Disclaimer

1. General Privacy Policy

Gallus Ferd. Rüesch AG (hereinafter referred to as "we" or "us" or "Gallus") appreciates your visit to our website and your interest in our company and our services. The protection and security of personal data are important to us. This privacy policy describes how we collect and use your personal data. We collect and process personal data carefully and for the purposes described in this Privacy Policy.

Please note that the privacy policy no longer applies if you follow links to third-party sites or register in areas controlled by other responsible parties.

Responsible

Responsible person in the sense of the data protection legislation, is:

Gallus Ferd. Rüesch AG

Harzbüchelstrasse

349016 St. Gallen, Schweiz

Gallus determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. Any data protection concerns or questions can be directed to the following contact point: gallus.datenschutz-ch@heidelberg.com

Collection of personal data and purpose of data processing

If you use the website for information purposes only, i.e. do not use our contact form, customer portal, or eShop or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. We collect the following data, which is technically necessary for us to be able to display our website to you and to ensure stability and security:

Date and time of the visit/request;

Name of the web pages used/requested file;
Access status (web page/file transferred, web page/file not found, etc.);
Internet browser and operating system used;
Full IP address of the requesting computer;
Source from which you are visiting us;
Language and version of browser software.

When we enter into a business relationship with you, we collect personal data to the extent permitted by applicable law, e.g:

Personal Data such as your name, identification number, telephone number, address and place of residence;
Identifiers that we assign to you, such as your customer, business associate, contract, partner or account number, including identifiers for accounting purposes;
Financial information, including payment and transaction records;
Professional information about you, if applicable, such as your job title and work experience;
Interactions with you and the products and services you use.

Purpose of processing personal data

Purpose of processing personal data

In accordance with applicable data protection laws, Gallus may process personal data in particular for the following purposes:

To provide our website and apps;
To provide protected areas on our website and apps for registered users (in accordance with our terms of use, where we offer such);
To carry out activities in connection with a contract we have entered into with you or the company you work for (for example, to make bookings in the eShop, process payments, carry out credit checks, deliver to the specified address (if items are to be shipped) and process cancellations or refunds, if applicable) and to carry out activities in connection with pre-contractual measures in this context, for example, in the case of inquiries about our products or services;
To communicate with you about your inquiries that are not related to a contract;
To send you direct marketing communications about our services and products (including through our newsletter);
To provide our existing customers with information and offers that we believe match your interests because they are similar to your previous purchases;
To provide you with the option to "stay logged in";
To continually improve the services we provide, based on an analysis of usage data collected on our website/apps on a pseudonymous basis, as well as evaluating the availability and speed of our website;
To analyze the usage data collected on our website/apps for interest-based advertising;
To provide users with the opportunity to apply for jobs via the job search function on the website;
To conduct market research activities based on information related to our existing customers/their representatives (name and email address obtained in connection with our business relationship);
To monitor and improve usage and satisfaction with our products and services by conducting surveys;
To provide our podcasts to our users and to analyze and optimize them according to our users' expectations;
To detect malfunctions and ensure the security of our systems, including detecting and tracking (attempted) unauthorized access to our web servers;
To comply with legal obligations applicable to us (e.g. tax obligations or data retention obligations);
To protect and defend our rights.

Recipients of personal data

Gallus takes the necessary measures to ensure that only authorized personnel and auxiliary persons who have the necessary knowledge have access to your personal data in order to fulfill the purposes for which your personal data was collected.

We may disclose your Personal Data to the following possible categories of recipients in accordance with the processing purposes described above, to the extent necessary for the intended data processing:

Service providers or other business partners who process personal data on behalf of and on the instructions of Gallus (so-called order processors, e.g. in the areas of IT, hosting and support);
External consultants for our products and services;
Postal service providers;
External auditors and lawyers;
Government agency and courts

We select our partners and order processors carefully and only if we are certain that they have appropriate technical and organizational measures in place that meet legal requirements. Our order processors may only process personal data upon documented instructions from us. They are all subject to the duty of confidentiality and may only use your personal data to the extent necessary to fulfill the purpose for which your personal data was collected, unless this is required by law.

