We appreciate your interest in Swissbit AG and attach great importance to the protection of personal data. In principle, you can visit our website without actively providing us with any personal information. However, certain functions – such as registration, contacting us or subscribing to our newsletter – may require you to provide personal details. Furthermore, technical access data is generated when the website is made available.
We process personal data in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG). This policy explains what data we process, in what context, which service providers we use, and what rights you have. Where consent is required, it will be obtained prior to the relevant processing.
We implement technical and organisational security measures. However, absolute protection cannot be guaranteed when data is transmitted over the internet. If necessary, you may also contact us via other communication channels.
To ensure this statement is clear, we explain key terms from the GDPR:
Information relating to an identified or identifiable natural person. This may include names, contact details, location data and online identifiers.
The natural person whose personal data is being processed.
Any operation or set of operations performed on personal data, such as collection, storage, use, disclosure, alteration or erasure.
The marking of stored personal data to limit its further use.
Automated processing of personal data to analyse or predict personal characteristics or interests.
A form of processing whereby data cannot be directly attributed to a specific individual without additional, separately stored information.
The body which, alone or jointly with others, determines the purposes and means of processing.
An entity that processes personal data on behalf of a data controller.
An entity to whom personal data is disclosed; this may also be a data processor.
An entity other than the data subject, the controller and its processors, or persons directly authorised by them.
A voluntary, informed and unambiguous statement or affirmative action by which a data subject consents to specific processing.
The data controller for the processing operations described on this website is:
Swissbit AG
Industriestrasse 4
9552 Bronschhofen
Schweiz
Telephone: +41 71 913 03 00
Website: www.swissbit.com
Enquiries regarding data protection: privacy@swissbit.com
If you wish to contact our designated Data Protection Officer confidentially regarding matters related to data protection law, you can reach Mr. Eiko Kühne by email at: Datenschutz.Beauftragter@swissbit.com
or by mail at the following address:
Data Protection Officer
Swissbit Germany AG
– Personal and confidential –
Mr. Eiko Kühne
Bitterfelder Str. 22
12681 Berlin
Our website uses cookies and similar technologies. These enable technical functions and may – depending on your consent – be used to analyse website usage or measure the effectiveness of advertising campaigns. Cookies may, for example, contain identifiers that allow a browser to be recognised during a subsequent visit. You can also manage or delete cookies via your browser settings; however, this may mean that not all functions are available without restriction.
We use CookieHub to manage your preferences. In the consent dialogue, you can, in particular, select the optional categories ‘Analytical Cookies’ (statistics) and ‘Marketing Cookies’ (marketing) separately. Consent to statistics does not automatically apply to marketing, and vice versa. Technically necessary functions are provided independently of this, insofar as they are required for the operation of the website.
Google Analytics 4 is only activated once consent has been given for the ‘Statistics’ category. The LinkedIn Insight Tag and the associated LinkedIn conversion events are only activated once consent has been given for the ‘Marketing’ category. Google Tag Manager is only loaded once at least one of the two categories has been approved; its individual tags remain subject to the relevant consent. CookieHub itself is integrated for this purpose independently of Google Tag Manager.
You can change or withdraw your selection at any time via the ‘Cookie Settings’ link in the website footer. Withdrawal applies prospectively. The lawfulness of previous processing operations remains unaffected.
Consent in accordance with Section 25(1) of the TDDDG is required for the storage or retrieval of information on end devices that is not technically necessary. Where personal data is subsequently processed, this is done on the basis of Article 6(1)(a) of the GDPR. For technically necessary processes, the statutory exceptions and other relevant legal bases may apply.
Subject to the necessary consent being obtained, the following cookies, in particular, may be used. Whether a cookie is set in a specific case depends on the particular configuration, the browser and the consent given. The specific selection of cookies and their durations are subject to change.
