Privacy Notice

Privacy Policy

Your trust is important to us, which is why we take data protection seriously and ensure appropriate security measures. Of course, we comply with the legal provisions of the Federal Data Protection Act (DSG), the Ordinance to the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG), and any other applicable data protection provisions of Swiss EU law if necessary.
To let you know what personal data we collect from you and for what purposes we use it, please read the following information.

What data do we process when you visit our website?

1. Do we collect data from you when you visit our site?
When you visit our website, our servers temporarily store each access in a log file. The following technical data is collected, as is generally the case with every connection to a web server, without your intervention and stored by us until automated deletion:
- The IP address of the requesting computer,
- The date and time of access,
- The website from which the access originated (referrer URL), possibly with the search term used,
- The name and URL of the accessed file,
- The status code (e.g., error message),
- Your computer's operating system,
- The browser you used (type, version, and language),
- The amount of data transferred,
- The transmission protocol used (e.g., HTTP/1.1).
The collection and processing of this data is carried out for the purpose of enabling the use of our website (connection establishment), permanently ensuring the system security and stability, enabling the optimization of our internet offering, and for internal statistical purposes. This is our legitimate interest in data processing.
The IP address is also evaluated along with the other data in the event of attacks on the network infrastructure or other unauthorized or abusive website uses, and is used, if necessary, in the context of criminal proceedings for identification and for civil and criminal action against the relevant users. This is our legitimate interest in data processing.
The IP addresses are anonymized by our host. The last one to three digits are removed, i.e., "127.0.0.1" becomes "127.0.0.0". IPv6 addresses are also anonymized. The anonymized IP addresses are stored for 60 days.
Error logs that record faulty page views are deleted after seven days. In addition to error messages, these logs include the accessing IP address and, depending on the error, the accessed webpage.

2. What data do we collect when you use contact forms?
We use online forms at various points, e.g., for registrations for events, contests, or for contacting us. For this purpose, we collect the following mandatory information and, if necessary, further information depending on the inquiry:
Name, first name
Email address
Phone number
Your message
Optional
Street, postal code, and city
We only use this data to best respond to your contact request or to plan visitors' participation in an event or to inform visitors in case of changes or cancellations. Processing this data is therefore in our legitimate interest.

3. Communication via email or phone
When you contact us via an email address or phone number provided on the website, the collection, processing, and use of your voluntarily provided contact data such as title, first name, last name, email address, phone number, and company are exclusively purpose-oriented. Either for recording and, if necessary, responding to your inquiry or for technical administration.
Since communication via email usually takes place over an unsecured data connection, please avoid sending confidential information. The received emails are stored in the mailboxes of the respective email addresses and stored in accordance with legal retention periods.

4. What are cookies? Do we need cookies?
Cookies help make your visit to a website easier, more enjoyable, and more meaningful in many ways. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit a website. We only use:
- Technically necessary cookies
- Cookies from Google Analytics (see Section 5)
In other words, we primarily use technical cookies that are necessary for the operation of the content management system or that store information for optimized user guidance. Most internet browsers accept cookies automatically.
However, you can configure your browser in such a way that no cookies are stored on your computer, existing cookies are deleted, or you receive a notification whenever you receive a new cookie. If you reject the use of cookies, some functions of the website may no longer be available.

5. Do we need tracking tools?
a: What are tracking tools?
For the purpose of tailoring and continuously optimizing our website, we use the web analysis service from Google Analytics. In this context, pseudonymous usage profiles are created and small text files ("cookies") stored on your computer are used. The information generated by the cookies about your use of this website is transmitted to the servers of the providers of these services, stored there, and processed by us. In addition to the data listed in paragraphs 1 to 4, the following information may also be obtained under certain circumstances:
- Navigation path that a visitor takes on the site,
- Duration of stay on the website or subpage,
- Subpage where the website is left,
- Country, region, or city from which access is made,
- Device (type, version, color depth, resolution, width, and height of the browser window),
- Repeating or new visitors.
The information is used to evaluate the use of the website, compile reports on website activities, and provide other services related to website use and internet use for market research and the needs-based design of this website. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf.
b: What is Google Analytics?
The provider of Google Analytics is Google Inc., a company of the holding company Alphabet Inc., headquartered in the USA. Before the data is transmitted to the provider, the IP address is shortened within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization ("anonymizeIP") on this website. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The full IP address is only transferred to a Google server in the USA and shortened there in exceptional cases. According to Google Inc., the IP address will never be associated with other user-related data in any case.
For more information about the web analytics service used, please visit the Google Analytics website. Instructions on how to prevent the processing of your data by the web analysis service can be found at http://tools.google.com/dlpage/gaoptout

