Privacy Policy

This privacy policy explains how we collect and process personal data. This is not an exhaustive description; other privacy policies may govern specific circumstances.

Personal data means any information relating to an identified or identifiable person. If you provide us with personal data of other persons, please ensure that these persons are aware of this privacy policy and only share their personal data with us if you are authorized to do so and if such personal data is accurate.

This privacy policy is based on the requirements of the European Union General Data Protection Regulation (GDPR) and Swiss Data Protection Act (DSG).

1. Name and Contact Details of the Controller

The controller for the data processing described in this privacy policy is:

2. Collection and Storage of Personal Data and Purpose of Use

a) When Visiting the Website

When you visit our website www.ibh-ag.ch, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a log file.

The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access was made (referrer URL)
• Browser used and, if applicable, the operating system of your computer and the name of your access provider
• Amount of data transferred

The mentioned data is processed by us for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring comfortable use of our website
• Evaluation of system security and stability
• Other administrative purposes

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 lit. f nDSG. Our legitimate interest follows from the purposes listed above for data collection. We never use the collected data for the purpose of drawing conclusions about your person.

Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

• Legitimate Interest (Art. 6 para. 1 lit. f GDPR): For technical website operation and system security
• Consent (Art. 6 para. 1 lit. a GDPR): For non-essential cookies and contact forms
• Contract Performance (Art. 6 para. 1 lit. b GDPR): For execution of requested services
• Legal Obligation (Art. 6 para. 1 lit. c GDPR): For compliance with legal and tax obligations

b) When Using Our Contact Forms

Our website contains forms that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input form is transmitted to us and stored:

• First and last name
• Email address
• Phone number (optional)
• Message content

For the processing of the data, your consent is obtained as part of the sending process with reference to this privacy policy. The data processing is therefore based on Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 6 para. 1 lit. a nDSG.

The processing of personal data from the input form is solely for the purpose of handling your contact request. The personal data collected by us for using the contact form will be automatically deleted after completion of the request made by you.

3. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

The use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our website.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, predetermined period. If you visit our website again, it is automatically recognized that you have already been with us and what inputs and settings you have made.

Most browsers accept cookies automatically. However, you can configure your browser to reject cookies or to always display a notice before a new cookie is created. If cookies are completely deactivated, however, it may be that certain functions of our website are no longer usable.

Types of Cookies Used

• Session Cookies: Automatically deleted when you close your browser
• Temporary Cookies: Stored for a maximum of 30 days
• Analytics Cookies: Used to improve user experience, stored for a maximum of 2 years

Cookie Management

You can manage cookie settings through your browser. For more information, please consult your specific browser's documentation.

Cookie Preference Management: You can modify your cookie preferences at any time by clicking here to open the cookie management panel.

4. Analysis Tools

For the needs-based design and continuous optimization of our website, we use web analysis services. In this context, pseudonymized user profiles are created and cookies are used.

The information generated by cookies about your use of this website (such as browser type/version, operating system used, referrer URL, hostname, time of server request) is transmitted to servers and stored there. This information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to website usage.

IP addresses are anonymized so that assignment is not possible (IP masking). You can prevent the installation of cookies by setting your browser software accordingly.

5. Google Maps

Our website uses the Google Maps map service via an interface (API). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The use of Google Maps is in the interest of an appealing presentation of our online offers and easy location of the places we specify on the website.

More information on handling user data can be found in Google's privacy policy: https://policies.google.com/privacy

6. Data Sharing

Collection, processing, storage and/or transmission of your personal data to third parties generally does not take place.

We only share your personal data with third parties if:

• You have given your express consent
• This is legally permissible and necessary for the fulfillment of contractual relationships with you
• There is a legal obligation to share the data
• Sharing is necessary for the assertion, exercise or defense of legal claims

7. Data Retention

Your personal data is retained only for as long as necessary to achieve the purposes for which it was collected or as required by law.

Specific Retention Periods

• Website Logs: Maximum 30 days (server logs)
• Contact Data: Maximum 2 years after last contact
• Analytics Cookies: Maximum 2 years
• Marketing Data: Until consent withdrawal or maximum 3 years

At the end of these periods, data is automatically deleted or irreversibly anonymized.

8. International Data Transfers

Your personal data is primarily processed and stored in Switzerland, which is recognized by the European Union as a country with an adequate level of data protection.

In case of data transfers to third countries that do not provide an adequate level of data protection, we implement appropriate safeguards such as:

• Standard contractual clauses approved by the European Commission
• Recognized data protection certifications
• Approved codes of conduct
• Approved certification mechanisms

For more information about international data transfers, you can contact us using the contact information provided in this privacy policy.

9. Data Subject Rights

Insofar as personal data about you is processed, you have the following rights:

• Right of access: You can request information about your personal data processed by us
• Right to rectification: You can request the correction of incorrect or completion of your personal data stored with us
• Right to erasure: You can request the deletion of your personal data stored with us
• Right to restriction of processing: You can request the restriction of the processing of your personal data
• Right to data portability: You can request that we transmit your personal data to you in a structured, commonly used and machine-readable format
• Right to withdraw consent: You can withdraw your once given consent to us at any time
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority

10. Right to Object

Insofar as your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data, provided that there are reasons arising from your particular situation.

11. Automated Decision-Making and Profiling

We do not use automated decision-making processes, including profiling, that produce legal effects concerning you or significantly affect you in a similar manner.

Should we implement such processes in the future, we will inform you promptly and provide detailed information about the criteria used, the significance, and the anticipated consequences of such processing.

12. Children's Privacy

Our website is not intended for persons under the age of 16. We do not knowingly collect personal data from children under 16.

If you are a parent or guardian and are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove such information from our servers.

13. Data Security

During your website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. Whether an individual page of our website is transmitted encrypted can be seen from the closed representation of the lock symbol in the status bar of your browser.

Furthermore, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

14. Data Breach Notification

In case of a personal data breach that poses a risk to the rights and freedoms of natural persons, we will notify the competent supervisory authority within 72 hours of discovery, where feasible.

If the breach poses a high risk to the rights and freedoms of natural persons, we will also inform you directly without undue delay, unless required by law or technically impossible.

The notification will include information about the nature of the breach, possible effects, and measures taken to mitigate risks.

15. Data Protection Officer

For all matters related to data protection and the exercise of your rights, you can contact our data protection officer directly:

The data protection officer is your primary contact for all data protection matters and can help you exercise your rights.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you habitually reside, work, or where the alleged infringement occurred.

In Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC) to lodge a complaint regarding the processing of your personal data.

Swiss Supervisory Authority:
Federal Data Protection and Information Commissioner
Feldeggweg 1
3003 Bern
Switzerland
Email: privacy@edoeb.admin.ch

17. Contact

If you have data protection concerns, you can contact us as follows:

18. Updates and Changes to this Privacy Policy

This privacy policy is currently valid and is dated January 2025.

Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy can be retrieved and printed at any time on our website at www.ibh-ag.ch/en/privacy.