Privacy Policy

Introduction

This Privacy Policy applies to the personal data of visitors to our website (www.headsforbrands.ch) ("Website") and subdomains in the format subdomain.headsforbrands.ch, our mandate agreement, our General Terms and Conditions and thus also to candidates, clients and other persons we may contact to learn more about our candidates.

This Privacy Policy applies to the personal data of visitors to our website (www.headsforbrands.ch) ("Website") and subdomains in the format subdomain.headsforbrands.ch our Mandate Agreement, our Terms and Conditions and therefore also to candidates, clients and other persons with whom we may contact to learn more about our candidates.

1. Consent of the user
Please note that by visiting and using our website, you give your consent to the processing of your personal data within the framework of this Privacy Policy and the applicable data protection law.

2. contact person
If you have any questions or messages regarding your personal data, please do not hesitate to contact us. You can reach us as follows:

Heads for Brands GmbH Oberallmendstrasse 18 6300 Zug
info@headsforbrands.ch

3. Consent for the processing of particularly sensitive personal data
Sensitive personal data is subject to stricter data protection regulations. Therefore, we need your explicit consent to be able to use them. We ask you for your consent in advance. This means that you must explicitly and unambiguously inform us that you agree to us processing this personal data. This is done by means of a declaration of consent, which candidates receive electronically after submitting their dossier. Sensitive personal data will only be processed after receipt of the declaration of consent.

We treat your candidate profile as a whole as particularly sensitive personal data as well as those individual pieces of information that must be treated more sensitively due to their privacy, such as your curriculum vitae, education, certificates and diplomas, work experience, references, skills, hobbies, emergency contacts, residence status or financial and creditworthiness data.

In addition, the categories of particularly sensitive data defined by law also apply, of course, if we collect or receive them from you, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for unique identification, health data or data concerning sex life or sexual orientation, and data concerning criminal convictions and criminal offenses. Personal data requiring special protection is only collected by Heads for Brands with your express consent and always directly from you.

4 Processing of personal data
4.1 Personal data via the website
In the course of your visit to our website and any inquiry you may have made, we collect only the data listed below:

• a) All information that you explicitly provide in the context of an enquiry or request (name, address, age, gender, contact details, etc.)
• b) IP address and referrer URL (the previous web page visited)
• c) Used browser version and browser type
• d) Date and time of the visit or enquiry or request
• e) Operating system and provider

The cookies that we use on our website can be found at the end of this Privacy Policy under "Cookies".

We do not engage in profiling on our website in the sense of automated processing of personal data which consists of using your personal data to evaluate certain personal aspects (e.g. to analyse or predict your work performance, financial situation, health, personal preferences, interests, reliability, behaviour, residence or change of location), and only collect and process particularly sensitive personal data (e.g. regarding religious, political or ideological views, health status, etc.) in exceptional cases and if so limited to contractual or legal obligations.

4.2 Personal data of candidates
We only ask for information that helps us to place you better and more efficiently on the one hand, or that arises in the context of a customer order. This includes general personal data, but also personal data that is to be classified as particularly sensitive data.

4.3 Customer personal data
If you are a customer of Head for Brands, we need to collect and process personal data about you or individuals within your organization in order to provide services to you.

4.4 Personal data of persons provided by candidates, clients or employees for further information.

As a rule, we only need your contact details or the contact details of individual contacts within your organization (such as their names, telephone numbers and e-mail addresses) to ensure a smooth business relationship.
To ask someone for a reference, we need the personal details of the reference contact (such as name, email address and telephone number). We also need these details if our candidate or one of our employees has indicated you as an emergency contact, so that we can notify you in the event of an accident or emergency.

