Data protection and security

Data protection and security F24 Schweiz AG

We welcome you to visit our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We are committed to handling your personal data responsibly. Consequently, we consider it a matter of course to comply with the legal requirements of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (FADP), the Telecommunications Act (TCA) and other provisions of Swiss data protection law. With regard to the processing of personal data of data subjects located in the EU, we will also comply with the provisions of the EU General Data Protection Regulation (GDPR). With the help of this data protection declaration, we will inform you comprehensively about the processing of your personal data by F24 Schweiz AG and about the rights to which you are entitled. This privacy statement covers both the collection of personal data in the online and offline area, including personal data that we have received from various sources, e.g. from customers, suppliers, business partners, websites, blog, third-party social networks and events.

In this context, personal data is that information which makes it possible to identify a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address but also your IP address.

Anonymous data exists if no personal reference to the user can be established.

Local contact:

F24 Switzerland AG
Samstagernstrasse 45
8832 Wollerau
Switzerland

+ 41 44 787 30 70 | [email protected]

Responsible party and data protection officer as well as EU representative:

F24 AG
Ridlerstrasse 57
80339 Munich
Germany

+49 89 232 363 80 | [email protected]

Download process message eCall

Download document as PDF

Your rights as a data subject

First of all, we would like to inform you at this point about your rights as a data subject. These rights are standardized in Art. 15 – 22 DSGVO. This includes:

The right to information (Art. 15 DSGVO)
The right to rectification (Art. 16 DSGVO)
The right to erasure (Art. 17 DSGVO)
The right to restriction of data processing (Art. 18 DSGVO)
The right to data portability (Art. 20 DSGVO)
The right to object to data processing (Art. 21 DSGVO).

To exercise these rights, please contact: [email protected]. The same applies if you have questions about data processing in our company or wish to revoke a granted consent. If you believe that the processing of your personal data violates data protection law or that your data protection rights have otherwise been violated in some way, you can also complain to the supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

Rights of objection

Please note the following in connection with rights of objection: If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling, insofar as it is related to direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made form-free to: [email protected] or [email protected].

In the event that we process your personal data for the protection of legitimate interests, you may object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When you visit our website, we collect and process the following data:

Name of the Internet service provider
Information about the website from which you are visiting us
Web browser and operating system used
The IP address assigned by your Internet service provider
Files requested, amount of data transferred, downloads / file export
Information about the web pages you call up from us incl. date and time

In the context of a contact request for eCall as well as for FACT24, we collect and process the following data:

Telephone number
E-mail address* (mandatory field)
Company/organization
Contact message*

In the context of a test account opening / registration for eCall, we collect and process the following data:

E-mail address* (mandatory field)
Cell phone number* (mandatory field)
Name, first name
Company/Organization
Street/house number/zip code/city

In the context of a support request for eCall, we collect and process the following data:

Username
Account type
Account number
Name and first name
Subject of the message
Company/Organization
Message text

In the context of a download of the eCall price list, we collect and process the following data:

E-mail address* (mandatory field)
Phone number (mandatory field)

In the context of a webinar registration form, we collect and process the following data:

Last name, first name
E-mail address* (mandatory field)

In the context of a registration for the F24 News (newsletter) we collect and process the following data:

E-mail address* (mandatory field)

In the context of the Embedded Signup to Onboard Clients to the WhatsApp Business API, we collect and process the following data:

User’s phone number
WhatsApp business account (WABA)

In the context of applications, we collect and process the following data:

Personal details
the documents belonging to the application (such as letter of motivation, curriculum vitae and certificates)
Postal and contact addresses

In addition, applicants may voluntarily provide us with additional information.

