Below we inform you about the processing of your personal data on our website as well as about the rights to which you are entitled in this connection.
This privacy policy applies to the processing of your personal data by the controller named in the section "Date Controller". Both the Swiss Federal Act on Data Protection ("DSG") and Regulation (EU) 2016/679 – General Data Protection Regulation ("GDPR") apply. As a Swiss company, we are generally subject to the DSG. For the processing of personal data of individuals in the European Union (“EU”) / the European Economic Area (“EEA”), the GDPR also applies. To the extent this privacy policy references provisions of the GDPR, the corresponding provisions of the DSG apply for Switzerland, where such provisions exist.
This privacy policy applies to the processing of your personal data by the controller named in the section „Data Controller”. For individual processing operations – for example in the context of processing personal data on behalf of our customers – different responsibilities may apply. Where applicable, we will expressly point out such differing responsibilities at the relevant point.
The controller within the meaning of the DSG as well as the GDPR for the processing of your data (“controller”), unless otherwise stated at the relevant points in this privacy policy, is:
Aderis AG
Seestrasse 139
8802 Kilchberg
Switzerland
(hereinafter also referred to as “Aderis”).
For all questions relating to data protection or to exercise your data subject rights, you may contact the following email address at any time: mail@aderis.com
We have appointed the following as our Data Protection Officer:
Kertos GmbH
Brienner Strasse 41
80333 München
dataprivacy@kertos.io
Purpose of Processing
When you access our website, we automatically collect technical connection data that your browser transmits to our server. This is necessary in order to ensure the technically error-free and secure operation of our website, to detect and defend against attacks, and to detect, analyse and remedy errors.
In this context we process in particular the IP address, the date and time of access, browser and device information, and the pages accessed. These server logs are deleted or anonymised within 30 days.
Legal Basis of Processing
Art. 6(1)(f) GDPR.
Our legitimate interest, or our overriding interest as a justification ground, is to ensure the technically stable and secure operation of our website.
Purpose of Processing
When you contact us or where a business relationship exists with us, we process the personal data arising in this context for the purposes described below.
Purpose of Processing
When you contact us via the contact form or by email, we process the information you provide, in particular name, company, email address, telephone number and the content of your message, in order to handle your request.
Legal Basis of Processing
Art. 6(1)(b) GDPR.
Art. 6(1)(f) GDPR.
Insofar as your request and the associated communication do not serve the performance or initiation of a contract, our legitimate interest, or our overriding interest as a justification ground, is to handle your request.
Purpose of Processing
Insofar as a business relationship exists or is being initiated between you and us, we process the information stored for this purpose in our CRM system in order to maintain this business relationship, to manage contacts and prospects, and to track business initiations.
In this context we typically process your contact and master data (name, company, function/position, business email address, telephone number and postal address), information about the business relationship and its course (communication history, notes on conversations and appointments, status and phase of the initiation, interests and needs), and, where applicable, information about services used or requested by you.
Legal Basis of Processing
Art. 6(1)(f) GDPR.
Our legitimate interest, or our overriding interest as a justification ground, is the efficient management of our customer relationships.
We process your personal data in order to provide you with information about our products, offers and services, and we carry out measures for advertising purposes, for customer retention and for the optimisation of our offers. This takes place, for example, in the form of newsletters and letters. In addition, we carry out market and opinion research measures, for example in the form of surveys. The legal basis for this is our legitimate interest in improving our products and services pursuant to Art. 6(1)(f) GDPR. Where we obtain your separate consent for such measures, your consent pursuant to Art. 6(1)(a) GDPR is the legal basis.
Insofar as we contact you for advertising purposes without a business relationship already existing between us – in particular when sending newsletters or when addressing you for advertising purposes by email –, this takes place exclusively on the basis of your prior express consent pursuant to Art. 6(1)(a) GDPR. The same applies to advertising telephone calls to consumers, which we only carry out with your prior express consent. Advertising calls to businesses are only made on the basis of presumed consent. You can withdraw your consent at any time with effect for the future, for example via the means indicated when the consent was given or by an informal message to us. The lawfulness of the processing carried out until the withdrawal remains unaffected.
If, on the other hand, you have already purchased goods or services from us, we use the email address provided in that context to send you advertising for our own similar products. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. In doing so, we rely on the exception applicable to existing customers under Art. 13(2) of Directive 2002/58/EC (ePrivacy Directive) in conjunction with the respective national implementing laws. This use only takes place as long as you have not objected to it. We inform you of your right to object both at the time your data is collected and with each further advertising communication. For the objection, you incur no costs other than the transmission costs at the basic rates.
