Privacy Policy

1. General privacy policy

Gallus Ferd. Rüesch AG (hereinafter referred to as "we" or "us" or "Gallus") are delighted that you have visited our website and are interested in our company and our services. The protection and security of personal data is very important to us. This privacy policy describes how we collect and use your personal data. We collect and process personal data carefully and for the purposes described in this privacy policy.

Please note that the privacy policy no longer applies if you follow links to third-party sites or register in areas controlled by other responsible parties.

The responsible party in terms of data protection legislation is: Gallus Ferd. Rüesch AG Harzbüchelstrasse 349016 St. Gallen, Switzerland

Gallus determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. Any data protection concerns or questions can be directed to the following contact point: gallus.datenschutz-ch@heidelberg.com

If you use the website for informational purposes only, i.e., you do not use our contact form, customer portal, or e-shop, or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. We collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

Date and time of visit/enquiry;
Name of the websites used/the file requested;
Access status (web page/file transferred, web page/file not found, etc.);
Internet browser and operating system used;
Full IP address of the requesting computer;
Source from which you visited us;
Language and version of the browser software.

When we enter into a business relationship with you, we collect personal data to the extent permitted by applicable law, e.g.:

Personal data such as name, identification number, telephone number, address, and place of residence;
Identifiers we assign to you, such as your customer, business contact, contract, partner, or account number, including identifiers for accounting purposes;
Financial information, including payment and transaction records;
If applicable, professional information about yourself, e.g., your job title and professional experience;
Interactions with you and the products and services you use.

Purpose of processing personal data

In accordance with applicable data protection laws, Gallus may process personal data for the following purposes in particular:

To provide our website and apps;
To provide secure areas of our website and apps for registered users (in accordance with our terms of use, where we provide them);
To carry out activities in connection with a contract we have concluded with you or the company you work for (e.g. e.g. to make bookings in the eShop, process payments, carry out credit checks, deliver to the address provided (if items are to be shipped) and, if necessary, process cancellations or refunds) and to carry out activities related to pre-contractual measures in this context, e.g. in the event of inquiries about our products or services;
To communicate with you about your inquiries that are not related to a contract;
To send you direct marketing communications about our services and products (including via our newsletter);
To provide our existing customers with information and offers that we believe may be of interest to them, as they are similar to their previous purchases;
To provide you with the "Stay logged in" option;
To continuously improve the services we offer, based on an analysis of the usage data collected on our website/apps on a pseudonymized basis and the evaluation of the availability and speed of our website;
To analyze the usage data collected on our website/apps for interest-based advertising;
To enable users to apply for jobs via the job search function on the website;
To conduct market research activities based on information relating to our existing customers/their representatives (name and email address obtained in connection with our business relationship);
Monitoring and improving the use of and satisfaction with our products and services by conducting surveys;
To make our podcasts available to our users and to analyze and optimize them in accordance with our users' expectations;
To detect malfunctions and ensure the security of our systems, including detecting and tracking (attempted) unauthorized access to our web servers;
To fulfill legal obligations that apply to us (e.g., tax obligations or data storage obligations);
To protect and defend our rights.

Recipients of personal data

Gallus takes the necessary measures to ensure that only authorized personnel and auxiliary persons with the necessary knowledge have access to your personal data for the purposes for which your personal data was collected.

We may disclose your personal data to the following categories of recipients in accordance with the processing purposes described above, to the extent necessary for the intended data processing:

Service providers or other business partners who process personal data on behalf of and on the instructions of Gallus (so-called contract processors, e.g. in the areas of IT, hosting, and support);
External consultants for our products and services;
postal service provider;
External auditors and lawyers;
Authorities and courts.

We select our partners and contractors carefully and only when we are certain that they have appropriate technical and organizational measures in place that comply with legal requirements. Our contractors may only process personal data on our documented instructions. They are subject to confidentiality obligations and may only use your personal data to the extent necessary to fulfill the purpose for which your personal data was collected, unless required by law.