| Dienst / Cookie | Zweck | Übliche Laufzeit |
|---|---|---|
Google Analytics: _ga | Pseudonymous identification of website visitors | Up to 2 years |
Google Analytics:_ga_<ID> | Session status of the GA4 data stream | Up to 2 years |
Google Analytics / Google Ads:_gac_gb_<ID> | Campaign-related conversion information, where applicable | Up to 90 days |
LinkedIn: bcookie | Browser identification | Up to 1 year |
LinkedIn: bscookie | Recognition of an authenticated browser | Up to 1 year |
LinkedIn: lidc | Selection of data centre | Up to 24 hours |
LinkedIn: UserMatchHistory | Synchronisation of advertising IDs | Up to 30 days |
LinkedIn: AnalyticsSyncHistory | Time of analytics synchronisation | Up to 30 days |
LinkedIn: li_gc | Documentation of cookie consent on LinkedIn | Up to 6 months |
When you visit our website, the servers may process information that is technically necessary. This includes the browser and browser version, operating system, the previously visited page (referrer), subpages accessed, date and time, IP address, internet service provider and other information required for the secure provision of the website and to defend against attacks.
We use this data to deliver the requested content, to ensure technical functionality, for error analysis and to prevent threats. The data from the server logs is always processed separately from the information you provide to us via forms or other communication channels. Where personal data is processed, this is based in particular on our legitimate interest in maintaining a secure and reliable website (Article 6(1)(f) of the GDPR). The retention period is determined by technical and security requirements, as well as the relevant legal provisions.
Where the website offers a registration option, the data you enter in the relevant input form will be processed. The nature and scope of the information required are set out in the specific registration form. We use this information to provide a user account and the content or services offered through it, and to process any related enquiries.
Registration is voluntary, unless it is a prerequisite for the selected service. You may request the rectification of the data or – provided there are no conflicting retention obligations – the erasure of the account or the associated data. The contact details listed in Section 2 are available for such requests. Depending on the specific service, Article 6(1)(b) or (a) of the GDPR may serve as the legal basis.
We use the Salesforce marketing automation platform, provided by Salesforce Inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA, to organise marketing activities, manage newsletters and analyse campaigns. If you subscribe to a newsletter or provide data when contacting us, we may process, in particular, your name, email address, company details and other voluntary information.
The processed data may include, in particular:
Name
Email address
Company informaion
Interactions with emails (e.g., opening emails, clicking on links)
Usage behavior on our website
Technical information (e.g., IP address, browser type, operating system, time of interaction)
Depending on the specific function used, interactions with emails (such as opens or link clicks), information about the use of our website, and technical connection data such as browser type, operating system, IP address and timestamps may also be recorded.
Where processing is based on consent, the legal basis is Article 6(1)(a) of the GDPR. You may withdraw any consent you have given at any time with future effect, for example via the unsubscribe link in a newsletter or by notifying us. To prevent further communications being sent following an unsubscribe, the email address may remain on a block list; this is based on our legitimate interest in complying with your decision to unsubscribe and with legal requirements (Article 6(1)(f) of the GDPR).
In connection with Salesforce, data may be processed outside the European Economic Area, in particular in the USA. Appropriate data protection transfer mechanisms, such as standard contractual clauses, are used for relevant transfers. Further information: https://www.salesforce.com/company/privacy/
We use Google Tag Manager (GTM) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is used to technically manage and trigger scripts and tags for analytics and marketing functions. According to Google, Tag Manager itself does not carry out any independent usage analysis and does not set its own analytics cookies.
The GTM container is only loaded once you have given your consent to statistics or marketing. Prior to such consent, the GTM is not retrieved from Google’s servers. When the container is retrieved, technical connection data – in particular the IP address, details of the request and, where applicable, a referrer URL – may be transmitted to Google. The individual analytics and marketing services managed via GTM are, independently of this, only activated once their respective categories have been authorised. The loading of the container and the processing of technical personal data that takes place in the process are based on your consent in accordance with Article 6(1)(a) of the GDPR.
We use Google Analytics 4 (GA4) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the use of our website and to improve our content and services. Data collection is only activated once you have given your consent to ‘analytical cookies’. For this purpose, we use Google Consent Mode v2, which completely blocks GA4 tracking until consent is given (basic approach).
In particular, the following data may be processed: pages visited, referrer URLs, page views, clicks on contact and login options, other website interactions, usage times, browser and device information, timestamps, approximate geographical location, and pseudonymous user and session identifiers. According to Google, IP addresses of users from the EU are not logged or stored by GA4; they may be used temporarily to derive approximate location data.
Selected interaction events can be measured via GA4. There is no standalone Google Ads conversion tracking via separate Google Ads tags in Google Tag Manager.