To ask someone for a reference, we need the personal details of the reference contact (such as name, email address and phone number). We also need these details if our candidate or one of our employees has indicated you as an emergency contact, so that we can notify you in the event of an accident or emergency

5. Use of personal data
The processing of your personal data takes place exclusively in the professional context of the initiation, maintenance and settlement of the following:

• a) a request you have made
• b) a customer mandate
• c) placement of a job or
• d) for internal statistical purposes

6. Disclosure to third parties
The processing of your personal data on the website takes place exclusively in the professional context of a request you have made, for error correction or improvement of our website or our internal data processing tools and for internal statistical purposes.
Your data will not be passed on to third parties without your express consent. Exceptions to this are our service partners that we need to process a contractual relationship (e.g. financial institutes for processing payments, postal and courier services or shipping companies for sending materials, cloud services for providing and ensuring the digital infrastructure, etc.). In these cases, we strictly observe the requirements of the applicable data protection laws. The scope of the data transfer is limited to a minimum.

We will only consider the use of service partners in countries other than Switzerland or the Member States of the European Economic Area if the country in question either has an equivalent level of data protection according to the list of countries of the Federal Council or we can contractually ensure the equivalence of the level of protection (e.g. through contracts or the conclusion of so-called standard contractual clauses).

7. Messages, notifications and updates
We may send you marketing content about our website, services and products, as well as products we offer with our partners and third-party products and services, through various communication channels, such as email, SMS, pop-ups, push notifications and messaging applications. You may opt out of these advertisements by following the instructions included in the communications you receive from us. You may also opt out of receiving future advertising at any time by notifying us at info@headsforbrands.ch.

Communications for Information and Other Purposes: We will send you communications that are required or necessary for all customers, notices that contain important information, and other communications that you request from us. You may not opt out of these communications. However, you may be able to customize the media and format through which you receive the notifications.

8. cookies

8.1 General information about cookies
Cookies are small text files or pieces of information that are stored on your computer or mobile device (e.g. a smartphone or tablet) when you use our services. A cookie usually contains the name of the website/application it came from, the duration of the cookie (i.e. how long the cookie will remain on your device) and a value, which is usually a randomly generated unique number.
We use cookies to make our services more user-friendly and to tailor our services and products to your interests and needs. Cookies are able to do this because our services can read these files. This enables our services to recognise you and remember important information that makes your use of our services more user-friendly (e.g. by remembering preference settings). Cookies may also be used to help speed up your future activities and user experience with our services. We also use cookies to compile anonymous aggregated statistics that enable us to understand how users use our services and help us to improve the structure and content of our digital media.
The maximum storage time of cookies after their initial placement on the user’s device is set as required by the applicable law.

8.2 Types of cookies
The types of cookies we use are session cookies, persistent cookies, first-party cookies and third-party cookies.

Persistent cookies are used to store your login information and remember your settings for future logins to our services. A persistent cookie is a cookie that is stored as a file on your computer and remains there when you close your web browser. The cookie can be read by the services that created it when you visit those services again.

Session ID cookies are used to enable certain features of our services, to better understand how you interact with our services and to monitor aggregated user data and web traffic routing. Unlike persistent cookies, session cookies are removed from your computer when you close your browser. Session ID cookies usually store an anonymous session identifier on your computer that allows you to use a service without having to log in each time you click.

First-party cookies are our own cookies that we use to improve your user experience. They are linked to a user’s personal information. Third parties do not have access to the information we collect through our own cookies.

Third-party cookies are cookies placed within our services by third-party companies to provide services, including advertising cookies. Third-party companies place third-party cookies on your device on our behalf when you visit our services to enable those third-party companies to perform the services they provide. In addition to the information in this Privacy Policy, further information about these third-party cookies can be found in the privacy policies of these third-party companies.

Below is a list of the different types of cookies we use in our services.

8.3 Essential cookies
Essential cookies are cookies that are absolutely necessary for our services to work and to use their functions. Without such strictly necessary cookies, our services would not function as smoothly as you would like and we may not be able to provide the website or certain services or functions that you request.
We also use technical cookies for customization and personalization purposes that allow our services to remember options and settings you have selected (e.g. your user name, language or the region you are in). These cookies do not collect information about you that is used for advertising purposes, nor do they remember which web pages you have visited.

