Datenschutz

Introduction

We are subject to Swiss and, where applicable, international data protection legislation. Accordingly, we comply with Swiss and, where applicable, internationally recognised principles to ensure data protection and security. This declaration informs you in particular about how we collect the personal data to which we have access via our website, for what purposes it is used, to whom it may be passed on and what rights you have in relation to the processing of your personal data.

Consent

By accessing our website and using the services and products we offer, you declare that you have carefully read this data protection declaration and agree to the described processing of your personal data. Any questions regarding this data protection declaration may be sent at any time by e-mail to dataprotection@aevis.com . If you do not agree with this declaration, you must refrain from accessing the portal and using our services and products.

Who is responsible for your personal data?

The party responsible within the meaning of data protection legislation is VVG+ SA, Route de la Chocolatière 21, 1026 Echandens, e-mail: dataprotection@aevis.com .

VVG+ SA determines the purposes and means of processing your personal data and is therefore responsible for processing and using your personal data in accordance with this privacy statement. If you have any questions or concerns about this privacy statement or the processing of your personal data, please contact us at any time by sending an e-mail to dataprotection@aevis.com .

How do we process personal data?

We collect and process personal data with care and for the purposes described in this privacy statement. In accordance with current legislation, we may also use your personal data in a manner other than that described in this privacy statement. In this case, we will provide you with specific data protection statements or communications at the time of collection and, where appropriate, we will seek your consent. We always make reasonable efforts to collect information in an anonymous or pseudonymised form, so that your identity cannot be recognised.

What personal data do we collect and for what purposes?

Personal data transmitted automatically when using the portal

VVG+ SA collects and saves the information that your browser automatically transmits to us in ‘server log files’ when you visit our website. This data is collected on the basis of your willingness and interest in visiting our website and our legitimate interests in operating our website. It may include the following data

• Type and version of bowser used;
• Operating systems used;
• Referrer URL (the website previously visited);
• Host name of the computer accessing our website;
• Date and time of the server request;
• Internet protocol address (IP address);
• Amount of data transmitted;
• Other data and similar information used to maintain the functionality of our website and system security.

This personal data is not cross-referenced with other personal data and is stored separately from any other personal data transmitted by the user. It is deleted by us no later than three months after it is collected.

VVG+ SA uses the personal data collected automatically for the following purposes:

• to enable the display, operation and proper functioning of the portal
• to ensure the stability and security of the system
• to improve and protect our services,
• for statistical purposes in the event of an attack on the network infrastructure on which the website is made available.

Personal data provided by the user

VVG+ SA collects and processes personal data that users voluntarily submit to us via an online form directly on the portal, via our contact e-mail address, via any other applications linked to the portal, by telephone or in any other way. This information includes, for example, the following personal data:

• Name, first name, postal address, e-mail address, telephone number, date of birth, gender ;
• your message or request.

The provision of this personal data is expressly on a voluntary basis. Without this personal data, however, we will not be able to provide the services requested by the user in the desired quality, or at all.

VVG+ NV uses the personal data provided by the user for the following purposes:

• to provide, maintain, protect and optimise the services and information offered,
• to communicate with you and to provide you with the best possible personalised information that you require from us (e.g. on our products and services),
• to offer you new services and information and, on the basis of your profile, to offer you personalised services and information likely to be of interest to you,
• to comply with current legal or other regulatory requirements and internal rules,
• to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings,
• for other legitimate purposes, if such processing arises from the circumstances or was indicated at the time of collection.

On what legal basis do we process your personal data?

The processing of your personal data is based on the following legal grounds:

• your consent, only if it can be revoked at any time (for example, when you subscribe to our Newsletter and other marketing communications) ;
• for the performance of a contract with you or for the intention of entering into a contract with you (e.g. when you apply on our job application portal or when you book an appointment);
• to comply with a legal obligation (e.g. for tax purposes or for the purposes of investigations or legal proceedings);
• to protect our legitimate interests (for example, the protection and security of our services, systems, assets; compliance with legal, regulatory and contractual obligations; the establishment, exercise or defence of legal claims; the maintenance and efficient organisation of our business; the improvement and development of our services and the sale and marketing of our services).

Where processing is based on your consent or our legitimate interests, you may withdraw your consent or object to such processing at any time by contacting us directly at dataprotection@aevis.com .

Please note, however, that withdrawing your consent does not affect the legitimacy of the processing based on consent prior to its withdrawal.

With whom do we share your personal data?

VVG+ SA takes the necessary measures to ensure that only our authorised staff and auxiliaries with the necessary knowledge have access to your personal data in order to fulfil the purposes for which your personal data was collected.

