This data protection declaration effective from 31st March 2023 provides information on the processing of personal data in connection with our website evatecnet.com and our other online services including our supplier portal. (https://supplierportal.evatecnet.com)
Our online offer is subject to Swiss data protection law as well as any applicable foreign data protection law such as, in particular, that of the European Union (EU) with the General Data Protection Regulation (GDPR). The EU recognizes that Swiss data protection law ensures adequate data protection.
1. Contact addresses
1.1 Responsibility for our online offer
1.2 Data Protection Officer
We have the following data protection officer as a point of contact for data subjects and as a contact for supervisory authorities in the event of inquiries relating to data protection law:
Dr. Josef Hechberger
1.3 Data protection representative
We have appointed an EU data protection representative as a contact for data subjects and for supervisory authorities in the event of data protection-related inquiries:
XWS Cross Wide Service GmbH
2. Personal data processing
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, collection, deletion, storage, modification, destruction and use of personal data.
2.2 Legal basis
We process - if and to the extent that the General Data Protection Regulation (GDPR) is applicable - personal data in accordance with at least one of the following legal bases:
- Art. 6 para. 1 lit. b GDPR for the necessary processing of personal data for the performance of a contract with the data subject as well as for the implementation of pre-contractual measures.
- Art. 6 para. 1 lit. f GDPR for the necessary processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are in particular our interest in being able to provide “information” about our company, products and services online permanently, in a user-friendly, secure and reliable manner, as well as to be able to provide protection against misuse and unauthorized use, the enforcement of our own legal claims and compliance with Swiss law.
- Art. 6 para. 1 lit. c GDPR for the necessary processing of personal data for the fulfillment of a legal obligation to which we are subject under any applicable law of the EU or of member states in the European Economic Area (EEA).
- Art. 6 para. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task which is in the public interest.
- Art. 6 para. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
- Art. 6 (1) (d) GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another private individual.
2.3 Nature, scope and purpose
We process those personal data that are necessary to provide our online information permanently, in a user-friendly, secure and reliable fashion. Such personal data may fall into the categories of inventory data and contact data, content data, usage data and boundary data as well as contract data and payment data.
We process personal data for the period of time necessary for the relevant purpose(s) or as required by law. Personal data whose processing is no longer required will be anonymized or deleted.
As a matter of principle, we process personal data only with the consent of the data subject, unless the processing is permitted for other legal reasons, for example, for the performance of a contract with the data subject and for corresponding pre-contractual measures, in order to protect our overriding legitimate interests, or because the requirement for processing is evident from the circumstances or based on information already received.
In this context, we particularly process information that a data subject voluntarily and self-submits to us when contacting us - for example, by mail, email, contact form, social media or telephone - or when registering for a user account. We may store such information, for example, in an address book, in a customer relationship management system (CRM system) or with comparable tools. If you provide personal data from third parties to us, you are obliged to ensure data protection vis-à-vis such third parties and to ensure the accuracy of such personal data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of providing our online information and services, if and to the extent that such processing is permitted for legal reasons.
2.4 Processing of personal data by third partied, also abroad
We may have your personal data processed by third parties such as, for example, order processors. We may process it jointly, with the help of, or transmit it to third parties. We also ensure appropriate data protection for such third parties.
Such third parties are generally located in Switzerland and in the European Union (EU) or the European Economic Area (EEA). However, such third parties may also be located in other countries around the globe provided that their data protection laws guarantee adequate data protection in the opinion of the Swiss Federal Data Protection and Information Commissioner (FDPIC) and - if and to the extent that the General Data Protection Regulation (GDPR) is applicable - in the opinion of the European Commission, or if adequate data protection is guaranteed for other reasons, such as through a corresponding contractual agreement, in particular on the basis of standard contractual clauses, or a corresponding certification.. Exceptionally, such a third party may be located in a country without adequate data protection, provided that the requirements under data protection law, such as the express consent of the data subject, are met.
3. Rights of data subjects
Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information as well as the right to correction, deletion or blocking of the personal data against any further processing.
Data subjects whose personal data we process may - if and to the extent that the General Data Protection Regulation (GDPR) is applicable - request confirmation free of charge as to whether we are processing their personal data and, if so, request information about the processing of their personal data, have the processing of their personal data restricted, exercise their right to data portability, and have their personal data corrected, deleted ("right to be forgotten"), blocked against further use.
Data subjects whose personal data we process may - if and insofar as the GDPR applies - revoke consent they have given at any time with immediate effect and object to the processing of their personal data at any time.
Data subjects whose personal data we process have a right of appeal to a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
4. Data security
We take appropriate and suitable technical and organizational measures to ensure data protection and data security in particular. Despite such measures however, no absolute guarantee of security can ever be given.
Access to our online offer takes place via transport encryption (SSL / TLS with HTTPS).
Access to our online information is subject - as is basically any use of the Internet - to mass surveillance without cause and without suspicion, as well as other monitoring by security authorities in Switzerland, the European Union (EU), the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by third parties such as secret services, police agencies and other security authorities.
