Data protection policy

Scope and introduction

This data protection policy applies to the entire contagi group of companies, which consists of the companies:

• contagi GROUP GmbH based in CH-9012 St. Gallen, Obere Berneggstraße 75, entered in the Commercial Register of Switzerland under CH-320.4.078.565-6
• contagi Personal GmbH based in CH-9012 St. Gallen, Obere Berneggstraße 75, entered in the Commercial Register of Switzerland under CH-320.4.071.520-1
• contagi Personal GmbH based in DE-60386 Frankfurt am Main, Orber Straße 4a, registered at the Registration Court Frankfurt am Main under HRB94297
• contagi INTERIM GmbH based in DE-61350 Bad Homburg, Schillerstraße 26, registered at the Registration Court Bad Homburg under HRB13059
• contagi MANAGEMENT GmbH based in DE-61350 Bad Homburg, Schillerstraße 26, registered at the Registration Court Bad Homburg under HRB13460
• contagi Real Estate GmbH based in DE-61350 Bad Homburg, Schillerstraße 26, registered at the Registration Court Bad Homburg under HRB13774
• JP contagi GmbH based in DE-61350 Bad Homburg, Schillerstraße 26, registered at the Registration Court Bad Homburg under HRB14280
• contagi ADVOKATUR GmbH i.Gr. (in formation)

Companies of the contagi group will be referred to hereinafter as “contagi” or with a complete company within the meaning of  § 17 HGB or as personal pronouns. All companies of contagi are independently active and responsible as legal entities.

Although the visit to our website is possible in principle without the disclosure of personal data (within the meaning of Article 4 No. 1 GDPR), some of the purposes and offers mentioned below require the processing of personal data.

This privacy policy provides information about our handling of your personal data. In particular, we clarify how and which of your personal data is stored when you visit our website. All data that enables you to identify your person is considered personal.

Responsibility and data protection officer

The data protection law (within the meaning of Article 13, 14 GDPR) for the website of www.contagi.ch (and sub-pages) is contagi GROUP GmbH based in CH-9012 St. Gallen, Obere Berneggstraße 75. The person in charge can be reached by phone at + 41 71 5347749 and by e-mail to info@contagi.ch.

Our Data Protection Officer (Article 37 GDPR) is Attorney-at-Law Tim Hallas, based in 60386 Frankfurt am Main, Orber Straße 4a, available by phone on + 49 69 34701122 and by email to datenschutz@contagi.ch.

Data protection and processing of personal data

The protection of your personal data is a very high priority for us. Therefore, in principle, all personal data collected or in processing or storage are treated in the strictest confidence in the sense of Article 5, 6 GDPR and made available only to employees and persons who are necessarily entrusted with processing and storage processes. Your personal data will not be passed on to third parties, with the exception of data passed on for the purpose of order processing on our behalf.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This data protection declaration explains which data we collect and for what purpose we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can be subject to security vulnerabilities. A complete protection of the data against access by third parties is not possible.

Data acquisition

On the one hand, your personal data is collected and stored (Article 13 GDPR), for example, if you provide data directly in our contact form.

Personal data is also technically collected and stored by standardised analysis tools when visiting our website (Article 14 of the GDPR). Data collection can take place in particular,

• When you visit our website,
• For data entries to contact, e.g. in the contact form,
• In the case of data entries as part of the application to an open position.

Personal data collected (Article 4 point 1 GDPR) include, in particular,

• IP address as an individual numerical address with which you can access our website,
• Date, time and duration of your visit to our website,
• Version of the browser type with which you can access our website,
• Internet providers through which you can access our website,
• Operating system that allows you to access our website,
• Subpages that you visit during your visit to our website.

Recording, processing and storage automatically begins with your visit to our website (Article 5, 6 GDPR).

Purpose and scope of data acquisition and use

From our point of view, this form of automated data collection is necessary in order to provide you all the functionalities of our website as smoothly as possible when you visit our website and in order to make the use of our website and its contents as easy and convenient as possible.

The analysis is also partly used to more effectively prevent possible external attacks on our website structure. In particular, the storage of your IP address is used not only for the usability of our website, but also for the detection of possible attacks against our website structure and its defence. This serves your security as a visitor to our website and also ensures the functioning of our website itself.

No evaluations relating to your specific person are derived from the personal data automatically collected during your visit of our website. The data collected in this way is only stored for documentation or evaluated only in such an anonymised form that no conclusions on your specific person can be drawn from it. Such anonymised evaluations are primarily for the purpose of compiling statistics.

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes regarding job interviews, etc.) insofar as this is necessary for a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 Para. 1 lit. b GDPR for the purpose of conducting the employment relationship.

Retention period

Personal data will be deleted from the last processing or storage act (Article 17 GDPR) at the latest after 3 years (Article 17 GDPR), provided that there is no specific reason or a reason contrary to deletion in each individual case.

After the retention period has expired, the data will be deleted unless in individual cases there is a longer statutory retention obligation or other legal reason for further storage. If it is evident that the storage of your data will be necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other statutory storage obligations shall remain unaffected.

Should you object to the data storage (based on Art. 21 GDPR), the data will be deleted immediately (Art. 17 GDPR).

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Use of third-party analysis tools

Some personal data is automatically processed and stored by third-party analysis tools. Our website works in parts with the following analysis tools:

• Cookies 

Cookies are used to better understand the usage behaviour and the corresponding needs of our users. Cookies are also used for the simplified use of our website, especially when they are repeatedly visited. In the end, cookies ensure the safe functioning of the website and its individual offers.