We use cookies and similar technologies (hereinafter „cookies") on our website. Cookies are small text files that are stored by your browser on your terminal device. Cookies do not run programs and do not install malware. Comparable technologies include web storage (local/session storage), fingerprinting, tags and pixels. If cookies or similar technologies are blocked, the functionality of our website may be limited or certain website functions may not be fully available. When you first access our website, you are informed in detail about the use of such technologies.
The legal bases referenced in the following sections relate to the processing of personal data of individuals in the EU/EEA. For visitors from Switzerland, access to your terminal equipment is governed by the Telecommunications Act (“FMG”). Technically necessary cookies are governed by Art. 45c lit. a FMG (provision of the service you have requested), and non-necessary/optional cookies – such as marketing, performance and analytics cookies – by Art. 45c lit. b FMG. We set optional cookies uniformly for all visitors only after you have given your consent.
Purpose of Processing
The following cookies are necessary for the technically error-free provision and the secure operation of our website. An overview of our necessary cookies, their purpose and retention period can be found in our cookie banner. You can access it at any time via the footer of the website.
Legal Basis of Processing
Art. 6(1)(f) GDPR.
Our legitimate interest, or our overriding interest as a justification ground, is the technical provision and secure operation of our website.
Purpose of Processing
Optional cookies are not necessary for the operation of the website. These are, for example, marketing, performance and analytics cookies that help us understand how visitors use the website. In particular, they provide us with information about usage behaviour and thereby support us both in optimising the user experience and in measuring the success of our marketing measures.
When you first access our website, you are informed in detail about the use of such technologies and have the option to decline the use of services that are not strictly necessary for the use of the website. An overview of our optional cookies, their purpose and retention period can be found in our cookie banner. You can access it at any time via the footer of the website and adjust your preferences there with effect for the future.
Legal Basis of Processing
Art. 6(1)(a) GDPR.
In the aforementioned data processing operations, we do not use automated decision-making within the meaning of Art. 22 GDPR.
In the context of the processing of personal data described in this privacy policy, we may use artificial intelligence. This may take place in particular for the following purposes:
The use of artificial intelligence takes place in accordance with the legal requirements of the GDPR and of Regulation (EU) 2024/1689 – Regulation on Artificial Intelligence (″AI Act″) and serves exclusively supporting, preparatory or controlling purposes. Automated decision-making or profiling with legal effect or similarly significant adverse effects within the meaning of Art. 22 GDPR does not take place. At no point is personal data used to train AI‑models.
A transfer of the personal data collected by us generally only takes place where you have given your express consent pursuant to Art. 6(1)(a) GDPR, where the disclosure is necessary pursuant to Art. 6(1)(f) GDPR to safeguard legitimate interests or for the establishment, exercise or defence of legal claims and there is no reason to assume that your interests worthy of protection prevail, where we are legally obliged to do so (Art. 6(1)(c) GDPR), or where the disclosure is legally permissible and necessary for the performance of a contract or for the performance of pre-contractual measures (Art. 6(1)(b) GDPR).
The recipients to which we transfer personal data, and the respective purpose of their use, are listed below:
In addition, we may, where necessary, transfer your data to further recipients such as authorities, public offices and similar recipients. This concerns, for example, tax authorities, public prosecutors and courts, as well as auditors.
Insofar as the described data transfers constitute processing on behalf of a controller within the meaning of Art. 28 GDPR, we ensure that such processing takes place exclusively on the basis of data processing agreements that meet the legal requirements of the GDPR. These oblige the respective processor in particular to process personal data exclusively in accordance with our instructions, to ensure a level of data protection appropriate to the risk, and to comply with the data protection obligations – in particular with regard to supporting the fulfilment of data subject rights.
If, on the other hand, certain data transfers take place within the framework of joint controllership pursuant to Art. 26 GDPR, this is done on the basis of a joint controllership agreement. In particular, the respective roles and responsibilities regarding compliance with data protection requirements are clearly defined therein – for example, which controller is responsible for which obligations in connection with the handling of data subject rights or the fulfilment of information obligations. We will make the essential content of such agreements available to you on request.