Storage and exchange of data with third parties
6. Are these data stored or linked? Who has access?
We store the data specified in sections 1-2 of this privacy policy for all websites according to Appendix 1 as follows:

Hosting partner in Germany (Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, https://www.mittwald.de/). The Mittwald CM Service GmbH also has access to the data.
Our web agency (tntgraphics AG, Neue Winterthurerstr. 15, CH-8305 Dietlikon, https://www.tnt-graphics.ch/) also has access to this data.

7. Newsletter rapidmail
For sending our newsletter, we use an application from rapidmail GmbH, Wentzingerstraße 21, 79106 Freib

urg im Breisgau, Germany (hereinafter "rapidmail"). The data transmitted to rapidmail by us is encrypted and transmitted and stored on rapidmail servers. The data stored at rapidmail is exclusively stored in professional data centers. At no time are data from rapidmail passed on to third parties.
rapidmail offers various analysis options, such as tracking opened newsletters and usage behavior, e.g., how many users an email was sent to, whether emails were rejected (soft and hard bounces), and whether users unsubscribed after receiving an email. These measurements can be both anonymous and personal. Further details on data collection and data protection by rapidmail can be found in the rapidmail privacy policy: https://www.rapidmail.de/datenschutz

8. Videos from YouTube
We use YouTube videos to make our websites more informative and interactive, improving the user experience. These features are provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
We have embedded YouTube videos in our online offerings that are stored on https://www.youtube.com and can be played directly from our website. These are embedded in the "extended data protection mode," i.e., no data about your user behavior is transmitted to YouTube when you play the videos. However, this does not exclude the exchange of non-personal data between YouTube and your browser.

For more information about the use of personal data and other data collection and retention periods, please refer to the YouTube privacy policy at www.google.de/intl/de/policies/privacy.

9. Google Maps
We use the Google Maps product on some websites, a service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter "Google") for directions or providing references. When you access a page with integrated Google Maps, Google stores a cookie on your end device via your internet browser. In order to display our location and, if necessary, create directions, your user settings and data are processed. This information is usually transmitted to a Google server in the USA and stored there. If you do not agree to this processing, you can prevent the installation of cookies through the corresponding settings in your internet browser, as mentioned in Section 4.
For more information about the Google Maps service used, please visit https://www.google.com/intl/en/help/terms_maps/.

10: Recruitment process
For the recruitment process, there is a separate website, karriere.eberhard.ch, which is maintained by CoSB AG. This is a job portal where interested parties can learn about job vacancies and apply directly. In the case of an application via the job portal or by email, first name, last name, and email address are mandatory. Providing a phone number and attaching documents such as cover letters, certificates, etc. is optional.
This data is processed by our outsourcing partner (CoSB AG) for the application process. The outsourcing partner, in turn, processes the data in an outsourcing relationship using softgarden software. The data submitted is checked and processed by the outsourcing partner in an outsourcing relationship with Eberhard Holding AG to select which candidates should be recommended to Eberhard Holding AG. Eberhard Holding AG decides whether to proceed with an employment.
Eberhard Holding AG remains responsible for complying with GDPR data protection regulations (including the outsourcing relationship with the outsourcing partner CoSB AG).
The extent of data processing by the outsourcing partner and Eberhard Holding AG depends on the amount of data submitted by the applicant, but always includes name and contact details.
The software service provider softgarden complies with all requirements of the EU General Data Protection Regulation. Further information about data protection at softgarden can be found here: https://softgarden.com/de/datenschutz/
The legal basis for processing the data transmitted in an application is Art. 6 Para. 1 lit. a GDPR, as it is based on the consent of the interested user.
The outsourcing partner and the Eberhard companies only use the data transmitted for the purpose of deciding whether to proceed with an employment.
In the event of employment, your submitted data may be stored in accordance with the current legal requirements for the retention of personnel data for the purposes of the usual organizational and administrative processes by the HR department of Eberhard Holding AG in your personnel file.
The deletion of the data transmitted by you will take place automatically no later than twelve months after the announcement of the rejection of your job application. This does not apply if longer storage is required due to legal requirements or if you have expressly agreed to longer storage.
Applicants can withdraw their consent to the storage of their personal data submitted with the application at any time. An objection must only be addressed to Eberhard Holding AG, which is responsible for deleting the data in the software solution used by the outsourcing partner.
All personal data will be irreversibly deleted in this case.

