy
1. GENERAL INFORMATION
When you visit this website, your personal data is processed. Personal data is all data with which you can be personally identified. The following information explains which data we collect and for what purpose. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
DATA COLLECTION ON OUR WEBSITE
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us voluntarily. This may, for example, be data that you transmit to us as part of an application. On the other hand, data is automatically collected by our IT systems when you visit this website. This is primarily technical data, e.g. internet browser, operating system type and version, time of access and IP address.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website and the security of our website. Another part of the data can be used to analyse your usage behaviour and to statistically evaluate your interests.
What rights do you have in connection with your data?
You have the right to receive information free of charge at any time about the purpose, the categories of personal data processed, the recipient, the duration of storage and the origin of the data. You also have the right to request the rectification, erasure or restriction of processing. You can contact us at any time at the address given in the legal notice if you have any further questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority.
2. GENERAL NOTES AND MANDATORY INFORMATION
When you visit this website, your personal data is processed. Personal data is all data with which you can be personally identified. The following information explains which data we collect and for what purpose. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
DATA PROTECTION
The operator of this website takes the protection of your personal data very seriously. We treat your personal data with the utmost confidentiality and in accordance with the statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
NOTE ON THE RESPONSIBLE BODY
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
The controller responsible for data processing on this website is
Panoff Consulting GmbH
Arbachstrasse 2d, CH-6340 Inwil/Baar, Schweiz
Handelsregisternummer: CH-170.4.012.551-0
Telefon: +41 41 726 59 00
E-Mail: info@panoff.ch
DATA PROTECTION OFFICER
You can contact our data protection officer at the above address.
REVOCATION OF CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal email. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the competent supervisory authority.
RIGHT TO DATA PORTABILITY
You also have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a structured, commonly used and machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.
SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, in compliance with the data protection regulations pursuant to Art. 32 GDPR. You can recognise an encrypted connection on the one hand by the fact that the address line of the browser changes from “http://” to “https://” and on the other hand by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
ANALYSIS TOOLS AND TOOLS FROM THIRD-PARTY PROVIDERS
By visiting our website, your surfing behaviour can be statistically evaluated. This is done in particular by using cookies and so-called analysis programmes. The analysis is carried out anonymously so that the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
If we transfer data to third countries, i.e. countries outside the European Union, the transfer takes place exclusively in compliance with the legal requirements.
If the transfer of data to a third country does not serve to fulfil our contract with you, we do not have your consent, the transfer is not necessary for the assertion, exercise or defence of legal claims and no other exception under Art. 49 GDPR applies, we will only transfer your data to a third country if an adequacy decision pursuant to Art. 45 GDPR or suitable guarantees pursuant to Art. 46 GDPR exist.
One of these adequacy decisions is Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the so-called “EU-US Privacy Shield” for the USA. For transfers to companies that are certified under the EU-US Privacy Shield, the level of data protection is generally considered adequate within the meaning of Art. 45 GDPR.
INFORMATION, CORRECTION, DELETION, RESTRICTION, OBJECTION
You have the right to request information free of charge at any time about your personal data processed and stored by us, the purposes of the data processing, the categories of personal data processed, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details. You can contact us at any time at the address given in the legal notice if you have further questions about data protection.
OBJECTION TO ADVERTISING EMAILS
We hereby object to the use of the contact data published in the legal notice for sending unsolicited advertising and information material. In the event of the unsolicited sending of advertising information, such as spam e-mails, the operator of the site reserves the right to take legal action.
3. DATA COLLECTION ON OUR WEBSITE IN DETAIL
COOKIES
Our website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
On the one hand, we use so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them yourself. These cookies enable us to recognise your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, however, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.
SERVER LOG FILES
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us when you visit the website. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- IP address
Cookies that are required to carry out the electronic communication process are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.
