General privacy policy of QuantArea AG
With this privacy policy we, QuantArea AG (hereinafter QuantArea), describe how we collect and process personal data. This privacy policy is not necessarily a comprehensive description of our data processing. It is possible that other data protection declarations or general terms and conditions may apply to certain circumstances.
In this privacy policy, the term “personal data” refers to all information that identifies an identified or identifiable natural person (data subject) or could reasonably be used to identify a natural person.
If you provide us with the personal data of other persons (e.g. family members, work colleagues), please ensure that the persons concerned are aware of this privacy policy and that you only provide us with their data if you are authorised to do so and this personal data is correct.
This Privacy Policy is in accordance with the EU General Data Protection Regulation (“GDPR”) and the Swiss Data Protection Act (“DPA”). However, the application of these laws depends on the individual case.
A. Person responsible
For the data processing described here, the responsible entity is QuantArea, reachable at
QuantArea AG
Bernapark 28
3066 Stettlen
info@quantarea.ch
+41 31 561 17 00
If you have any questions about the processing of your personal data or other data protection concerns, you can contact us using these contact details.
B. Purpose of data processing and legal basis
We use the data collected primarily to conclude and fulfil contracts with our customers and business partners, in particular in connection with the provision of financial services and the purchase of products and services from our suppliers and subcontractors, as well as to fulfil domestic and foreign legal obligations.
In addition, in accordance with applicable law and where appropriate, we may process personal data for the following purposes, which are in our (or, where applicable, a third party’s) legitimate interest, such as:
- Providing and developing our products, services and websites, apps and other platforms on which we operate;
- Communicating with third parties and processing their enquiries (e.g. job applications, media enquiries);
- Advertising and marketing (including the organisation of events), unless you have objected to the use of your data for this purpose (if you belong to our customer base and receive advertising, you can object at any time and we will put you on a blacklist against further advertising mailings);
- Assertion of legal claims and defence in legal disputes and hearing proceedings;
- Preventing and investigating criminal offences and other misconduct;
- Ensuring our operations, including our IT, websites, apps and other applications;
- Acquisition and disposal of business divisions, companies or parts of companies and other corporate transactions and the associated transfer of personal data as well as measures for corporate governance and compliance with legal and regulatory obligations and internal regulations of the company;
If you have given us your consent to process your personal data for specific purposes (e.g. when registering to receive newsletters), we will process your personal data within the scope of and on the basis of this consent, unless we have another legal basis, if we require one. Consent that has been given can be revoked at any time, but this does not affect the data processed before the revocation.
C. Collection and processing of personal data
We primarily process personal data that we receive from our customers and other business partners as well as from other persons in the context of our business relationships with them or that we collect from users when operating our websites, apps and other applications.
Insofar as we are permitted to do so, we obtain certain personal data from publicly accessible sources (e.g. debtor register, land register, commercial register, press, Internet) or we receive such information from authorities or other third parties (e.g. sales partners, custodian banks). Apart from the data that you have provided to us directly, the categories of data that we receive about you from third parties include information from public registers, data that we receive in connection with administrative or court proceedings, information in connection with your professional role and activities (e.g, to conclude and execute contracts with your employer), information about you in correspondence and in discussions with third parties, information about you provided to us by persons associated with you (family members, advisors, legal representatives, etc.) to conclude or execute contracts with you or with your involvement (e.g. powers of attorney), information relating to statutory regulations such as anti-money laundering, banking and insurance regulations, data relating to the processing of personal data, data relating to the processing of personal data, data relating to the processing of personal data and data relating to the processing of personal data. e.g. to combat money laundering, bank details, details about you that can be found in the media or on the internet (if specified in individual cases, e.g. in connection with job applications, media reports, marketing/sales, etc.), your address and any interests and other socio-demographic data (for marketing purposes), data in connection with your use of our websites (e.g. IP address, MAC address of your smartphone or internet connection), IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of your visit, pages and content accessed, applications used, referring website, localisation data).
In principle, we store this data for 12 months after the end of the processing purpose. This period may be longer if this is necessary for evidentiary reasons or to fulfil legal or contractual requirements.