11. How long will my data be stored?
Data from website visits will be stored as described in section 1 for a maximum of 60 days. If you contact us by phone or email, personal data may be collected for the purpose of fulfilling your inquiry. We only store personal data for as long as necessary to use it for further processing within the scope of our legitimate interest.
Contract data is stored by us for a longer period of time because this is required by legal retention obligations. Retention obligations that require us to retain data arise from regulations on accounting, civil law, and tax law. According to these regulations, business communication, closed contracts, and booking documents must be retained for up to 10 years. If we no longer need this data to provide services to you, the data will be blocked. This means that the data may only be used for accounting and tax purposes.

12. Further sharing of data with third parties
We only pass on your personal data to other third parties if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims from the contractual relationship. In addition, we pass

 on your data to trusted third parties if this is necessary within the scope of using the website and processing contracts (including outside the website), namely to offer our services easily and comprehensively.

13. Transfer of personal data abroad
We are entitled to transfer your personal data to third-party companies (commissioned service providers) abroad for the purposes of data processing described in this privacy policy. These are obliged to data protection to the same extent as we are. If the level of data protection in a country does not correspond to Swiss or European standards, we ensure by contract that the protection of your personal data always corresponds to that in Switzerland or the EU.

14. Inclusion of hyperlinks to third-party websites
We have included links to the websites of some of our partners and other relevant websites on our website. If you access such links from our website, data may be passed on to the owner of the website you are accessing. Please refer to the respective privacy policies on the respective websites.

Do you need to know anything else?
15. You have the right to information, correction, deletion, and restriction of processing, as well as the right to data portability
You have the right to request information about the personal data stored about you by us upon request. You also have the right to correct incorrect data and the right to delete your personal data, provided there is no legal obligation to retain it or a legal basis that allows us to process the data.
You also have the right to request the data you have provided to us to be handed over to you (right to data portability). Upon request, we will also forward the data to a third party of your choice. You have the right to receive the data in a common file format.
You can reach us for the purposes mentioned above via the email address info@concretum.com. We may, at our discretion, require proof of identity for the processing of your requests.
In many countries, you also have the right to lodge a complaint with the competent data protection authority if you have concerns about how we process your data.
The aforementioned rights depend on the applicable data protection legislation and can therefore be either more limited or more comprehensive.

16. Is your data safe with us?
We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties.
In general, you should treat your access data confidentially and close the browser window when you have finished your browsing session, especially if you share the computer, tablet, or smartphone with others.
We also take internal data protection very seriously. Our employees and the service providers commissioned by us are obligated to maintain confidentiality and comply with data protection regulations.

18. Can you complain about us?
You have the right to complain to a data protection supervisory authority at any time.

17. What law do we apply? And where is the law applied?
This privacy policy and the contracts concluded based on or in connection with this privacy policy are subject to Swiss law unless the law of another state is mandatorily applicable. The place of jurisdiction is Bülach, unless another place of jurisdiction is mandatorily specified.

18. Can this statement be amended?
If individual parts of this privacy policy are ineffective, this does not affect the effectiveness of the privacy policy as a whole. The ineffective part of the privacy policy is to be replaced in such a way that it comes as close as possible to the economic purpose of the invalid part.
As we develop our website and offerings or as a result of changed legal or regulatory requirements, it may be necessary to amend this privacy policy. The current privacy policy is published on our website.

19. Questions about data protection? Please contact us!
This page was last updated on August 31, 2023. If you have any questions or comments about our legal notices or data protection, please contact us at info@concretum.com.