Cookies are small files that are stored in the intermediate memory of your device when using our site. If you visit our website again with the same terminal, the cookies can be read out and you can be made easier to use our website.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser upon your next visit. If you visit our website again on the same end device, the cookies can be read out and this makes it easier for you to use our website.

You can set and manage the storage duration of cookies and their deletion yourself in the menu of your browser. You also have the option of blocking the use of cookies, in which case the full functionality of our website can no longer be guaranteed. You can also delete cookies manually in your browser menu.

Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a justified interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.

• Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• User’s operating system
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources.

The data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a justified interest in the technically error-free presentation and optimisation of its website – for this purpose the server log files must be recorded.

Own services

• Applications

We offer you the possibility of applying for a position with us (e.g. by e-mail, post or online application form). In the following sections, we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.

• Scope and purpose of data collection for applications

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes regarding job interviews, etc.) insofar as this is necessary for a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 Para. 1 lit. b GDPR for the purpose of conducting the employment relationship.

• Retention period for application data

If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data transmitted by you including any remaining physical application documents will be stored / retained for a maximum of 6 months after completion of the application process (retention period) in order to be able to trace the details of the application process in the event of a dispute (Art. 6 Para. 1 lit. f GDPR).

You may object to this storage if you have legitimate interests which outweigh our interests.

After the retention period has expired, the data will be deleted unless there is a statutory retention obligation or other legal reason for further storage. If it is evident that the storage of your data will be necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other statutory storage obligations shall remain unaffected.

• Contact form

Our website offers you the possibility of getting in touch with us via a contact form. Should you make use of this offer, we will process and store your details from the contact form (Art. 6 GDPR), including your contact details, for internal use and processing of your enquiry. We do not pass on this data without your consent.

Any data of yours that is processed and stored in connection with the contact form will be regarded as a declaration of consent (Art. 6 Para. 1 Letter a) and stored until you revoke your permission. You can declare your revocation at any time to the responsible party named in section 2 of this data protection declaration or to the data protection officer(s) (Art. 21 GDPR). After your revocation, the complete deletion of your data (Art. 17 GDPR) will take place immediately, unless compelling reasons exist to the contrary in individual cases. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

• Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request including all personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the enquiries addressed to us.

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Your rights regarding your personal data

In order to ensure the lawful handling of your personal data, you have the following rights. In the event of possible infringements, you also have the right to appeal to the supervisory authorities pursuant to Art. 14 Para 2 lit. e.

• Right to objection pursuant to Art. 21 GDPR

For reasons arising from your particular situation, you can revoke your consent to the use of your personal data at any time with effect for the future and thus object to further data processing by us (Art. 21 GDPR). A simple declaration in a permanently storable form to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose.

If you file an objection, we will no longer process your personal data in question unless we can prove compelling reasons for the processing that are worthy of protection and outweigh your interests, rights and freedom or the processing serves the assertion, exercise or defence of legal claims (objection according to Art. 21 para. 1 GDPR). The objection is effective for the future; the lawfulness of the data processing up until the receipt of your objection remains unaffected by this.

If your personal data is being processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling in so far as it is connected with such direct advertising. If you object, your personal data will no longer be used for direct marketing purposes (objection according to Art. 21 para. 2 GDPR).

Possible addressees of your revocation are mentioned again in the last paragraph of this section.

• Right to information pursuant to Art. 15 GDPR

You have the right at any time to request information about any stored personal data of yours (origin and recipient, purpose of storage) (Art. 15 GDPR). A simple declaration to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose. Possible addressees are mentioned again in the last paragraph of this section.

• Right to limitation of processing pursuant to Art. 18 GDPR

You have the right at any time to request that the processing of any stored personal data of yours be restricted (Art. 18 GDPR). A simple declaration to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose.

The right to limitation of the processing of data exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the examination, you have the right to demand the restriction of the processing of your personal data.
If the processing of your personal data has taken place unlawfully, you may request that data processing be restricted instead of requesting deletion.
If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to demand the restriction of the processing of your personal data instead of requesting deletion.
If you have filed an objection in accordance with Art. 21 Para. 1 GDPR, your interests must be weighed against ours. Until it is clear whose interests predominate, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, such data may not be processed – apart from its storage – without your consent or for the purpose of asserting, exercising or defending legal rights or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Possible addressees are mentioned again in the last paragraph of this section.

• Right to correction pursuant to Art. 16 GDPR

You have the right at any time to have any incorrect data stored about your person corrected (Art. 16 GDPR). A simple declaration to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose. Possible addresses are mentioned again in the last paragraph of this section.

• Right to transferability pursuant to Art. 18 GDPR

You have the right at any time to have the data stored about your person transferred to a third party (Art. 20 GDPR), with simultaneous deletion of all personal data stored by us. A simple declaration in a permanently storable form to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose. Possible addressees are mentioned again in the last paragraph of this section.

• Right to deletion pursuant to Art. 17 GDPR

You have the right to have your personal data deleted at any time (Art. 17 GDPR). A simple declaration to the party responsible in accordance with Section 2 of this data protection declaration or their data protection officer is sufficient for this purpose. Possible addressees are mentioned again in the last paragraph of this section.

• Addressing your declarations

Please send your revocation or any requests for information, restriction, deletion or transmission regarding any stored data and all your further declarations to the following address:

contagi GROUP GmbH

Obere Berneggstrasse 75

CH-9012 St. Gallen

Telephone: +41 71 5347749

E-Mail: info@contagi.ch

 or contact our aforementioned data protection officer directly:

Attorney-at-Law Tim Hallas

Orber Straße 4a

DE-60386 Frankfurt am Main

Phone: +49 69 34701122

E-Mail: datenschutz@contagi.ch