Cookie Notice

Version dated July 29, 2024

 

Exentis Group AG as the operator of the website (hereinafter “Exentis”, “we” or “us”) takes the protection of personal data very seriously. In the following, we explain which data we collect, process and use on our website using cookies, when and for what purposes.

This Cookie Notice is subject to Swiss law. Because the European General Data Protection Regulation (“GDPR”) may have to be observed for certain forms of data processing, this Cookie Notice is also aligned with the GDPR. It also includes additional disclosures that apply to USA residents (see section 11).

 

1. Responsible person and data protection officer

The controller pursuant to Art. 4 para. 7 GDPR is

Exentis Group AG
Im Stetterfeld 2
CH-5608 Stetten
Switzerland
privacy@exentis-group.com

You can contact us at any time by post or e-mail.

You can contact the person responsible for data protection at our company at any time, e.g. by e-mail to privacy@exentis-group.com or at our postal address with the addition “for the attention of the Data Protection Officer”.

 

2. Use of cookies and similar technologies

2.1. What are cookies and how do we use them?

When you use our website, cookies are stored on your computer or end device (e.g. smartphone, tablet). Cookies are small text files that store information about the use of our website (e.g. (sub)pages visited, number of visits, visit times, time spent on individual pages, browser used, operating system used, etc.) on your computer or device if you allow this via your browser settings. Cookies cannot execute programs or transfer viruses to your computer.

Cookies can have different “lifetime” lengths. The so-called “permanent cookies” remain stored on your computer or end device until their preset “lifetime” expires or you delete them independently from your browser or end device. Permanent cookies are primarily used for the purpose of web analysis, to display interest-based advertising and to analyze and evaluate the effectiveness of advertising. Session cookies, on the other hand, have a fixed lifespan from the outset, which is limited to the user’s browser session. If users close their browser, these cookies are automatically deleted.

Whether a cookie is a first-party or third-party cookie depends on the domain from which a cookie is set on your computer or end device. First-party cookies are cookies that are set by the website that you see in the address bar of your web browser. Third-party cookies, on the other hand, are cookies that are set by a domain other than the one the visitor is currently visiting. Advertising cookies, especially those set by third parties (e.g. media agencies, marketers and advertisers), are often such third-party cookies.

The permanent first-party cookies we use have a lifespan of one or more days to months or years, whereby the cookies we set generally have a maximum lifespan of around two (2) years and are then automatically deleted from your computer or end device.

In addition to cookies, we also use pixels (also known as tracking pixels or web beacons) and other similar technologies such as plug-ins on our website. Pixels are small, invisible graphics that are integrated into the website and can also be used to collect and analyze information on the use of our website by website visitors.

 

2.2. Log files / Information transmitted by your browser

If you use our website for purely informational purposes, i.e. if you do not use one of the services offered on our website (see Privacy Notice), we only collect the data that your browser transmits to our server.

 

2.3. For what purposes and on what legal basis do we and third parties use cookies when you visit our website?

Cookies and similar technologies are used for the following purposes:

The legal basis for the use of cookies and similar technologies on our website, which are absolutely necessary for the provision of our offer in accordance with the above, is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

We only use all other cookies and similar technologies with your express consent. For this purpose, you will be informed about the individual purposes/categories and third-party providers in a cookie banner when you first visit our website and can decide for yourself whether you only want to allow the cookies that are absolutely necessary or allow us and the third-party providers mentioned to set cookies for other purposes/categories as well. You can only select individual categories/purposes by activating the buttons or accept all of them with one click.

 

2.4. Revocation of your consent, deletion of cookies / browser settings

You can revoke your consent at any time by calling up the cookie banner again and changing your settings in the consent options and, for example, deactivating activated categories/purposes. To access the cookie banner, please click on the link “Customize Cookies” which is displayed in the footer of every page of our website.

You can also set your web browser so that you are notified before a cookie is set. You can also set your web browser to reject all cookies or only cookies from third parties. You can also delete cookies that have already been set at any time via your web browser settings.

In connection with cookies and similar technologies used by some advertisers, advertising agencies and marketers for the purpose of displaying usage or interest-based advertising when you visit websites, you can also call up the following preference managers and object to tracking by all or some of the services stored there:

In the following section you will find further detailed information on the individual cookies, tools and similar technologies used on our website.

