Privacy policy
Privacy policy
The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Catrade AG
Industriestrasse 15
6233 Büron
Phone: 0627375560
Email: info@catrade.ch
Website: http://www.catrade.ch/
General information
Pursuant to Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DPA), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.
In cooperation with our hosting providers, we endeavor to protect the databases as effectively as possible against unauthorized access, loss, misuse, or falsification.
We point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. It is not possible to provide complete protection of data against access by third parties.
By using this website, you consent to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as the pages visited or the names of the files accessed, as well as the date and time, are stored on the server for statistical purposes without this data being directly associated with you. Personal data, particularly names, addresses, or email addresses, is collected on a voluntary basis wherever possible. The data will not be disclosed to third parties without your consent.
Processing of personal data
Personal data means all information relating to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing includes any operation performed on personal data, regardless of the means and procedures used, in particular retaining, disclosing, collecting, deleting, storing, modifying, destroying, and using personal data.
We process personal data in accordance with Swiss data protection law. In addition, insofar as and to the extent that the EU GDPR is applicable, we process personal data on the following legal bases in connection with Article 6(1) GDPR:
Consent (Article 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - Processing is necessary to comply with a legal obligation to which the controller is subject.
Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - Processing is necessary to protect the vital interests of the data subject or another natural person.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) - Processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data take precedence.
Application process as a pre-contractual or contractual relationship (Art. 9 para. 2 lit. b GDPR) - Where special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data, such as severe disability status or ethnic origin) are requested from applicants as part of the application process so that the controller or the data subject can exercise their rights arising from employment law and the law of social security and social protection and fulfil their related obligations, such data are processed pursuant to Art. 9 para. 2 lit. b GDPR, in cases involving the protection of the vital interests of applicants or other persons pursuant to Art. 9 para. 2 lit. c GDPR, or for the purposes of preventive or occupational medicine, the assessment of an employee’s fitness for work, medical diagnosis, healthcare or treatment in the health or social sector, or the management of systems and services in the health or social sector pursuant to Art. 9 para. 2 lit. h GDPR. Where special categories of data are disclosed on the basis of voluntary consent, they are processed on the basis of Art. 9 para. 2 lit. a GDPR.
We process personal data for as long as necessary for the respective purpose or purposes. Where longer retention periods apply due to legal or other obligations to which we are subject, we restrict processing accordingly.
Key legal bases
Pursuant to Article 13 GDPR, we inform you of the legal bases for our data processing. If the legal basis is not specified in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing to perform our services and implement contractual measures, as well as to respond to inquiries, is Article 6(1)(b) GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) GDPR. If the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
Security measures
In accordance with the statutory requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood of occurrence and extent of the threat to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input, disclosure, safeguarding of availability, and segregation of the data. We have also established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to threats to data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and data protection-friendly default settings.
Transfer of personal data
As part of our processing of personal data, the data may be transferred or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, service providers commissioned with IT-related tasks or providers of services and content integrated into a website. In such cases, we comply with the statutory requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.
Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing takes place as part of using third-party services or disclosing or transferring data to other persons, bodies, or companies, this is done only in accordance with legal requirements.
Unless expressly consented to or required by contract or law, we process data in third countries only where there is a recognized level of data protection, a contractual obligation through so-called standard data protection clauses of the European Commission, certifications, or binding internal data protection regulations (Articles 44 to 49 GDPR, European Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Privacy policy for cookies
This website uses cookies. Cookies are text files that contain data from websites or domains visited and are stored by the user's browser on their computer. A cookie is primarily used to store information about a user during or after their visit to an online service. The stored information may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as "user IDs")
The following cookie types and functions are distinguished:
Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their browser.
Persistent cookies: Persistent cookies remain stored even after the browser is closed. This makes it possible, for example, to save the login status or display preferred content directly when the user visits a website again. The interests of users, which are used to measure reach or for marketing purposes, can likewise be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies (also known as third-party cookies): Third-party cookies are primarily used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or strictly necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g., to store logins or other user inputs or for security reasons).
Statistics, marketing, and personalization cookies: Cookies are also generally used as part of measuring reach and when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles serve, for example, to display content to users that corresponds to their potential interests. This process is also referred to as "tracking", i.e., monitoring users' potential interests. If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or as part of obtaining consent.
Information on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the consent you have given. Otherwise, data processed using cookies is processed on the basis of our legitimate interests (e.g., in the economical operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations, on that basis.
Storage duration: Unless we provide you with explicit information about the storage duration of permanent cookies (e.g., as part of a so-called cookie opt-in), please assume that the storage duration may be up to two years.
