Privacy policy
Guirbaden Website Privacy Policy
Last updated: September 20th, 2024
Introduction
At Guirbaden, we are committed to protecting your privacy and ensuring that your personal data is handled in a secure and compliant manner. This Website Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.guirbaden.com or interact with us by other means.
This Policy is intended for visitors, customers, potential customers, and individuals who engage with us via our website or other channels. If you are a Guirbaden employee, contractor, or a job applicant, you will be provided with a dedicated Privacy Policy outlining how Guirbaden collects and uses your data.
We collect your data:
- When you visit www.guirbaden.com and any other websites and applications that link to this Privacy Policy and
- When you interact with us by other means, we collect or process Personal Data as part of that interaction.
- This could include Personal Data collected in-person, by telephone, or by mail and where you are not provided a more specific privacy notice at the beginning of our relationship or, in the case of a single interaction, at the time of our interaction.
Information we collect
Guirbaden may collect and process the following types of personal information about you:
- Online Identifiers: Device IDs, IP addresses, cookies, and browsing data when you visit our website.
- Personal Information: Your name, email address, and phone number if you contact us or provide this information via our website or other means.
- Other Information: Any additional personal details you provide when interacting with us, such as messages or inquiries submitted through our contact form.
Guirbaden collects personal data about you only when it is necessary for a legitimate business purpose, or when you have freely provided your consent.
How We Collect Your Data
Guirbaden obtains the categories of personal information listed above from the following categories of sources:
- Directly from you: When you fill out forms, send us emails, or communicate with us through other channels.
- Automatically: Through the use of cookies and tracking technologies that collect browsing data and usage statistics.
Use of Personal Information
Responding to your enquiry
If you make a request for product or service information and provide us with your details, we will use these to fulfil your request and periodically follow up your enquiry. For example, if you share your name and contact information or ask a question about our products or services, we will use that personal information to respond to your inquiry. This response and follow-up process will be conducted under the grounds of our legitimate business interests. We will ask for your consent to contact you via email. You can tell us to stop following up at any time.
Marketing
Your details may be used to send you marketing information relevant to your enquiry.
We will ask for your specific consent for any additional marketing activity, for example if we wanted to send you something we thought you might be interested in but was unrelated to your original enquiry. We will maintain a record of when and how we obtained your consent. You can withdraw your consent at any time.
Preventing transactional fraud, safety, security and reporting purposes
We may use your personal information to maintain the safety, security and integrity of our website, products and services, databases, as well as other technology assets. We may also use it to respond to law enforcement requests, court orders or governmental regulations, as required by applicable law. Please note that Guirbaden will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Data retention
We will hold your personal information for the minimum amount of time required for the purpose for which it was collected and delete it afterwards – unless you ask us to remove your information beforehand or we have a legitimate business reason to hold it longer, such as contractual obligations we may have with you or because it is necessary for us in order to fulfil our legal obligations.
Children
Our website is not directed at children under 18 years old, and we do not knowingly collect personal information from children. Additionally, this website does not provide services or sell products to children under the age of 18. If you are under the age of 18 years old, please do not use this site. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you are aware of any information we may have collected from a child under 18 years of age, please let us know so that we can delete that information.
Sharing your personal information
Within Guirbaden
Personal information about you and your interactions with us may be used across Guirbaden in order for us to fulfil an enquiry/contract with you and for legal and regulatory compliance.
With other organizations
We may share your personal information with other organizations if the following applies:
- they provide products, services or research on behalf of Guirbaden, for example subcontractors. Our contract with them will not allow them to use your personal information for anything other than the fulfilment of our contract with you;
- they provide administrative, processing, development, analytical or other services to help us in our sales, marketing, digital, administration and product development activities;
- we transfer rights or obligations of our contractual relationship with you;
- we have asked and been given your consent;
- we are required or permitted to do so by law or regulation.
Where we share personal information with agents and sub-contractors, we will ensure that it is supported by a written contract and that your personal information is treated confidentially and securely, and in accordance with this Policy, as well as the applicable privacy and data protection legislation. We may also be required to share your data with public bodies and supervisory authorities.