The following first-party cookies are placed by us (all persistent cookies):
Device identifier cookie: We install cookies on your computer that recognize you and tell the website or service that you are logged in.
User local cookie: We install cookies that are used to remember certain local options you have selected, such as language settings.

Privacy visibility cookies: We install cookies on your computer that show whether you have been informed by a displayed banner message about the use of cookies and the handling of your data and your rights in relation to your data; they also indicate whether you have given your consent to the use of cookies so that the banner does not reappear each time you visit a web page.
These cookies are necessary for the operation of our services and therefore you cannot object to the use of these cookies.

8.4 Analytical cookies and cookies for marketing, profiling and retargeting
Google Analytics (persistent third-party cookies)
The Google Analytics service is used to analyse the usage behaviour of our website. Our legitimate interest lies in analysing, optimising and economically operating our website.
Usage and user-related information that we collect includes e.g. IP address, location, time or frequency of visits to our website. We have opted to use the IP masking feature when using Google tools. This additional function truncates the last digits of your IP address before it is actually stored on the Google servers. As a result, it is still possible to properly use the technical and analytical Google services but you are no longer fully traceable and thus have a higher degree of anonymity with regard to your browsing behaviour than without IP masking.

We also use the remarketing function which is one of the features of Google Analytics. This allows us to display personalised advertising to you on appropriate advertising spaces on other websites based on what interests you have shown on our website. This capability is limited to a maximum of 18 months. Retargeting allows us to display advertising that is as relevant to you as possible and to measure the effectiveness and reach of the advertising as well as to check the billing of our advertising partners for displayed campaigns.
The data collected in this way is used in turn by Google to provide us with an analysis of visits to our website and the corresponding usage activities. This data may also be used to provide other services in connection with the use of our website and the use of the Internet. Google states that it does not associate your IP address with any other data. Google provides further data privacy information at https://policies.google.com/technologies/partner-sites?hl=en, including information on how to prevent use of your data.

In addition, Google offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=en together with further information about this. This add-on can be installed with most commonly used Internet browsers and offers you further control options regarding the data that Google collects when you access our website. The add-on tells the JavaScript (ga.js) used by Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. This Privacy Policy also states whether we use any other web analytics services and if so which ones.

Alternativ kann die zukünftige Analyse Ihres Seitenbesuches durch Google Analytics durch einen Klick auf den nachfolgenden Link deaktiviert werden. Durch den Klick auf den Link wird ein sog. “Opt-Out- Cookie” gesetzt, dies hat zur Folge, dass die Analyse Ihres Seitenbesuches auf unserer Seite zukünftig verhindert wird:
<a onclick=”alert(‘Google Analytics wurde deaktiviert’);” href=”javascript:gaOptout()”>Google Analytics deaktivieren</a>

Please note that if you delete the cookies in your browser settings, this may result in the opt-out cookie also being deleted and you may have to reactivate it again.

Google will not link your IP address with other data held by Google under any circumstances. You can prevent the installation of cookies. To do this, you must select the option to block cookies in your browser settings. Please note that in this case you may be unable to use all of the functions of this website to the full extent. By using this website, you consent to the processing of data relating to you by Google in the manner and for the purposes set out above.

 Google AdWords with conversion tracking (persistent third-party cookies)
We use conversion tracking for the purposes of targeted advertising of our offering. Our legitimate interest lies in analysing, optimising and economically operating our website. If you click on an advert placed by Google, the conversion tracking we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and do not serve to identify you personally. If the cookie is still valid and you visit a specific page of our website, both we and Google can analyse the fact that you clicked on one of our adverts placed on Google and that you have subsequently been redirected to our website. Through the information collected in this way, Google provides us with statistics about your visit to our website. This also provides us with information about the number of users who have clicked on our advert(s) and on the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords will be able to identify you in this way.