We may transfer your personal data to the following categories of possible recipients, in accordance with the purposes and legal bases for processing described above, insofar as this is necessary for the intended processing of the data:

• Other Group companies ;
• Service providers who process personal data on behalf of and on the instructions of VVG+ SA (known as subcontractors, such as in the field of IT, hosting and support);
• Customers, partners, suppliers, insurers and other business partners;
• marketing agencies, the public, including visitors to the Group's websites and social media;
• industry organisations, associations and other bodies;
• acquirers or persons interested in acquiring business units, companies or other parts of the Group;
• courts, conciliation bodies, law enforcement authorities, supervisory authorities, lawyers and other parties to potential or actual legal proceedings, where necessary to comply with the law or to establish, exercise or defend legal rights or claims.

All these categories of recipients may in turn involve third parties, so that your data may also be accessible to them.

We select our partners and subcontractors carefully and only if we have sufficient guarantees that they have appropriate technical and organisational measures in place, in accordance with legal requirements.

Our subcontractors may only process personal data on our documented instructions. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to achieve the purpose for which your personal data was collected, unless otherwise required by law.

Transfer of personal data outside the EEA

Personal data collected via our website is mainly stored in Switzerland and in the European Economic Area (EEA). However, if necessary for the data processing described in this privacy statement and in accordance with applicable law, we may also transfer personal data to service providers and other recipients located outside this territory or processing personal data outside this territory, in principle to any country in the world.

Where we transfer data to a country where there is no adequate legal protection of data, we will, as required by law, ensure an adequate level of protection through the use of appropriate contracts (including on the basis of the European Commission's standard contractual clauses) or binding corporate rules, or rely on legal exceptions (including consent).

You can obtain further information on our appropriate security measures by contacting us by e-mail at dataprotection@aevis.com .

How long do we keep your information?

In principle, personal data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected, unless longer retention is required to fulfil the purpose for which it was collected.

In principle, personal data is deleted as soon as it is no longer necessary to fulfil the purpose for which it was collected, unless longer retention is required to fulfil legal obligations (e.g. retention and documentation obligations), contractual or pre-contractual obligations or legitimate business interests on our part (e.g. to assert, exercise or defend legal rights).

On this basis, we generally process personal data in compliance with the following rules and obligations:

• Personal data that you automatically transmit to us when using our portal for the purposes of displaying, operating and ensuring the proper functioning of the portal will be deleted within three months.
• Personal data that you send us in connection with the use of the services and products offered on our portal or that you send us in any other way via the electronic contact address will normally be stored by us until you ask us to delete it, revoke your consent to its storage or until the purpose of its storage has expired (e.g. once the processing of your request has been completed).
• For personal data relating to a contract (including commercial documents and communications), we retain personal data for as long as the contractual relationship exists, and then for ten years after the end of the contractual relationship, unless (i) a shorter or longer legal retention obligation applies in a particular case, (ii) retention is necessary for evidential purposes or for another valid reason under applicable law.

Cookies

When you access or use our website, we may place cookies - small text files - or similar tools on your computer. We use these cookies to recognise you as a user of our website, to adapt the content, to improve the performance of our website and to improve its user-friendliness.

Categories of cookies we use

Depending on their function and use, the cookies we use can be classified into the following categories: Functional cookies, performance cookies and advertising cookies.

• Functional cookies: these cookies serve a multitude of purposes for the presentation, functionality and performance of a website and, in particular, to enhance the experience and enjoyment of visitors to the website. They enable a website to remember information already provided (e.g. user name, location or language choice) and offer visitors enhanced and more personal functions. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movements on other websites.
• Performance cookies: these cookies are used to collect information about how a website is used - for example, how you arrived at our website, which pages you open most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, for example the number of visitors who have come to our site. These cookies are used to monitor the level of activity on the site and improve its performance.
• Advertising cookies (sometimes referred to as ‘third party’ cookies) enable us or a third party supplier to serve ads on our website or on third party websites offering products you like, so that the ads you see may be more relevant to your preferences or interests (sometimes referred to as ‘targeting cookies’). They may also be used to measure the effectiveness of advertisements and promotions.

These cookies may be placed by us or by a third party on our behalf. Further information on cookies and their use can be found at http://www.allaboutcookies.org/.

The legal basis for data processing is your consent.

You can configure your browser settings so that no cookies are stored on your computer. Complete deactivation of cookies may prevent you from using some or all of the functions of our website.

By continuing to use our website and/or by accepting this data protection declaration, you consent to us setting cookies and therefore to personal usage data being collected, stored and used, even after the end of the browsing session. You can revoke this consent at any time by activating your browser settings to refuse third-party cookies.

Tracking with fusedeck

The fusedeck tracking solution from Capture Media AG (hereinafter ‘Capture Media’) is integrated into this website. Capture Media is a Swiss company based in Zurich which measures the use of this website in the context of commitments and events on a commission basis. Tracking is carried out anonymously, so that no link can be established with specific or identifiable persons.

Further information on data protection and the rights of data subjects in connection with fusedeck, including the possibility of opting out, can be found in this data protection declaration and in this additional information on opting out from Capture Media AG.