Purposes and legal basis of data processing

When processing your personal data, the provisions of the DSGVO and all other applicable data protection regulations, in particular also the DSG and the VDSG, are complied with, as far as applicable. Legal bases for data processing according to European data protection law result in particular from Art. 6 DSGVO. We process your data to initiate business, to fulfill contractual and legal obligations, to carry out the contractual relationship, for job applications, for contact, demo or support requests, as part of a blog, for webinar registrations, when subscribing to our newsletter, for downloads of white papers or user reports, to offer products and services, and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising. Your consent to data processing may also constitute a permission requirement under data protection law. In this case, we will inform you about the purpose of the data processing and about your right of revocation before you give your consent.

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent. Processing of special categories of personal data pursuant to Art. 9 DSGVO or Art. 3 lit. c DSG will only be carried out if this is necessary due to legal regulations and there is no reason to assume that your interest worthy of protection in the exclusion of the processing outweighs this.

Disclosure to third parties

We will only pass on your data to third parties within the framework of the legal provisions or with the corresponding consent. In this respect, a transfer based on your consent may occur in particular in connection with the use of cookies requiring consent to the respective providers. Otherwise, data will not be passed on to third parties unless we are obliged or authorized to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies). In any case, we conclude the necessary data protection agreements or use suitable other instruments as a basis.

Recipients of data / categories of recipients

Within our company, we ensure that only those persons receive your personal data who need them to fulfill contractual and legal obligations.

In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary contractual framework under data protection law has been concluded with all service providers.

We disclose your personal data to the following categories of recipients:

Shareholders of the Group (see imprint)
Service operators
Logistics partners
Marketing services
Authorities

Third country transfer / third country transfer intention

We may transfer your data to a service provider or group company outside the EU; in doing so, we will of course comply with the legal regulations on the transfer of personal data to third parties. A transfer of data to third countries (outside the European Union or the European Economic Area) will only take place if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so. If the level of data protection in a country in which the data is processed does not correspond to the applicable data protection regulations, we will contractually ensure that the protection of your personal data corresponds to that in Switzerland of the EU at all times.

We may transfer your data to a service provider or group companies outside the European Economic Area: Switzerland, USA. In this case, data protection compliance is ensured by an adequacy decision of the European Commission (Switzerland) or the conclusion of EU standard contractual clauses on data protection according to the model of the European Commission.

Storage period of data

We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further storage obligations, the data is routinely deleted once the purpose has been achieved. In addition, we may retain data if you have given us permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods.

In addition, we will delete your personal data if you request us to do so at [email protected] and we have no legal or contractual obligation to retain or otherwise secure such data.

Secure transfer of your data

In order to protect the data stored by us in the best possible way against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards. The exchange of data to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. In addition, we offer our users content encryption as part of the contact forms and for applications. The decryption of this data is only possible for us. In addition, there is the option of using alternative communication channels (e.g., the postal service).

Categories, sources and origin of data

Which data we process is determined by the respective context: this depends on whether, for example, you place an order online or enter an inquiry in our contact form, whether you send us an application or submit a complaint. Please note that we may also provide information for special processing situations separately at an appropriate place.

Automated individual case decisions

We do not use purely automated processing to make a decision.

Links to other providers

Our website also contains – clearly recognizable – links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their content. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages. The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, such links will be removed immediately.

Our Internet pages use so-called cookies in several places. They serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive). Only pseudonymous data is stored in the cookies we use. When the cookie is activated, an identification number is assigned to them. An assignment of your personal data to this identification number is not made. Your name, your IP address or similar data that would allow a direct assignment of the cookie to you are not stored in the cookie. By means of these cookies, we are able to analyze how users use our websites. This allows us to design the website content according to visitor needs. In addition, the cookies give us the opportunity to measure the effectiveness of a particular advertisement and to have it placed, for example, depending on the thematic user interests. This is also our legitimate interest in data processing (Art. 6 para. 1 lit. f DSGVO / Art. 6 para. 1 lit. a DSGVO in case of consent) Most of the cookies we use are so-called “session cookies”. These are automatically deleted after your visit. Permanent cookies are automatically deleted from your computer when their validity period (usually six months) is reached or you delete them yourself before the validity period expires. Most web browsers accept cookies automatically. However, you can usually change the settings of your browser if you would rather not send the information. You can then still use the offers of our website without restrictions (exception: configurators). We use cookies to make our website more user-friendly, effective and secure. In addition, we use cookies to enable us to analyze how users use our websites. This allows us to design the content according to visitor needs. In addition, the cookies enable us to measure the effectiveness of a particular advertisement and to have it placed, for example, depending on the thematic interests of the user. Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies

We use the following types of cookies:

Temporary cookies

We use temporary cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the web session. This allows your computer to be recognized when you return to the website.

https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Persistent/permanent cookies

In addition, we use persistent cookies, which are used on your computer beyond the respective usage process. During a further visit, it is automatically recognized that you have already been with us and which inputs and settings you prefer. These cookies are stored on your hard drive and delete themselves after the specified time. Thanks to these files, it is possible, for example, for you to receive information on the site that is specifically tailored to your interests.

Non-personal cookies

Non-personal cookies do not transmit any personal data to us. For example, statistics cookies. They help us understand how visitors interact with the site by collecting and reporting information anonymously.

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.

We use performance cookies to collect information about how you use our Services. This helps us to improve our services. For example, we may use these cookies to determine whether you have accessed a particular page.

Third-party cookies

Furthermore, we make use of functions of some web analytics services that help us to make our internet services and website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (so-called third-party cookies). For more information on the use of third-party cookies, please refer to the section “Analysis tools”

By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers.

Via the following links you can find out about this possibility, for the most commonly used browsers:

Digital infrastructure

We use services from specialized third parties to make use of required digital infrastructure in connection with our activities and operations. These include, for example, hosting and storage services from selected providers.

In particular, we use:

Raidboxes: WordPress hosting; provider: Raidboxes GmbH (Germany); data protection information: privacy policy, sample privacy policy for users of Raidboxes (“Template for your privacy policy”).

WordPress.com: Blog hosting and website builder; Provider: Automattic Inc (USA) / Aut O’Mattic A8C Ireland Ltd (Ireland) for users in Europe, among other countries; privacy information: privacy policy and cookie policy.

Server log files

We may record the following information for each access to our website, provided that this information is transmitted by your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed including amount of data transferred, website last accessed in the same browser window (referer or referrer). We store such information, which may also constitute personal data, in server log files. The information is necessary to provide our website permanently, user-friendly and reliably and to ensure data security and thus in particular the protection of personal data – also by third parties or with the help of third parties.

Tracking pixel

We may use tracking pixels on our website. Tracking pixels are also referred to as web beacons. Tracking pixels – including those from third parties whose services we use – are small, usually invisible images that are automatically retrieved when you visit our website. Counting pixels can be used to collect the same information as server log files.

User profiles / web tracking procedures

We would like to tailor the content of our web pages as precisely as possible to your interests and in this way improve our offer for you. To identify usage preferences and particularly popular areas of the websites, we use the following analysis tools:

Google Ads

Based on our legitimate interest, we use the online advertising program “Google Ads”, which belongs to the Google marketing services.

Google Ads sets a cookie on your computer (“conversion cookie”) if you have accessed our website via a Google ad. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain web pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Google Ads customers’ websites. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. We do not receive any information that personally identifies you.

The information collected by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there. Based on the information collected, interest-relevant categories are assigned to your browser. These categories are used for the placement of interest-related advertising.

With Google’s remarketing function, we reach users who have already visited our website. This allows us to present our advertising to target groups who are already interested in our products or services.

Google Ads conversion tracking

This website uses “Google Ads”, an online advertising technology and, within the framework of Google Ads, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Ads to draw attention to our services with the help of advertising media (so-called Google Ads) on external websites. This allows us to determine, depending on the data of our advertising campaigns, how successful individual web measures are. In this way, we want to show you advertising that may be of interest to you and to make our website more informative and user-friendly for you.