Questions regarding such data transfers and the guarantees that apply in specific cases can be addressed to the above contact person at any time.

data storage We store your personal data for as long as necessary to fulfill the respective processing purpose or as long as we have a legitimate interest in further storage. We delete personal data, taking into account legal retention obligations, as soon as there is no longer any obligation to store it.

Your email address, your name and telephone number (if applicable) will be stored by us in order to answer your questions. We will delete the data when it is no longer required, or we will restrict processing if there are legal storage obligations.

Your rights

We do not engage in profiling or automated decision-making as part of our normal business activities.

If and to the extent provided for by applicable data protection law, you have the following data protection rights, which you can assert:

You have the right to request copies of your personal data from Gallus (right of access). You can submit a request for access to find out what personal data we have stored about you, how we use it, to whom we disclose it, and where we obtained your data.
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete any information you believe is incomplete (right to rectification).
You have the right to ask us to delete your personal data under certain circumstances (right to erasure);
You have the right to request that we restrict the processing of your data under certain circumstances (right to restriction of processing);
You have the right to object to processing if we at Gallus can process your data because processing is in our legitimate interest (right to object);
Where applicable, you have the right to request that we transfer the data you have provided to Gallus to another organization or make it available to you (right to data portability). The right to data portability only applies if we process data on the basis of your consent or in discussions about the conclusion of a contract and the processing is automated;
You can also lodge a complaint with the relevant data protection authority, which for Gallus in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Use of cookies

In addition to the aforementioned data, we use cookies that are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the place where the cookie is set. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.

You can configure your browser settings according to your preferences and, for example, reject cookies from third parties or all cookies. We would like to point out that if you disable cookies, you may not be able to use all the features of this website.

Gallus has taken technical and organizational measures to ensure the security of personal data and to protect it from unauthorized or unlawful processing, accidental loss, alteration, disclosure, or access.

update Gallus reserves the right to adapt, supplement, or otherwise change this privacy policy at any time without prior notice. The current privacy policy as published on the website applies.

Last update: August 31, 2023

2. Privacy policy for applicants

Gallus Ferd. Rüesch AG (hereinafter referred to as "we" or "us" or "Gallus") informs applicants for employment (hereinafter referred to as "you" or "your") about which personal data is processed about them, for what purposes the personal data is used, to whom it is passed on, and what rights the applicant(s) have when their personal data is processed.

"Personal data" refers to all details and information relating to the applicant(s) or which can be linked to them.

"Processing" refers to any operation performed on personal data, such as collecting, recording, organizing, structuring, storing, adapting, altering, retrieving, using, disclosing, transferring, disseminating, archiving, deleting, or destroying.

The person responsible for collecting and processing personal data in accordance with data protection legislation is: Gallus Ferd. Rüesch AG Harzbüchelstrasse 34 9016 St. Gallen, Switzerland

Gallus determines the purposes for which personal data is processed and the means used for such processing, and is responsible for the processing and use of personal data in accordance with this privacy policy, other internal guidelines, and applicable law. Any data protection concerns or questions can be directed to the following contact point: gallus.datenschutz-ch@heidelberg.com

Collection of personal data and purpose of data processing

Gallus will collect and process the following personal data about you:

Information you provide to us: This includes, in particular, your first and last name, date of birth, email address, nationality, photo, ID card, immigration status, information about your professional background and qualifications, as well as your resume, diplomas, and references.
Information we obtain from other sources: This includes, for example, personal data that we collect during screening, background, and/or reference checks that we conduct as part of the application or hiring process, including your address history, qualifications, and resume.

In certain cases, it may be necessary to collect particularly sensitive personal data (e.g., health information) as part of the recruitment process. If the applicant provides particularly sensitive personal data in their application documents, this data may only be processed within the scope of the application.

If you provide us with information about your family or other third parties during the application process (e.g., emergency contacts or references), we assume that this information is correct and that you are authorized to provide it. We ask you to inform these third parties accordingly and to provide them with this privacy policy.

