Skip to content
Language
DE EN FR
Start a project
Start a project Service desk

Privacy policy

Which personal data we process, for what purposes, how and where, and what rights data subjects have.

Data protection

In this privacy policy, we provide information about which personal data we process in connection with our website and our other offerings. In particular, we provide information about the purposes for which, and how and where, we process personal data. We also provide information about the rights of persons whose data we process.

Other legal documents, such as general terms and conditions (GTC), terms of use or conditions of participation, may apply to specific or additional services.

Our services are subject to Swiss data protection law and to any applicable foreign data protection law, in particular that of the European Union (EU) with the General Data Protection Regulation (GDPR). The European Commission recognises that Swiss data protection law ensures adequate data protection.

Contact addresses

Responsibility for the processing of personal data:

cloudtec AG
Wabernstrasse 40
3007 Bern
Switzerland

Email: hello@cloudtec.ch

Processing of personal data

Definitions

Personal data means any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing comprises any handling of personal data, irrespective of the means and procedures used, in particular the storage, disclosure, procurement, collection, erasure, saving, modification, destruction and use of personal data.

Legal bases

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (VDSG).

If and to the extent that the General Data Protection Regulation (GDPR) applies, we process personal data on the basis of at least one of the following legal bases:

  • Art. 6(1)(b) GDPR for the processing of personal data necessary for the performance of a contract with the data subject and for the implementation of pre-contractual measures.
  • Art. 6(1)(f) GDPR for the processing of personal data necessary to safeguard the legitimate interests of us or of third parties, unless the fundamental freedoms and fundamental rights and interests of the data subject override them. Legitimate interests are, in particular, our interest in being able to provide our offering on a lasting, user-friendly, secure and reliable basis and to advertise it where necessary, information security and protection against misuse and unauthorised use, the enforcement of our own legal claims and compliance with Swiss law.
  • Art. 6(1)(c) GDPR for the processing of personal data necessary for compliance with a legal obligation to which we are subject under any applicable law of member states of the European Economic Area (EEA).
  • Art. 6(1)(e) GDPR for the processing of personal data necessary for the performance of a task carried out in the public interest.
  • Art. 6(1)(a) GDPR for the processing of personal data with the consent of the data subject.
  • Art. 6(1)(d) GDPR for the processing of personal data necessary to protect the vital interests of the data subject or of another natural person.

Nature, scope and purpose

We process the personal data that is necessary to be able to provide our offering on a lasting, user-friendly, secure and reliable basis.

As a matter of principle, we process personal data only with the consent of the data subject, unless the processing is permitted for other reasons, for example for the performance of a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests, because the processing is evident from the circumstances, or after prior information. Within this framework, we process in particular information that a data subject provides when contacting us (for example by letter post, email, contact form, telephone or social media).

If you transmit data about other persons to us, you are obliged to ensure data protection in relation to such persons and to ensure the accuracy of such personal data.

We process personal data for the period required for the respective purpose or purposes or by law. Personal data whose processing is no longer necessary is anonymised or erased. Persons whose data we process have, as a matter of principle, a right to erasure.

We may have personal data processed by third parties. We may process personal data jointly with third parties or transmit it to third parties. Such third parties are, in particular, specialised providers whose services we use. We also ensure adequate data protection with such third parties.

Processing of personal data abroad

As a matter of principle, we process personal data in Switzerland and in the European Economic Area (EEA). If adequate data protection is ensured according to the FDPIC or according to a decision of the Swiss Federal Council, we may also export or transmit personal data to other states.

We may transmit personal data to states whose law does not ensure adequate data protection, provided that data protection is ensured for other reasons, in particular by suitable safeguards in the form of standard contractual clauses. By way of exception, we may export personal data to states without adequate or suitable data protection if the specific requirements of data protection law are met for this, for example the express consent of the data subjects.

Rights of data subjects

Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right of access and the right to rectification, erasure or blocking of the processed personal data.