ENQUIRIES BY E-MAIL, TELEPHONE, FAX
If you contact us directly by e-mail, telephone or fax, we will store and process your enquiry including all resulting personal data (name, contact details, enquiry itself) for the purpose of processing your request. We will not pass on this data without your consent.
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and/or on our legitimate interest pursuant to Art. 6 para. 1 lit. f. GDPR, as we have a legitimate interest in effective data processing. GDPR, as we have a legitimate interest in the effective processing of the enquiries addressed to us. You can revoke this consent at any time. All you need to do is send us an informal email. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
The data you send to us via a contact request will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies, e.g. due to the completed processing of your request. Mandatory statutory provisions – in particular retention periods – remain unaffected.
APPLICATIONS
If you apply to us via our website or send us applications in electronic form, we store the data you provide (e.g. e-mail address, name, address, telephone number). If you apply via our website, we require you to enter certain personal data that is necessary for the application process (first and last name, address, e-mail address, telephone number, how you heard about us, if applicable). You also have the option of uploading informative documents that may contain further personal data (e.g. date of birth).
Your application documents will only be made accessible to authorised employees who are directly involved in the application process.
The purpose of the data processing is the necessary decision on the establishment of an employment relationship (Art. 88 para. 1 GDPR in conjunction with § 26 BDSG).
Your data will be stored by us until the application process has been completed. If your application is rejected, your application documents will be stored by us for a further 6 months due to the potential possibility of legal action under the General Equal Treatment Act (Section 15 (4) AGG) and then deleted or anonymised. In the event of anonymisation, the data will then only be available to us as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of women or men, number of applications in a certain period, etc.).
With your consent, you also have the option of being included in our “talent pool” in order to identify any other interesting positions for you. This also applies to applications for apprenticeships or internships.
By accepting the privacy policy, you agree to be included in our “Talent Pool”.
If your application results in an employment relationship with us, we will store the personal data collected during the application process for at least the duration of the employment relationship.
The data transmitted as part of your application is transferred using TLS encryption and stored in a database. This database is operated internally.
DOWNLOAD OF DOCUMENTS PROVIDED
On our website you will also find an area where you can access and download documents after entering individual personal data in the contact form.
If you would like to access the documents provided there, please enter your first and last name, e-mail address and employer in the contact form. The legal basis for the processing is your consent in accordance with Art. Art. 6 para. 1 lit. a GDPR.
The purpose of this processing is the user-optimised provision of downloadable content by adapting the content to the respective interests.
In addition to making the documents available, we collect pseudonymised data about your user behaviour by means of a cookie. This is done in order to determine the number of views and downloads of our content, in particular how often you use our content free of charge. This data is not merged with other user data. You can object to this pseudonymised profiling at any time.
You can revoke this consent at any time. All you need to do is send us an informal email. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
4. ANALYSIS TOOLS AND ADVERTISING
GOOGLE ANALYTICS
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We use Google Analytics to collect information on user behaviour in order to improve the user-friendliness of the website.
The recipient of the data collected in this way is Google. The personal data is transferred to the USA under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission (Art. 45 GDPR).
IP ANONYMISATION
We would like to point out that the IP anonymisation function has been activated on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA in order to ensure anonymised collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on terms of use and data protection at
https://marketingplatform.google.com/about/analytics/terms/de/.
On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.
OBJECTION TO DATA COLLECTION
You can revoke your consent to the storage of cookies and prevent their storage by adjusting your browser software accordingly.
BROWSER PLUGIN
This sets an opt-out cookie that prevents the collection of your data on future visits to this website. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used.
To do this, you need to download and install the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the general terms of use of Google Analytics can be found at:
http://www.google.com/analytics/terms/de.html.
The data protection regulations for Google Analytics can be found at:
https://marketingplat-form.google.com/about/analytics/terms/de/.
DEMOGRAPHIC CHARACTERISTICS IN GOOGLE ANALYTICS
This website uses the “Demographics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of visitors to the site. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.