Privacy Policy

Team
Corporate management
Consulting approach
Clients and industries
Mission statement
Values & culture
Ethical principles
Social responsibility
Privacy Policy

Privacy Policy

1. General information
Data Protection Declaration from 31 August 2023

CONVINUS GmbH
Talstrasse 70
8001 Zürich
Schweiz
Email: info@convinus.com

Persons
Friederike V. Ruch, CEO

Company Name: CONVINUS GmbH

Data protection officer:
Melanie Bohley
+41442502020
info@convinus.com

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DSG), every person has the right to protection of their privacy as well as protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

In cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorised access, loss, misuse or falsification.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing, and use of data in accordance with the following description. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data being directly related to you as a person. Personal data, in particular name, address or e-mail address are collected as far as possible on a voluntary basis. Without your consent, the data will not be passed on to third parties.

2. Processing of personal data

Personal data is any information that relates to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, to the extent and insofar as the EU GDPR is applicable, we process personal data in accordance with the following legal bases in connection with Art. 6 (1) GDPR:

  • lit. a) Processing of personal data with the consent of the data subject.
  • lit. b) Processing of personal data for the fulfilment of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
  • lit. c) Processing of personal data for the fulfilment of a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is applicable in whole or in part.
  • lit. d) Processing of personal data in order to protect the vital interests of the data subject or another natural person.
  • lit. f) Processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject are overridden. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

3. Cookies - Find all details right here.

This website uses cookies. These are small text files that make it possible to store specific information related to the user on the user's terminal device while the user is using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyse behaviour patterns of page use, but also to make our offer more user-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when you visit the site again. If you do not wish this to happen, you should set your Internet browser so that it refuses to accept cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by disabling them in the browser settings. Please note that in this case not all functions of this online offer can be used.

4. With SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Without SSL/TLS encryption

Please note that data transmitted over an open network such as the Internet or an e-mail service without SSL encryption can be viewed by anyone. You can recognise an unencrypted connection by the fact that the address line of the browser shows "http://" and no lock symbol is displayed in your browser line. Information transmitted over the Internet and content received online may be transmitted over third-party networks. We cannot guarantee the confidentiality of any communications or materials transmitted over such open or third-party networks.

If you disclose personally identifiable information over an open network or third-party networks, you should be aware that your information may be lost or potentially accessed by third parties and, as a result, the information may be collected and used without your consent. While in many cases the individual data packets are transmitted in encrypted form, the names of the sender and recipient are not. Even if the sender and the recipient reside in the same country, the data transfer via such networks often takes place without controls even via third countries, i.e., also via countries that do not offer the same level of data protection as your country of domicile. We assume no responsibility for the security of your data during transmission over the Internet and disclaim any liability for direct or indirect losses. We ask you to use other means of communication should you consider this necessary or reasonable for security reasons.

Despite extensive technical and organisational security precautions, it is possible that data may be lost or intercepted and/or manipulated by unauthorised persons. As far as possible, we take appropriate technical and organisational security measures to prevent this within our system. However, your computer is outside the security perimeter and is beyond our control. It is your responsibility as a user to inform yourself about the necessary security precautions and to take appropriate measures where you see fit. As the website operator, we are in no way liable for any damage that you may suffer as a result of data loss or manipulation.

Data that you enter in online forms may be passed on to authorised third parties for the purpose of order processing and may be viewed and possibly processed by them.

6. Third party services

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the American Google LLC use cookies, among other things, and as a result, data is transferred to Google in the USA, although we assume that no personal tracking takes place in this context solely through the use of our website.

Google has undertaken to ensure adequate data protection in accordance with the US-European and the US-Swiss Privacy Shield.

Further information can be found in Google's privacy policy.

7. Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

8. Newsletter

If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data will not be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe link" in the newsletter.

10. Comments

For the comment function on this website, in addition to your comment, details of when the comment was created, your e-mail address and, if you do not post anonymously, the username you have chosen will be stored.

11. Storage of the IP address

Our comment function stores the IP addresses of users who post comments. Since we do not check comments on our site before they are activated, we need this data to be able to take action against the author in the event of legal violations such as insults or propaganda.

12. Subscribing to comments

As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this feature at any time via a link in the info emails.

Data Subject Rights

13. Right to confirmation

Every data subject has the right to request confirmation from the website operator as to whether personal data concerning him or her are being processed. If you wish to exercise this right of confirmation, you may, at any time, contact the Data Protection Officer.

14. Right of access

Every person affected by the processing of personal data has the right to receive information free of charge from the operator of this website at any time about the personal data stored about him or her, and a copy of this information. Furthermore, information may be provided about the following, if applicable:

  • The purposes of processing.
  • The categories of personal data processed.
  • The recipients to whom the personal data have been or will be disclosedif possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration.
  • The existence of a right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing.
  • The existence of a right of appeal to a supervisory authority.
  • If the personal data are not collected from the data subject: Any available information about the origin of the data.

In addition, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

If you would like to make use of this right to information, you can contact our data protection officer at any time.

15. Right to rectification

Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning him or her. Moreover, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be completed, including by means of a supplementary declaration.

If you wish to exercise this right of rectification, you may contact our data protection officer at any time.

16. Right to erasure (right to be forgotten)

Any person concerned by the processing of personal data has the right to obtain from the controller of this website the erasure without delay of personal data concerning him or her, where one of the following grounds applies and insofar as the processing is no longer necessary:

  • The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
  • The data subject revokes the consent on which the processing was based and there is no other legal basis for the processing.
  • The data subject objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling.
  • The personal data have been processed unlawfully.
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data has been collected in relation to information society services provided directly to a child.