If and to the extent that the GDPR applies, data subjects whose personal data we process may, free of charge, request confirmation as to whether we process their personal data and, if so, access to information about the processing of their personal data, have the processing of their personal data restricted, exercise their right to data portability and have their personal data rectified, erased (‘right to be forgotten’) or blocked.

If and to the extent that the GDPR applies, data subjects whose personal data we process may withdraw consent given at any time with effect for the future and object to the processing of their personal data at any time.

Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Data security

We take adequate and suitable organisational and technical measures to ensure data protection and data security.

Access to our offering is provided using transport encryption (SSL / TLS).

Despite adequate and suitable organisational and technical measures, the processing of personal data on the internet may always have security gaps. We therefore cannot guarantee absolute data security.

Access to our offering is subject, as is in principle any use of the internet, to suspicionless and untargeted mass surveillance and other surveillance by security authorities in Switzerland, in the EU, in the United States of America (USA) and in other states. We cannot exert any direct influence on the corresponding processing of personal data by intelligence services, police authorities and other security authorities.

Use of the website

Cookies and log files

For every visit to our website, we collect the following data, provided that it is transmitted by your browser to our server infrastructure, and store this data in log files:

  • Date and time including time zone
  • Internet Protocol (IP) address
  • Access status (HTTP status code)
  • Operating system including user interface and version
  • Browser including language and version
  • Individual page accessed and amount of data transferred
  • Last web page accessed (referrer)

Such data may constitute personal data. The data is necessary in order to be able to provide our offering on a lasting, secure and reliable basis and to ensure data security and thus, in particular, the protection of personal data, including by third parties or with the help of third parties.

We use cookies on our website. Cookies, including those of third parties whose services we use (third-party cookies), are text files that are stored in your browser. Cookies may be stored in your browser when you visit our website. Cookies make it possible, in particular, to recognise your browser on your next visit to our website. Cookies cannot run programs or transmit malware such as Trojans and viruses. Cookies are necessary in order to be able to provide our offering, including our website, effectively and in a user-friendly manner as well as on a lasting, secure and reliable basis, in particular through the analysis of use with a view to troubleshooting and improvements.

When you visit, cookies may be stored in your browser temporarily as ‘session cookies’ or for a certain period as so-called permanent cookies. ‘Session cookies’ are deleted automatically when you close your browser. Permanent cookies have a specific storage period. Cookies make it possible, in particular, to recognise your browser on your next visit to our website and thereby, for example, to measure the reach of our website. Permanent cookies may, however, also be used for online marketing, for example.

You can deactivate and delete cookies in your browser settings, in whole or in part, at any time. Without cookies, our website may no longer be available in its full scope.

Overview of the cookies used

The following overview is generated by Cookiebot and lists all cookies used on this website with their purpose, provider and storage period. You can use the same overview to change or withdraw your consent at any time.

Notifications and communications

We may send notifications and newsletters by email and via other communication channels.

Consent and objection

If and to the extent that sending is not necessary to perform a contract with the data subject or to safeguard our overriding legitimate interests, you must expressly consent to the use of your email address and your other contact addresses so that no misuse by unauthorised third parties can occur. For any consent to receive emails, we use the ‘double opt-in’ procedure where possible, that is, you receive an email with a web link that you must click to confirm, so that no misuse by unauthorised third parties can occur. We may have notifications and newsletters sent by third parties or send them with the help of third parties.

As a matter of principle, you can unsubscribe from notifications and communications such as newsletters at any time. By unsubscribing, you can in particular object to the statistical recording of use for performance and reach measurement. Notifications and communications that are strictly necessary for our offering remain reserved.