5. Use of website
Cookies can be stored in your browser temporarily as so-called "session cookies" when you visit our website or for a certain period of time as so-called permanent cookies. "Session cookies" are automatically deleted when you close your browser. Permanent cookies make it possible in particular to recognize your browser the next time you visit our website and thus, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.
In the case of cookies used for analytics or advertising, a general objection ("opt-out") is possible for many services via the Networking Advertising Initiative, YourAdChoices (Digital Advertising Alliance) and / or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
Please also refer to COOKIES NOTICE at the end of this policy document to read more information about Cookies and learn how you can edit your own cookie preferences for Evatec’s webs online offer.
5.2 Log files
We may record the following information for each access to our website, provided that this information is transmitted by your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual page accessed and amount of data transferred, last website accessed (referer).
We store such information, which may also constitute personal data, in log files. The information is necessary to provide our online information permanently, in a user-friendly and reliable manner and to ensure data security and thus in particular the protection of personal data by us or with the help of third parties.
In particular, a cookie is published on our website for our marketing and analysis software ClickDimensions. This application tracks all activities on our website. However, it is not traceable to personal data if the person is not already stored in our customer relationship management (CRM) system. Only then is the connection between the IP and the person in ClickDimensions established
The operator of ClickDimensions is ClickDimensions LLC, 5901 Peachtree Dunwoody Road, NE suite B500 Atlanta, GA 30328 United States.
ClickDimensions collects, aggregates, and analyzes data about users' behavior on a website. This data includes, among other things, access to Internet pages and their sub-pages, the time spent on the Internet page or the Internet page from which the user came to the ClickDimensions-using Internet page.
The purpose of using ClickDimensions is to provide users with interest-relevant information based on their behavior on our website (including sub-pages) and to optimize our marketing activities in connection with this.
The data transmitted to ClickDimensions is used on our behalf to evaluate the use of our website, compile reports on website activity and provide other services relating to website activity and internet usage. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs will be flagged for deletion upon request.
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.
If you do not wish the cookies to be stored, you can prevent this by setting your browser software accordingly.
5.3 Pixel Tracking
We may use tracking pixels on our website. Tracking pixels are also referred to as web beacons. Tracking pixels, also from third parties whose services we use, are small images that are retrieved when you visit our website. Tracking pixels can be used to collect the same information as server log files.
6. Social Media
We are present on social media platforms including LinkedIn, “wechat” and other online platforms in order to communicate with interested persons and to provide information about our company and products or services available via our website. In each case, the general terms and conditions (GTC), data protection declarations and other provisions of the individual operators of such online platforms also apply. We have no corporate presence on Facebook.
7. Services from third parties
We may use third party services to provide our website information in a durable, user-friendly, secure and reliable manner. Such services also serve to embed content into our online information. Such services - for example, hosting and storage services, video services and payment services - require your Internet Protocol (IP) address, as such services cannot otherwise transmit the corresponding content. Such services may be located outside of Switzerland as well as the European Union (EU) or the European Economic Area (EEA), provided that adequate data protection is guaranteed.
For their own security-related, statistical and technical purposes, third party services may also process data related to our website as well as from other sources in aggregated, anonymized or pseudonymized form - including cookies, log files and counting pixels.
We use open street maps (https://openstreetmap.org)
7.2 Contact Forms
7.3 Music and / or videos
We use YouTube to embed videos in our website. Cookies are also used in the process. YouTube is a service of the American Google LLC, for users in the European Economic Area (EEA) and in Switzerland Google Ireland Limited is responsible. Further information on the nature, scope and purpose of data processing can be found in Google's privacy and security policy and data protection statement in each case, in the guide to data protection in Google products (including YouTube), in the information on how Google uses data from websites on which Google services are used and in the information on cookies at Google. In addition, there is the possibility to object to personalized advertising.
We use “Roberto” and “Google Material Icons”, both of which are loaded locally from Evatec’s own servers.
7.5 Performance and reach measurement
We use Google Analytics to analyze how our website is used, including, for example, measuring the reach of our website and the success of third-party links to our website. This is a service of the American Google LLC, for users in the European Economic Area (EEA) and in Switzerland Google Ireland Limited is responsible.
Google also attempts to record individual visitors to our website when they use different browsers or devices (cross-device tracking). Cookies are also used for this purpose.
Please also refer to GOOGLE ANALYTICS NOTICE at the end of this policy document.
8. Extensions for the website
9. Final provisions
DATE OF LAST POLICY UPDATE - 31st March 2023
GOOGLE ANALYTICS NOTICE
Web analytics with Google (Universal) Analytics
Our website uses Google (Universal) Analytics, a web analytics service provided by Google Inc. Google Ireland Limited . Google (Universal) Analytics allows an analysis of the use of the website by our users. Cookies are stored on your computer for this purpose. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened prior to transmission within the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We use Google Analytics to enable us to analyze and regularly improve the use of our website. Using the statistics gleaned, we can improve our offer and present it in a more interesting way for you as a user.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available by clicking the following link
COOKIES NOTICE :
Cookies Declaration, Consent Updates and User Enquiries