Privacy policy

1. What do we do?

Cleangreen Consulting GmbH (Untere Grabenstrasse 26, 4800 Zofingen) operates the website www.cleangreen.ch (hereinafter referred to as "we" or "us"). On this website you can find out about our organisation, use our online services and get in touch with us.

The protection of your personal data is very important to us. In this privacy policy we inform you transparently and comprehensibly about which data we collect via our website and how we handle it.

For this reason, we summarise the most important points at the beginning using symbols. They are intended to help you gain a quick overview of how we process your data.

2. What do we inform you about?

• Who is responsible for data processing
• Which data is collected
• For what purpose this data is collected
• To whom we pass this data on
• How you can object to data processing
• What rights you have and how you can exercise them

3. Definitions

What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, e-mail address or telephone number as well as the IP address. Data about personal preferences, such as leisure activities or memberships, also counts as personal data.

What are special categories of personal data?

Special categories of personal data (equivalent to the term "sensitive personal data") are:

• Data on religious, ideological, political or trade union views or activities
• Data on health, the intimate sphere, racial or ethnic origin, sex life and sexual orientation
• Data on administrative or criminal proceedings and sanctions as well as data on social assistance measures
• Genetic data and biometric data that uniquely identify a person

Where this is necessary and you disclose such data to us yourself, we may process data belonging to a special category of personal data. In this case, its processing is subject to stricter confidentiality.

What is the processing of personal data?

Processing is any handling of personal data, irrespective of the means and procedures used, in particular the collection, storage, retention, use, modification, disclosure, archiving, deletion or destruction of personal data.

What is the disclosure of personal data?

This is the transmission of personal data or making it accessible, for example by publishing it or disclosing it to third parties.

4. Contact

If you have any questions or concerns about how we protect your data, you can contact the person responsible for data protection:

Cleangreen Consulting GmbH
Dennis Wey
Untere Grabenstrasse 26
4800 Zofingen
mail@cleangreen.ch

5. Data security

We will store your data securely and take all reasonable measures to protect your data against loss, access, misuse or alteration.

Our contractual partners and our employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary as part of commissioned processing for us to forward your enquiries to companies affiliated with us. In these cases too, your data will be treated confidentially.

Within our website we use the SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser.

6. Rights of data subjects

Right of access

You can request information about the data we have stored about you at any time. Please send your request for access together with credible proof of identity to mail@cleangreen.ch.

The information is provided in writing or in another form, where appropriate electronically. If you so request, we can also provide the information orally, provided you prove your identity in another way. If you submit the request electronically, we will provide the information in a common electronic format unless you specify otherwise.

The information is generally provided free of charge. If additional copies are requested, a reasonable fee may be charged.

The right to receive a copy of the processed data must not adversely affect the rights and freedoms of other persons.

In the case of manifestly unfounded or excessive requests, we reserve the right to refuse the information within the legal limits or to charge a reasonable fee.

The processing of your request is subject to the statutory period of 30 days. We may extend this period by a further two months because of the complexity and the high number of requests, where necessary. You will be informed of the extension within one month of submitting the request. At the same time, you will be told the reasons for the extension.

Deletion and rectification

You can at any time request the deletion, rectification or completion of your data, provided that no statutory retention obligations or statutory grounds for permission prevent this.

Please note that exercising your rights may conflict with contractual agreements and may have corresponding effects on the performance of the contract (for example early termination of the contract or cost consequences).

Restriction of processing

You also have the right to request a restriction of processing if you contest the accuracy of the data, the processing is unlawful, the data is no longer required or you have objected to the processing.

If the processing of the data is restricted, it may only be stored. Any further processing may only take place with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another person or for reasons of important public interest. You will be notified if the restriction is lifted.

Right to data release and data portability

You have the right to receive your data in a common file format or (where technically feasible) to have it transmitted to third parties if we process your data automatically and if:

• you have given your consent to the processing of this data, or
• you have disclosed data in connection with the conclusion or performance of a contract.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing, including profiling, that is based on our legitimate interests. This right also applies to processing for the purposes of direct marketing.

Legal remedies

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner.

7. Data processing in general

What data do we process about you and from whom do we receive this data?

