Privacy Policy - EN

Data protection notice for bayartis GmbH pursuant to Art. 19 of the revised Swiss Data Protection Act (revDSG) and, if applicable, pursuant to Art. 13 of the EU General Data Protection Regulation (GDPR)

Thank you for visiting our website, we appreciate your visit. When you interact with us, we collect and process certain personal data from you. With the following data protection notice, we would like to give you an overview of the processing of your personal data during the use of our website, when you use our services, purchase our products or otherwise contact us.

We process your personal data in accordance with the law that applies to you in each case.

1. Responsible body

The responsible body for data processing within the meaning of Art. 5 para. 1 lit. j) revDSG (Art. 4 No. 7 GDPR) is the

Bayartis GmbH

Aeschenplatz 6

4052 Basel

E-Mail: info@bayartis.com

Authorized Representative: Fatma Oezdemir-Zaech

Contact Data Protection Officer: compliance@bayartis.com

2. Scope of the processing of personal data

2.1 By bayartis GmbH

Various categories of data are processed when you use our website, make use of our services and products or contact us. The following personal data is processed:

Technical data: When you use our website, we collect the IP address of your end device and other technical data to ensure the functionality and security of our services. This data also includes logs in which the use of our systems is recorded. The technical data itself does not allow any conclusions to be drawn about your identity. We only store this technical data for as long as is necessary.

Communication data: If you are in contact with us via the contact form, by email, telephone, letter or other means of communication, we record the data exchanged between you and us, including your contact details and the marginal data of the communication. We generally retain this data for 12 months from the last exchange with you. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. E-mails in personal mailboxes and written correspondence are generally stored for at least 10 years.

Master data: We define master data as the basic data that we require in addition to the contract data (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information about your role and function, your bank account(s), your date of birth, customer history, powers of attorney, signature authorizations and declarations of consent. We process your master data if you are a customer or other business contact or work for one.

We receive master data from you yourself (e.g. when you use our services or when you contact us) or from bodies for which you work. As a rule, we store this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. In the case of pure marketing and advertising contacts, the period is normally much shorter, usually no more than 2 years from the last contact.

Contract data: This is data that arises in connection with the conclusion or processing of a contract, information about contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing. As a rule, we collect this data from you, from contractual partners and from third parties involved in the execution of the contract. As a rule, we store this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons.

Other data: We also collect data from you in other situations. In connection with official or court proceedings, for example, data is collected (such as files, evidence, etc.) that may also relate to you. We may also receive or produce photos, videos and audio recordings in which you may be recognizable (at events, in recordings of meetings and for posting in the member area). We may also collect data about who participates in events or video conferences and when, or who uses our infrastructure, systems and interaction tools (blog) provided on our website and when.

3. Purpose of processing

We process your data for purposes related to communication with you, in particular to respond to inquiries and assert your rights (Section 10) and to contact you in the event of queries. In particular, we use communication data and master data for this purpose.

We retain this data in order to document our communication with you, for quality assurance and for follow-up questions.

We process data for the establishment, administration, and processing of contractual relationships. We process data for marketing purposes and to maintain relationships, e.g. to send our customers and other contractual partners personalized advertising about our services. This may take the form of newsletters and other regular contacts (electronically, by post, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing campaigns. You can reject such contacts at any time or refuse or revoke your consent to be contacted for advertising purposes.

4. Legal basis for processing

We process your personal data in accordance with the principles set out in Art. 6 and Art. 8 revDSG.

The processing of your data within the scope of our stated purposes is carried out on the basis that this is necessary for the initiation or execution of a contract with you (pursuant to Art. 6 para. 1 lit. b) GDPR) or that we have a legitimate interest (pursuant to Art. 6 para. 1 lit. f) GDPR) in order to pursue the purposes and objectives described above in Section 3. Our legitimate interests also include compliance with statutory provisions, insofar as this is not already recognized as a legal basis by the applicable data protection law.

5. Disclosure to third parties / recipients of your personal data

Disclosure to third parties:

We may also disclose your personal data to third parties, in particular to the following categories of recipients, in connection with our contracts, the website, our services, our legal obligations or otherwise to safeguard our legitimate interests and the other purposes listed in Section 3.

Service providers: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (IT & server providers, digital service providers).

Public authorities: We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests.

6. Cookies and tracking:

We use cookies on our website. Cookies are small text files that are stored on your end device, e.g. to make the use of a website more convenient or to recognize the user's device and save settings or similar. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We use cookies on our website that are necessary for the operation of our website. These cookies only contain information on certain settings and are not personal. They may also be necessary to facilitate user guidance and to ensure the security of the site. Cookies help us to design our online offering in a user-friendly and customized way. We use our own cookies and cookies from third-party providers. You can configure the setting of cookies at any time.