The cookie for conversion tracking is set as soon as you click on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. If you visit certain pages of this website while the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to our site. Each Google Ads customer, i.e. each company that uses Google Ads on its websites, receives a different cookie. We cannot track your user behavior outside of our site because of this. The information we collect with this cookie is used to create conversion statistics about the use of our website. We learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information from which we could identify you personally. If you do not wish to participate in the tracking, you can block this use by disabling the Google Ads conversion tracking cookie via your internet browser under user settings. We use Google Ads including Google Ads conversion tracking on the basis of your consent, Art. 6 para. 1 lit. f DSGVO.

Google LLC, based in the USA, provides so-called EU standard contractual clauses on data protection which ensure that the processing of personal data takes place at an adequate level of data protection. You can obtain further information about Google’s privacy policy directly from Google: https://policies.google.com/privacy?gl=de&hl=en-GB. You can permanently disable cookies by selecting the appropriate settings on your browser software or by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996. Please note that certain features of this website may not work or may only work to a limited extent if you have disabled the use of cookies.

Google Ads enhanced conversions

If you provide your consent, we will use the Google Ads Enhanced Conversions (“Enhanced Conversions”) of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Using enhanced conversions, we can better measure the reach of our advertising and tailor our campaigns more individually to the interests of our users.

If you click on an ad that we place outside of our own website, are redirected to our site and, for example, fill a form there, we can not only process your data in accordance with the provisions of this privacy statement for the respective form, but also send this data to Google. This may be your email address, your name, your address or your telephone number, which we then transfer in a so-called hashed format and adding an identifier (“ID”). This means, we do not transfer any plain data, but rather your data is transferred pseudonymously using a secure process. The hashing process is coordinated with Google, which means that Google may assign the data contained to the ad that brought you to our attention. In this way, we may collect information from an overall view of our users about which of our ads are the most successful.

According to the provider, at Google your data may be combined with data about you that Google is already processing and so provide Google with additional information about your preferences. This processing takes place in accordance with the conditions agreed between you and Google when you created your Google account and we have no influence on this processing. However, according to Google, you can prevent such merging of data by logging out of your Google account before accepting enhanced conversions on our site. You may also revoke your consent anytime by opting out from the Google cookie for enhanced conversions in our cookie management or via https://adssettings.google.com/anonymous. Please consider that you may have to make this selection separately for each device you used to access our site. When using Google Ads Enanced Conversions, your data may be transferred to Google servers in the USA. Because Google has certified itself according to the Transatlantic Data Privacy Framework and because we have concluded appropriate data protection agreements with Google, it can be assumed that the level of data protection that you can expect for the EU also applies here.

Google Tag Manager

Furthermore, we use “Google Tag Manager” to integrate and manage Google analytics and marketing services on our website. Google Tag Manager, from Google, is a solution that allows us to manage website tags, through an interface. The Tag Manager tool itself, which implements the tags, is a cookie-less domain and does not collect any personal data. However, the tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager itself, on the other hand, does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. For more information, see the usage guidelines for this service.

For more information about Google’s use of data for marketing purposes, please see the overview page: https://policies.google.com/technologies/ads?hl=en-GB. Google’s privacy policy is available at https://policies.google.com/privacy?hl=en-GB.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/anonymous

Google reCAPTCHA – description and purpose of data processing

On parts of this website, especially on our registration and login pages, the reCAPTCHA function (reCAPTCHA v3) of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) is used. If you are a resident of the European Economic Area (EEA) or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data – collected in these procedures. You can recognize on which pages the service is active by the reCAPTCHA logo on the right-hand side of the screen.

