Gevartis AG is committed to the conscientious protection and security of personal data. Below, we would like to inform you about how we process personal data when you use this website. Personal data includes all information that relates to you personally, such as your name, address, e-mail addresses and user behaviour.

 I. Data controller

The data controller pursuant to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:

Gevartis AG
Schaffhauserstrasse 146
8302 Kloten | CH

T +49 2621 12-485
gevartis.ch
info@gevartis.ch

See also our Imprint. Under Contact, you can find the e-mail addresses of your contact persons.

 II. Collection of personal data when visiting our website

1. Transmitting data via the internet

In the case of the merely informative use of the website, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you would like to visit our website, we collect the following information:

– IP address

– date, time, time zone difference to Greenwich Mean Time (GMT)

– data on the sub-pages you visited on our website: content of the request (specific page)

– access status/HTTP status code

– respectively transmitted amount of data

– web address of the page from which you reached our website (referrer URL)

– browser and browser version

– operating system

We process this information so that you can load our website for the purpose of viewing it and, if necessary, restoring system security and stability and for statistical purposes (see below). The legal basis for this processing is Article 6 par. 1 f) GDPR. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can identify and correct the causes of any errors.

This data is stored in log files for a maximum of 30 days. A longer storage takes place only as far as this is necessary for the assertion and defence of our legal claims, for example after a hacker attack.

The provision of this data is neither legally nor contractually required and is not necessary for a contract with us. However, visiting our website without our processing of this data would not be possible for technical reasons.

2. Cookies

Our website uses cookies. Cookies are small files that contain an identification number. Cookies are stored on your computer or mobile device when you visit our website. If you visit our website again, your computer or mobile device can be recognised by this identification number. Cookies serve to make our online service generally more user-friendly and effective.

The legal basis is Article 6 par. 1 f) GDPR or, if you have consented, Article 6 par. 1 a) GDPR. We have an interest in making it easy for you to use our website and to optimise our website.

This website uses the following types of cookies:

• Transient cookies:

Transient cookies are automatically deleted when you close the browser. These include session cookies. They are deleted when you close the browser. Session cookies allow you to avoid having to re-enter anything on our site, even if you visit other websites in between. The purpose of these session cookies is therefore to facilitate the use of our website.

•  Persistent cookies:

We also use persistent cookies to record statistics on the use of our website and optimise our services for you (see II.3). This data also enables us to support different languages or end devices. Persistent cookies are deleted after 24 months at the latest.

In particular, the following cookies are used for the following purposes:

Of course, you can also view our site without cookies. There is no obligation to use cookies. However, most browsers accept cookies automatically. To limit the placement of cookies, you can configure your browser settings as you wish – to reject the acceptance of third-party cookies, for example. You must adjust the settings separately for each browser and for each end device that you use. You can also use your browser’s security settings to delete cookies at any time. Please note that if you deactivate the use of cookies, you cannot log in to the website’s customer portal and might not be able to use all of this website’s functions.

3. Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). Google Analytics uses cookies which allow us to analyse how you use our website (see note regarding cookies above). The information the cookie generates about your use of this website is usually transmitted to a Google server in the USA and stored there. This information corresponds to the data named above under II.1. Furthermore, Google processes the search term you used to find our website through a search engine. We use Google Analytics with activated IP anonymisation. This means that Google will normally truncate your IP address in advance within EU Member States or other Contracting Parties to the EEA Agreement. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

The data will be processed for market research and to help us design our website to meet our users’ needs. Google processes this data on our behalf, to evaluate the use of our website and to compile reports about the activities on our website.

The legal basis is Art. 6(1)(1)(f) GDPR. We have a legitimate interest in using the statistics provided by Google to perform internal market research and adjust our website to meet its visitors’ needs.

Cookies placed by Google Analytics will be deleted after 24 months at the latest and the data generated through Google Analytics will be stored for 14 months. Provision of this data is not required and not necessary to conclude a contract with us. You can prevent the cookies from being stored by adjusting your browser settings accordingly (see above). You can also keep Google from collecting and processing the data which the cookie generates regarding your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link:

Disabling Google Analytics

Alternatively, or within browsers on mobile devices, you can click on the following link:

This will cause an opt-out cookie to be placed in your current browser and this cookie will apply to our website. If you delete the cookies in this browser, you must click on this link again. If you use multiple end devices or browsers, you must click on this link in each browser for each end device.