General information on revocation and objection (opt-out): Depending on whether processing is based on consent or a legal authorization, you have the option at any time to revoke consent that you have given or object to the processing of your data through cookie technologies (collectively referred to as "opt-out"). You can initially submit your objection using your browser settings, for example by disabling the use of cookies (although this may also restrict the functionality of our online offering). You can also object to the use of cookies for online marketing purposes through various services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you may find further information on exercising your right to object in the details concerning the service providers and cookies used.
Processing of cookie data based on consent: We use a cookie consent management procedure under which users' consent to the use of cookies, or to the processing and providers specified as part of the cookie consent management procedure, is obtained and can be managed and withdrawn by users. The consent declaration is stored so that it does not have to be requested again and so that consent can be demonstrated in accordance with legal obligations. Storage may take place on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to associate the consent with a user or their device. Subject to individual information about the providers of cookie management services, the following information applies: Consent may be stored for up to two years. A pseudonymous user identifier is generated and stored together with the time of consent, information about the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and end device used.
Types of data processed: Usage data (e.g., websites visited, interest in content, access times), meta and communication data (e.g., device information, IP addresses).
Data subjects: Users (e.g., website visitors, users of online services).
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).
Privacy policy for SSL/TLS encryption
This website uses SSL/TLS encryption for security purposes and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the padlock icon in your browser's address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Privacy Policy for Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
This data cannot be attributed to specific individuals. This data is not combined with data from other sources. We reserve the right to review this data subsequently if we become aware of specific indications of unlawful use.
Third-Party Services
This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.
These services provided by the American company Google LLC use cookies, among other things, and consequently data is transferred to Google in the United States. We assume that, in this context, no personal tracking takes place solely through the use of our website.
Google has committed to ensuring an appropriate level of data protection in accordance with the EU-U.S. and Swiss-U.S. Privacy Shield.
Further information can be found in the Google Privacy Policy.
Privacy Policy for the Contact Form
If you send us inquiries via the contact form, we will store the information you provide in the inquiry form, including the contact details you enter there, for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data without your consent.
Privacy Policy for Newsletter Data
If you would like to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address provided and agree to receive the newsletter. No other data is collected. We use this data exclusively to send the requested information and do not pass it on to third parties.
You may revoke your consent to the storage of your data and email address, as well as their use to send the newsletter, at any time, for example via the “Unsubscribe” link in the newsletter.
Privacy Policy for the Comment Function on This Website
For the comment function on this website, in addition to your comment, information about the time the comment was created, your email address and, if you do not post anonymously, the username you selected are stored.
Storage of IP addresses
Our comment function stores the IP addresses of users who post comments. Since we do not review comments on our site before they are published, we need this data to take action against the author in the event of legal violations such as insults or propaganda.
Subscribing to comments
As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this feature at any time using a link in the information emails.
Rights of data subjects
Right to confirmation
Every data subject has the right to request confirmation from the operator of the website as to whether personal data concerning data subjects are being processed. If you wish to exercise this right to confirmation, you may contact the data protection officer at any time.
Right of access
Every data subject whose personal data are affected by processing has the right to obtain, at any time and free of charge, from the operator of this website, information about the personal data stored concerning them and a copy of this information. Where applicable, they may also obtain information about the following:
- the purposes of the processing
- the categories of personal data being processed
- the recipients to whom the personal data have been disclosed or will be disclosed
- if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or of a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- if the personal data are not collected from the data subject: all available information about the data’s origin
Furthermore, the data subject has the right to obtain information as to whether personal data have been transferred to a third country or an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards relating to the transfer.
If you wish to exercise this right of access, you can contact our data protection officer at any time.
Right to rectification
Every data subject affected by the processing of personal data has the right to request the prompt rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing, including by means of a supplementary statement.
If you wish to exercise this right to rectification, you can contact our data protection officer at any time.
Right to erasure (right to be forgotten)
Every data subject affected by the processing of personal data has the right to request that the controller of this website delete the personal data concerning them without delay, provided that one of the following reasons applies and insofar as the processing is not necessary:
- The personal data were collected or otherwise processed for purposes for which they are no longer necessary
- The data subject withdraws their consent on which the processing was based, and there is no other legal basis for the processing
- The data subject objects to the processing for reasons arising from their particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling
- The personal data have been processed unlawfully
- The deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject
- The personal data were collected in relation to information society services offered directly to a child
If one of the aforementioned reasons applies and you wish to arrange for the deletion of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the deletion request is complied with without delay.
Right to restriction of processing
Every data subject affected by the processing of personal data has the right to request that the controller of this website restrict processing if one of the following conditions applies:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
- The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data
- The controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims
- The data subject has objected to the processing on grounds relating to their particular situation, and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject
If one of the above-mentioned conditions applies and you wish to request the restriction of personal data stored by the operator of this website, you may contact our data protection officer at any time. The data protection officer of this website will arrange for the processing to be restricted.