Transfer of personal data outside the EU/EEA

Gallus generally processes and stores personal data on servers in Switzerland or the European Economic Area. If necessary and legally permissible, we will also transfer your personal data to recipients, e.g. sister companies, located outside Switzerland and the European Economic Area in a country that does not guarantee adequate data protection. If personal data is transferred to a country that does not ensure adequate data protection, we ensure adequate protection by using sufficient safeguards, such as on the basis of the EU standard contractual clauses, which have been recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and adapted or supplemented as necessary.

Questions regarding such data transfers and which safeguards are applied in a specific case can be addressed to the contact person mentioned above at any time.

Data retention

We store your personal data for as long as is necessary for the pursuit of the respective processing purpose or as long as we have a legitimate interest in the further storage. We always delete personal data, taking into account legal retention obligations, as soon as there is no longer any obligation to continue storing it.

Your e-mail address, name if applicable, and telephone number are stored by us in order to answer your questions. We delete the data when they are no longer required, or we restrict processing if there are legal retention obligations.

Your rights

We do not perform profiling or automated decision making in the normal course of business.

If and to the extent provided for under applicable data protection law, you have the following data protection rights that you can exercise:

You have the right to request copies of your personal data from Gallus (right of access). You can make a request for access to find out what personal data we hold about you, how we use it, who we share it with and where we got your data;
You have the right to ask us to correct information that you believe is inaccurate. You also have the right to ask us to complete information that you consider incomplete (right to rectification);
You have the right to ask us to delete your personal data under certain circumstances (right to erasure);
You have the right to ask us to restrict the processing of your data in certain circumstances (right to restriction of processing);
You have the right to object to processing if we at Gallus can process your data because the processing is in our legitimate interest (right to object);
where applicable, you have the right to request that we transfer the data you have provided from Gallus to another organization or make it available to you (right to data portability). The right to data portability only applies if we process data on the basis of your consent or in discussions regarding the conclusion of a contract and the processing is automated;
You can also complain to the competent data protection authority, which for Gallus in Switzerland is the Swiss Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Use of cookies

In addition to the aforementioned data, we use cookies that are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

You can configure your browser settings according to your wishes and, for example, reject cookies from third parties or all cookies. We would like to point out that if you deactivate cookies, you may not be able to use all the functions of this website.

Data security

Gallus has taken technical and organizational measures to ensure the security of personal data and to protect it from unauthorized or unlawful processing, accidental loss, alteration, disclosure or access.

Updating

Gallus reserves the right to adapt, supplement or otherwise change this data protection declaration at any time and without giving reasons. The current data protection declaration as published on the website shall apply.

Last update: 31.08.2023

2. Privacy policy for applicants

Gallus Ferd. Rüesch AG (hereinafter referred to as "we" or "us" or "Gallus") informs applicants for employment (hereinafter referred to as "you" or "you") about what personal data is processed about them, for what purposes the personal data is used, to whom it is disclosed and what rights the applicant(s) have when their personal data is processed.

Personal data" refers to all details and information that relate or can be related to the applicant(s).

Processing" means any operation related to personal data, such as collecting, recording, organizing, arranging, storing, adapting, modifying, querying, using, disclosing, transmitting, disseminating, archiving, deleting or destroying.

Responsible

Responsible for the collection and processing of personal data in accordance with data protection legislation is:

Gallus Ferd. Rüesch AG

Harzbüchelstrasse 34

9016 St. Gallen, Switzerland

Gallus determines the purposes for which and the means by which personal data will be processed and is responsible for the processing and use of personal data in accordance with this privacy policy, other internal policies and applicable law. Any data protection concerns or questions may be directed to the following contact point: gallus.datenschutz-ch@heidelberg.com

Collection of personal data and purpose of data processing

Gallus will collect and process the following personal data about you:

Information that you provide to us: In particular, this includes first and last name, date of birth, email address, nationality, photograph, identity card, immigration status, information on professional history and qualifications, and curriculum vitae, diplomas and employment references;

Information we obtain from other sources: This includes, for example, personal information we collect as part of screening, background and/or reference checks we conduct as part of the application or hiring process, including your address history, qualifications and resume.