This allows you to restrict or completely prevent the setting of cookies in your browser settings. You can also arrange for cookies to be deleted automatically when you close the browser window. You can find out how to delete cookies in the most common browsers and change the cookie settings here:

Internet Explorer : https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Google Analytics

We use the analysis tracking tool Google Analytics from the US company Google Inc. on our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the European area. The service uses "cookies" - text files that are stored on your end device. The information collected by the cookies is generally sent to a Google server in the USA and stored there.

What data is collected by Google Analytics?

Language

Country

Location

Browser type

Operating system

Internet provider

Screen resolution

We only use Google Analytics with activated IP anonymization ("anonymize IP"). This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Information on the types of cookies used by Google can be found at: https://policies.google.com/technologies/types

What data can also be collected by Google?

If you are logged into your Google account, Google may add the processed information to your account and treat it as personal data, depending on your account settings. Google states the following, among other things:

"If you're not signed into a Google Account, we store the data we collect with unique identifiers associated with the browser, app or device you're using. This allows us to ensure, for example, that your language settings are retained for all browser sessions. If you are signed into a Google Account, we also collect data that we store in your Google Account and consider to be personal data." (https://privacy.google.com/take-control.html)

You can prevent this data from being added directly by logging out of your Google account or by making the appropriate account settings in your Google account. You can also change your cookie settings (e.g. delete cookies, block cookies, etc.).

You can find more information in Google's privacy policy, which you can access here: https://www.google.com/policies/privacy/

You can find information on Google's privacy settings at: https://privacy.google.com/take-control.html

Legal basis

We process your personal data in accordance with the principles set out in Art. 6 and Art. 8 revDSG.

The legal basis for the processing of personal data described here in the context of the analysis tracking tool Google Analytics is the consent you have expressly given in the cookie banner in accordance with Art. 6 para. 1 lit. a) GDPR. In addition to the consent given by you in accordance with Art. 6 para. 1 lit. a) GDPR, there is also a legitimate interest on our part to analyze the behavior of website visitors and to improve our offer technically and economically. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. Of course, your personal data will only be collected via Google Analytics if you have given us your prior consent via the cookie consent tool.

In accordance with data processing for recipients based in third countries, in relation to the USA, there is an adequacy decision pursuant to Art. 45 GDPR. The Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework. The transfer can also be based on standard contractual clauses in accordance with Art. 46 para. 2 lit. c) GDPR if the EU-U.S. Data Privacy Framework does not apply. Google has undertaken to comply with the standard contractual clauses for the transfer of personal data to third countries issued by the European Commission. We have concluded the above-mentioned standard contractual clauses with Google.

You can find more information at: https://policies.google.com/privacy/frameworks?hl=de

How long will the data be stored?

The retention period selected by us is 14 months. With this setting, we have chosen the shortest storage period provided by Google.

Social media:

Social networks and blog pages (LinkedIn, Medium) are only integrated on our website as a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

7. Data storage and deletion

We process your data for as long as required for our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes or if storage is technically necessary.

Longer storage periods can be found directly in the data categories concerned in section 2.

8. Automated decision-making including profiling

There is no automated decision-making including profiling within the meaning of Art. 5 para. 1 let. f) and g) revDSG or within the meaning of Art. 22 para. 1 GDPR.

9. Protection of your data

We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorized or unlawful processing and to counteract the risks of loss, unintentional alteration, unwanted disclosure or unauthorized access.

10. Your rights

Data subjects have the following rights vis-à-vis the controller:

You have the right to obtain information about the processing of your personal data in accordance with Art. 25 para. 1 revDSG (Art. 15 GDPR).

You have the right to request the correction of incorrect or incomplete personal data concerning you in accordance with Art. 6 para. 5 revDSG (Art. 16 GDPR).

You have the right to request the deletion of your data in accordance with Art. 6 para. 5 revDSG (Art. 17 GDPR).

You have the right to request that we hand over certain personal data in a commonly used electronic format or transfer it to another controller in accordance with Art. 28 revDSG (Art. 20 GDPR).

You have the right to withdraw your consent if our processing is based on your consent (Art. 7 para. 3 GDPR).

You have the right to request the restriction of the processing of your data if the requirements of Art. 32 para. 3 revDSG (Art. 18 GDPR) are met. This is the case, for example, if you dispute the accuracy of your data. You can then request the restriction of processing for the duration of the verification of the accuracy of the data.

You have the right to receive further information on request that is required to exercise these rights in accordance with Art. 25 para. 2 revDSG (Art. 77 GDPR).

You also have the right to complain to a supervisory authority about the processing of your personal data. You can find the competent Swiss supervisory authority here:

https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html

The competent EU GDPR supervisory authority can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/Europa/Europa-node.html.

If you wish to exercise the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; our contact details can be found in section 1.

11. Changes to this data protection notice

We reserve the right to amend this data protection notice so that it always complies with current legal requirements or to implement changes to our services in this data protection notice. The new data protection notice will then apply to your next visit.

Status: 11/2023