Data protection officer

We have appointed an external data protection officer. If you have any questions about data protection or the processing of your personal data, you can contact the data protection officer at any time:

Kertos GmbH
Brienner Strasse 41
80333 Munich
Germany

Email: dataprivacy@kertos.io

Rights of data subjects

Within the scope of the applicable data protection laws, you have in particular the following rights:

  • to request access to the personal data processed by us;
  • to request the rectification of inaccurate personal data;
  • to request the erasure of your personal data, unless a statutory retention obligation prevents this;
  • to request the restriction of the processing of your personal data;
  • to object to the processing of your personal data;
  • to withdraw consent given at any time with effect for the future;
  • to request the release of your personal data in a common electronic format, insofar as this is provided for by law.

To exercise your rights or if you have any questions about data protection, you can contact us at any time at hello@cloudtec.ch.

Service providers for notifications and communications

We send notifications and communications via third-party services or with the help of service providers. Cookies may also be used in this context.

In particular, we use xCampaign Light: communication platform; provider: KünzlerBachmann Directmarketing AG; data protection information: privacy policy.

Online appointment booking

We enable the booking of appointments for meetings via third-party services. After you submit one of our contact forms, a booking calendar is embedded in the page. So that you do not have to enter your details again, your name, your email address, your company and the details of your enquiry are transmitted to the service when the calendar is displayed. If you book an appointment, the service additionally processes the details of the selected appointment. Cookies may also be used in this context, and personal data may be processed outside Switzerland and the European Economic Area (EEA), in particular in the USA.

In particular, we use Calendly: online appointment booking; provider: Calendly LLC (USA); data protection information: privacy policy.

Social media

We are present on social media platforms and other online platforms in order to be able to communicate with interested persons and provide information about our offering. In this context, personal data may also be processed outside Switzerland and the European Economic Area (EEA).

The general terms and conditions (GTC) and terms of use as well as privacy policies and other provisions of the individual operators of such online platforms also apply in each case. These provisions provide information in particular about the rights of data subjects, which include, for example, the right of access.

Third-party services

For their own security-related, statistical and technical purposes, third parties whose services we use may also process data in connection with our offering and from other sources (including with cookies, log files and tracking pixels) in aggregated, anonymised or pseudonymised form.

Digital infrastructure

We use third-party services in order to be able to use the digital infrastructure required for our offering. These include, for example, hosting and storage services from specialised providers.

Audiovisual media

We use third-party services to enable the direct playback of audiovisual media such as music or videos on our website.

Performance and reach measurement

We use services and programs to determine how our online offering is used. Within this framework, we can, for example, measure the success and reach of our online offering and the effect of third-party links to our website. However, we can also, for example, try out and compare how different versions of our online offering or parts of our online offering are used (‘A/B testing’ method). Based on the results of the performance and reach measurement, we can in particular correct errors, strengthen particularly popular content or make improvements to our online offering.

When services and programs for performance and reach measurement are used, the Internet Protocol (IP) addresses of individual users must be stored. As a matter of principle, IP addresses are truncated in order to follow the principle of data minimisation through the corresponding pseudonymisation and to improve the data protection of visitors to our website (‘IP masking’).

When services and programs for performance and reach measurement are used, cookies may be used and user profiles may be created. User profiles include, for example, the pages visited or content viewed on our website, information on the size of the screen or browser window and the (at least approximate) location. As a matter of principle, user profiles are created exclusively in pseudonymised form. We do not use user profiles to identify individual visitors to our website. Individual services with which you are registered as a user may, where applicable, assign the use of our online offering to your profile with the respective service, in which case you will usually have had to give your prior consent to this assignment.

In particular, we use Matomo (hosted locally): performance and reach measurement with pseudonymised Internet Protocol (IP) addresses; provider: InnoCraft Ltd. (New Zealand); data protection information: privacy policy, no cross-website tracking and no disclosure of data to third parties (‘100% Data Ownership’).

Final provisions

We may amend and supplement this privacy policy at any time. We inform data subjects of such changes in an appropriate form on our website.

Our terms of use and the general terms and conditions also apply. Information on responsibility can be found in the imprint.