duagon AG Privacy Policy

An overview of data protection

Below you will find a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally or that makes you identifiable as a person. Detailed information on the subject of data protection can be found in our privacy policy below.

1. Data collection on our website

  1. Who is responsible for data collection on this website?
    The data collected on this website is processed by the website operator. The operator's contact details can be found in the website's legal notice.
  2. How do we collect your data?
    Some data is collected when you provide it to us. This may be data that you enter in a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data such as the browser and operating system you are using or the time you accessed the page. This data is collected automatically as soon as you enter our website.
  3. What do we use your data for?
    Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze how visitors use the website.
  4. What rights do you have with regard to your data?
     You have the right to obtain information about your stored data, its origin and recipients, and the purpose of data collection at any time and free of charge. You also have the right to correct, block, and delete this data. If you have any further questions about data protection, you can contact us at any time at the address given in the legal notice. Of course, you can also lodge a complaint with the relevant supervisory authorities.
  5. Third-party analytics and tools
    When you visit our website, statistical analyses of your surfing behavior may be carried out. This is primarily done with the help of cookies and analysis tools. The analysis of your surfing behavior is usually anonymous, i.e., we cannot identify you based on this data. You can object to this evaluation or prevent it by not using certain tools at . Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you below about how you can exercise your options in this regard.

2. Hosting

We are hosting the content of our website at the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

We are using the following host(s):

Hostpoint AG
Neue Jonastrasse 60
8640 Rapperswil-Jona
Schweiz

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3. General information and mandatory information

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is any data that can be used to identify you personally or make you identifiable as a person. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the controller responsible for this website

The controller responsible for data processing on this website is:

duagon AG
Riedstrasse 12
8953 Dietikon

Phone: +41 44 743 73 00
Email: mail(at)duagon.com

Legal data protection officer

duagon AG has a data protection officer who can be contacted at the following address:

duagon AG
Riedstrasse 12
8953 Dietikon

Phone: +41 44 743 73 00
Email: dpodietikon(at)duagon.com

Relevant legal basis

Relevant legal basis under Swiss data protection law: If you are located in Switzerland, we process your data on the basis of the Federal Act on Data Protection (abbreviated as "Swiss DSG"). Unlike the GDPR, for example, the Swiss FADP does not require a legal basis for the processing of personal data to be specified and stipulates that the processing of personal data must be carried out in good faith, lawfully and proportionately (Art. 6 (1) and (2) of the Swiss FADP). In addition, we only collect personal data for a specific purpose that is recognizable to the data subject and only process it in a manner that is compatible with this purpose (Art. 6 para. 3 of the Swiss FADP).

Security measures

In accordance with legal requirements and taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, input, transfer, availability, and separation. Furthermore, we have established procedures to ensure that the rights of data subjects are exercised, data is deleted, and responses are made to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software, and procedures in accordance with the principle of data protection, through technology design and data protection-friendly default settings.

Securing online connections with TLS/SSL encryption technology (HTTPS): We use TLS/SSL encryption technology to protect user data transmitted via our online services from unauthorized access. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are the cornerstones of secure data transmission on the Internet. These technologies encrypt the information transmitted between the website and the user's browser (or between two servers), protecting the data from unauthorized access. TLS, as the more advanced and secure version of SSL, ensures that all data transmissions meet the highest security standards. When a website is secured by an SSL/TLS certificate, this is indicated by the display of HTTPS in the URL. This serves as an indicator to users that their data is being transmitted securely and encrypted.

Transfer of personal data

As part of our processing of personal data, it may happen that this data is transferred or disclosed to other bodies, companies, legally independent organizational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

Data transfer within the group of companies: Data transfer within the group of companies: We may transfer personal data to other companies within our group of companies or grant them access to it. This data transfer is based on our legitimate business and economic interests. By this we mean, for example, improving business processes, ensuring efficient and effective internal communication, making optimal use of our human and technological resources, and enabling us to make informed business decisions. In certain cases, data transfer may also be necessary to fulfill our contractual obligations, or it may be based on the consent of the data subjects or legal permission.

Data transfer within the organization: We may transfer personal data to other departments or units within our organization or grant them access to it. If the data transfer is for administrative purposes, it is based on our legitimate business and economic interests or is necessary to fulfill our contractual obligations or if we have the consent of the data subjects or legal permission.

General information on data storage and deletion

We delete personal data that we process in accordance with legal requirements as soon as the underlying consent is revoked or there is no further legal basis for processing. This applies to cases in which the original purpose of processing no longer applies or the data is no longer required. Exceptions to this rule exist if legal obligations or special interests require longer storage or archiving of the data.

In particular, data that must be retained for commercial or tax reasons or whose storage is necessary for legal prosecution or to protect the rights of other natural or legal persons must be archived accordingly.

If there are several specifications regarding the retention period or deletion deadlines for a piece of data, the longest period shall always apply.

If a period does not expressly begin on a specific date and is at least one year, it automatically begins at the end of the calendar year in which the event triggering the period occurred. In the case of ongoing contractual relationships in which data is stored, the event triggering the period is the date on which the termination or other termination of the legal relationship takes effect.