Purpose of processing personal data

Your personal data may be processed by Gallus in the following ways and for the following purposes:

To review your application (including, in some cases, verifying your qualifications and references with the third parties you have named) and to contact you in this regard;
To comply with our legal and regulatory obligations;
To process your personal data for the purposes of monitoring equal opportunities; and To process your personal data for the purposes of monitoring equal opportunities; and
To stay in touch with you in the future and inform you about relevant job vacancies that may be of interest to you. Please note: If you do not want us to keep your data, or if you would like us to update it at any time, please contact us.

Recipients of personal data

We may disclose your personal data for the above purposes within the scope of the applicable legal provisions to the following categories of third parties (hereinafter referred to as "recipients"), who process your personal data on our behalf for the above-mentioned purposes or for their own purposes.

Third-party providers who are contractually bound to confidentiality, such as our IT system providers or hosting providers, cloud service providers, consultants, and third parties who conduct pre-employment checks on potential employees;
Authorities, e.g., enforcement or exchange authorities, courts, or parties involved in proceedings, if we are required to disclose information by applicable law or at their request, or to protect our legitimate interests.

The recipients are obliged to maintain confidentiality and comply fully with applicable data protection law at all times and to implement appropriate technical and organizational measures to secure personal data and protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure, or access.

Transfer of personal data outside the EU/EEA

Gallus processes and stores personal data on servers in Switzerland or within the European Economic Area. Where necessary and permitted by law, we may also transfer your personal data to recipients, e.g. sister companies, located outside Switzerland and the European Economic Area, to a country that does not guarantee adequate data protection. If personal data is transferred to a country without adequate data protection, we ensure adequate protection by means of sufficient safeguards, such as on the basis of the EU standard contractual clauses recognized by the Federal Data Protection and Information Commissioner (FDPIC) and, where necessary, adapted or supplemented by binding internal data protection regulations, data protection guidelines, or we rely on legal exemptions for specific cases, such as consent, provided that this is necessary for the fulfillment of the employment contract. supplemented, by binding internal data protection regulations, data protection guidelines, or we rely on legal exemptions for specific cases, such as consent, if this is necessary for the fulfillment of the employment contract with the employee or for the establishment, exercise, or enforcement of legal claims.

Questions regarding such data transfers and the guarantees that apply in specific cases can be addressed to the above contact person at any time.

data retention Gallus processes your personal data for as long as necessary to fulfill the above purposes. After that, your personal data will generally be deleted or anonymized. However, your personal data may be processed further, for example due to legal retention obligations or for the period during which claims can be asserted against Gallus. The storage period is determined primarily by the statutory limitation periods or the period during which claims can be asserted against Gallus.

Your rights

We do not engage in profiling or automated decision-making as part of our normal business activities.

If and to the extent provided for by applicable data protection law, you have the following data protection rights, which you can assert:

You have the right to request copies of your personal data from Gallus (right of access). You can submit a request for access to find out what personal data we have stored about you, how we use it, to whom we disclose it, and where we obtained your data.
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete any information you believe is incomplete (right to rectification);
You have the right to ask us to delete your personal data under certain circumstances (right to erasure);
You have the right to request that we restrict the processing of your data under certain circumstances (right to restriction of processing);
You have the right to object to processing if we at Gallus can process your data because processing is in our legitimate interest (right to object);
Where applicable, you have the right to request that we transfer the data you have provided to Gallus to another organization or make it available to you (right to data portability). The right to data portability only applies if we process data on the basis of your consent or in discussions about the conclusion of a contract and the processing is automated;
You can also lodge a complaint with the relevant data protection authority, which for Gallus in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

update Gallus reserves the right to adapt, supplement, or otherwise change this privacy policy at any time without prior notice. The current privacy policy as published on the privacy policy page (gallus-group.com) applies.

Last update: August 31, 2023