D. Cookies / tracking and other relevant information about the use of our website technical data
When you visit our website, your user-specific data (e.g. IP address, web browser, operating system) and technical data (e.g. URLs of pages accessed, execution of a search query) are collected and analysed in anonymised form.
The aforementioned data is collected and processed for the purposes of system security and stability, error and performance analysis and for internal statistical purposes and enables us to optimise our website.
When you subscribe to our content or submit a contact form/customer login, we process the data required to provide the requested service. Depending on the service, the following data may be processed Email address, first name, surname, title, full address, subject and message.
If you have given us your consent to process your personal data for specific purposes (e.g. if you subscribe to a newsletter or make an enquiry), we will process your personal data within the scope of and on the basis of this consent, unless we have another legal basis, if we require one. Consent that has been given can be revoked at any time; however, this has no effect on the data processed up to the time of revocation.
We generally store technical data for 6 months.
Communication data:
If you contact us via the contact form, by e-mail, telephone or chat, by letter or by other means of communication, we collect the data exchanged between you and us, including your contact details and the marginal data of the communication. If we record or listen to telephone conversations or video conferences, e.g. for training and quality assurance purposes, we will inform you of this. Such recordings may only be made and used in accordance with our internal guidelines and legal requirements.
In principle, we store this data for 12 months from the last exchange with you. This period may be longer if this is necessary for evidentiary reasons, to fulfil legal or contractual requirements or for technical reasons. Emails in personal mailboxes and written correspondence are generally stored for at least 10 years. Recordings of (video) conferences and chats are generally kept for 24 months.
Cookies and their use:
In some cases, we use “cookies” to customise our offer as precisely as possible to your needs. Cookies are small files that cannot perform any actions on their own and are stored on your computer or mobile device when you visit or use one of our websites. Cookies store specific settings via your browser and data relating to the exchange with the website via your browser. If a cookie is activated, it can be assigned an identification number that identifies your browser and enables the information contained in the cookie to be used. There are basically two different types of cookies: temporary cookies and permanent cookies. We use temporary cookies, which are automatically deleted from your mobile device or computer at the end of the browser session. We also use permanent cookies to save user settings (e.g. language, auto-login) in order to understand how you use our services and content. These remain stored on your computer or mobile device for a long time after the browser session. They are automatically deactivated after a certain period of time.
Nevertheless, you can set your browser so that it rejects cookies, only stores them for one session or deletes them prematurely. Most browsers are preset to accept cookies. If you block cookies, it is possible that certain functions (such as language settings) will no longer be available to you.
QuantArea allows partner companies that provide services for QuantArea or that are integrated into our website to store cookies if this is necessary from a technical point of view and the use of cookies is proportionate. QuantArea has no control over how cookies are used outside our website.
By continuing to use our website and / or agreeing to this privacy policy, you consent to us storing cookies and thus collecting, storing and using personal usage data even after the browser session has ended (“permanent cookies”). You can object to this at any time by changing the default setting of your browser so that it rejects (third-party) cookies.
Google Analytics and similar services:
We may use Google Analytics or similar services on our website with the aim and intention of designing and continuously optimising our website to meet your needs. These are third-party services that may be based in any country in the world (in the case of Google Analytics, Google Ireland Ltd. (based in Ireland), Google Ireland uses Google LLC (based in the USA) as a sub-processor (both “Google”), www.google.com) and which enable us to measure and evaluate the use of our website (on an anonymised basis). For this purpose, permanent cookies are used, which are set by the service provider. We have configured the service so that the IP addresses of visitors are shortened by Google in Europe before they are forwarded to the USA and can then no longer be traced. We have switched off the “Data forwarding” option and the “Signals” option. Although we can assume that the information we pass on to Google is not personal data for Google, it is possible that Google can use the data collected to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these people for its own purposes. If you have registered with the service provider, the service provider will also know your identity. In this case, your personal data will be processed by the service provider in accordance with its data protection provisions. The service provider only provides us with data about the use of the respective website (but no personal information about you).