In certain cases, it may be necessary to collect sensitive personal data (e.g., health information) as part of the recruitment process. If the applicant provides particularly sensitive personal data in his or her application documents, this data may only be processed as part of the application.

If you provide us with information about your family or other third parties (e.g. emergency contacts or references) as part of the application process, we assume that this data is correct and that you are authorized to provide it. We ask that you inform these third parties accordingly and provide them with this privacy statement.

Purpose of processing personal data

Your personal data may be processed by Gallus in the following ways and for the following purposes:

To consider your application (including, in some cases, checking your qualifications and references with the third parties you name) and to contact you about it;
To comply with our legal and regulatory obligations;
To process your personal data for equal opportunity monitoring purposes; and To process your personal data for equal opportunity monitoring purposes; and
To keep in touch with you in the future to inform you of relevant job opportunities with us that may be of interest to you. Please note: If you do not want us to retain your data, or if you would like us to update it at any time, please contact us.

Recipients of personal data

We may disclose your Personal Data for the above purposes to the following categories of third parties (hereinafter "Recipients"), who process your Personal Data on our behalf for the above purposes or for their own purposes, to the extent permitted by applicable law.

Third party providers who are contractually bound to confidentiality, such as our IT system provider or hosting provider, cloud service providers, consultants and third parties who conduct pre-employment checks on potential employees;

Authorities, e.g. enforcement or exchange agencies or courts or parties to proceedings, if we are required to disclose information by applicable law or at their request or to protect our legitimate interests.

Recipients are required to fully comply with confidentiality and applicable data protection law at all times and to implement appropriate technical and organizational measures to secure the personal data and protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure or access.

Transfer of personal data outside the EU/EEA

Gallus generally processes and stores personal data on servers in Switzerland or the European Economic Area. If necessary and legally permissible, we also transfer your personal data to recipients, e.g. sister companies, located outside Switzerland and the European Economic Area in a country that does not ensure adequate data protection. If Personal Data is transferred to a country that does not ensure adequate data protection, we will ensure adequate protection by using sufficient safeguards, such as on the basis of the EU standard contractual clauses, which have been recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, if necessary, adapted or supplemented. of binding internal company data protection regulations, data protection guidelines, or rely on legal exemptions for certain cases, such as consent, provided this is necessary for the fulfillment of the employment contract with the employee or for the establishment, exercise or enforcement of legal claims.

Questions about such data transfers and what safeguards are applied in specific cases can be directed to the contact person above at any time.

Data retention

Gallus will process your personal data for as long as is necessary to fulfill the above-mentioned purposes. After that, your personal data will generally be deleted or made anonymous. However, your personal data may continue to be processed beyond this period, for example due to statutory retention obligations or for the period during which claims can be asserted against Gallus. The storage period is based primarily on the statutory limitation periods or the period during which claims can be asserted against Gallus.

Your rights

We do not carry out profiling or automated decision-making in the normal course of business.

If and to the extent provided for under applicable data protection law, you have the following data protection rights that you can exercise:
You have the right to request copies of your personal data from Gallus (right of access). You can make a request for access to find out what personal data we hold about you, how we use it, who we share it with and where we got your data;
You have the right to ask us to correct information that you believe is inaccurate. You also have the right to ask us to complete information that you believe is incomplete (right to rectification);
You have the right to ask us to delete your personal data in certain circumstances (right to erasure);
You have the right to request that we restrict the processing of your data in certain circumstances (right to restrict processing);
You have the right to object to processing if we at Gallus can process your data because the processing is in our legitimate interest (right to object);
where applicable, you have the right to request that we transfer the data you have provided from Gallus to another organization or make it available to you (right to data portability). The right to data portability only applies if we process data on the basis of your consent or in discussions regarding the conclusion of a contract and the processing is automated;

You can also complain to the competent data protection authority, which for Gallus in Switzerland is the Swiss Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Data security

Gallus has taken technical and organizational measures to ensure the security of personal data and to protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure or access.

Updating

Gallus reserves the right to adapt, supplement or otherwise change this data protection declaration at any time and without stating reasons. The current data protection declaration as published on the data protection declaration (gallus-group.com) shall apply.

Last update: 31.08.2023