Privacy

isenzio AG is responsible for the data processing described here, unless otherwise stated in individual cases. Inquiries regarding data protection can be addressed to us by letter or email, enclosing a copy of the user's ID or passport for identification: isenzio AG, Rathausstrasse 14, 6340 Baar, Switzerland, phone 0840 840 841, info@vorhangbox.ch.

We process personal data in particular in the following categories of
Edits.

• Customer data of customers for whom we provide or have provided services.
• Personal data that we receive indirectly from our customers when providing services
  have received.
• When you visit our website.
• When using our newsletter.
• When you participate in one of our events.
• When we communicate or a visit takes place.
• In the case of other contractual relationships, e.g. as a supplier, service provider or consultant.
• When applying for jobs.
• If we are required to do so for legal or regulatory reasons.
• If we exercise our due diligence obligations or other legitimate interests
  to avoid conflicts of interest, money laundering or
  to avoid other risks, to ensure data accuracy, to check creditworthiness, to ensure security or to enforce our rights.

More detailed information can be found in the description of the respective categories of processing in section 5.

Which personal data we process depends on your relationship with us and the purpose for which we process it. In addition to your contact details, we also process other information about you or about people who are related to you. This information may, under certain circumstances, also be sensitive personal data.

We collect the following personal data, depending on the purpose for which we process it:

• Contact information (title, last name, first name, address, telephone number, email)
• Risk assessment data (e.g. credit information, commercial register data)
• Financial information (e.g. bank details for refunds)
• Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
• Application data (CV, references)
• Payment information (e.g. deposited payment methods, bank details, billing address);
• Information on the use of our online platforms
• Information about affiliated websites, social media profiles, etc.
• Information about affinities and interests, language preferences, etc.
• Information about your relationship with us (customer, visitor, supplier, etc.);
• Information about connected third parties (e.g. contact persons, recipients of services or representatives);
• Settings regarding receipt of advertising, newsletter subscriptions, etc.
• Information about your status with us (inactivity or blocking of a customer account, etc.)
• Information on participation in competitions and prize draws
• Information on participation in events
• Information on titles and functions within the company for contact persons and representatives of our business partners
• Date and time of registrations.

To the extent permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, the press, the Internet) or receive such data from our customers and their employees, from authorities, (arbitration) courts and other third parties. In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, information from public registers, information related to your professional functions (e.g. in tender procedures), credit reports, information about you from the media and the Internet (where appropriate in the specific case, e.g. in the context of an application, etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data related to the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location information).

4.1 Provision of services

We primarily process the personal data that we receive as part of our
Business relationship with our customers and other contractual relationships with
business partners from these and other persons involved.
The personal data of our customers includes in particular the following information:

• Contact information (e.g. name, first name, address, telephone number, email, other contact information)
• Risk assessment data (e.g. credit information, commercial register data, data from the Internet)
• Financial information (e.g. bank details)

We process this personal data for the purposes described based on the
following legal bases:

• Conclusion or execution of a contract with the data subject or
  for the benefit of the data subject (e.g. advice)
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, enforce our rights, defend ourselves against claims or to examine possible conflicts of interest)
• Consent (e.g. to send you marketing information).

4.2. Indirect data processing from service provision

When we provide services to our customers, it may happen that we also process personal data that we have not collected directly from the data subjects or personal data of third parties. These third parties are usually the building owner, tenants, apartment sellers or apartment buyers. We need this personal data to fulfill contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose are informed by our customers that we process their data.
Customers can refer to this privacy policy for this purpose.

The personal data of the people who have a relationship with our customers includes, in particular, the following information:

• Contact information (e.g. name, first name, address, telephone number, email, other contact information, marketing data)

We process this personal data for the purposes described based on the
following legal bases:

• Conclusion or execution of a contract with the data subject or
  for the benefit of the data subject (e.g., when we perform our contractual obligations)
• Safeguarding legitimate interests, in particular our interest in providing optimal service to our customers.

4.3. Use of our website

To use our website, no personal data needs to be disclosed. However, the server collects a certain amount of user information with each visit, which is temporarily stored in the server's log files.
When using this general information, no assignment to a
specific person. The collection of this information or data is technically necessary to display our website and ensure its stability and security. This information is also collected to improve the website and analyze its usage.

This includes, in particular, the following information:

• Contact information (e.g. name, first name, address, telephone number, email)
• Further information that you send to us via the website
• Technical information automatically transmitted to us or our service providers, information on user behavior or website settings (e.g. IP address, UDI, device type, browser, number of clicks on the page, opening of the newsletter, clicking on links, etc.)

We process this personal data for the purposes described based on the
following legal bases:

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services)
• Consent (e.g. to the use of cookies or the newsletter).

4.4 Newsletter usage

If you subscribe to our newsletter, we will use your email address and other contact information to send you the newsletter. You can subscribe to our newsletter with your consent. Mandatory information for sending the newsletter is your full name and email address, which we will save after you register. The legal basis for processing your data in connection with our newsletter is your consent to receive the newsletter. You can revoke this consent and unsubscribe from the newsletter at any time.

