Privacy Policy
With this privacy policy, we inform you about the processing of personal data in connection with our activities and operations, including our reseabiotec.ch website. We specifically inform you about the purposes, methods, and locations of our processing of personal data. We also inform you about the rights of individuals whose data we process.
For specific or additional activities and operations, further privacy policies or other data protection information may apply.
1. Contact Information
Responsibility for the processing of personal data:
Nina Steiger
Resea Biotec GmbH, Steinacker 15, 4565 Recherswil
In individual cases, third parties may be responsible for processing personal data, or there may be joint responsibility with third parties.
2. Terms and Legal Bases
2.1 Terms
Data Subject: A natural person whose personal data we process.
Personal Data: All information relating to an identified or identifiable natural person.
Particularly Sensitive Personal Data: Data concerning trade union, political, religious, or philosophical views and activities, data about health, intimate sphere, or affiliation with an ethnic group or race, genetic data, biometric data that uniquely identifies a natural person, data about criminal and administrative sanctions or prosecutions, and data about social assistance measures.
Processing: Any handling of personal data, regardless of the methods and procedures used, such as querying, matching, adjusting, archiving, storing, reading, disclosing, obtaining, recording, collecting, deleting, revealing, organizing, structuring, storing, modifying, disseminating, linking, destroying, and using personal data.
2.2 Legal Bases
We process personal data in accordance with Swiss data protection law, particularly the Federal Act on Data Protection (Data Protection Act, DSG) and the Ordinance on Data Protection (Data Protection Ordinance, DSV).
3. Type, Scope, and Purpose of Processing Personal Data
We process only the personal data that is necessary for us to carry out our activities and operations in a sustainable, humane, secure, and reliable manner. The processed personal data may particularly fall into the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data, and payment data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities and operations, provided that such processing is legally permissible.
We process personal data as necessary with the consent of the affected persons. In many cases, we may process personal data without consent, such as to fulfill legal obligations or to protect overriding interests. We may also seek consent from affected persons even when their consent is not required.
We process personal data for the duration that is necessary for the respective purpose. We anonymize or delete personal data particularly in accordance with legal retention and statute of limitation periods.
4. Disclosure of Personal Data
We may disclose personal data to third parties, have it processed by third parties, or process it jointly with third parties. Such third parties are particularly specialized providers whose services we utilize.
We may disclose personal data, for example, to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies, and insurance companies.
5. Communication
We process personal data to be able to communicate with third parties. In this context, we process in particular the data that an affected person transmits when contacting us, for example, by postal mail or email. We may store such data in an address book or similar tools.
Third parties who transmit data about other persons are obligated to ensure data protection concerning such affected persons. Among other things, the accuracy of the transmitted personal data must be ensured.
We use selected services from suitable providers to improve communication with third parties.
In particular, we use:
- bexio: Customer-Relationship-Management (CRM); Provider: bexio AG (Switzerland); Data protection information: Privacy Policy, "Cloud and Data Security", "Data Security – Definition and Measures for Companies".
6. Applications
We process personal data of applicants as far as it is necessary for assessing their suitability for an employment relationship or for the later execution of an employment contract. The required personal data is particularly derived from the information requested, for example, in the context of a job advertisement. We may publish job advertisements with the help of suitable third parties, for example, in electronic and printed media or on job portals and job platforms.
We also process personal data that applicants voluntarily provide or publish, particularly as part of cover letters, resumes, and other application documents, as well as online profiles.
7. Data Security
We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. With our measures, we particularly ensure the confidentiality, availability, traceability, and integrity of the processed personal data, but we cannot guarantee absolute data security.
Access to our website and our other online presence is carried out using transport encryption (SSL / TLS, particularly with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting websites without transport encryption.
Our digital communication is subject to – like virtually all digital communication – mass surveillance without cause and suspicion by security authorities in Switzerland, in the rest of Europe, in the United States of America (USA), and in other countries. We cannot directly influence the corresponding processing of personal data by intelligence services, police authorities, and other security authorities. We also cannot rule out that an affected person is being specifically monitored.
8. Personal Data Abroad
We process personal data primarily in Switzerland. However, we may also disclose or export personal data to other countries, particularly for processing it there or having it processed there.
We can disclose personal data to any countries and territories on Earth, provided that the local law ensures adequate data protection according to the decision of the Swiss Federal Council.
We may disclose personal data to countries whose laws do not ensure adequate data protection, provided that appropriate data protection is ensured for other reasons, particularly based on standard data protection clauses or other appropriate safeguards. Exceptionally, we may export personal data to countries without adequate or appropriate data protection if the specific data protection requirements are met, for example, the explicit consent of the affected individuals or a direct connection with the conclusion or execution of a contract. We are happy to provide affected individuals with information about any guarantees upon request or to provide a copy of the guarantees.