We primarily process personal data that you transmit to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:

• Master data (name, address, date of birth, etc.)
• Contact data (mobile number, e-mail address, etc.)
• Financial data (for example account details)
• Online identifiers (for example cookie identifiers, IP addresses)

This data may come from the following sources:

• Information from publicly accessible sources (for example media, internet)
• Information from public registers (for example commercial register, debt collection register, land register)
• Information in connection with official or court proceedings
• Information concerning your professional functions and activities (for example professional networks)
• Information about you in correspondence and meetings with third parties
• Credit reports (where we conduct personal business with you)
• Information about you provided to us by people around you so that we can conclude or perform contracts with you
• Data in connection with the use of the website

Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.

If, exceptionally, we are unable to comply with these principles, the data processing may nevertheless be lawful because there is a justification. The following in particular may serve as justification:

• your consent
• the performance of a contract or pre-contractual measures
• compliance with legal requirements
• our legitimate interests, provided your interests do not prevail

You may be obliged to disclose certain personal data to us so that we can enter into business relationships with each other. Without such data, we are normally unable to perform a contract. The website can normally also not be used if certain information required to secure data traffic, such as your IP address, is not disclosed.

How can you withdraw consent you have given?

If you have given us your consent to process your personal data for specific purposes, we process your data within the scope of this consent, unless we have another justification or another legal basis applies.

You can withdraw your consent at any time with effect for the future by sending an e-mail to the address given in the legal notice. Data processing that has already taken place is not affected by the withdrawal and remains valid.

In which cases do we pass your data on to third parties?

a. Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). Categories of recipients include in particular:

• Accounting, fiduciary and auditing companies
• Consulting companies (legal advice, tax, etc.)
• IT service providers (web hosting, support, cloud services, website design, etc.)
• Payment service providers (only with your prior consent)
• Providers of tracking, conversion and advertising services

We ensure that data is only passed on with your express consent unless it is commissioned data processing. We also ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially. We may also be obliged to disclose your personal data to authorities.

b. Sharing with partner companies and cooperation partners

We sometimes work with various companies and partner organisations that publish their offers on our website. It is recognisable to you that this is a third-party offer (marked as "advertising").

If you take up such an offer, we transmit your personal data (for example name, function, communication, etc.) to the relevant partner or cooperation company whose offer you wish to use, provided you have expressly consented to this beforehand. These partner and cooperation companies are independently responsible for the personal data they receive. After the data has been transmitted, the data protection provisions of the respective partner company apply.

c. Transfer abroad

As part of commissioned processing, your personal data may be transmitted to companies abroad. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and ensure contractually that the same protection as in Switzerland is guaranteed (for example by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). Should our risk assessment be negative, we take additional technical measures to protect your data. You can access the standard contractual clauses of the EU Commission online.

How long do we keep your data?

We store personal data only for as long as is necessary to fulfil the individual purposes for which the data was collected.

We store contractual data for longer because we are obliged to do so by law. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. Once we no longer need such data from you to provide our services, the data is restricted for further processing and we use it only for accounting and tax purposes.

8. Data processing in detail

Provision of the website and creation of log files

If you merely visit www.cleangreen.ch, that is without registering or otherwise disclosing information, only the data that your browser automatically transmits to our server is collected. This data is technically required for the operation of the website.

What data do we process?

To provide the website and create log files, the following data in particular is processed:

• Name of the internet service provider
• IP address
• Technical information such as browser, operating system or screen resolution
• Date and time of access
• Referrer URL

This data cannot be assigned to a specific person and it is not merged with other data sources.

For what purpose do we process the data?

Log files are processed to guarantee the functionality of the website and to ensure the security of our IT systems.

To whom do we pass the data on?

Any sharing of data by us is governed by our explanations on data sharing.

How can you prevent data processing?

The data is stored only for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. Storing log files is essential for the operation of the website. You therefore have no possibility to object, other than by not visiting our website.

Cookies

Our website uses cookies. Cookies are text files that are stored by the browser on the operating system of your device when you visit our website. Cookies do not harm your computer and do not contain viruses. Some cookies are technically necessary for the website to work. Most of the cookies we use are so-called "session cookies". They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them or they expire.

For what purpose do we process the data?

We use cookies so that, based on the data collected, we can make our website more user-friendly, effective and secure. In particular, we use cookies to store your preferences (for example language and location settings), to deliver website content quickly and attractively (for example through the use of fonts and content delivery networks) and to analyse the use of this website for statistical evaluation and continuous improvement (usually by means of third-party cookies). The specific purposes for which we use the (technically unnecessary) cookies can be found in the following explanations in this privacy policy and in our cookie policy.

To whom do we pass the data on?

