Privacy policy (EU)
Privacy Policy
Data protection and data security are important to Dr. Kelly AG (CHE-326.432.472), Luzernerstrasse 72, 6333 Hünenberg See (hereinafter “Dr. Kelly AG” or “we”). We process your personal data responsibly, in accordance with the applicable legal provisions and in accordance with this Privacy Policy.
1. Content of this Privacy Policy
In this Privacy Policy, we inform you how and for what purposes we collect and process personal data when you visit our website (www.drkelly.ch), use our services, otherwise enter into a contractual relationship with us, communicate with us, or otherwise interact with us.
2. Controller responsible for data processing
The entity responsible for data processing is:
Dr. Kelly AG (CHE-326.432.472)
Luzernerstrasse 72
6333 Hünenberg See
Switzerland
info@drkelly.ch
unless otherwise communicated in individual cases, for example in additional privacy policies, forms, or contracts.
3. Categories of processed personal data
We process various categories of data about you. The most important categories are as follows:
- Technical data:
When you use our website or other electronic services (e.g. free Wi-Fi), we collect the IP address of your device and other technical data to ensure the functionality and security of these services. This also includes logs in which the use of our systems is recorded. To ensure functionality, we may assign you or your device an individual code (e.g. in the form of a cookie). Technical data alone generally does not allow conclusions to be drawn about your identity. - Communication data:
When you contact us via the contact form on our website, by email, telephone or chat, by post, or via other communication channels, we collect the data exchanged between you and us, including your contact details and metadata of the communication. If we wish or are required to verify your identity (e.g. in the case of an access request or an application for media access), we collect data to identify you (e.g. a copy of an identity document). - Registration data:
Certain services and offerings (e.g. free Wi-Fi access) can only be used with a user account or registration, which may be carried out directly with us or via external login service providers. In this context, you must provide certain data, and we collect data on the use of the service or offering. - Master data:
Master data refers to basic data that we require in addition to contract data (see below) for the handling of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details, and further information. - Contract data:
This includes data arising in connection with the conclusion or execution of a contract, such as information on contracts and services to be provided or already provided, as well as data from the pre-contractual phase. - Behavioral and preference data:
Depending on our relationship with you, we aim to better understand you and tailor our products, services, and offerings accordingly. For this purpose, we collect and use data about your behavior and preferences (in particular on our website). We do this by evaluating information about your behavior within our environment and may also supplement this information with data from third parties, including publicly available sources. On this basis, we may calculate, for example, the likelihood that you will use certain services or behave in a certain way. - Other data:
We also collect data about you in other situations. In connection with administrative or judicial proceedings, for example, data may arise (such as files, evidence, etc.) that may also relate to you. For reasons of health protection, we may also collect data (e.g. as part of protection concepts). We may receive or create photographs, videos, and audio recordings in which you may be identifiable (e.g. at events, via security cameras, etc.). We may also collect data on who enters certain buildings and when or has corresponding access rights (including access controls based on registration data or visitor lists) or who uses our infrastructure and systems and when.
Many of the above-mentioned data are provided by you directly (e.g. via forms, during communication with us, in connection with contracts, when using the website, etc.). You are not obliged to provide such data, subject to individual cases (e.g. legally required protection concepts). If you wish to enter into contracts with us or use services, you must also provide certain data as part of your contractual obligations, in particular master data or contract data. When using our website, the processing of technical data is unavoidable. For behavioral and preference data, however, you generally have the right to object.
4. Provision of our website and use of cookies
Creation of log files
When you access our website (www.drkelly.ch), certain technical data (server log files) are stored for a short period of time. This includes the IP address and operating system of your device, the date and time of use, and the type of browser used to access the website. This information does not allow any conclusions to be drawn about your identity.
Cookies
We use cookies and cookie-like technologies on our website. These are small text files stored on your device via your browser. When you access our website, a cookie may be stored on your operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
You can generally restrict or completely disable the use of cookies at any time via your browser settings. Strictly necessary cookies are required for the use of our services and cannot be disabled. You can also delete cookies stored on your device via your browser settings.
We currently use services from the following providers and advertising partners (insofar as they use data or cookies set on your device for advertising control):
- Google Analytics:
We use Google Analytics, a service of Google Ireland Limited (registration number: 368047 / VAT ID: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Performance cookies are used to track visitor behavior on the website (duration, frequency of pages visited, geographic origin of access, etc.) and to generate reports on website usage. Information on Google Analytics data protection can be found at:
https://support.google.com/analytics/answer/6004245
If you do not agree with this data processing, you can prevent it by installing the Google Analytics opt-out browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=de - Cookiebot:
We use Cookiebot (registration number: DK34624607), Havnegade 39, 1058 Copenhagen, Denmark, to store the consent status of website visitors for cookies on the current domain. Privacy information can be found at:
https://www.cookiebot.com/de/privacy-policy/ - Pipedrive:
We use Pipedrive (registration number: HRB211469B / VAT ID: 331778379) to distinguish between humans and bots. Privacy information can be found at:
https://www.pipedrive.com/en/privacy - TikTok:
We use TikTok, a service of TikTok Technology Limited and TikTok Information Technologies UK Limited, to embed videos from the platform on our website. When videos are played, TikTok sets cookies to collect information about user behavior. Privacy information can be found at:
https://www.tiktok.com/legal/page/eea/privacy-policy/de
5. Social Media
To stay in contact with you and present ourselves, we maintain a presence on the following social media platforms: Facebook, TikTok, LinkedIn, Instagram, and YouTube. Social plug-ins from these networks are used on our website. These plug-ins may transmit information, including personal data, to the service provider and may be used by them.
