PRIVACY POLICY

Privacy Policy
Last Updated: 23.02.2025

1. General Information and Principles of Data Processing

We are delighted that you are visiting our website. Protecting your privacy and safeguarding your personal data is our top priority.

Personal Data:
For the purposes of this policy, personal data refers to any information relating to an identified or identifiable natural person (as defined in Art. 4 No. 1 GDPR and within the context of the Swiss Data Protection Act (DSG)). This includes, for example, your first and last name, address, telephone number, email address, and IP address. Data that has been anonymized so that it can no longer be traced back to a specific person is not considered personal data.

Processing:
The collection, storage, use, transmission, or deletion of personal data is carried out only on the basis of a legal basis or your consent. Personal data will be deleted as soon as the purpose of processing has been achieved and no legal retention obligations (e.g., for tax or commercial reasons) remain.

This Privacy Policy applies exclusively to this website and does not extend to third-party websites linked herein. We have no control over the data protection practices of external websites and advise you to review their respective privacy policies directly.

2. Responsible Party

The entity responsible for data processing on this website is:

Innercy GmbH
Landhausstrasse 1
9053 Teufen, Switzerland
Managing Directors: Marko Mijic and Hrvoje Jandric

If you have any questions regarding data protection, please contact us using the details provided above.

3. Collection and Use of Server Log Files

a) Nature and Scope:
When you visit our website, certain technical data is automatically collected in server log files. This data includes, for example:

  • IP address
  • Date and time of the request
  • Name and URL of the accessed file
  • Referrer URL (the previously visited page)
  • HTTP status code
  • Browser type and version
  • Browser language settings
  • Operating system

b) Purpose and Legal Basis:
This data is necessary to ensure the proper operation, security, and stability of our website. The legal basis is Art. 6(1)(f) GDPR and our legitimate interest under the Swiss DSG.

c) Storage Duration:
Server log files are stored only for as long as necessary for the operation of the website. Extended storage occurs only if legal retention obligations require it.

4. Use of Cookies

a) Nature, Scope, and Purpose:
We use cookies—small text files stored on your device—to facilitate and improve your use of our website. We employ various types of cookies:

  • Session Cookies: Temporary cookies that are automatically deleted when you close your browser.
  • Persistent Cookies: Cookies that remain stored for a longer period and allow the storage of your preferences.
  • Analytical Cookies: Cookies that capture anonymous user behavior to help optimize our website.
  • Advertising and Social Media Cookies: These support personalized advertising and enable connectivity with social networks.

b) Legal Basis:
The use of cookies is based on our legitimate interest (Art. 6(1)(f) GDPR/DSG) to improve user experience. Where you have provided consent (e.g., via a cookie banner), Art. 6(1)(a) GDPR also serves as a legal basis.

c) Management:
You can manage or delete cookies via your browser settings. Please note that disabling certain cookies may impair some functionalities of our website.

5. Data Collection for Pre-Contractual Measures and Contractual Performance

a) Nature and Scope:
During pre-contractual interactions and for contract execution, we collect personal data such as your name, address, email address, telephone number, and payment details.

b) Purpose and Legal Basis:
This data is used solely for fulfilling the contract or for carrying out pre-contractual measures. The legal basis is Art. 6(1)(b) GDPR; where applicable, consent under Art. 6(1)(a) GDPR may also apply.

c) Storage Duration:
Data is deleted once it is no longer necessary for contract performance, subject to legal retention obligations.

6. Order Form

a) Data Collected:
When you use our order form, we collect, among other things:

  • First and last name
  • Telephone number
  • Email address
  • Payment and account details
  • Product information

b) Purpose and Legal Basis:
These data are used to properly process your order. The legal basis is Art. 6(1)(b) GDPR.

c) Storage Duration:
Order data will be deleted once they are no longer required for processing your order, taking into account any applicable legal retention periods.

7. Registration

a) Data Collected:
If you register on our website, we collect the data you provide (e.g., your name and email address).

b) Purpose and Legal Basis:
Registration is necessary to access certain content or services or to prepare for a contract. The legal bases are your consent (Art. 6(1)(a) GDPR) and contract preparation (Art. 6(1)(b) GDPR).

c) Storage Duration:
Registration data are stored as long as your account remains active. You may update or delete your data at any time. Legal retention obligations remain unaffected.