 

3. What cookies and cookie types are set when you visit our website?

Below you will find information on the individual first and third-party cookies and tools used on our website, both by us and by third parties. Under each tool used, you will also find information on how you can object to the use of cookies and similar technologies for web analysis and advertising purposes (so-called “opt-out”). General information on deleting cookies can also be found below in section 4.

 

3.1. Mandatory cookies or log files

Each time you use the internet, your web browser automatically transmits certain information that we store in so-called log files. This involves the following data, which is required to display our website to you and to ensure stability and security: IP address (Internet Protocol address), date and time of the request, content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software.

This data is only stored by us for a short time and then deleted.

 

3.2. Analysis cookies

Google Analytics 4

Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables your use of our website to be analyzed.

By default, Google Analytics 4 sets cookies when you visit the website, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits.

The information is transferred to Google servers and processed there. Transmission to Google LLC, based in the USA, is also possible.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage. The abbreviated IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The data collected as part of the use of Google Analytics 4 is stored for a period of two (2) months and then deleted.

All processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to our website. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites?hl=en.

Demographic characteristics

We use the special “demographic characteristics” function of Google Analytics 4, which can be used to generate statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two (2) months.

Google Signals

As an extension to Google Analytics 4, our website uses Google Signals to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, subject to your consent to the use of Google Analytics. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the “personalized advertising” function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en

UserIDs

With the “UserIDs” function of Google Analytics 4, we can analyze your activities across devices if you have set up a Google account and log in with this account on different devices.

 

3.3. Marketing cookies

3.3.1. Google AdWords Remarketing / Conversion Tracking

Our website uses the Google AdWords service. Google AdWords is an online advertising program from Google. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google display network (on Google itself, so-called “Google ads” or on other websites).

In addition and as part of the so-called conversion tracking, if you click on an advertisement placed by Google, a cookie is stored on your computer/device with the information that you have clicked on this advertisement.

These cookies lose their validity after thirty (30) days, do not contain any personal data and are therefore not used for personal identification.

You can deactivate interest-based ads on Google and interest-based Google ads on the web (within the Google display network) in your browser by activating the “Off” button at http://adssettings.google.de/anonymous?hl=en.

 

3.3.2. Google Tag Manager

We use the Google Tag Manager of the provider Google, which enables us to integrate and manage so-called website tags or markers on our website interface (e.g. we can integrate the services described above, such as Google Analytics and other Google marketing services, into our website).

Website tags are small code elements that can be used, for example, to measure traffic on our website and user behavior.

Website tag data is stored for the duration of twenty-six (26) months and then deleted.

You can revoke your consent with effect for the future for the marketing cookies and thus the Google Tag Manager at any time. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.

The Tag Manager (which implements the tags) is a cookie-less domain and does not process any user data.

 

3.3.3. HubSpot

We use the HubSpot marketing automation software from the American company HubSpot Inc, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland (“HubSpot”) on our website. HubSpot is an integrated software solution that we use to cover various aspects of our digital marketing, sales and customer relationship management. We also use the tool to analyze our web offerings in order to optimize them and offer you the best possible and user-friendly service.

We use HubSpot for:

The content of our websites and the personal data you provide, for example when using our contact form or registering for our newsletter, as well as the cookies set by HubSpot, are stored on the servers of our software partner HubSpot.

HubSpot uses cookies, which are stored on your computer and enable us to analyze your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages accessed) on our behalf so that we can generate reports on the visit and the pages visited and thus improve our website.

These cookies lose their validity after 30 days and are deleted.

If you generally do not want HubSpot to record your activities on our website and our blog, you can reject this in the cookie message that appears when you first visit our pages. You can revoke your consent to marketing cookies at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.

All information collected by us is also subject to HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy

HubSpot is certified under the terms of the “EU-U.S. Privacy Shield Framework” and is subject to the TRUSTe Privacy Seal. This means that the processing of personal data by certified companies in non-European countries complies with European data protection standards.

You can find more information about HubSpot’s privacy policy here: https://legal.HubSpot.com/legal-stuff

You can find more information about the cookies used by HubSpot here: https://knowledge.HubSpot.com/privacy-and-consent/what-cookies-does-HubSpot-set-in-a-visitor-s-browser

 

3.4. Social plug-ins

We use social plug-ins to give our website users the opportunity to interact with social networks/platforms such as LinkedIn, Facebook, Instagram, X, etc., e.g. by sharing and liking content on our website, and to make our offer more interesting and user-friendly for you.