You will find additional information on Google Analytics on the following Google websites:

- Google Analytics: Overview of Data Privacy

- Google Analytics - Data Privacy Statement

4. Business relations

We may process data on the basis of Art. 6 par. 1 b) GDPR if this is necessary for the fulfilment of a contract between you and us or for the performance of pre-contractual measures carried out at your request. In this respect, we process your data in particular for contract management, to communicate with you, for order acceptance, for shipping, for invoicing and, if necessary, for collection, and for the enforcement and defence of legal claims.

We use your data, to the extent permitted, to send advertisements for our products and services by post (and, if you have provided us with your e-mail address, by e-mail). The legal basis for this is Art. 6(1)(1)(f) GDPR. We have a legitimate interest in sending direct marketing (for your right to object, see V.).

The provision of personal data is not required by law or by contract. However, the conclusion of a contract with us requires the processing of your name or your company name, your e-mail address and your postal address. Without this data, it would be impossible for us to send you e-mails, for example to send you contract documents, offers or invoices and, if necessary, to assert legitimate claims.

We may process this data until the final execution of the respective contract and, if applicable, beyond that within the statutory period of limitation of 3 years and/or the warranty periods for the above-mentioned purposes. If storage is required for the fulfilment of our legal obligations according to Art. 6 par. 1 c) GDPR in connection with § 257 of the German Commercial Code, or § 147 of the German Tax Code, we are entitled to storage until expiration of the respective retention periods. These terms are up to 10 years.

5. Using our customer portal

If you would like to use our customer portal, you must register by disclosing your e-mail address, a password of your own choosing your last name and company. We use a “double-opt-in procedure” for registration, i.e. your registration is completed only when you have confirmed your registration by clicking on the link contained in an e-mail sent to you for this purpose. When you use our customer portal, we will process the data you enter so you can log in to the portal and view product data sheets. The purpose of processing this data is also to facilitate communication with you when pre-contractual measures are being executed, provided that you are interested in our products. You can change all the information you have entered in the protected customer portal.

If you are our customer or are interested in our products, the legal basis will be Art. 6(1)(1)(b) GDPR – otherwise, it will be Art. 6(1)(1)(f) GDPR. We have a legitimate interest in providing certain information (such as product data sheets) only to registered users of our customer portal to keep that information from being uncontrollably disseminated on the internet. If the information you provide is optional, the legal basis will be your consent (At. 6(1)(1)(a) GDPR).

We will process the data you have entered in connection with the customer portal until you delete your customer portal account, but three years after your last login at the latest. If you are also our customer, II.6 will apply to the retention periods.

Provision of this data is not required and not necessary to conclude a contract. However, if you use the customer portal, you must first provide at least an e-mail address, a password, your last name and the company name. If you wish, you may also provide additional data voluntarily.

6. Contacting us by using our contact form or otherwise

If you contact us through e-mail or a contact form, we will process the data you disclose (your e-mail address and possibly your name and telephone number) to answer your questions.

We will process your e-mail address and the message you enter into our contact form or e-mail to us on the legal basis of Art. 6(1)(1)(f) GDPR. We have a legitimate interest in processing your request. We will process other data on the legal basis of your consent (Art. 6(1)(1)(a) GDPR), provided you have consented to such processing by clicking “Send”. By entering sensitive information which contains special categories of data in the “Message” field, you also consent to the processing of this data. If you are also our customer, the legal basis will also be Art. 6(1)(1)(b) GDPR.

We will delete this data three months after we receive your inquiry at the latest, unless statutory provisions in connections with Art. 6(1)(1)(c) GDPR entitle or obligate us to store them longer. If you are also our customer, II.6 will apply to the retention periods.

Provision of this data is not required and not necessary to conclude a contract. However, use of the contact form requires that you first disclose your e-mail address since we cannot answer your request otherwise. You may also provide additional data voluntarily.

7. Sending the newsletter

If you have subscribed to a newsletter, we will process the data you entered when you subscribed.

