Privacy Policy

With this privacy policy, we inform you about the processing of personal data in connection with our activities and operations, including our reseabiotec.ch website. We specifically inform you about the purposes, methods, and locations of our processing of personal data. We also inform you about the rights of individuals whose data we process.

For specific or additional activities and operations, further privacy policies or other data protection information may apply.

1. Contact Information

Responsibility for the processing of personal data:

Nina Steiger
Resea Biotec GmbH, Steinacker 15, 4565 Recherswil

office@reseabiotec.ch

In individual cases, third parties may be responsible for processing personal data, or there may be joint responsibility with third parties.

2. Terms and Legal Bases

2.1 Terms

Data Subject: A natural person whose personal data we process.

Personal Data: All information relating to an identified or identifiable natural person.

Particularly Sensitive Personal Data: Data concerning trade union, political, religious, or philosophical views and activities, data about health, intimate sphere, or affiliation with an ethnic group or race, genetic data, biometric data that uniquely identifies a natural person, data about criminal and administrative sanctions or prosecutions, and data about social assistance measures.

Processing: Any handling of personal data, regardless of the methods and procedures used, such as querying, matching, adjusting, archiving, storing, reading, disclosing, obtaining, recording, collecting, deleting, revealing, organizing, structuring, storing, modifying, disseminating, linking, destroying, and using personal data.

2.2 Legal Bases

We process personal data in accordance with Swiss data protection law, particularly the Federal Act on Data Protection (Data Protection Act, DSG) and the Ordinance on Data Protection (Data Protection Ordinance, DSV).

3. Type, Scope, and Purpose of Processing Personal Data

We process only the personal data that is necessary for us to carry out our activities and operations in a sustainable, humane, secure, and reliable manner. The processed personal data may particularly fall into the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data, and payment data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities and operations, provided that such processing is legally permissible.

We process personal data as necessary with the consent of the affected persons. In many cases, we may process personal data without consent, such as to fulfill legal obligations or to protect overriding interests. We may also seek consent from affected persons even when their consent is not required.

We process personal data for the duration that is necessary for the respective purpose. We anonymize or delete personal data particularly in accordance with legal retention and statute of limitation periods.

4. Disclosure of Personal Data

We may disclose personal data to third parties, have it processed by third parties, or process it jointly with third parties. Such third parties are particularly specialized providers whose services we utilize.

We may disclose personal data, for example, to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies, and insurance companies.

5. Communication

We process personal data to be able to communicate with third parties. In this context, we process in particular the data that an affected person transmits when contacting us, for example, by postal mail or email. We may store such data in an address book or similar tools.

Third parties who transmit data about other persons are obligated to ensure data protection concerning such affected persons. Among other things, the accuracy of the transmitted personal data must be ensured.

We use selected services from suitable providers to improve communication with third parties.

In particular, we use:

6. Applications

We process personal data of applicants as far as it is necessary for assessing their suitability for an employment relationship or for the later execution of an employment contract. The required personal data is particularly derived from the information requested, for example, in the context of a job advertisement. We may publish job advertisements with the help of suitable third parties, for example, in electronic and printed media or on job portals and job platforms.

We also process personal data that applicants voluntarily provide or publish, particularly as part of cover letters, resumes, and other application documents, as well as online profiles.

7. Data Security

We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. With our measures, we particularly ensure the confidentiality, availability, traceability, and integrity of the processed personal data, but we cannot guarantee absolute data security.

Access to our website and our other online presence is carried out using transport encryption (SSL / TLS, particularly with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting websites without transport encryption.

Our digital communication is subject to – like virtually all digital communication – mass surveillance without cause and suspicion by security authorities in Switzerland, in the rest of Europe, in the United States of America (USA), and in other countries. We cannot directly influence the corresponding processing of personal data by intelligence services, police authorities, and other security authorities. We also cannot rule out that an affected person is being specifically monitored.

8. Personal Data Abroad

We process personal data primarily in Switzerland. However, we may also disclose or export personal data to other countries, particularly for processing it there or having it processed there.