 

3.4.1. (Static) usage data that we receive from the social networks

In the case of Facebook and Instagram, we receive automated daily statistics relating to our fan pages/accounts from Facebook and Instagram via the Facebook Insights and Instagram Insights functionalities. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views and information on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be related to individual persons. They are not identifiable to us.

 

3.4.2. Data that the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and no user account is required for the respective social network.

Please note, however, that the social networks also collect and store data from website visitors without a user account when the respective social network is accessed (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no influence whatsoever. Details on this can be found in the privacy policy of the respective social network (see the corresponding links at the end of this section).

If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts/contributions and/or participate in competitions or similar campaigns organized by us on the fan pages/accounts and/or contact us via messenger functions, you must first register with the respective social network and provide personal data.

Plug-ins

Our website also uses plug-ins from the social networks LinkedIn, X and YouTube, which are operated by LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, X Corporation, One Cumberland Place, Fenian Street, D02 AX07 Dublin 2, Ireland and Google.

When you visit our website, which contains one of these plug-ins, your internet browser establishes a direct connection to the corresponding server (LinkedIn, X or YouTube/Google) and the content of the plug-in is transmitted by the plug-in operator directly to your internet browser, which establishes a connection to the website. By connecting to these plug-ins, the corresponding operator receives the information that our website has been accessed, even if you are not registered or logged in to the corresponding social network.

The information (including your IP address) is transmitted by your internet browser directly to a server of the social network and stored there. It cannot be ruled out that these social network servers may also be located outside the EU/EEA and that your personal data may be stored there and passed on to third parties.

If you are logged in to the corresponding social network, your visit to the website can be tracked directly in your corresponding profile. If you interact with these plug-ins, for example by clicking the “Like” button or leaving a comment, this information is transmitted directly from your internet browser to the social network and stored there.

If you do not want the social networks to associate your visit to the website with your profile, you must log out of the respective social network before visiting the website.

Data processing

We have no influence on the data processing by the social networks in the context of your use. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies as part of the registration and use of social networks can be found in the data protection provisions/cookie guidelines of the social networks. There you will also find information on your rights and options to object:

LinkedIn: https://linkedin.com/legal/privacy-policy

Facebook: https://facebook.com/privacy/policy

Instagram: https://help.instagram.com/196883487377501/?helpref=hc_fnav&cms_id=196883487377501

X: https://privacy.x.com/en

YouTube: https://www.youtube.com/intl/en_us/howyoutubeworks/our-commitments/protecting-user-data

 

4. Deletion of cookies from third-party providers in connection with usage or interest-based advertising

In connection with cookies and similar technologies used by some advertisers, advertising agencies and marketers for the purpose of displaying usage or interest-based advertising when you visit websites, you can also call up the following preference managers and object to tracking by all or some of the services stored there:

 

5. Your rights

You have the following rights under the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR):

Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so or need it to assert claims.

You also have the right to enforce your claims in court or, depending on the applicable data protection law, to complain to a data protection supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement about the processing of your personal data by us if you believe that the processing of your personal data is unlawful.

The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

If you have given us your consent to process your data, you can revoke this at any time with effect for the future. This does not affect the legality of the processing of your data until you withdraw your consent.

To assert your rights or for other data protection concerns, you can contact us at any time via the contact channels listed in section 1 above and/or the contact channels listed in our imprint.

We would like to point out that in the context of the use of our website and the use of our services offered on it, you will not be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

 

6. Supplementary information on your right to object

We would also like to point out that if your personal data is processed on the basis of a legitimate interest in the context of the balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR and/or your personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.

 

7. Data transfer to third parties/recipients, use of service providers – Transfers abroad

We share your data as part of our business activities and for the purposes set out in section 2.3 to the extent permitted and deemed appropriate by us, to third parties, either because they process it for us or because they wish to use it for their own purposes. We ensure that we only disclose or transfer your personal data to third parties if this is necessary to fulfill the contract with you, if we have a legitimate interest, if you have given your consent and/or if we are obliged to do so by law or by official or court orders. In addition, we use service providers who provide and use services for us in connection with web hosting, as well as cloud or web-based software solutions from service providers that enable us to manage and host personal data in the cloud with them in order to relieve our own servers and work effectively with new software solutions. We have concluded order processing agreements with the respective service providers, which ensure that the respective service providers do not process the data for their own purposes, but only within the scope of our instructions and on our behalf.