4.5 Participation in events

If you participate in an event organized by us, we will collect
Personal data to organize and conduct the event and, if necessary, to send you additional information afterward. We also use your information to inform you about other events. We may photograph or film you at these events and publish these images internally or externally.

This includes, in particular, the following information:

• Contact information (e.g. name, first name, address, telephone number, email)
• Personal information (e.g. profession, function, title, employer company,
  Eating habits)
• Pictures or videos
• Payment information (e.g. bank details).
  We process this personal data for the purposes described based on the following legal bases:
• Fulfillment of a contractual obligation with or for the benefit of the data subject, including contract initiation and possible enforcement (enabling participation in the event)
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organization)
• Consent (e.g. to send you marketing information or create images).

4.6 Direct communication and visits

If you contact us (e.g., by phone, email, or chat) or we contact you, we process the personal data required for this purpose. We also process this personal data when you visit us. In this case, you may be required to leave your contact details before your visit or at reception. We retain these details for a certain period of time to protect our infrastructure and our information.

We use the services “WhatsApp”, “FaceTime”, “Skype” or “Microsoft Teams” to conduct telephone conferences, online meetings, video conferences and/or webinars (“online meetings”).

In particular, we process the following information:

• Contact information (e.g. name, first name, address, telephone number, email)
• Peripheral data on communication (e.g. IP address, duration of communication, communication channel)
• Recordings of conversations, e.g. during video conferences
• Other information that the user uploads, provides or creates while using the video conferencing service, as well as metadata used to maintain the service provided. Additional information about the processing of personal data by WhatsApp, FaceTime, Skype or Microsoft Teams can be found in their privacy policies.
• Personal information (e.g. profession, function, title, employer company)
• Time and reason for the visit.

We process this personal data for the purposes described based on the
following legal bases:

• Fulfillment of a contractual obligation with or for the benefit of the data subject, including contract initiation and possible enforcement (provision of a service)
• Safeguarding legitimate interests (e.g. security, traceability and
  Processing and administration of customer relationships).

4.7. Applications

You can submit your application for a position with us by post or via the email address provided on our website. Your application documents and all personal data provided to us will be treated with the utmost confidentiality, will not be disclosed to any third party, and will only be used for the purpose of processing your application for
a job with us. Without your consent to the contrary, your
After the application process has been completed, your application dossier will either be returned to you or deleted/destroyed, unless this is required by law.
Subject to retention obligations. The legal basis for processing your data is your consent, the fulfillment of the contract with you, and our legitimate interests.

In particular, we process the following information:

• Contact information (e.g. name, first name, address, telephone number, email)
• Personal information (e.g. profession, function, title, employer company)
• Application documents (e.g. motivation letter, certificates, diplomas, CV)
• Evaluation information (e.g. HR consultant assessment, reference information, assessments)

We process this personal data for the purposes described based on the
following legal bases:

• Safeguarding legitimate interests (e.g. hiring new employees)
• Consent.

4.8 Suppliers, service providers, other contractual partners

If we enter into a contract with you for you to provide a service or supply goods to us, we will process personal data from you or your employees. We need this data to communicate with you and to use your services or order your goods.

In particular, we process the following information:

• Contact information (e.g. name, first name, address, telephone number, email).
• Personal information (e.g. profession, function, title, employer company).
• Financial information (e.g. bank details).

We process this personal data for the purposes described based on the
following legal bases:

• Conclusion or execution of a contract with the data subject or
  in favor of the data subject, including contract initiation and any
  Enforcement
• Protection of legitimate interests (e.g. avoiding conflicts of interest, protecting the company, enforcing legal claims).

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site.

The cookie stores information related to the specific device used. However, this does not mean that we directly know your identity. Cookies are used to make using our services more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness; these cookies are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognise that you have already visited us and which entries and settings you have made so that you do not have to enter them again. We also use cookies to statistically record the use of our website and to evaluate it in order to optimise our service for you. These cookies enable us to automatically recognise that you have already visited us when you visit our site again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the purposes stated. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.

In order to obtain information about the use of our website, to improve our internet offering and to be able to address you with advertising on third-party websites or on social media, we use the following web analysis tools and retargeting technologies: Google Analytics and Mailchimp (newsletter).

These tools are provided by third parties. The information collected for this purpose about the use of a website is usually transmitted to the third-party provider's server through the use of cookies or similar technologies. Depending on the third-party provider, these servers may be located abroad.

The data is usually transmitted with IP addresses truncated, which prevents the identification of individual end devices. Third-party providers only transfer this information based on legal regulations or as part of contract data processing.

6.1.Google Analytics

We use Google Analytics, the web analysis service of Google LLC, Mountain View, California, USA, on our websites. Google Limited Ireland (“Google”) is responsible for Europe.