Any sharing of data by us is governed by our explanations on data sharing. The following explanations on the individual data processing operations in this privacy policy must also be observed.

How can you prevent data processing?

Cookies are stored on your computer. You can delete them completely or deactivate or restrict their transmission by changing the settings in your browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. You can change your selection on this website at any time via cookie settings.

Instructions for the most common browsers can be found here:

• For Chrome by Google
• For Safari by Apple
• For Edge by Microsoft
• For Firefox by Mozilla

For cookies used for performance and reach measurement or for advertising, a general objection ("opt-out") is possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

Tracking pixels

We may use tracking pixels on our website or in our e-mails. Tracking pixels are also referred to as web beacons. Tracking pixels are small, usually invisible images that are retrieved automatically when you visit our website or open our e-mails.

What data do we process?

Tracking pixels can capture the same information as log files. In addition, movement profiles of the entire session can be collected. In particular, tracking pixels are used by third parties whose services we use. These third-party services are described in detail below in this policy.

For what purpose do we process the data?

Tracking pixels are used by various tracking services to analyse the use of this website, for statistical evaluation and for continuous improvement. Tracking pixels can also be used for e-mail tracking.

To whom do we pass the data on?

Any sharing of data by us is governed by our explanations on data sharing. Please also note the explanations in this privacy policy on the individual tracking services.

How can you prevent data processing?

To prevent data processing by means of tracking pixels, you can install suitable browser extensions such as uBlock Origin and block external images in your e-mail program.

Google Analytics

We use Google Analytics on our website, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, with its parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, together "Google".

What data do we process?

Google Analytics is an analysis service for websites that collects information about the use of the website. In particular, the following information may be collected:

• IP address
• Technical information such as browser, operating system or screen resolution
• Interactions on the website
• Duration of the visit
• Time and date of the website visit
• Referrer URL

The IP address is anonymised by Google Analytics so that it can no longer be linked to a person. When a person visits our website for the first time, Google Analytics may generate an identifier in order to recognise them on a subsequent visit. If you are signed in to your Google account, data processing may also take place across devices.

For what purpose do we process the data?

Your IP address is used to determine your approximate location. From the information obtained, we can measure the relevance of our offers in different regions. We also use the IP address to determine where visitors came to our website from. The technical information is processed so that the website can be displayed satisfactorily on every device. Interactions, duration, time and date are collected so that we can evaluate and optimise our marketing campaigns and offers on the basis of this data. This data also allows us to determine how visitors interact on our website, that is which content is popular with whom. The referrer URL is processed for the purpose of measuring the effectiveness of and analysing various marketing channels.

To whom do we pass the data on?

Any sharing of data by us is governed by our explanations on data sharing. As Google is a transnational company, your data may be transferred by Google all over the world. In particular, it may be transferred to the USA, to Google's headquarters, a country whose legislation does not guarantee adequate data protection.

Google Tag Manager

We use Google Tag Manager on our website, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, with its parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, together "Google".

Google Tag Manager is a service for centrally managing various tracking tags (for example Facebook Pixel, Google Analytics, Hotjar, etc.). Google Tag Manager itself does not collect any data. The tags that collect data and that we manage using Google Tag Manager are listed in this privacy policy.

PrivacyBee

We use PrivacyBee on our website, a service provided by PrivacyBee AG, Laupenstrasse 1, 3008 Bern, Switzerland. PrivacyBee is used to identify all data protection relevant services and to generate an individual privacy policy for the website from them.

What data do we process?

PrivacyBee is a service for generating privacy policies, which are then embedded in our website via JavaScript. The following data is processed to provide this service:

• IP address
• Browser type and version
• Operating system
• Date and time of access to our privacy policy

For what purpose do we process the data?

Collecting this data enables us to display the privacy policy correctly on your device configuration and to ensure that the content is correct and up to date.

To whom do we pass the data on?

Any sharing of data by us is governed by our explanations on data sharing. The data collected through the use of PrivacyBee remains with PrivacyBee.

How can you prevent the processing of your data?

To prevent PrivacyBee from processing your data, you can deactivate JavaScript in your browser. Please note, however, that if JavaScript is deactivated, not all functions of our website may be fully usable. We do not offer a specific opt-out option for the PrivacyBee service itself, as the service is essential for providing our privacy policy.

9. Does our privacy policy always stay the same?

We may change this privacy policy at any time. Changes are published on www.cleangreen.ch. You will not be informed separately.