Introduction and Scope

Protecting your personal data is important to us. This privacy policy (Privacy Policy) explains how Corvaglia Holding AG, including its subsidiaries (hereinafter collectively referred to as corvaglia, we or us), collects, processes and protects personal data. It applies to all processing of personal data by us, both in the context of our website and in the course of our business relationships.

Data Controller

The controller responsible for data processing within corvaglia is:

Andreas Bachmann
CHRO
+41 71 973 77 77
hr@corvaglia.ch
www.corvaglia.com

Michel Vogt
Director Group IT
+41 71 973 77 77
it@corvaglia.ch
www.corvaglia.com

Categories of Processed Personal Data

Depending on the nature of your contact or business relationship with us, we may process the following categories of personal data in particular:

• Master data (e.g. name, address, telephone number, email address)
• Contract data (e.g. customer or supplier data, contract contents, correspondence)
• Technical data (e.g. IP address, log files, cookies)
• Applicant data (e.g. CVs, references, certificates)
• Other data voluntarily submitted by you or collected in connection with the provision of our services

Purposes of Data Processing

We process personal data for the following purposes:

• To initiate, manage, and fulfil contractual relationships (incl. customer and supplier relationships)
• To respond to inquiries and facilitate communication
• To ensure the operational security, optimization and statistical analysis of our website
• To comply with legal obligations (e.g. retention requirements, compliance obligations)
• For recruitment and personnel administration

Legal Bases for Data Processing

Your personal data is processed on the basis of the following legal grounds:

• Performance of a contract or steps taken prior to entering into a contract
• Consent, where required (e.g. web tracking or job applications)
• Compliance with legal obligations
• Overriding legitimate interests, in particular to improve our services, ensure IT security, or for direct marketing (only to the extent permitted by law)

Disclosure to Third Parties and Cross-Border Transfers

We only disclose personal data to third parties if this is necessary to achieve the intended purpose (e.g. to IT service providers, hosting providers, banks, trustees) or if we are legally obliged to do so.

Cross-border data transfers only occur if the legal requirements are met (in particular pursuant to Art. 16 et seq. FADP). In the absence of an adequacy decision by the Federal Council, we ensure an adequate level of protection through appropriate safeguards (e.g. standard contractual clauses).

Data Retention

We retain personal data only for as long as necessary to fulfil the relevant purposes or as required by law. After that, the data is deleted or anonymized.

Your Rights

Under applicable data protection law, you have the following rights in particular:

• Right of access (Art. 25 FADP)
• Right to rectification of inaccurate or incomplete data (Art. 32 FADP)
• Right to erasure, unless retention is legally required
• Right to data portability (Art. 28 FADP)
• Right to object, especially to direct marketing or processing based on legitimate interests

To exercise these rights, please contact the data controller named above.

Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, misuse, or manipulation. These measures are reviewed regularly and adapted to the state of the art.

Use of Cookies and Tracking Technologies

Our website uses cookies and similar technologies to analyze usage and improve our services. You can manage or disable the use of such technologies in your browser settings. Where consent is required for specific tools (e.g. Google Analytics, reCAPTCHA, social plugins), we obtain it via a cookie banner. Our tools are described in the next paragraphs. Please also see our Cookie Policy: https://www.corvaglia.com/cookie-policy-eu/.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States . Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Here you can disable Google Analytics [ga_optout]

Google Signals

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR, we use the web analysis service, Google Signals. Via Google Signals, Google provides us with reports on cross-device user numbers, as well as different groups of users, based on different device combinations. In order to do so Google uses the data of users who have activated the option “personalized advertising” in their Google account settings. Google Signals can only be used with activated IP anonymization. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. Thus, no conclusions can be drawn as to the identity of a single user. You can object to the collection of your data via Google Signals, at any time via disabling “personalised advertising” in your Google Account: https://support.google.com/ads/answer/2662922?hl=en Additional information on how Google handles personal data in its advertising network can be found here: Advertising and Privacy

Google reCAPTCHA

Based on our legitimate interest in the prevention of spam and abuse, we also use the reCAPTCHA feature of Google on corvaglia’s website. This function is primarily used to distinguish whether an input is made by a natural person or abusive by automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. Additional information about Google reCAPTCHA and Google’s privacy policy can be found at: https://policies.google.com/privacy.

TikTok Pixel

Our website uses the TikTok Pixel, an analytics tool provided by TikTok Inc. (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland). This tool enables us to understand visitor behavior on our website in order to improve our marketing efforts and overall user experience.

Collected Data:

The TikTok Pixel collects and processes data that provides insights into user activities on our website. This includes, for example, pages visited, purchases made, or the time spent on specific pages. This data may be used in conjunction with other data collected by TikTok to display targeted advertising on the TikTok platform.

Legal Basis:

Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have given such consent through our cookie banner or other consent mechanisms. You can withdraw your consent at any time by adjusting the cookie settings on our website or by contacting us directly.

Data Transfer:

The information collected by the TikTok Pixel may be transmitted to TikTok servers in the United States or other third countries. TikTok commits to implementing appropriate security measures in accordance with the EU Standard Contractual Clauses to ensure an adequate level of data protection.

Deactivation of the TikTok Pixel:

You have the option to prevent the collection of your data by the TikTok Pixel by disabling the acceptance of cookies in your browser settings or by visiting our website in incognito mode. For more information on TikTok’s privacy practices, please refer to the TikTok Privacy Policy.

Meta Pixel

Our website uses the Meta Pixel, an analytics tool provided by Meta Platforms, Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). This tool enables us to understand visitor behavior on our website to optimize our marketing efforts and improve the user experience.

Collected Data:

The Meta Pixel collects and processes data that provides insights into user activities on our website. This includes, for example, pages visited, purchases made, or time spent on specific pages. This data may be used in conjunction with other data collected by Meta to display targeted advertising on Meta platforms (e.g., Facebook, Instagram).

Legal Basis:

Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have given such consent through our cookie banner or other consent mechanisms. You can withdraw your consent at any time by adjusting the cookie settings on our website or by contacting us directly.

Data Transfer:

The information collected by the Meta Pixel may be transmitted to Meta servers in the United States or other third countries. Meta commits to implementing appropriate security measures in accordance with the EU Standard Contractual Clauses to ensure an adequate level of data protection.

Deactivation of the Meta Pixel:

You have the option to prevent the collection of your data by the Meta Pixel by disabling the acceptance of cookies in your browser settings or by visiting our website in incognito mode. For more information on Meta’s data privacy practices, please refer to the Meta Data Policy.

Advertising

The website of Corvaglia Holding AG does not normally contain any banners. If it does, this advertising is delivered by external ad servers. The data collected in connection with online advertising (ad impressions, ad clicks) shall be used exclusively for the purposes of statistical evaluation and the generation of reports to advertising clients. No personal data shall be used. Corvaglia Holding AG has no influence on whether or not cookies are used during the delivery of advertising.

Changes to This Privacy Policy

This Privacy Policy may be amended at any time without prior notice. The current version published on our website applies.