This function is used in particular to distinguish whether a particular electronic entry is made by a natural person or improperly by machine and automated processing. For this purpose, a JavaScript code in the background analyzes your interaction with the website (e.g. mouse movements, operating system, web browser used, IP address browser settings). Based on this analysis, the reCAPTCHA service will identify you as a human user or prevent improper automated execution. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. A third country transmission takes place. The data is transferred to Google servers in the USA. Further information on the processing of data collected by Google on the basis of this tool can be viewed at https://support.google.com/analytics/answer/6004245. The legal basis for the processing is Art. 6 I 1 f DSGVO, our legitimate interest in the security of our website and in preventing misuse, manipulation and spam. Within the scope of the reCAPTCHA service, we do not store any of your data. For more information about Google reCAPTCHA and Google’s privacy policy, please refer to the following links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/about/

Pardot Marketing Automation System (“Pardot MAS”)

We use the Pardot Marketing Automation System (“Pardot MAS”), a special software for recording and evaluating the use of a website by website visitors and for sending newsletters.

When you visit this website, Pardot MAS records your click path and uses it to create an individual usage profile using a pseudonym. For this purpose, cookies are used that allow your browser to be recognized.

In order for us to be able to use Pardot in relation to forms (e.g. to register for our newsletters) and “framed content” (definable independent content, e.g. a text article) on our website, it is necessary for Pardot to set a separate Pardot cookie for each form/ framed content that you call up. We have summarized the Pardot cookies in our consent management under the heading Pardot. We note in this regard that if you accept all cookies or accept Pardot, you accept Pardot, including its cookies for forms or framed content. If you reject all cookies or reject Pardot, no Pardot cookie will be active, including for forms or framed content.

However, you can deactivate the creation of pseudonymized usage profiles at any time by configuring your Internet browser so that cookies from the domain “pardot.com” are not accepted. However, this may lead to certain restrictions in the functions and user-friendliness of our offer.

In order to provide you with the most suitable offer or interesting product information, and provided that you actively consent to this, it is possible to combine your personal data with the data of a pseudonymized user profile via the cookies set, if you provide personal data – for example by ordering our newsletter or filling out a form. You can object to this use of your personal data, such as name and address information, at any time in writing or by e-mail to [email protected] or [email protected]. You can revoke your consent at any time with effect for the future.

Newsletters sent with Pardot MAS contain so-called web beacons. These are tiny graphics that allow us to analyze user behavior, such as opening and reading emails and clicking on links. This allows us to make our offered content more relevant and interesting for you.

Services of Microsoft

Providers: Microsoft Corporation (USA) / Microsoft Ireland Operations Limited (Ireland) for users in the EU, UK and Switzerland; General information on data protection: “Data Protection at Microsoft”, “Data Protection and Privacy (Trust Center)”, Privacy Policy, Privacy Dashboard (data and privacy settings).

LinkedIn Insight Tag

Our website uses the “LinkedIn Insight Tag” tool of LinkedIn Ireland Unlimited Company. This use is based on your consent, Art. 6 I 1 a DSGVO. This tool places a cookie in your web browser, which is used to be able to collect the following data: IP address, device and browser properties and page events (e.g. page views). The data is encrypted and anonymized within seven days. The anonymized data is deleted within 90 days. LinkedIn does not share any personal data with F24, but provides us with anonymized reports on the perception of our advertising content and an assessment of the target group reached/reachable. In addition, we can operate so-called retargeting via the Insight Tag. This means that we receive information on whether our advertising is effective and meets the interest of users. This allows us to display targeted advertising outside of our own website without personally identifying you as a website visitor. Information on data protection at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?.

If you maintain an account with LinkedIn, you can define the use of their personal data for advertising purposes in their account settings. To deactivate the Insight tag on our website (“opt-out”), click on https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Fonts

We use third-party services to embed selected fonts as well as icons, logos and symbols on our website. In particular, we use:

Font Awesome: Icons and Logos; Provider: Fonticons Inc (USA); Privacy information: privacy policy.