Meta pixels

Our website uses the Meta visitor action pixel to measure conversions. The provider of this service is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transmitted to the United States and other third countries.

This makes it possible to track the behaviour of site visitors after they have been redirected to the supplier's website by clicking on a Facebook or Instagram ad. This makes it possible to evaluate the effectiveness of meta-advertising for statistical and market research purposes and to optimise future advertising measures.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Meta so that a link can be made to the profile of the user concerned and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines. Meta may thus allow advertisements to be displayed on Meta pages and outside Meta. We have no influence on this use of data.

The transfer of data to the USA is based on the European Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Further information on protecting your privacy can be found in Meta's data protection information: https://de-de.facebook.com/about/privacy/. You can also deactivate the ‘Custom Audiences’ remarketing function in the ‘Settings’ section of the advertisements at https://accountscenter.facebook.com/ad_preferences. To do this, you need to be logged in to Facebook. If you do not have a Facebook account, you can deactivate advertising based on Facebook and Instagram usage on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Use of the contact form

You can use a contact form for general enquiries to get in touch with us. To do this, we generally require the following information (mandatory *):

• First name*.
• Last name*.
• E-mail*.
• Telephone number*.
• Country*.
• Message*.

For event requests, you can also use a contact form to get in touch with us and find out about the organisation of events. To do this, we generally need the following information (mandatory *):

• title*
• Title
• First name
• Last name* (surname)
• E-mail address*.
• Other details required for the event (hotel, car park, number of guests, date, address, telephone number)
• Message

We only use this information to provide you with the best possible personalised response to your contact request. The data is deleted a maximum of 60 days after the end of the event.

No automated decisions, including profiling with legal effect.

We do not take any decisions about you that are based exclusively on automated processing - including profiling - and that have legal effect on you or that affect you significantly in a similar way.

Security

VVG+ SA has taken organisational and technical measures to safeguard the security of personal data and to protect them against any breach of security resulting in the accidental or unlawful loss, alteration, deletion or destruction of personal data, or in the unauthorised disclosure of or access to such data.

VVG+ SA may use third parties as data processors to collect and process your personal data. The data processors we use will only process your personal data in accordance with our instructions and are required by law to take strict security measures when processing personal data.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we make every effort to protect your personal data, we cannot guarantee the security of any data you transmit to our website; each transmission is at your own risk. This is why you are always free to send us your personal data by other means, for example by telephone or by post. Once we have received your data, we apply strict procedures and rigorous security measures to prevent any breach of security.

Data protection statements from third party suppliers

Please note that if you click on a link from a third party site (for example, a social media or other website), you will be redirected to a site that we do not control and our privacy statement will no longer apply. Your browsing and interaction on another website will be subject to the terms of use and privacy statements and notices of those third-party websites. Furthermore, we cannot guarantee that these links are accurate or up to date.

We recommend that you read the terms of use and privacy statements and notices of other websites carefully before submitting personal data via our website. We are neither responsible nor liable for the information content and data processing of these foreign websites.

Children

Our website is not intended for children and, as far as we are aware, we do not collect, process or use personal data from children under the age of 16, unless we have obtained the express consent of their legal representatives. If we are informed or otherwise become aware that the personal data of a child under the age of 16 is being processed without the consent of his or her legal representatives, we will take all reasonable and acceptable steps to delete such personal data.

What are your rights?

You may ask VVG+ SA, with proof of your identity, whether your personal data is being processed. In addition, you have the right to request the rectification, total or partial destruction or restriction of the processing of your personal data and to object to the processing of your personal data yourself. The destruction of your personal data may result in you no longer being able to use our services.

If the processing is based on your consent or on our legitimate interests, you may withdraw your consent or object to the processing at any time by contacting us directly by e-mail at dataprotection@aevis.com . You may also request that certain personal data be returned to you for transfer to another organisation (a process known as ‘data portability’).

Any such request should be addressed to VGG+ SA at the following e-mail address: dataprotection@aevis.com . If costs are involved, we will inform you in advance.

Please note that we reserve the right to assert restrictions provided by law, for example if we are obliged to store or process certain data, if we have an overriding interest in doing so (insofar as we can invoke it) or if we need the data to assert legal claims.

If we refuse your request or if you are dissatisfied with our processing, you also have the right to lodge a complaint with the competent supervisory authority and to lodge an appeal with the competent authority. The competent authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern(http://www.edoeb.admin.ch).

Contact

If you wish to exercise your rights as described in this privacy statement or if you have any questions or concerns about it, please contact our Data Protection Officer.

VVG+ SA

Route de la Chocolatière 21

1026 Echandens

dataprotection@aevis.com

Changes to our privacy statement

VVG+ SA reserves the right to amend, supplement or otherwise modify this privacy statement at any time and without giving reasons. The current data protection declaration as published on the portal shall apply.

Version: 29 November 2024