Privacy Policy

Content of this Privacy Policy

In this privacy policy, we inform you about how we collect and process personal data when you visit our website at www.carpfield.com and/or any of our affiliated websites ("Website") and/or if you contact us through social media platforms, communicate with us through other electronic channels or if you use any of our services in any other way.

Personal data is all information that refers to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, retrieval, deletion, recording, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law which as a general rule is intended to offer an equivalent protection regime as the European General Data Protection Regulation (EU-GDPR). But to avoid confusion, our Data Protection measures have all been developed and designed in accordance with the relevant Swiss Data Protection Laws, Ordinances, Rules & Regulations.

We do not intend to process any data in such a way or at a location where the EU-GDPR would become applicable. However, to the extent that there is a claim that EU-GDPR should be applicable, then all of our data processing and data protection rules, measures and systems are to be interpreted that our data processing is also in compliance with the following legal provisions in connection with Art. 6 para. 1 EU-GDPR and the corresponding sub-paragraphs as follows:

• a) Processing of personal data with the consent of the data subject.
• b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
• c) Processing of personal data to discharge a legal obligation to which we are subject under any applicable EU law or under any applicable law of a country in which the EU-GDPR is applicable in whole or in part.
• d) The processing of personal data for the purpose of protecting the vital interests of the data subject or another natural person.
• f) Processing of personal data to protect the legitimate interests of us or third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. In particular, legitimate interests include our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration necessary for the respective purpose or purposes. In the case of longer-term storage obligations due to legal and other obligations to which we are subject, we limit the processing accordingly.

Responsibility for data processing

Carpfield is responsible for the data processing described in this privacy policy.

If you have any questions or if you would like to exercise your rights as a data subject under data protection law, please contact us via info@carpfield.com or write to:

Carpfield AG Data Protection Officer Guilherme Alexandre Brandschenkestrasse 5 8001 Zurich

Personal data processed during communication and service provision

We collect the information you provide to us as follows:

• When you contact us;
• When you register as a user on the Website or the Online Platform;
• When you apply for a job with us;

This includes general personal data, e.g. name and contact details, as well as any information about your position or role in the organisation on whose behalf you are contacting us.

We also process personal data that we receive from third parties. This regularly includes personal data that we receive in correspondence or in meetings with customers or business partners, e.g. your name and details of your work as a team member of the customer or business partner.

Provision and use of our website and online platform

For what purposes we process your personal data and on what basis

We process your personal data primarily in order to inform you about our range of services and to provide, document and bill our services in accordance with our contractual and legal obligations.

In addition, we process your personal data for the following purposes:

• For the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
• Responding to your inquiries and communicating with you;
• Processing your registration
• Responding to job applications;
• To facilitate client administration.
• Provision of the Website and the Online Platform;
• For compliance with a legal obligation to which we are subject;
• To check the identity and suitability of clients for certain products and services;
• Analysis and optimization of the use of the website and the online platform
• Marketing and advertising including without limitation to inform you about new developments at Carpfield and about new services (e.g. via our newsletter; whereby you can inform us at any time that you would like to opt out of receiving such information in the future);
• To establish a basis for future information on the products and services offered by Carpfield and to improve their quality;
• Optimizing our posts on our social media company pages;
• To facilitate technical administration, research and further development in connection with Carpfield electronic services;
• To ensure the security and operation of our IT environment;
• In case of attending Carpfield events you agree on filming and publishing of video materials for promotional purposes
• Fulfillment of legal obligations; and enforcement of legal claims.

We have a legitimate interest in the processing of your personal data in accordance with the purposes mentioned. Some processing is also necessary so that we can fulfil our contractual or our legal (e.g. retention obligations) obligations towards you. On this basis, we process your personal data if and to the extent that the applicable data protection law requires a legal basis or justification for the lawfulness of data processing in general or for certain processing activities.

We process all your personal data in accordance with the applicable laws on data protection and for as long as required.

How we store and protect your personal data

We store your personal data only to the extent and for as long as is necessary for the fulfilment of the purposes described in this data protection declaration or for the fulfilment of legal obligations.

In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. In accordance with our risk assessment, we implement in particular access controls, access controls and procedures for regularly reviewing, assessing and evaluating the effectiveness of the measures.

Who we share your personal data with

In order to achieve the purposes described in this privacy policy, it may be necessary for us to pass on your personal data to other companies. These are the following categories of recipients:

• Other group companies;
• External service providers;
• Suppliers and business partners;

Place of processing

We store and process your personal data primarily in Switzerland and the EU. However, we may also transfer your personal data to recipients in countries outside Switzerland or the EU (Kosovo). We transfer data to countries without adequate data protection on the basis of standard data protection clauses or legal exceptions (e.g. necessity to fulfill the contract).

Your rights in relation to your personal data

You have the following rights in relation to personal data concerning you:

• The right to obtain information about what personal data we store about you and how we process it;
• The right to receive or transmit a copy of your personal data in a commonly used format;
• The right to rectification of your personal data;
• The right to erasure of your personal data; as well as
• The right to object to the processing of your personal data.

Please note that legal requirements and exceptions apply to these rights. To the extent permitted by law, we may refuse your request to exercise these rights. You also have the right to lodge a complaint with the competent data protection supervisory authority.

How we can change this Privacy Policy

We can change this privacy policy at any time, in particular if we change our data processing or if new legislation becomes applicable. The version provided on our website applies.

This document was generated with the support of dp-services.ch.