Crisp

To optimize the visitor experience on our websites, we use the Crisp service. This is provided by Crisp IM SARL, 149 Rue Pierre Semard, 29200 Brest, France (registration number: 83308580600010). We send and receive messages through it via email and live chat to allow our visitors to quickly and easily receive information about our products and services. In order to make this possible, it is necessary to synchronize, via interface, contact details of users on our websites with Crisp IM SARL.

Crisp IM SARL is DSGVO compliant, which can be verified here on the website of Crisp IM SARL:

Cloudflare Content Delivery Network

In order to provide you with our services conveniently and at any time worldwide, we use the Cloudflare Content Delivery Network (Cloudflare). Cloudflare is a product of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany, a subsidiary of Cloudflare Inc, 101 Townsend St, San Francisco, CA 94107, United States. A content delivery network consists of a large number of servers placed around the world, capable of delivering data securely and at high speed. This allows you to access our content worldwide without delays. As a rule, this requires the short-term storage of the transmitted data – including user data – on servers of the content delivery network, in this case Cloudflare. However, your data is processed by means of the Pardot solution (which is also described in our privacy policy – the statements there regarding tracking mechanisms of Pardot, however, do not apply in connection with Cloudflare). Here, we rely on the so-called i-framing technology. This means that your personal data in connection with the use of Cloudflare is hidden from inspection by Cloudflare and third parties. Only we can process your data in plain text, not even Cloudflare or Pardot (unless you have consented to the use of Pardot tracking), because i-framing allows access to the content subject to it only from within our domain. The legal basis of the processing is our interest in a technically secure operation and ensuring a user-friendly high delivery speed of our content. You can find out more about how Cloudflare processes data – here only anonymous information without personal reference to you – at https://www.cloudflare.com/privacypolicy/.

Social plugins of social networks

We use social plugins on our website. Plugins are small programs or program packages that allow you to customize and extend software according to your needs.

The basic versions of applications such as web browsers, programs for processing graphical content or programs for playing media are helpful that the functions used by the user can be executed.

On our website, we have included links to our social media profiles on the following social networks:

Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA / Since August 2023 X
Youtube, a service operated by Google Inc., 1600 Amphitheatre, Parkway, Mountain View, CA 94043, USA
Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA
LinkedIn Inc, 2029 Stierlin Ct, Mountain View, CA 94043, USA
Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany

When you visit our website and use one of the social plugins listed on the website, a direct connection is established between your browser and the server of the social network in question. This provides the network with the information that you have visited our website with your IP address and called up the link. If you call up a link to a network while you are logged into your account at the network in question, the content of our site can be linked to your profile at the network, which means that the network can assign your visit to our website directly to your user account and we thus receive your personal data such as name, e-mail, location, friends list and profile picture. This data enables us to offer certain functions on the pages. If you want to prevent this, you should log out before you click on the corresponding links. In any case, an allocation takes place when you log in to the relevant network after activating the link.

If you are logged into a social network via your user account while visiting our website, the respective provider can also assign the visit to the page to your user account. If you interact with a plugin, the corresponding information is also transmitted directly to a server of the respective provider in the USA and stored there. The information is also published via your user account in the respective social network and displayed there to your contacts.

Even if you are not logged in to the providers of the plugins while visiting our website, the data collected by the plugins may be assigned to your respective user account. A plugin sets a cookie with an identifier every time you call up the website. Since your browser sends this cookie with every connection to a server of the respective provider without being asked, the social networks could in principle use it to create a profile of which website the user belonging to the identifier has called up. If necessary, it would then be possible to assign this identifier to a person again later – for example, when logging in to the provider later.

In addition, you can select the function “Block third-party cookies” in your browser settings, in which case your browser will not send any cookies to the respective server of the social network. However, with this setting, in addition to the plugins, other cross-page functions of other providers may also no longer function.

For more information on the purpose and scope of data collection and the further processing and use of your personal data, please refer to the data protection notices of the respective providers. There you will also find further information about your rights in this regard and setting options for protecting your privacy as well as your right to object to the creation of user profiles:

Social Media Presence

We maintain social media profiles on Facebook, Twitter, LinkedIn and Xing.