We process your e-mail address and postal address to send our newsletter periodically. After you subscribe to the e-mail newsletter, we will send you an e-mail with a link to verify your e-mail address. The legal basis is your consent, which you have given us by subscribing to the newsletter (Art. 6(1)(1)(a) GDPR).

If you do not wish to receive the newsletter in the future, you can withdraw your consent to receiving it, at any time and without giving reasons, by sending an e-mail to info@zschimmer-schwarz.com (for more information on your right of withdrawal, see V.). Alternatively, you can unsubscribe to the newsletter by clicking on “Unsubscribe”.

Shortly after you withdraw your consent or unsubscribe, the data you provided to receive the newsletter will be deleted. If you are also our business partner or employee, we may store this data for a longer period and for other purposes if we need them to maintain contractual or employment relationships or to fulfil statutory retention requirements.

Our newsletter is a voluntary offer. However, we need your e-mail address to send you the e-mail newsletter and your postal address to send you the postal newsletter. . No further information is required to send the newsletter. The disclosure of your name is voluntary and allows us to address you personally.

8. Applications

If you apply to work for us, we will process your data to decide whether to establish an employment relationship based on Art. 88 GDPR in conjunction with § 26(1)(1) BDSG (Federal Data Protection Act). We will store this data to execute the application procedure for up to six months after we receive the application and then delete it. Processing beyond this is permitted to establish and execute an employment relationship based on the aforementioned legal basis if you begin working for us after the application procedure is over. The provision of your data is neither contractually nor legally required.

III. Sources of data

We usually collect your data from you. In some cases, the following data may come from these sources, as long as we have the right to collect such data:

• public trade and association registers (company name, addresses)
• address brokers, credit bureaus (names, addresses), unless we reach you at your address

IV. Recipients of your data

In part, we provide the above data to these processors for the following purposes:

• Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics)
• Creativ clicks GmbH, Schoenherrstrasse 8, 09113 Chemnitz (programming of website)
• JK-Computer GmbH, Trinkbornstrasse 24, 56281 Doerth (hosting)
• if necessary, additional processors in the areas of web hosting, IT services, printing and data destruction

Processors only process data on our instruction and not for their own purposes.

In certain cases, some of your data may be passed on to other recipients with your consent (Article 6 par. 1 a) GDPR) if we are obliged to do so by law (Article 6 par. 1 c) GDPR) or if it is required for the protection of legitimate interests (Article 6 par. 1 f) GDPR):

• Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Maps)
• postal, shipping and telecommunications companies, for shipping and in order to communicate with you
• law enforcement agencies, courts for enforcing or defending legal claims
• auditors, lawyers or accountants
• insurance providers for the settlement of claims

If the processor, other recipients or service providers of the latter have their registered office in the USA, your data will be transmitted there. Google transmits data to other Google companies in the US. These companies participate in the "EU-US Privacy Shield”. The European Commission has decided in an Adequacy Resolution that this establishes an adequate level of data protection.

V. Your data protection rights

Under the preconditions of Art. 15 GDPR, you may request information about whether and which data we process from you. You may demand correction and, if need be, completion of your data under Art. 16 GDPR. You have the right to have your data deleted under the conditions of Art. 17 GDPR, or blocked under the conditions of Art. 18 GDPR. According to Art. 20 GDPR, you have the right to receive your data transmitted to us on the basis of consent or a contract, provided that the processing is automated. If you wish, and if this is technically possible, we will transmit this data to a third party. Your rights may be restricted or excluded by law under certain conditions.

If you have consented to the data processing, you have the right to revoke your consent at any time. Revocation shall not affect the legality of the processing until the revocation. You can request revocation by writing to info@zschimmer-schwarz.com. After revocation, we will no longer process your data unless we are legally entitled or obliged to do so. You have the right to make legal data protection complaints with a data protection authority, in particular with the Federal Data Protection and Information Commissioner in Switzerland.

Insofar as we process data to safeguard our interests exclusively in accordance with Art. 6 par. 1 f) GDPR, you have the right, for reasons arising from your particular situation, to object to the processing of your data. If you object, we will cease processing such data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if processing serves the purpose of enforcing legal claims. Objections may, for example, be e-mailed to info@gevartis.ch.

Updated: 25 August 2020