Right to data portability
Every data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format. They also have the right to have this data transmitted to another controller, provided that the statutory requirements are met.
Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
To exercise the right to data portability, you may contact the data protection officer appointed by the operator of this website at any time.
Right to object
Every data subject affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.
The operator of this website will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or if the processing serves the establishment, exercise, or defense of legal claims.
To exercise your right to object, you can contact this website’s data protection officer directly.
Right to withdraw consent under data protection law
Every data subject affected by the processing of personal data has the right to withdraw consent given for the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you may contact our data protection officer at any time.
Privacy policy regarding objection to advertising emails
We hereby object to the use of contact details published as part of the legal notice requirement for sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example via spam emails.
Paid services
To provide paid services, we request additional data, such as payment details, in order to process your order or assignment. We store this data in our systems until the statutory retention periods have expired.
External payment service providers
This website uses external payment service providers through whose platforms users and we can carry out payment transactions. For example, through
- PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
- Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
- Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
- American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
- PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
- Bexio AG (https://www.bexio.com/de-CH/datenschutz)
- Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
- Apple Pay (https://support.apple.com/de-ch/ht203027)
- Stripe (https://stripe.com/ch/privacy)
- Klarna (https://www.klarna.com/de/datenschutz/)
- Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/)
- Giropay (https://www.giropay.de/rechtliches/datenschutzerklaerung) etc.
As part of fulfilling contracts, we use payment service providers on the basis of the Swiss Data Protection Ordinance and, where necessary, Art. 6(1)(b) of the EU GDPR. In all other respects, we use external payment service providers on the basis of our legitimate interests pursuant to the Swiss Data Protection Ordinance and, where necessary, pursuant to Art. 6(1)(f) of the EU GDPR, in order to offer our users effective and secure payment options.
The data processed by the payment service providers includes master data, such as name and address; bank details, such as account numbers or credit card numbers; passwords, TANs, and checksums; as well as contract-related, amount-related, and recipient-related information. The information is required to carry out the transactions. However, the entered data is processed and stored only by the payment service providers. As the operator, we receive no information whatsoever about (bank) accounts or credit cards, but only information confirming (acceptance) or rejection of the payment. Under certain circumstances, the payment service providers transmit the data to credit reporting agencies. This transmission serves to verify identity and creditworthiness. In this regard, we refer to the payment service providers' terms and conditions and privacy notices.
Payment transactions are subject to the terms and conditions and privacy notices of the respective payment service providers, which are available on their respective websites or transaction applications. We also refer to these for further information and for exercising rights of withdrawal, access, and other data subject rights.
Newsletter - Mailchimp
The newsletters are sent using the mailing service provider 'MailChimp', a newsletter delivery platform operated by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the mailing service provider's privacy policy here . The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection standards (PrivacyShield). The mailing service provider is engaged on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and a data processing agreement pursuant to Art. 28(3), sentence 1 GDPR.
The mailing service provider may use recipients' data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. for the technical optimization of newsletter delivery and presentation or for statistical purposes. However, the mailing service provider does not use our newsletter recipients' data to contact them directly or to pass the data on to third parties.
Copyright
Copyright and all other rights to the content, images, photographs, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. Written permission from the copyright holder must be obtained in advance for the reproduction of all files.
Anyone who infringes copyright without the consent of the respective rights holder may be subject to criminal prosecution and may also be liable for damages.
General Disclaimer of Liability
All information on our website has been carefully reviewed. We endeavor to provide information that is up to date, accurate, and complete. Nevertheless, errors cannot be entirely ruled out, so we cannot guarantee the completeness, accuracy, or timeliness of information, including journalistic and editorial content. Claims for damages of a material or non-material nature caused by the use of the information provided are excluded unless there is proven intentional or grossly negligent misconduct.
The publisher may, at its own discretion and without notice, modify or delete texts and is not obliged to update the content of this website. Visitors use or access this website at their own risk. The publisher, its clients, or partners are not responsible for damages, including direct, indirect, incidental, foreseeable, or consequential damages, allegedly resulting from visiting this website, and consequently assume no liability for them.
The publisher assumes no responsibility or liability for the content or availability of third-party websites accessible through external links on this website. The operators of the linked pages are solely responsible for their content. The publisher expressly distances itself from all third-party content that may be criminally or legally relevant or contrary to public decency.
Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply. If the privacy policy forms part of an agreement with you, we will inform you of any updates by email or in another suitable manner.
Questions for the Data Protection Officer
If you have questions about data protection, please email us or contact the person responsible for data protection in our organization, listed at the beginning of the privacy policy.