We process data that is no longer required for the originally intended purpose but is retained due to legal requirements or other reasons exclusively for the reasons that justify its retention.

Further information on processing procedures, methods, and services:

  • Storage and deletion of data: The following general periods apply to storage and archiving under Swiss law:
    • 10 years - Retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets, accounting documents and invoices, as well as all necessary work instructions and other organizational documents (Art. 958f of the Swiss Code of Obligations (CO)).
    • 10 years - Data necessary for the consideration of potential claims for damages or similar contractual claims and rights, as well as for the processing of related inquiries, based on previous business experience and customary industry practices, is stored for the statutory limitation period of ten years, unless a shorter period of five years is applicable in certain cases (Art. 127, 130 OR). After five years, claims for rent, lease and capital interest, as well as other periodic payments, for the delivery of food, for meals and for innkeeper's debts, as well as for craftsmanship, small-scale sales of goods, medical services, professional services provided by lawyers, legal agents, attorneys, and notaries, and from the employment relationship of employees (Art. 128 OR).

Rights of the persons concerned

Rights of data subjects under the Swiss FADP:

As a data subject, you have the following rights in accordance with the provisions of the Swiss Federal Act on Data Protection (FADP):

  • Right to information: You have the right to request confirmation as to whether personal data concerning you is being processed and to receive the information necessary to enable you to exercise your rights under this law and to ensure transparent data processing.
  • Right to data disclosure or transfer: You have the right to request the disclosure of your personal data that you have provided to us in a commonly used electronic format.
  • Right to rectification: You have the right to request the rectification of inaccurate personal data concerning you.
  • Right to object, erasure, and destruction: You have the right to object to the processing of your data and to request that personal data concerning you be erased or destroyed.

4. Data collection on our website

Cookies

The term "cookies" refers to functions that store and read information on users' end devices. Cookies can also be used for various purposes, such as to ensure the functionality, security, and convenience of online offerings and to analyze visitor traffic. We use cookies in accordance with legal requirements. To do so, we obtain the consent of users in advance, if necessary. If consent is not necessary, we rely on our legitimate interests. This applies if the storage and retrieval of information is essential in order to provide expressly requested content and functions. This includes, for example, the storage of settings and ensuring the functionality and security of our online offering. Consent can be revoked at any time. We provide clear information about the scope of cookies and which cookies are used.

Information on the legal basis for data protection: Whether we process personal data using cookies depends on consent. If consent has been given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the respective services and procedures.

Storage period: With regard to the storage period, a distinction is made between the following types of cookies:

Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their device (e.g., browser or mobile application).

Permanent cookies: Permanent cookies remain stored even after the device is closed. This allows, for example, the log-in status to be stored and preferred content to be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. Unless we provide users with explicit information about the type and storage period of cookies (e.g., when obtaining consent), they should assume that these are permanent and that the storage period can be up to two years.

General information on revocation and objection (opt-out): Users can revoke their consent at any time and also object to the processing in accordance with the legal requirements, including by means of their browser's privacy settings.

  • Types of data processed: Browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Legal basis: Personal data is processed lawfully, in good faith, in a proportionate manner, and on the basis of the consent you have given.

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

  • Your declaration(s) of consent or your revocation of your declaration(s) of consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • The date and time you visited our website
  • Geolocation

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

The Usercentrics banner on this website has been configured with the assistance of eRecht24. This can be identified by the eRecht24 logo. To display the eRecht24 logo in the banner, a connection to the image server of eRecht24 will be established. In conjunction with this, the IP address is also transferred; however, is only stored in anonymized form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner as such is provided exclusively by Usercentrics.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

4. Analytics and advertising

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies." These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Browser plugin

You can prevent the storage of these cookies by adjusting the settings in your browser. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics.

For more information about how Google Analytics handles user data, please refer to Google's privacy policy: support.google.com/analytics/answer/6004245.

Google Analytics remarketing

Our websites use the features of Google Analytics Remarketing in combination with the cross-device features of Google AdWords and DoubleClick. This service is provided by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This feature allows you to link audiences created with Google Analytics Remarketing for advertising marketing with the cross-device features of Google AdWords and Google DoubleClick. This enables the display of advertisements based on your personal interests, which are determined based on your previous use and browsing behavior on one device (e.g., your mobile phone) on other devices (e.g., a tablet or computer).

Once you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This allows any device that logs into your Google account to use the same personalized advertising messages.

To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account; follow this link: www.google.com/settings/ads/onweb/.

The data collected in your Google account is merged exclusively on the basis of your consent. For data collections that are not merged with your Google account (e.g., because you do not have a Google account or have objected to the merger). The website operator has a legitimate interest in analyzing anonymous user behavior for advertising purposes.

Further information and Google's privacy policy can be found at: www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

We use conversion tracking as part of Google AdWords. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used to personally identify the user. If the user visits certain pages of the website and the cookie has not yet expired, Google and the website can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords advertising partner has a different cookie. Cookies cannot therefore be tracked via the website of an AdWords customer. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can simply disable the Google cookie for conversion tracking by changing your browser settings. This way, you will not be included in the conversion tracking statistics.