Some of the recipients of your personal data named in the previous section are located in so-called third countries, in which the level of data protection is not comparable with that in the EU. Third countries are all countries outside the European Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Area. These are Norway, Iceland and Liechtenstein.
Transfers of data to such countries may take place, for example, where we use service providers located in a third country. Transfers of personal data to third countries take place on the basis of an adequacy decision of the European Commission. If no adequacy decision of the European Commission exists for the respective third country, the transfer takes place on the basis of appropriate safeguards within the meaning of Art. 46(2) GDPR. Copies of these safeguards can be requested from the controller.
From a Swiss perspective, all countries outside Switzerland are considered third countries. What is decisive is whether the Federal Council recognizes the country in question as a country with adequate data protection. The EU/EEA states are recognized. In the absence of such recognition, we base the transfer on appropriate safeguards pursuant to Art. 16 (2) DSG (in particular standard contractual clauses) or on an exception pursuant to Art. 17 DSG.
In addition, some recipients of your personal data based in the USA may be certified under the EU-U.S. / Swiss-U.S. Data Privacy Framework (“DPF”). For such recipients, a limited adequacy decision exists for certain categories of data. To the extent of the recipient’s valid DPF certification, the transfer of the personal data takes place on the basis of this adequacy decision.
We process personal data only for as long as is necessary for the respective processing purpose. As soon as the purpose ceases to apply and no statutory retention obligation or other ground stated below precludes deletion, the data is deleted or anonymised.
The specific retention period is determined by the following criteria. Where several criteria apply, the longest period is decisive in each case. After its expiry, the data is deleted as a matter of routine.
The specific deletion periods for individual processing activities result from our internal deletion and retention concept.
You can exercise the rights listed below. Your requests to exercise data protection rights and our responses to them are retained for documentation purposes for a period of three years after the end of the year in which we answered your request, and in individual cases beyond that for the establishment, exercise or defence of legal claims. The legal basis for this is Art. 6(1)(f) GDPR. Our legitimate interest is to protect ourselves against claims or fines under Art. 82, 83 GDPR and to fulfil our accountability obligation under Art. 5 GDPR.
For individuals in Switzerland, these rights are governed by the DSG. Where the DSG provides for a corresponding right, the relevant provision is mentioned below. Some rights established under the GDPR are structured differently in the DSG or have no direct counterpart there.
You have the right to request information from us about your stored personal data. This information covers the question of whether Aderis processes / stores personal data about you and, among other things, which data is concerned and for which purposes this data is processed. Upon request, Aderis will provide you with a copy of the data.
In addition, you have the right to request the rectification of incorrectly stored data or to have incomplete data completed.
You also have the right to request the erasure of your personal data, provided that the statutory requirements for this are met. We are obliged to erase, among other things, where your personal data is no longer necessary for the purposes for which it was collected or otherwise processed, where you have withdrawn a consent once given, or where the data has been processed unlawfully.
Under the statutory conditions, you have the right to restriction of the processing of your personal data.
You have the right to have the data that you have provided to us on the basis of your consent or on the basis of an existing contractual relationship with you released to you in a machine-readable format or – at your choice – transferred to a third party.
Case-by-case right to object
Insofar as we process your data for the performance of a task carried out in the public interest, or where processing takes place in the exercise of official authority (Art. 6(1)(e) GDPR), or where the processing is based on the legitimate interests of Aderis (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
This also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR. We will then cease the processing, unless we can demonstrate compelling legitimate grounds for the processing which override your interests in ceasing the processing.
Right to object to processing of data for direct advertising purposes
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.
The objection may be made informally and should be directed to:
Aderis AG
Seestrasse 139
8802 Kilchberg
Switzerland
or to the following email address: mail@aderis.com
Insofar as we process your data on the basis of your consent, you have the right to withdraw your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected by the withdrawal. You will be informed of your withdrawal options when the consent is given.
To exercise data subject rights, you may contact the following email address: mail@aderis.com
For data subjects within the scope of the GDPR
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You can exercise this right with a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.
For data subjects in Switzerland
In Switzerland, however, affected individuals can report an incident to the Federal Data Protection and Information Commissioner (EDÖB):
Federal Data Protection and Information Commissioner (EDÖB)
Feldeggweg 1
3005 Bern
Switzerland
General Notice
We reserve the right to change and adapt this privacy policy with effect for the future, for example if our processing activities or the legal requirements change.