9. Rights of Affected Individuals
9.1 Data Protection Claims
We grant affected individuals all claims in accordance with the applicable data protection law. Affected individuals particularly have the following rights:
- Information: Affected individuals can request information on whether we process personal data about them, and if so, what personal data is involved. Affected individuals also receive the information necessary to assert their data protection claims and to ensure transparency. This includes the processed personal data itself, but also, among other things, information about the purpose of processing, the retention period, any disclosure or export of data to other countries, and the origin of the personal data.
- Correction and Restriction: Affected individuals can have incorrect personal data corrected, incomplete data completed, and the processing of their data restricted.
- Deletion and Objection: Affected individuals can have personal data deleted ("right to be forgotten") and object to the processing of their data with effect for the future.
- Data Release and Data Transfer: Affected individuals can request the release of personal data or the transfer of their data to another responsible party.
We may defer, restrict, or refuse the exercise of affected individuals' rights to the extent legally permissible. We may inform affected individuals about any conditions that need to be met for exercising their data protection claims. For example, we may refuse to provide information by referring to business secrets or the protection of other individuals. We may also refuse to delete personal data by referring to legal retention obligations.
We may, exceptionally, impose costs for the exercise of rights. We will inform affected individuals in advance about any costs.
We are obligated to take appropriate measures to identify affected individuals who request information or assert other rights. Affected individuals are required to cooperate.
9.2 Legal Protection
Affected individuals have the right to enforce their data protection claims through legal action or to file a complaint with a data protection supervisory authority.
The data protection supervisory authority for private entities and federal agencies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
10. Use of the Website
10.1 Cookies
We may use cookies. Cookies—both our own cookies (first-party cookies) and those from third parties whose services we use (third-party cookies)—are data stored in the browser. Such stored data does not necessarily need to be limited to traditional text-based cookies.
Cookies can be temporarily stored in the browser as "session cookies" or for a specific period as so-called permanent cookies. "Session cookies" are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. Cookies enable a browser to be recognized on subsequent visits to our website, allowing us, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing purposes.
Cookies can be deactivated or deleted in the browser settings at any time, either entirely or partially. Without cookies, our website may no longer be fully available. We actively seek explicit consent for the use of cookies—at least where and to the extent necessary.
For cookies used for performance and reach measurement or for advertising purposes, many services offer a general opt-out option via the AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
10.2 Logging
We may log at least the following information for each access to our website and other online presences, provided this information is transmitted to our digital infrastructure during such access: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed, including data volume transmitted, the last website accessed in the same browser window (referrer).
We log this information, which can also constitute personal data, in log files. This information is necessary to ensure that our online presence is permanently, user-friendly, and reliably available. The information is also necessary to ensure data security—also through third parties or with the help of third parties.
10.3 Tracking Pixels
We may integrate tracking pixels into our online presence. Tracking pixels are also known as web beacons. Tracking pixels—also from third parties whose services we use—are typically small, invisible images or JavaScript scripts that are automatically retrieved when accessing our online presence. Tracking pixels can capture at least the same information as log files.
11. Notifications and Communications
11.1 Success and Reach Measurement
Notifications and communications may contain web links or tracking pixels that capture whether an individual message was opened and which web links were clicked. These web links and tracking pixels can also capture the use of notifications and communications on a personal basis. We need this statistical tracking of usage for success and reach measurement, enabling us to send notifications and communications effectively, user-friendly, and reliably, based on the needs and reading habits of recipients.
11.2 Consent and Objection
In principle, you must consent to the use of your email address and other contact addresses unless the use is permitted for other legal reasons. To obtain double-confirmed consent, we may use the "double opt-in" procedure. In this case, you will receive a message with instructions for double confirmation. We may log obtained consents, including the IP address and timestamp, for proof and security reasons.
In principle, you can object to receiving notifications and communications, such as newsletters, at any time. With such an objection, you can also simultaneously object to the statistical tracking of usage for success and reach measurement. Required notifications and communications related to our activities and operations remain unaffected.
11.3 Service Providers for Notifications and Communications
We send notifications and communications with the help of specialized service providers.
12. Social Media
We are present on social media platforms and other online platforms to communicate with interested parties and inform them about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.
The general terms and conditions (GTC), terms of use, data protection declarations, and other provisions of the respective operators of such platforms apply. These provisions inform in particular about the rights of affected individuals directly vis-à-vis the respective platform, which includes, for example, the right to information.