If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will arrange for the erasure request to be complied with immediately.

 

17. Right to restriction of processing

Any person concerned by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defence of legal claims.
  • The data subject has objected to the processing on grounds relating to his or her particular situation, and it is not yet clear whether the legitimate interests of the controller override those of the data subject.

If one of the aforementioned conditions is met, you can request the restriction of personal data stored by the operator of this website at any time by contacting our data protection officer. The data protection officer of this website will arrange the restriction of the processing.

18. Right to data portability

Every person affected by the processing of personal data has the right to receive the personal data concerning him or her in a structured, common, and machine-readable format. He or she also has the right to have this data transferred to another controller if the legal requirements are met.

Additionally, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.

To assert the right to data portability, you may at any time contact the data protection officer appointed by the operator of this website.

19. Right of objection

Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

The operator of this website shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or if the processing serves the purpose of asserting, exercising, or defending legal claims:

  • To exercise the right to object, you may directly contact the Data Protection Officer of this website.
  • Right to revoke consent granted under data protection law.
  • Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.
  • If you wish to exercise your right to revoke consent, you may contact our data protection officer at any time.

20. Contradiction email marketing

The use of contact data published within the framework of the imprint obligation to send advertising and information materials not expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

21. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located outside the European Economic Area or Switzerland, then the Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".
The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under "My data" "Personal data".

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" to ensure anonymised collection of IP addresses. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. If the data collected about you is related to a person, this is immediately excluded, and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie, and related to your use of the website (including your IP address) to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

In addition, you can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will save a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your terminal device, these opt-out cookies will also be deleted, i.e., you will have to set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device, and must therefore be activated separately for each browser, computer, or other end device.

22. LinkedIn

We use the marketing services of the social network LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") within our online offer.

These use cookies, i.e., text files that are stored on your computer. This enables us to analyse your use of the website. For example, we can measure the success of our ads and show users products in which they were previously interested.

For example, information on the operating system, the browser, the website you previously visited (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website is collected.

The information generated by the cookie about your use of this website is transferred pseudonymously to a LinkedIn server in the USA and stored there. LinkedIn therefore does not store the name or e-mail address of the respective user. Rather, the above-mentioned data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this, you may not be able to use the full functionality of this website. You can also object to the use of your data directly at LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use LinkedIn Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic to the USA and Singapore necessary for the development, implementation and maintenance of the services takes place in a lawful manner. If we ask users for consent, the legal basis for processing is Art. 6 (1) lit. a DSGVO. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 para. 1 p. 1 lit. f DSGVO.

Third-party provider information: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; User Agreement and Privacy Policy.

23. Sending newsletters – CleverReach (Server in Europe)

The newsletter is sent using the mailing service provider 'CleverReach', a newsletter mailing platform of the German provider CleverReach GmbH & Co. KG, CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany. You can view the privacy policy of the mailing service provider here. CleverReach is certified due to its servers that are only located in Europe and therefore under the DSGVO law and compliancy. The shipping service provider is used based on our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO and an order processing agreement pursuant to Art. 28 para. 3 p. 1 DSGVO.

The dispatch service provider may use the data of the recipients in pseudonymous form, i.e., without assignment to a user, to optimise or improve its own services, e.g., to technically optimise the dispatch and presentation of the newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

24. YouTube

Functions of the "YouTube" service are integrated on this website. "YouTube" is owned by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with "YouTube" consists of the terms and conditions found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de.

These Terms constitute a legally binding agreement between you and "YouTube" regarding your use of the Services. Google's Privacy Policy explains how "YouTube" treats and protects your personal information when you use the Service.

25. Online shop – Shopify

Here you can find the privacy policy of our online shop provider: https://www.shopify.com/legal/privacy

We process the data of our customers in accordance with the data protection provisions of the Federal (Data Protection Act, DSG) and the EU-DSGVO, in the context of the ordering processes in our online store to enable them to select and order the selected products and services, as well as their payment and delivery, or execution.

The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, prospective customers, and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery, and customer services. In this context, we use session cookies, e.g., for storing the shopping cart content, and permanent cookies, e.g., for storing the login status.

The processing is carried out based on Art. 6 para. 1 lit. b (execution of order transactions) and c (legally required archiving) DSGVO. In this context, the information marked as required is necessary for the justification and fulfilment of the contract. We disclose the data to third parties only in the context of delivery, payment, or in the context of legal permissions and obligations. The data is only processed in third countries if this is necessary for the fulfilment of the contract (e.g., at the request of the customer for delivery or payment).

Users can optionally create a user account, in which they can view their orders. As part of the registration process, the required mandatory information will be provided to users. User accounts are not public and cannot be indexed by search engines, e.g., Google. If users have terminated their user account, their data regarding the user account will be deleted, subject to their retention is necessary for commercial or tax reasons as Art. 6 para 1 lit. c DSGVO. Information in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of the users to save their data in the event of termination before the end of the contract.

Within the scope of registration and renewed registrations as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of users in protection against abuse and other unauthorised use. In principle, this data is not passed on to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO.

The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of keeping the data is reviewed at irregular intervals. In the case of legal archiving obligations, deletion takes place after their expiry.

26. Book now - Appointment booking (Setmore)

Here you can find the data protection declaration of our appointment booking provider: https://www.setmore.com/privacy.

We process the data of our customers in accordance with the data protection regulations of the federal government (Data Protection Act, DSG) and the EU-DSGVO within the framework of the booking processes in our Book now tool in order to comply with the contact you have booked with us. Your data will only be stored here in the event of a further business relationship and you will receive a separate contract for this processing of your data.