8. Data Transmission

We only disclose your personal data to third parties under the following circumstances:

  • With your explicit consent (Art. 6(1)(a) GDPR)
  • For contract performance or pre-contractual measures (Art. 6(1)(b) GDPR)
  • To comply with legal obligations (Art. 6(1)(c) GDPR)
  • To protect legitimate interests, for instance to assert or defend legal claims (Art. 6(1)(f) GDPR)
  • When using external service providers (data processors) who are contractually obliged to protect your data

For data transfers to third countries (outside the EU/EEA), we ensure an adequate level of data protection through contractual agreements or other appropriate safeguards.

9. Job Application Option

a) Data Collected:
When you apply for a job, we collect the data you provide, such as your name, contact details, and application documents.

b) Purpose and Legal Basis:
These data are used solely to process your application. The legal basis is Art. 6(1)(b) GDPR; where you have consented, Art. 6(1)(a) GDPR applies.

c) Storage Duration:
If your application is unsuccessful, your data will be retained for a maximum of six months (or up to two years if you consent to inclusion in our applicant pool) and then deleted, unless legally required otherwise.

d) Data Access:
Access to your application data is limited to personnel involved in the decision-making process.

10. Comment Function

a) Data Collected:
When you post a comment on our website, we collect the comment text, the date and time of posting, the username or pseudonym you choose, and your IP address.

b) Purpose and Legal Basis:
This data is processed for security purposes and to prevent legal violations. The legal bases are your consent (Art. 6(1)(a) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR).

c) Storage Duration:
Comments and associated data are stored until you delete them or until they must be removed for legal reasons.

11. Contact Form

a) Data Collected:
When you use our contact form, we collect the data you enter (e.g., your name, contact details, and message).

b) Purpose and Legal Basis:
These data are used exclusively to process your inquiry. The legal basis is your consent (Art. 6(1)(a) GDPR).

c) Storage Duration:
Data transmitted via the contact form will be stored until your inquiry has been resolved or until you request deletion, subject to legal retention obligations.

12. Contact via Email

a) Data Collected:
If you contact us via email, we process your email address and any other information you voluntarily provide.

b) Purpose and Legal Basis:
The data is processed to respond to your inquiry. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) and, if applicable, your consent.

c) Storage Duration:
Your data will be stored only as long as necessary to address your inquiry.

13. Newsletter

a) Data Collected:
For our email newsletter, we collect your email address (and, if provided, your name) via a double opt-in process.

b) Purpose and Legal Basis:
Your data is used solely for sending the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in documenting your consent (Art. 6(1)(f) GDPR).

c) Storage Duration:
Your email address will be stored as long as you are subscribed to the newsletter. After unsubscribing, your email address will be deleted, unless further consent for continued use is provided.

14. Tracking and Analytics Tools

For a detailed overview of the web analysis and social media tools we use, please refer to the dedicated section on our website.

15. Data Security

We implement technical and organizational measures to protect your personal data, including the use of encryption technologies (e.g., SSL/TLS). These measures are regularly reviewed and updated in accordance with the state of the art.

16. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on our website with an updated “Last Updated” date.

17. Your Rights

Under the GDPR and the Swiss DSG, you have the following rights regarding your personal data:

  • Right to Withdraw Consent: You can revoke your consent to data processing at any time with effect for future processing.
  • Right to Information (Art. 15 GDPR): You may request confirmation as to whether we process your data and, if so, receive further information (purpose, categories, recipients, storage duration, etc.).
  • Right to Rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to Be Forgotten", Art. 17 GDPR): You may request deletion of your personal data if it is no longer necessary or if you withdraw your consent.
  • Right to Restriction of Processing (Art. 18 GDPR): You can request that the processing of your data be restricted under certain conditions.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21 GDPR): You can object to the processing of your data, especially for direct marketing purposes.
  • Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR): You have the right not to be subject solely to automated decisions that significantly affect you.
  • Right to Lodge a Complaint: You may file a complaint with a data protection supervisory authority if you believe that your rights are being violated.