The retention period for user-related and event data in GA4 is set to 14 months. The ‘Reset user data on new activity’ setting is enabled. As a result, the retention period for user identifiers resets when new activity occurs; for regular users, a user identifier may therefore remain active for longer than 14 months. The reset applies to data at user level, not to the retention period of individual event data. Aggregated standard reports may be subject to different retention rules.
The legal basis for the use of analytics technologies requiring consent is Section 25(1) of the TDDDG; for the subsequent processing of personal data, it is Article 6(1)(a) of the GDPR. In connection with the use of Google services, personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF). For data transfers covered by the scope of the certification, an adequacy decision has been issued by the European Commission in accordance with Article 45 of the GDPR. Further information: https://policies.google.com/privacy?hl=de, https://policies.google.com/privacy/frameworks?hl=de and https://support.google.com/analytics/answer/12017362?hl=de
For supplementary statistical analysis, we use Matomo Cloud, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo may use cookies to track website visits and behaviour on our website. This may involve the processing of, amongst other things, anonymised IP addresses, page views, referrer URLs, browser and operating system, screen resolution, timestamps and approximate geographical location.
In particular, the following data may be processed:
anonymized IP address
pages visited
referrer URL
browser and operating system used
Screen resolution
Date and time of access
Approximate geographic origin (country/region)
Processing takes place in accordance with our CookieHub consent management system for analytical purposes, based on your consent pursuant to Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may withdraw this consent via the cookie settings. Matomo Cloud processes data on servers in New Zealand in accordance with the website operator’s specifications; for international transfers, the legal requirements under Article 44 et seq. of the GDPR and the applicable Swiss regulations apply. Further information can be found in the provider’s privacy policy.
We use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This enables us to analyse whether visits to our website are linked to LinkedIn campaigns and which pages and selected interactions are accessed or carried out following such a visit. In addition, LinkedIn conversion events can be set up via Google Tag Manager for individual actions on the website, for example to measure the use of contact or registration options.
In particular, the following data may be transmitted to LinkedIn: the URL visited, the referrer URL, IP address, browser and device information, as well as timestamps and details of the actions recorded. LinkedIn may associate this information with a LinkedIn user account as part of its services. According to LinkedIn, IP addresses are truncated or hashed and direct identifiers are removed within seven days; any remaining pseudonymised Insight Tag data is deleted within 180 days. According to the technical support team, Enhanced Matching with additional contact details is not enabled.
The LinkedIn Insight Tag and the associated conversion events are activated exclusively following your consent to ‘marketing cookies’. Consent for statistical purposes alone does not trigger these services. The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You can change or withdraw your selection at any time via CookieHub.
LinkedIn may also process data under its own responsibility in accordance with its privacy policy and the relevant contractual provisions. Personal data may be transferred to LinkedIn Corporation in the USA. LinkedIn Corporation is certified under the EU-US Data Privacy Framework; for transfers covered by this framework, there is an adequacy decision by the European Commission pursuant to Article 45 of the GDPR. LinkedIn also uses standard contractual clauses for certain other transfers. Further information on data processing and your rights in relation to LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/privacy/eu.
To protect our website and forms from automated requests, spam and misuse, we use the Friendly Captcha service provided by Friendly Captcha GmbH, Germany. This involves the browser processing a cryptographic task, which helps to detect automated access attempts.
Technical data may be processed for the purposes of provision and security checks, such as the IP address, browser and device information, the time of the request, and the task set and its solution. According to the provider, IP addresses are not permanently stored for user profiles. The processing is carried out solely for security purposes. The legal basis is our legitimate interest in the secure operation of the website and in protection against unauthorised access (Article 6(1)(f) of the GDPR). Further information: https://friendlycaptcha.com/de/privacy/
If you contact us by email or via a contact form, we process the information you provide in order to deal with your enquiry and for further communication. This may include, in particular, your contact details, the content of your message and associated technical details. Where this relates to the initiation or performance of a contract, processing is carried out on the basis of Article 6(1)(b) of the GDPR and, in other cases, where applicable, on the basis of our legitimate interest in processing enquiries in accordance with Article 6(1)(f) of the GDPR.
Data will only be disclosed where necessary for processing, where a service provider is engaged as a data processor, or where there is a legal obligation to do so. Retention periods are determined by the purpose of processing and, where applicable, statutory documentation requirements.
