Source: https://aquilas.com/en/legal/
Timestamp: 2019-04-23 04:29:26+00:00

Document:
We, Aquilas Company Builder AG, Limmatquai 106, CH-8001 Zurich Switzerland and all its subsidiaries worldwide, take data protection seriously and hereby inform you in the following statement on the collection, storage and possible use of personal data.
The use of the website and the use of Aquilas services may be connected with the processing of personal data. The handling of this data is regulated by law, in particular in the EU Data Protection Regulation (GDPR). We would like to inform you about the details of the processing of your personal data.
For Switzerland, the EU Commission has issued an adequacy resolution (2002/518/EC), so that the appropriate level of data protection pursuant to Art. 45 GDPR is ensured.
This statement applies to all services offered and operated by us, in particular to our website www.aquilas.com. It also applies accordingly to mobile devices or offers and presences adapted to other platforms.
When using this website and our services, personal data may be processed. The term "personal data" under data protection law refers to all information relating to a specific or identifiable person. The IP address can also be a personal datum. An IP address is assigned to each device connected to the Internet by the Internet provider so that it can send and receive data. When you use the Site, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit to the website.
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR. Data will only be processed by us on the basis of legal permission. When using this website, we only process personal data with your consent (Art. 6 para. 1, lit. a) GDPR), for the performance of a contract to which you are a party, or at your request for the implementation of pre-contractual measures (Art. 6 para. 1, lit b) GDPR), for the fulfilment of a legal obligation (Art. 6 para.1 lit. c) GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data, prevail (Art. 6 para. 1 s, lit. f) GDPR.
Unless otherwise stated in the following information, we store the data only as long as necessary to achieve the purpose of processing or to fulfil our contractual or statutory obligations. Such statutory retention obligations may arise in particular from commercial or tax regulations.
Unless otherwise stated in the following information, the data will be processed on the servers of technical service providers commissioned by us for this purpose. These service providers process the data only according to express instructions and are contractually obliged to guarantee adequate technical and organizational measures for data protection.
Specifically, we use the services of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Nuremberg, Germany. Hetzner Online is certified according to DIN ISO/IEC 27001. The certificate demonstrates adequate security management, data security, confidentiality of information and availability of IT systems. It also confirms that safety standards are continuously improved and sustainably controlled.
This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and by the lock icon in your browser line. If SSL encryption is activated, the data which you transfer to us cannot be read by third parties.
When using our website for information purposes only, general information is initially stored automatically (i.e. not via registration), which your browser transmits to our server. These include as standard: Browser type/ version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 lit. f) GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted unless there is a justified suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason.
Our website contains a contact form where you can send us messages. The transfer of your data is encrypted. All data fields marked as mandatory fields are required to process your request. If you do not provide us with your data, we will be unable to process your request. The provision of further data is voluntary. Alternatively, you can contact us by e-mail. The legal basis for data processing in connection with a contact enquiry is Art. 6 para. 1 lit. b GDPR).
We collect on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f GDPR, we use the plug-ins listed below to analyze and optimize our offers.
Our website uses so-called social plugins ("plugins") from the social networks Facebook, Instagram and the services YouTube and Linkedin. These services are provided by Facebook Inc, Instagram LLC, YouTube and Linkedin ("Providers").
When you visit a page of our website containing a social plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by the provider directly to your browser and integrated into the webpage. By integrating the plugin, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the relevant supplier or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA (or Germany) and stored there.
If you are logged in to one of the services, the providers can directly associate the visit to our site with your profile on Facebook, Google+, Twitter or Instagram. When you interact with the plugins, for example by pressing the "Like" or the "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on Facebook, Instagram, YouTube or Linkedin social networks and displayed to your contacts. For the purpose and scope of data collection and further processing and use of data by the providers as well as your rights and settings options for protecting your privacy, please see the privacy policies of the providers.
If you do not want Google, Facebook, Twitter, or Instagram to associate the data collected from our website directly with your profile in the respective social network, you must log out of the respective network before visiting our website. You can also completely prevent the loading of plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
You have the right, in accordance with Art. 16 GDPR to request us to correct your data.
You have the right, in accordance with Art. 17 GDPR from us to delete your personal data.
You have the right, in accordance with Art. 18 GDPR to restrict the processing of your personal data.
You have the right, in accordance with Art. 20 GDPR to receive the personal data concerning you that you have provided to us, in a structured, common and machine-readable format and to transfer this data to another data controller.
You may revoke your consent in accordance with Art. 7 Para. 3 GDPR at any time. Such revocation does not affect the legality of the processing which has taken place until the revocation based on the consent.
If you believe that the processing of personal data concerning you violates the provisions of the GDPR, in accordance with Art. 77 GDPR you have the right of appeal to a supervisory authority.

References: Art. 45
 Art. 6
 Art. 6
 Art. 6
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 7
 Art. 77