The data you enter on our social media profiles is published by the social media platform and is not used or processed by us for any other purpose at any time. However, we reserve the right to delete content if this should be necessary. At most, we communicate with you via the social media platform. This is based on your and our legitimate interest in exchanging information with each other in this way.

Be aware that the operator of the social media platform uses web tracking methods. The web tracking, over which we have no control, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider:

Contact form / contacting by e-mail

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests. Here, the principle of data economy and data minimization is observed, in that you only have to provide the data that we absolutely need to contact you. These are your e-mail address and the message field itself. In addition, your IP address is processed for technical necessity as well as for legal protection. All other data are voluntary fields and can be provided optionally (e.g. to answer your questions more individually). If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request. If you do not use the forms offered for contacting us, no further data collection will take place.

The basis for processing your personal data is our legitimate interest in processing your request (Art. 6 para. 1 lit. f, DSGVO). If the contact request serves the fulfillment of a contract to which you are a party or the implementation of pre-contractual measures, this is an additional basis for the processing of your personal data (Art. 6 para. 1 lit. b DSGVO).

Newsletter / F24 News

You can subscribe to a free newsletter on our website (F24 News). The e-mail address you provide when registering for the newsletter and your name will be used to send the personalized newsletter. The principle of data economy and data minimization is observed here, as only the e-mail address (or name in the case of personalized newsletters) is marked as a mandatory field. The mandatory data is required in order to send you the newsletter. The voluntary provision of further data enables us to provide you with even more targeted information. For technical necessity as well as for legal protection, your IP address is also processed when you order the newsletter.

The basis for the processing of your personal data after registration for our newsletter is the existence of your consent (Art. 6 para. 1 lit. a DSGVO). For the processing of your personal data, we therefore obtain your consent during the registration process and refer to this privacy policy.

For sending newsletters by e-mail, we use the so-called double opt-in procedure. This means that you will only receive the newsletters by e-mail if you have previously expressly confirmed that we should activate the newsletter service. This is done by sending you a notification e-mail and asking you to confirm that you would like to receive our newsletter at this e-mail address by clicking on a link contained in this e-mail. You can, of course, unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent.

Note from our provider Newsletter Sendinblue GmbH, Köpenicker Strasse 126, 10179 Berlin / since 2023 Brevo – If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the course of this, the potential recipient allows himself to be included in a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation is received, the address will be actively included in the distribution list.

We use this data exclusively for sending the requested information and offers.

Sendinblue GmbH is used as the newsletter software. Your data will be transmitted to Brevo. Brevo is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Further information can be found here: https://www.brevo.com/information-for-email-recipients/ and in the Brevo Privacy Policy.

You can revoke your consent to the storage of data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

The data protection measures are always subject to technical updates, for this reason we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

Demo request, support request, case study & white paper download, webinar form

On our website we offer you the possibility to send us a demo request or a support request, to download our reports or whitepapers or to send you webinar recordings. If you do not provide us with the required mandatory information, we will unfortunately not be able to perform the respective action. In this way, our alternative communication channels are available to you. If you only provide us with the mandatory information, you will not suffer any legal disadvantages.

The basis for processing your personal data is our legitimate interest in processing your request (Art. 6 para. 1 lit. f DSGVO).

The data entered to carry out the respective action will be processed exclusively for the purpose of carrying out the action initiated by you in each case. In doing so, we take into account the principle of data minimization. For technical reasons as well as for legal protection, your IP address is also always processed during the respective actions.

Advertising purposes for existing customers

F24 Schweiz AG and F24 are interested in maintaining the customer relationship with you and sending you information and offers about our products / services (product-related promotions, product updates, invitations to webinars and events). Therefore, we process your data to send you relevant information and offers via email. The basis for this is therefore our legitimate interest Art. 6 para. 1 lit. f DSGVO). If you do not wish this, you can object at any time to the use of your personal data for the purpose of direct marketing; this also applies to profiling, insofar as it is related to direct marketing.