We retain personal data only for as long as is necessary for the respective purpose or as required by law. If the purpose ceases to apply and there is no further legal basis or retention obligation, the data in question will be erased or its processing restricted. Specific retention rules may apply to individual services; these are described in the relevant sections.
Under the applicable legal provisions, you may be entitled to the following rights in particular. To exercise these rights, please contact the parties listed in Section 2.
You may request confirmation as to whether we are processing personal data relating to you.
You have the right to obtain information about your personal data processed by us and to receive a copy of that data. This includes, amongst other things, the purposes of processing, categories of data, recipients or categories of recipients, the intended retention period or the criteria for determining it, the origin of the data, and information on your other rights as a data subject. In the event of transfers to third countries, you may also request information about the safeguards in place. This is subject to any statutory exceptions.
If your personal data is inaccurate or incomplete, you may request that it be rectified or supplemented.
Subject to the conditions set out in Article 17 of the GDPR, you may request the immediate erasure of your data. This applies, amongst other things, where the purpose of the processing no longer applies, where relevant consent has been withdrawn and no other legal basis exists, where the processing is unlawful, or where there is a statutory obligation to erase the data. Statutory retention obligations and other exceptions may preclude immediate erasure. Where we have made personal data public, we shall take measures, to the extent provided for by law, to inform other controllers of legitimate requests for erasure.
You may request a restriction on processing under the conditions set out in Article 18 of the GDPR, for example whilst the accuracy of the data is being verified, in the event of certain objections, or if you require the data to assert legal claims.
Provided the legal requirements are met, you may receive data you have provided to us in a structured, commonly used and machine-readable format and have it transmitted to another data controller. Direct transmission may be requested, provided it is technically feasible.
Where we process data on the basis of legitimate interests or for the performance of public tasks, you may object on grounds relating to your particular situation. In the case of direct marketing, you may object at any time without giving reasons; this also applies to any associated profiling. In the event of a valid objection, we shall cease the relevant processing in accordance with the statutory provisions.
You may withdraw your consent under data protection law at any time with effect for the future. For analytics and marketing cookies, the ‘Cookie Settings’ link in the footer is also available for this purpose.
Right to lodge a complaint: You may lodge a complaint with a competent data protection supervisory authority in accordance with the applicable provisions. Other rights under the Swiss Data Protection Act remain unaffected.
Depending on the purpose, we base the processing of personal data on different legal grounds: Article 6(1)(a) of the GDPR in the case of valid consent, Article 6(1)(b) of the GDPR for contractually necessary processes or pre-contractual enquiries, Article 6(1)(c) of the GDPR for legal obligations, Article 6(1)(d) of the GDPR to protect vital interests, and Article 6(1)(f) of the GDPR where legitimate interests justify the processing. In particular, Section 25 of the TDDDG also applies to the storage or retrieval of information on end devices.
The relevant sections of this statement explain which legal basis applies in each individual case. The requirements of Swiss data protection law apply in addition, insofar as it is applicable.
Where we process personal data on the basis of legitimate interests, we pursue, in particular, the interest in the secure provision of our online services, the handling of business enquiries, the protection of our systems and the proper conduct of our business activities. When balancing these interests, we take into account the interests and rights of the data subjects.
The respective retention period depends on the specific purpose of processing, statutory or contractual requirements, and existing retention obligations. Once these no longer apply, data will be deleted or blocked in accordance with statutory provisions. For Google Analytics 4 and LinkedIn Insight Tag, the retention periods set out in sections 7 and 9 also apply.
In certain situations, you must provide personal data due to legal provisions or contractual requirements, for example, to process an order, issue an invoice or conclude a contract. Without the necessary information, it may not be possible to conclude a contract or provide a service.
Before providing any data, you may contact our data protection officers to find out whether the relevant information is mandatory and what the consequences of not providing it might be.
To the best of our current knowledge, within the scope of the website processes described here, we do not make any decisions based solely on automated processing that produce legal effects concerning you or significantly affect you in a comparable manner (Article 22 of the GDPR).
This is to be distinguished from possible statistical analyses or the creation of advertising target groups on marketing platforms used. Where such functions are used in connection with this website, the relevant data processing activities are described in the sections on analytics and marketing services.