13. Third-Party Services
We use services from specialized third parties to ensure that our activities and operations are permanently user-friendly, secure, and reliable. With such services, we can, among other things, embed functions and content into our website. During such embedding, the services used may collect at least temporarily the IP addresses of users for technical reasons.
For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data related to our activities and operations in an aggregated, anonymized, or pseudonymized manner. This data includes, for example, performance or usage data to provide the respective service.
We specifically use:
- Google Services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) partly for users in the European Economic Area (EEA) and Switzerland; General information on data protection: "Privacy and Security Principles", "Information on how Google uses personal data", Privacy Policy, "Google is committed to complying with applicable data protection laws", "Privacy Guide for Google Products", "How we use data from websites or apps that use our services", "Types of cookies and similar technologies that Google uses", "Ads that you can influence" ("Personalized Ads").
13.1 Digital Infrastructure
We use services from specialized third parties to access the necessary digital infrastructure in connection with our activities and operations. This includes, for example, hosting and storage services from selected providers.
We specifically use:
- METANET: Hosting; Provider: METANET AG (Switzerland); Privacy information: Privacy Policy, "Technical and Organizational Measures".
13.2 Audio and Video Conferences
We use specialized services for audio and video conferences to enable online communication. This allows us to hold virtual meetings or conduct online classes and webinars. The legal texts of the individual services, such as privacy policies and terms of use, apply in addition to participating in audio and video conferences.
We recommend, depending on your living situation, muting the microphone by default during audio or video conferences and blurring the background or using a virtual background.
We specifically use:
- Zoom: Platform for collaborative work, especially with video conferences; Provider: Zoom Video Communications Inc. (USA); Privacy information: "Privacy at Zoom", Privacy Policy, "Legal Compliance".
13.3 Map Services
We use services from third parties to embed maps into our website.
We specifically use:
- Google Maps including Google Maps Platform: Map service; Provider: Google; Google Maps-specific information: "How Google Uses Location Information".
13.4 Digital Audio and Video Content
We use services from specialized third parties to enable the direct playback of digital audio and video content, such as music or podcasts.
We specifically use:
- Vimeo: Video platform; Provider: Vimeo Inc. (USA); Privacy information: Privacy Policy, "Private Video Hosting".
- YouTube: Video platform; Provider: Google; YouTube-specific information: "Privacy and Safety Center", "My Data on YouTube".
13.5 Documents
We use services from third parties to embed documents into our website. These documents can include PDF files, presentations, spreadsheets, and text documents. This allows us to not only view but also edit or comment on such documents.
13.6 Fonts
We use services from third parties to embed selected fonts, icons, logos, and symbols into our website.
We specifically use:
- Google Fonts: Fonts; Provider: Google; Google Fonts-specific information: "Your Privacy and Google Fonts", "Privacy and Data Collection" (at Google Fonts).
14. Website Extensions
We use extensions for our website to enable additional functions. We can use selected services from suitable providers or use such extensions on our own digital infrastructure.
We specifically use:
- Google reCAPTCHA: Spam protection (distinguishing between desired content from humans and unwanted content from bots and spam); Provider: Google; Google reCAPTCHA-specific information: "What is reCAPTCHA?".
15. Success and Reach Measurement
We try to measure the success and reach of our activities and operations. In this context, we may also measure the impact of third-party references or check how different parts or versions of our online offerings are used (A/B testing). Based on the results of success and reach measurement, we can correct errors, strengthen popular content, or make improvements.
In most cases, IP addresses of individual users are recorded for success and reach measurement. IP addresses are generally shortened ("IP masking") to follow the principle of data minimization through the corresponding pseudonymization.
Cookies may be used for success and reach measurement, and user profiles may be created. Any user profiles created may include, for example, the individual pages visited or content viewed on our website, information about the screen size or browser window, and the – at least approximate – location. Generally, any user profiles are created exclusively pseudonymized and not used to identify individual users. Certain third-party services where users are logged in may be able to assign the use of our online offerings to the user account or user profile at the respective service.
We specifically use:
- Google Marketing Platform: Success and reach measurement, especially with Google Analytics; Provider: Google; Google Marketing Platform-specific information: Measurement across different browsers and devices (Cross-Device Tracking) with pseudonymized IP addresses, which are only exceptionally fully transmitted to Google in the USA, Privacy Policy for Google Analytics, "Browser Add-on to Disable Google Analytics".
16. Final Provisions
We may adjust and supplement this privacy policy at any time. We will inform you about such adjustments and supplements in an appropriate manner, particularly by publishing the current privacy policy on our website.