The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

For more information about Google AdWords and Google Conversion Tracking, please refer to Google's privacy policy: www.google.de/policies/privacy/.

You can set your browser to notify you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.

Google Tag Manager

This website uses Google Tag Manager from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service allows website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. This means that no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

For more information, visit http://www.google.com/tagmanager/use-policy.html.

In addition, Google Tag Manager includes the following subservices (Eloqua, LinkedIn Insight Tag, Hotjar, Google Ads Remarketing, Google Ads Conversion Tracking, Facebook Pixel), meaning that Google Tag Manager and the subservices are integrated on the basis of your consent. You can find the option to revoke your consent in the description of each subservice. If you object to a subservice, this objection will also be automatically transferred to the other subservices included in Google Tag Manager.

As part of these services, the data collected may be transferred to another country outside Switzerland, the European Union, and the European Economic Area, and to a country that does not offer an adequate level of data protection. In this case, your data may be transferred to the United States. In such a case, there is a risk that your data may be processed by US authorities for control and surveillance purposes without you having any legal recourse. However, we take all possible and necessary measures under data protection law to ensure the level of data protection in the third country.

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Contact form

If you send us inquiries via the contact form, your details from the form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this information without your consent.

We therefore process the data you enter in the contact form only in good faith and in a proportionate manner.

The data you enter in the contact form will be stored by us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been fulfilled). Mandatory legal provisions, in particular regarding statutory retention periods, remain unaffected by this provision.

Applications

We appreciate your interest in working at duagon AG. We are aware of the importance of your data and will only process the personal data you provide for the purpose of effectively and correctly handling the application process and for contacting you during the application process. Your data will not be passed on to third parties without your consent.

You will be asked to provide personal data on the application form. We adhere to the principles of data minimization and data avoidance by only asking you to provide the data we need to fully review your application documents, such as your resume.

Without this data, we will unfortunately be unable to review your application documents. You are, of course, welcome to provide additional information on a voluntary basis.

We store your data for the above-mentioned purposes until the application process is complete and the relevant deadlines have expired— , no later than six months after receiving a decision.

5. Data processing via social media

We have a company page on several social media platforms. This allows us to offer further opportunities to provide information about our company and to exchange ideas. duagon AG has company pages on the following social media platforms:

  • Facebook
  • LinkedIn
  • Xing

When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. This includes, for example:

  • Address of the website on which the activated link is located
  • Date and time of the website visit or link activation
  • Information about the browser and operating system used
  • IP address

If you are already logged in to the corresponding social media service at the time of activating the link, the provider of the social media service may be able to determine your user name and, if applicable, even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can prevent this association with your personal user account by logging out of your user account beforehand.

The servers of social media services are located in the USA and other countries outside Switzerland, the European Union, and the European Economic Area. The data may therefore also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in Switzerland and the member states of the European Union.

Please note that we have no influence on the scope, type, and purpose of data processing by the social media service provider. For more information on the use of your data by the social media services integrated on our website , please refer to the privacy policy of the respective social media service.

Presence on our social media.

We are present on various social media platforms in order to communicate with customers, interested parties, and users who are registered there and to inform them about our offers. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information regarding data protection law in relation to our presence on social media.

Name and address of the person responsible for the operation

duagon AG is responsible for the company's social media presence in accordance with the Swiss Federal Act on Data Protection (FADP).

  • Meta (Facebook)

(Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

  • LinkedIn

            (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

  • Xing

            (New Work XING AG, Pfingstweidstrasse 106e, 8005 Zurich, Switzerland)

However, you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating).

We would also like to point out that your data may be processed outside Switzerland and the European Union.

We maintain the fan pages ourselves in order to communicate with visitors to these pages and inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimize the content and make our offerings more attractive. The data required for this (e.g., total number of page views, page activities, and data provided by visitors, interactions) is processed by the social networks and made available to us. We have no influence on the generation and presentation of this data.

In addition, your personal data may be processed for market research and advertising purposes. For example, it is possible that usage profiles may be created based on your usage behavior and the resulting interests. This allows, among other things, advertisements to be placed within and outside the platforms that correspond to your interests. For this purpose, cookies are usually stored on your computer. Regardless of this, data that is not collected directly on your end devices may also be stored in your usage profiles. Storage and analysis also takes place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

As the provider of this information service, we do not collect or process any other data from your use of our service.

Your rights / right to object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data on the respective network, you must

  • log out of the respective network before visiting our fan page,
  • delete the cookies on your device, and
  • close and restart your browser.

However, after logging in again, you will once more be recognizable to the network as a specific user.

For a detailed description of the respective processing and the options for objection (opt-out), please refer to the information linked below:

6. Automated individual decision-making.

Please note that we generally do not use purely automated processing procedures to make decisions.

7. Changes and updates

We ask you to regularly review the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require action on your part (e.g., consent) or other individual notification.

If we provide addresses and contact information for companies and organizations in this privacy policy, please note that the addresses may change over time and we ask you to check the information before contacting them.