We can disclose personal data to any countries and territories on Earth, provided that the local law ensures adequate data protection according to the decision of the Swiss Federal Council.

We may disclose personal data to countries whose laws do not ensure adequate data protection, provided that appropriate data protection is ensured for other reasons, particularly based on standard data protection clauses or other appropriate safeguards. Exceptionally, we may export personal data to countries without adequate or appropriate data protection if the specific data protection requirements are met, for example, the explicit consent of the affected individuals or a direct connection with the conclusion or execution of a contract. We are happy to provide affected individuals with information about any guarantees upon request or to provide a copy of the guarantees.

9. Rights of Affected Individuals

9.1 Data Protection Claims

We grant affected individuals all claims in accordance with the applicable data protection law. Affected individuals particularly have the following rights:

  • Information: Affected individuals can request information on whether we process personal data about them, and if so, what personal data is involved. Affected individuals also receive the information necessary to assert their data protection claims and to ensure transparency. This includes the processed personal data itself, but also, among other things, information about the purpose of processing, the retention period, any disclosure or export of data to other countries, and the origin of the personal data.
  • Correction and Restriction: Affected individuals can have incorrect personal data corrected, incomplete data completed, and the processing of their data restricted.
  • Deletion and Objection: Affected individuals can have personal data deleted ("right to be forgotten") and object to the processing of their data with effect for the future.
  • Data Release and Data Transfer: Affected individuals can request the release of personal data or the transfer of their data to another responsible party.

We may defer, restrict, or refuse the exercise of affected individuals' rights to the extent legally permissible. We may inform affected individuals about any conditions that need to be met for exercising their data protection claims. For example, we may refuse to provide information by referring to business secrets or the protection of other individuals. We may also refuse to delete personal data by referring to legal retention obligations.

We may, exceptionally, impose costs for the exercise of rights. We will inform affected individuals in advance about any costs.

We are obligated to take appropriate measures to identify affected individuals who request information or assert other rights. Affected individuals are required to cooperate.

9.2 Legal Protection

Affected individuals have the right to enforce their data protection claims through legal action or to file a complaint with a data protection supervisory authority.

The data protection supervisory authority for private entities and federal agencies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

10. Use of the Website

10.1 Cookies

We may use cookies. Cookies—both our own cookies (first-party cookies) and those from third parties whose services we use (third-party cookies)—are data stored in the browser. Such stored data does not necessarily need to be limited to traditional text-based cookies.

Cookies can be temporarily stored in the browser as "session cookies" or for a specific period as so-called permanent cookies. "Session cookies" are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. Cookies enable a browser to be recognized on subsequent visits to our website, allowing us, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing purposes.

Cookies can be deactivated or deleted in the browser settings at any time, either entirely or partially. Without cookies, our website may no longer be fully available. We actively seek explicit consent for the use of cookies—at least where and to the extent necessary.

For cookies used for performance and reach measurement or for advertising purposes, many services offer a general opt-out option via the AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

10.2 Logging

We may log at least the following information for each access to our website and other online presences, provided this information is transmitted to our digital infrastructure during such access: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed, including data volume transmitted, the last website accessed in the same browser window (referrer).

We log this information, which can also constitute personal data, in log files. This information is necessary to ensure that our online presence is permanently, user-friendly, and reliably available. The information is also necessary to ensure data security—also through third parties or with the help of third parties.

10.3 Tracking Pixels

We may integrate tracking pixels into our online presence. Tracking pixels are also known as web beacons. Tracking pixels—also from third parties whose services we use—are typically small, invisible images or JavaScript scripts that are automatically retrieved when accessing our online presence. Tracking pixels can capture at least the same information as log files.

11. Notifications and Communications

11.1 Success and Reach Measurement

Notifications and communications may contain web links or tracking pixels that capture whether an individual message was opened and which web links were clicked. These web links and tracking pixels can also capture the use of notifications and communications on a personal basis. We need this statistical tracking of usage for success and reach measurement, enabling us to send notifications and communications effectively, user-friendly, and reliably, based on the needs and reading habits of recipients.