Guirbaden will not sell, share or give any data to external companies for the marketing purposes of those companies.
Your rights
Depending on your country or state of residence, you might have certain rights regarding the use of your personal information:
These are:
- The right to access: You may request that we confirm whether we process your personal information. You may request that we disclose to you the categories and/or the specific pieces of personal information that we collect about you, the categories of sources from which we collected the personal information, the categories of personal information we shared or disclosed, our business or commercial purpose for collecting, or sharing the personal information, and the categories of third parties with whom we disclosed the personal information. You may also request a copy of the personal information you provided to us, which will be provided in a portable and readily usable format. To exercise this right, please include your customer number if possible and details of the information you require.
- The right to rectification: It is important that any personal information we hold is up-to-date and correct. Thus, you may request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes of processing.
- The right to erasure: You may request that we delete personal information we have from or about you.
- The right to limit/restrict processing: You may request that we pause processing your personal information (usually following your right to erasure)
- The rights to data portability: You may request that we disclose your personal information to you in a common file format.
- The right to opt out of the processing of personal information, including sale or sharing of such information.
- The rights to opt out of any automated individual decision making, including profiling
Exercising your rights
If you do not wish to receive any marketing materials from Guirbaden or exercise any of your rights over your personal information, as described above, you can email, telephone or write to us using the contact information shared in the respective Section below.
Timelines
Once we receive your request to exercise any of your data protection rights, we will aim to respond without undue delay, and in any case, within the timelines specified by applicable data protection laws. For requests under the General Data Protection Regulation (GDPR), this is one (1) month from the date of receipt.
If your request is complex or if we receive multiple requests from you, we may extend the response time by an additional two (2) months. Should an extension be necessary, we will notify you within the initial one-month period, explaining the reasons for the delay.
Please note that if your request is unfounded, repetitive, or excessive, we may either charge a reasonable fee to cover the administrative costs or refuse to act on the request. In such cases, we will provide a clear explanation for our decision.
Verifying your request
When you submit a request (e.g., to access or delete your personal information), we will take steps to verify your identity. These steps may include asking you for personal information, such as your name, address, or other information we maintain about you. We will use the information you provide solely for the purpose of verifying your identity or authority to make the request. Please note that making a verifiable request does not require you to create an account with us.
To ensure the verification process is smooth, your request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We may decline to fulfill your request if we are unable to verify your identity or authority, or if the request lacks sufficient detail. In such cases, we will notify you and provide the reasons for the denial.
Limitations
Please also note that exercising your rights may be subject to certain exceptions, particularly in cases where processing your personal information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Exercise the right of freedom of expression and information, or ensure the rights of others, or for the establishment, exercise, or defense of legal claims. - Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation or any other applicable law. - Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Authorized Agents
You may also designate an authorized agent to submit requests on your behalf. If you do so, you will be required to verify your identity by providing us with certain personal information as described above. Additionally, we will also require that you provide the agent with written and signed permission to act on your behalf, and we will separately confirm with you that you provided the agent with permission to submit the request. We will deny the request if the agent is unable to submit proof to us that you have authorized them to act on your behalf or if any of the above verification criteria are not met.
Security of your data
All our data is held on secure servers and secure cloud storage. We take data security very seriously and use a range of tools, protocols and services to ensure data is protected.
Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personally identifiable information, you acknowledge that: (a) there are security and privacy limitations of the Internet which are beyond our control; (b) the security, integrity and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed; and (c) any such information and data may be viewed or tampered with in transit by a third party. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the website or other service.
Contact Information
If you want to exercise any of your rights, or you have any questions, comments or complaints about this Policy or the ways in which we collect and use your personal information, please do not hesitate to contact us at:
Guirbaden GmbH
Stampfenbachstrasse 119, 8008 Zürich, Switzerland
Tel: +41 (0) 79 191 4000
Email: privacy@guirbaden.com
Website: www.guirbaden.com
Changes to this Policy
We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated Policy on the website and update the Policy’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.