The recipients are therefore essentially the following bodies:

all “recipients” together.

These recipients are mainly located in the EEA or Switzerland. However, some of our recipients (in particular service providers and a Group company) are located outside Switzerland and the EEA, mainly in the USA, a country with inadequate data protection under Swiss and EU law. If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection law (for this we use the revised standard contractual clauses of the European Commission, which are available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?, for Switzerland together with the necessary adjustments under Swiss law), unless the recipient is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption clause.

 

8. Storage period and deletion of data

Even without a special request, we naturally comply with our obligations to delete personal data (e.g. in accordance with Art. 17 GDPR) and therefore only store data for as long as is necessary for the provision of the desired service or the respective purpose.

We only store personal data from cookies for as long as the lifespan of the cookie allows, after which we delete the personal data.

Please note, however, that deletion will be replaced by blocking or restriction of processing if deletion conflicts with statutory retention obligations that we must fulfill, or if we must protect our legitimate interests, namely to protect ourselves from claims or to enforce such claims.

 

9. Data security

Despite the licensed SSL encryption we use for the website, we would like to point out that Internet-based data transmission has security gaps that lie outside our web server, such as nodes in the international network.

 

10. Amendments

We may amend this Cookie Notice at any time without prior notice. The current version published on our website applies.

 

11. Further information for users from the USA

a) California’s Shine the Light Law

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our website who are California residents to request certain information regarding our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please send an e-mail to na_sales@exentis-group.com or write to us at Exentis North America Inc., 183 Bucknam Street, Everett, MA 02149. You may only make one such request during the course of a calendar year. We do not disclose any personal data to third parties for their direct marketing purposes without your approval. We “share” personal data within the Exentis group of companies for marketing purposes.

b) Amendments and updates to this Cookie Notice

We will notify you of any material amendments to this Cookie Notice. Please review this Cookie Notice whenever you visit the website or use our services or when prompted when we collect personal data from you offline to check if there have been any changes, so that you know the terms that apply to you at that time. At the top of this Cookie Notice, you can see when this Cookie Notice has been updated. Continued use of our website or use of our services following such changes constitutes the acceptance of those changes.

c) Rights of data subjects

Additionally, to the rights under section 5 of this Cookie Notice, you have the following the rights:

Please be informed that if you make certain requests (e.g., request to delete personal data), we may no longer be able to offer you the use of the website or portions thereof. We are not under any obligation to maintain a back-up of personal data.

d) Response to consumer requests

We will respond to your request related to your personal data only if we can verify your identity or your authority to make the request, and if we can confirm that the personal data relates to you or the person on whose behalf you are submitting the request.

Please be informed that if you make certain requests, we may no longer be able to offer you the use of the website or portions thereof. We are not under any obligation to maintain a back-up of such personal data.

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at na_sales@exentis-group.com.

We endeavor to respond to the substance of your verified consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding receipt of your request. Upon your request, unless it is impossible or involves disproportionate effort, we will also provide you with disclosures beyond the 12-month period for personal data. If we cannot comply with your request, the response we provide will also explain the reasons why. We will provide your personal data in a format that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

You may only submit a request to know once within a 12-month period unless the applicable data privacy law states otherwise.

We do not charge a fee to process or respond to your verifiable consumer request unless your request is without basis or excessive, in particular if we have received repeated similar requests from you. If we determine that the request warrants charging a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

e) Minors

We do not “sell” and/or “share” the personal data of consumers we know to be under eighteen (18) years of age unless we receive affirmative authorization from the parent or guardian of a minor under the age of eighteen (18).

If you wish to submit a privacy request, or ask a question, on behalf of your minor child, please contact us directly at na_sales@exentis-group.com. Note that you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal data, and you are authorized to submit the request on your child’s behalf (i.e., you are the child’s legal guardian or authorized representative).

f) U.S. contact information

If you have any questions or comments about this Cookie Notice, the ways in which we collect and use your personal data, your choices and rights, or wish to exercise your rights under this Cookie Notice, please contact us at:

Phone: +1 978 987 1729
Website: https://www.exentis-group.com/exentis-usa
E-mail: na_sales@exentis-group.com
Mailing Address: Exentis North America Inc., 183 Bucknam Street, Everett, MA 02149

If you need to access this Cookie Notice in an alternative format due to a disability, please contact na_sales@exentis-group.com or +1 978 987 1729.