11.2 Consent and Objection

In principle, you must consent to the use of your email address and other contact addresses unless the use is permitted for other legal reasons. To obtain double-confirmed consent, we may use the "double opt-in" procedure. In this case, you will receive a message with instructions for double confirmation. We may log obtained consents, including the IP address and timestamp, for proof and security reasons.

In principle, you can object to receiving notifications and communications, such as newsletters, at any time. With such an objection, you can also simultaneously object to the statistical tracking of usage for success and reach measurement. Required notifications and communications related to our activities and operations remain unaffected.

11.3 Service Providers for Notifications and Communications

We send notifications and communications with the help of specialized service providers.

12. Social Media

We are present on social media platforms and other online platforms to communicate with interested parties and inform them about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.

The general terms and conditions (GTC), terms of use, data protection declarations, and other provisions of the respective operators of such platforms apply. These provisions inform in particular about the rights of affected individuals directly vis-à-vis the respective platform, which includes, for example, the right to information.

13. Third-Party Services

We use services from specialized third parties to ensure that our activities and operations are permanently user-friendly, secure, and reliable. With such services, we can, among other things, embed functions and content into our website. During such embedding, the services used may collect at least temporarily the IP addresses of users for technical reasons.

For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data related to our activities and operations in an aggregated, anonymized, or pseudonymized manner. This data includes, for example, performance or usage data to provide the respective service.

We specifically use:

13.1 Digital Infrastructure

We use services from specialized third parties to access the necessary digital infrastructure in connection with our activities and operations. This includes, for example, hosting and storage services from selected providers.

We specifically use:

13.2 Audio and Video Conferences

We use specialized services for audio and video conferences to enable online communication. This allows us to hold virtual meetings or conduct online classes and webinars. The legal texts of the individual services, such as privacy policies and terms of use, apply in addition to participating in audio and video conferences.

We recommend, depending on your living situation, muting the microphone by default during audio or video conferences and blurring the background or using a virtual background.

We specifically use:

13.3 Map Services

We use services from third parties to embed maps into our website.

We specifically use:

13.4 Digital Audio and Video Content

We use services from specialized third parties to enable the direct playback of digital audio and video content, such as music or podcasts.

We specifically use:

13.5 Documents

We use services from third parties to embed documents into our website. These documents can include PDF files, presentations, spreadsheets, and text documents. This allows us to not only view but also edit or comment on such documents.

13.6 Fonts

We use services from third parties to embed selected fonts, icons, logos, and symbols into our website.

We specifically use:

14. Website Extensions

We use extensions for our website to enable additional functions. We can use selected services from suitable providers or use such extensions on our own digital infrastructure.

We specifically use:

  • Google reCAPTCHA: Spam protection (distinguishing between desired content from humans and unwanted content from bots and spam); Provider: Google; Google reCAPTCHA-specific information: "What is reCAPTCHA?".

15. Success and Reach Measurement

We try to measure the success and reach of our activities and operations. In this context, we may also measure the impact of third-party references or check how different parts or versions of our online offerings are used (A/B testing). Based on the results of success and reach measurement, we can correct errors, strengthen popular content, or make improvements.

In most cases, IP addresses of individual users are recorded for success and reach measurement. IP addresses are generally shortened ("IP masking") to follow the principle of data minimization through the corresponding pseudonymization.

Cookies may be used for success and reach measurement, and user profiles may be created. Any user profiles created may include, for example, the individual pages visited or content viewed on our website, information about the screen size or browser window, and the – at least approximate – location. Generally, any user profiles are created exclusively pseudonymized and not used to identify individual users. Certain third-party services where users are logged in may be able to assign the use of our online offerings to the user account or user profile at the respective service.

We specifically use:

16. Final Provisions

We may adjust and supplement this privacy policy at any time. We will inform you about such adjustments and supplements in an appropriate manner, particularly by publishing the current privacy policy on our website.