When you use our website, pseudonymised user profiles are created and, as explained above, small text files stored on your computer are used. The information generated by such cookies about your use of this website is transmitted to the servers of the providers of these services, stored there and processed for us. In addition to the data mentioned above, we receive the following information:
- Navigation path that a visitor takes on the website
- Time spent on the website or subpage
- Subpage on which the website is left
- Country, region or city from where access is made
- End device (type, version, colour depth, resolution, width and height of the browser window)
- Returning or new visitor
The tools, programmes and instruments that we use to analyse web behaviour include Google Analytics, Google Tag Manager, Google Ads, YouTube (embedded videos) and MailChimp.
The information generated by cookies about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for us as website operators, and to provide other services related to website usage and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies by adjusting your browser settings. However, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
E. Disclosure of Data to Third Parties and Transfer of Data Abroad
In the course of our business activities and in accordance with the purposes of data processing mentioned above, we may disclose data to third parties where such disclosure is permissible and we deem it appropriate for them to process the data for us or, where applicable, for their own purposes. In particular, the following categories of recipients may be affected:
- Our service providers (e.g., legal support, risk management & compliance, IT providers, CRM system, data & financial information platform)
- Domestic and foreign authorities, official bodies, and courts
- Other parties involved in potential or actual legal proceedings
Some recipients are located in Switzerland, while others may be located in any country worldwide. In particular, you should expect your data to be transferred to any country where our service providers (including Microsoft) are located.
If a recipient is located in a country without adequate legal data protection, we require the recipient to comply with data protection (we use the revised standard contractual clauses of the European Commission, which you can access here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is subject to a legally recognized framework for ensuring data protection and we cannot rely on an exemption. An exemption may apply, for example, in the case of legal proceedings abroad, as well as in cases where there is an overriding public interest or where fulfilling a contract requires disclosure, if you have consented, or if the data has been generally made available by you and you have not objected to the processing.
F. Duration of Data Storage
Your data, including personal data, will only be processed and stored for as long as necessary to fulfill our contractual and legal obligations or the purposes pursued with the processing, potentially for the duration of the entire business relationship and beyond due to legal retention obligations and documentation requirements. It is possible that personal data may be retained for the period during which claims can be asserted against our company and to the extent we are otherwise legally obliged to do so or if legitimate business interests require it (e.g., for evidence and documentation purposes). Once your personal data is no longer needed for the aforementioned purposes, it will be deleted or anonymized, where possible. Shorter retention periods of 30 days or less apply to operational data (e.g., system logs).
G. Data Security
We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized access and misuse. These measures include issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of passwords, data storage, and transmission, pseudonymization, and controls.
We cannot guarantee the security of data transmission over the internet. There is a certain risk of third-party access, especially when transmitting data via email.
H. Your Rights
Subject to applicable law, you have the right to information, correction, and deletion of your personal data, the right to restrict processing or object to our processing of data, particularly for direct marketing purposes, profiling for direct marketing purposes, and other legitimate interests in processing, as well as the right to receive certain personal data for transmission to another controller (data portability). Please note, however, that we reserve the right to assert legal restrictions on our part, for example, if we are obliged to retain or process certain data, have an overriding interest (to the extent we may rely on such interests), or need the data to assert claims.
You have already been informed of the possibility of objecting/withdrawing consent at any time. Please also note that exercising these rights may conflict with your contractual obligations and may have consequences such as premature termination of the contract and may incur costs. If this is the case, we will inform you in advance, unless otherwise agreed contractually.
In general, exercising these rights requires you to prove your identity (e.g., by providing a copy of identity documents if your identity is not otherwise apparent or verifiable). To exercise these rights, please contact us using the contact details provided above.
Furthermore, each data subject has the right to assert their rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
I. Profiling
We may partially automatically process your personal data to evaluate certain personal aspects (profiling). Profiling allows us, in particular, to better inform and advise you about products that may be relevant to you. For this purpose, we may use evaluation tools that allow us to communicate with you and, if necessary, advertise to you, including market and opinion research.
J. Changes to this Privacy Statement
We reserve the right to change this Privacy Statement at any time without prior notice. The current version published on our website shall apply. If the Privacy Statement forms part of an agreement with you, we will notify you of any changes by email or by other appropriate means.