If you object, we will no longer process your data for this purpose. The objection can be made free of charge and without formalities without stating any reasons and should preferably be sent by e-mail to F24 Marketing, [email protected] or by post to F24 AG, Ridlerstrasse 57, 80339 Munich, Germany.

Online applications

If you apply for a position with us, we will process your personal data to review your application. During the application process, in addition to your personal details, education, work experience and skills, postal and contact addresses are processed, as well as the documents belonging to the application, such as a letter of motivation, curriculum vitae and the certificates. In addition, applicants may voluntarily provide us with additional information. This data is stored, evaluated, processed or forwarded internally exclusively in the context of your application. In addition, they may be processed for statistical purposes (e.g. reporting). In this case, no conclusions can be drawn about individual persons.

Processing may also take place by other electronic means. This is particularly the case if you send us the relevant application documents electronically, for example by e-mail. Your application data will be stored separately from other user data and will not be merged with them.

The basis for processing your personal data is our legitimate interest in processing your application (Art. 6 para. 1 lit. f DSGVO).

You can object to this data processing at any time. Please send your objection to the person named as contact person in the job advertisement or to the e-mail address [email protected]. In this case, we will not examine your application any further and will return or delete the documents. If we conclude an employment contract with you, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

If the application process ends without employment, your personal data will be stored for another 6 months for documentation purposes and then deleted, unless you have given us your consent to use your information for further application processes with us and to contact you again in connection with this. You have the option to subsequently revoke this consent at any time. You can send your revocation to the e-mail address [email protected] or to the e-mail address specified in the job advertisement.

Tracking with fusedeck

On this website, the tracking solution fusedeck of Capture Media AG (hereinafter “Capture Media”) is integrated. Capture Media is a Swiss company based in Zurich that measures the use of this website on behalf of engagements and events. The tracking is anonymous, so that no reference to specific or identifiable persons can be made. Further information on data protection as well as on the rights of data subjects in connection with fusedeck including the “opt-out” option (possibility to object) can be found in the privacy policy and objection policy: https://privacy.fusedeck.net/en/Day5nhU62H.

Use of the website by minors

The website is aimed at an adult audience. Minors, especially children under the age of 16, are prohibited from submitting personal data to us or registering for a service without the consent of their parents or legal guardians. If we determine that such data has been transmitted to us, it will be deleted. The child’s parents (or legal guardian) may contact us and request deletion or deregistration. To do so, we require a copy of an official document that identifies you as the parent or legal guardian.

Supplementary note on the data security of our website, our data processing infrastructure and our 4 products: Security Principles, which are not limited to those relating to the processing of personal data via our website:

Through our website, you also have the option of obtaining our FACT24 and eCall product. In this respect, and in addition to our respective product information, we would like to draw your attention to our security principles, which we apply both to the operation of our website and to our data processing infrastructure in general, and which also apply in relation to our products: The protection of your data is very important to us. In order to protect the security and confidentiality of your data in the best possible way, we implement appropriate data security measures. In order to protect the data of our employees/customers/suppliers stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we have taken appropriate technical and organizational measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards. We guarantee all necessary precautions to protect your data from misuse and unauthorized access. The systems are secured by constantly updated virus scanners and firewalls. It goes without saying that we comply with data protection regulations both internally and externally, as well as with individual agreements. As an application service provider, the IT/telecom infrastructure and its smooth functioning are the focus of our quality management. This guarantees the availability of our services (99.90%) even in the event of maintenance or malfunctions and meets the high security standards we demand.

Amendment of the data protection declaration

This data protection declaration may be supplemented or amended by the company at any time. All changes and amendments are at the sole discretion of the Company.

Current status is September 2023.