To deactivate Google Analytics, Google provides
https://tools.google.com/dlpage/gaoptout?hl=de A browser plug-in is available. Google Analytics uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device.

These enable an analysis of the use of our website by Google. The information collected by the cookie about the use of our pages (including your IP address) is usually transferred to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics has been extended by the code «gat._anonymizeIp();» to ensure anonymous collection of IP addresses (so-called IP masking). If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area, which is why no conclusions about your identity are possible. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may associate your IP address with other Google data. For data transfers to the USA, Google has committed to signing and complying with the EU standard contractual clauses.

6.2. Google Maps

On our website we use Google Maps (API) from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; responsible for Europe is Google Limited Ireland, "Google"). Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. Using this service will show you our location and make it easier to get there. As soon as you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

For data transfers to the USA, Google has committed to complying with EU
to sign and comply with standard contractual clauses.

6.3. Social media plugins

Our website uses so-called social media plugins («plugins») from
Third-party providers use plugins. The plugins are recognizable by the logo of the respective social network. Through these plugins, we offer you the opportunity to interact with the social networks and other users. We use the following plugins on our website: Instagram, Facebook, Twitter, LinkedIn, and YouTube. When you visit our website, your browser establishes a direct connection to the third-party provider's servers.

The content of the plugin (e.g. YouTube videos) is transmitted directly to your browser by the respective third-party provider and integrated into the page.

The data transfer for displaying content (e.g. publications on Twitter) occurs regardless of whether you have an account with a third-party provider and are logged in there.

If you are logged in to the third-party provider, the data we collect will also be directly assigned to your account with the third-party provider. If you activate the plugins, the information will also be published on the social network and displayed to your contacts there. The purpose and scope of data collection and the further processing and use of the data by the third-party providers, as well as your related rights and setting options for protecting your privacy, can be found in the third-party providers' privacy policy. The third-party provider stores the data collected about you as user profiles and uses them for advertising purposes.

Market research and/or needs-based design of its website. Such
In particular, analysis also takes place for non-logged-in users to display needs-based advertising and to inform other users of the social network about your activities on our website. If you want to prevent third-party providers from assigning the data collected via our website to your personal profile on the respective social network, you must log out of the respective social network before visiting our website. You can also completely prevent the loading of the plugins with specialized add-ons for your browser, such as "Ghostery" (https://www.ghostery.com/) or "NoScript" (http://noscript.net/).
prevent.

6.4. Newsletter Tracking

We use the Mailchimp software to send our newsletters. This software allows us to send and analyze newsletters. To perform this analysis, we collect device and access data. To collect this data, the newsletter contains anonymized tracking links. With the help of these technologies, we receive information about whether the newsletter has been received.
is, was opened, and which content was clicked. We use this information to improve our newsletter and our offerings.

We only share your data with third parties if this is necessary to provide our services, if these third parties provide a service for us, if we are legally obligated to do so, or if we have an overriding interest in sharing your personal data. We will also share personal data with third parties if you have given your consent or requested us to do so. Not all personal data is transmitted encrypted by default. Unless explicitly agreed otherwise with the customer, sketches, plans, images, and other project data are transmitted unencrypted.

The following categories of recipients may receive personal data from us:

• branches
• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants).
• Third parties within the scope of our legal or contractual obligations.

We enter into contracts with service providers who process personal data on our behalf, which oblige them to guarantee data protection. The majority of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA (e.g., Google Analytics data) or, in exceptional cases, to other countries worldwide. Should it be necessary to transfer data to other countries that do not have an adequate level of data protection, this will be done on the basis of the EU standard contractual clauses (e.g., in the case of Google) or other suitable instruments.

We process and store your personal data as long as it is necessary to fulfill our contractual and legal obligations or for the purposes pursued with the processing, i.e. for example for the duration of the entire business relationship (from initiation and processing to termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data will be stored for the period in which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and insofar as we are otherwise legally obliged to do so or legitimate business interests require it (e.g.
for evidence and documentation purposes). Once your personal data is required for the purposes
If the data is no longer required for the purposes stated, it will generally be deleted or anonymized wherever possible. For operational data (e.g., system protocols, logs), shorter retention periods of twelve months or less generally apply.

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, encryption of data media and transmissions, pseudonymization and controls.

You have the following rights in connection with our processing of personal data:

• Right to information about the personal data we have stored about you, the purpose of the processing, the origin and the recipients or categories of recipients to whom the personal data is passed on.
• Right to rectification if your data is incorrect or incomplete.
• Right to restrict the processing of your personal data
• Right to request the deletion of processed personal data
• Right to data portability
• Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons.
• Right to lodge a complaint with a competent supervisory authority, where provided for by law.

To exercise these rights, please contact us at the address provided under point 1.

Please note, however, that we reserve the right to enforce legally stipulated restrictions, for example, if we are obligated to retain or process certain data, have an overriding interest in doing so (to the extent we are entitled to do so), or require it to assert claims. If you incur any costs, we will inform you in advance.