We prevent unconscious and unwanted data collection and transmission to the service provider. The plug-in is only activated when you click on it. Only then is information collected and transmitted to the platform provider. Prior to this, no data is transferred to the platform operators.
Further information on data processing by the platform operators can be found in their respective privacy policies, including information on countries of data processing, your rights, and how to exercise them. We currently use the following platforms:
- Facebook
Responsible: Facebook Ireland Ltd., Dublin, Ireland
Privacy policy: www.facebook.com/policy - TikTok
Responsible: TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Ireland
Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de - LinkedIn
Responsible: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy - Instagram
Responsible: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Privacy policy: http://instagram.com/about/legal/privacy/ - YouTube
Responsible: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: https://www.youtube.com/static?gl=DE&template=terms&hl=de
6. Purpose of processing
We process your personal data primarily to inform you about our services and to provide, document, and bill our services in accordance with contractual and legal obligations.
Additionally, we process your personal data for the following purposes:
- responding to your inquiries and communicating with you;
- processing registrations or orders;
- processing job applications;
- providing the website;
- analyzing and optimizing website usage;
- developing and improving products and services;
- marketing and advertising;
- optimizing our content on corporate social media pages;
- fulfilling legal obligations; and
- enforcing legal claims.
We have a legitimate interest corresponding to these purposes. Some processing is also necessary to fulfill contractual obligations or legal duties (e.g. retention obligations). On this basis, we process personal data where and insofar as applicable data protection law requires a legal basis or justification.
7. Legal basis for processing
Where we request your consent for specific processing activities, we inform you separately of the relevant purposes. You may revoke consent at any time with effect for the future by written notice (by post) or, unless otherwise specified, by email.
Where consent is not requested, we base processing on the necessity for the initiation or execution of a contract or on legitimate interests of ourselves or third parties, in particular for the purposes described in Section 6. This includes marketing our products and services, better understanding our markets, and operating and developing our business securely and efficiently.
8. Data security and retention period
We store personal data only to the extent and for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.
To protect the integrity and confidentiality of personal data, we implement appropriate technical and organizational measures against loss, destruction, unauthorized access, alteration, or disclosure. These include access controls, authorization controls, and procedures for regularly reviewing and evaluating the effectiveness of such measures.
9. Disclosure of your personal data
Recipients
To achieve the purposes described in this Privacy Policy, it may be necessary to disclose personal data to third parties. These include:
- other group companies;
- external service providers;
- suppliers and business partners; and
- (where applicable) authorities and courts.
Transfers abroad
As explained above, data may be disclosed to entities not only in Switzerland. Your data may therefore be processed in Europe and the United States, and in exceptional cases, in any country worldwide.
We primarily process and store personal data in Switzerland, the European Union (EU), and the European Economic Area (EEA), i.e. in countries with adequate data protection. In certain cases, personal data may also be disclosed to recipients outside these areas. In such cases, we ensure adequate protection in accordance with data protection regulations, in particular through standard contractual clauses, binding corporate rules, or additional technical measures such as encryption or pseudonymization.
Please note that data exchanged via the internet is often routed through third countries. Your data may therefore be transferred abroad even if sender and recipient are located in the same country.
10. Your rights regarding your personal data
Applicable data protection law grants you the right, under certain circumstances, to object to data processing, particularly for direct marketing, profiling for direct advertising, and other legitimate interests.
You have the following rights regarding your personal data:
- the right to obtain information on whether and which personal data we store and process;
- the right to receive or transfer a copy of your personal data in a common format;
- the right to correction of your personal data;
- the right to deletion of your personal data;
- the right to withdraw consent where processing is based on consent; and
- the right to object to the processing of your personal data.
Please note that legal requirements, restrictions, and exceptions apply to these rights. Where legally permitted, we may refuse requests to exercise these rights.
To exercise your rights, please contact the responsible party (see Section 2).
You also have the right to lodge a complaint with the competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).
11. Changes to this Privacy Policy
We may amend this Privacy Policy at any time, particularly if our data processing changes or new legal requirements apply. The current version published on our website applies. If this Privacy Policy is part of an agreement with you, we will inform you of updates by email or other appropriate means.
Hünenberg See, November 2024