9. Google analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

10 Google Adwords Conversion Tracking
We use the online advertising program "Google AdWords" and within the framework of Google AdWords the conversion tracking. Google Conversion Tracking is an analysis service provided by Google.

When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification.

If you visit certain web pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across the websites of Google AdWords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Here, customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to identify users personally.

If you do not wish to participate in conversion tracking, you can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics.

Further information as well as Google's privacy policy can be found at:
https://policies.google.com/privacy?gl=en

11. Transmission of personal data
The transmission of data entered via the contact form from your computer to the server is encrypted. The data entered in the contact form is not stored on your computer (no cookie or similar). Despite encryption, absolute security is not possible. The server forwards your data entered in the contact form by e-mail for processing. These e-mails are not encrypted. The use of e-mails is not technically secure; it may happen that e-mails are not delivered. When e-mails are transmitted, they may leave national borders, even if the sender and recipient are in Germany. The confidentiality of e-mails cannot be guaranteed if encryption is missing or insufficient. Unencrypted e-mails are therefore not suitable for sending confidential information.

By using the contact form or sending an e-mail, you consent to communication via e-mail with knowledge of the risks described. The use of encrypted or otherwise secured communication channels must be agreed with us in advance.

2. Storage of your personal data

a. Server Locations
Our website is hosted by wpengine.com in the Netherlands.
Your personal data which is collected in the course of activities on our website is hosted on the servers of www.wpengine.com in Switzerland. The servers are shielded as much as possible against unauthorized third-party access. Backups are made on a regular basis to prevent data loss as far as possible.

Any personal data that we collect directly is stored on our own servers and on virtual servers of a cloud provider with a good reputation and a storage location in Switzerland or the EEA. The servers are shielded as much as possible against unauthorized third-party access. Backups are made regularly to prevent data loss as far as possible.

b. Period of retention
We only store your data as long as is legally necessary or required for processing purposes. When conducting analyses, we store your data until the analysis is completed. If we store data on the basis of a contractual relationship with you, this data will remain stored at least as long as the contractual relationship exists and no longer than the duration of the limitation periods for possible claims by us or any statutory or contractual retention obligations exist. As a rule, the retention period is no longer than 10 years (calculated from the termination of the contractual or de facto relationship with you).

13 Information, correction, portability
You have the right to free information about your stored data at any time and the right to correction. Please contact us for this purpose. You can find our contact details under Section 1 of this data protection declaration. You also have the right to request the transmission of your electronically held personal data to another data controller free of charge. Please note, however, that we cannot adapt your data to any special format requirements of another data controller and under no circumstances will we transmit your business history or passwords.

14 Withdrawal of consent and deletion
You may withdraw your consent to this Privacy Policy at any time, in whole or in part, or for specific uses or against specific parties and request deletion of your Personal Data. Please contact us for this purpose. You will find our contact details under Section 1 of this Privacy Policy.

Your personal data will be automatically deleted after 5 years, unless there is a contractual relationship or a legal obligation that would justify or require the storage or processing of personal data. To ensure that your personal data is up-to-date and correct, we update your personal data every 2 years by contacting you.

If a contractual relationship is still pending at the time of receipt of your withdrawal of consent and deletion request, your personal data will continue to be processed until the contract has been fully processed. Your withdrawal of consent under data protection law expressly has no influence on the processing of existing contractual relationships and is not considered an extraordinary reason for termination.
In the event of a deletion request, we will delete your personal data. Please note, however, that we are required by commercial and tax law to retain accounting records for at least 10 financial years. We can therefore neither delete nor process the personal data contained in these documents. Your deletion request is therefore only valid for future processing and only for personal data that we process exclusively on the basis of your consent and not due to a legal requirement. We also reserve the right to comply with any statutory retention requirements.

Complaint to a supervisory authority
Following the entry into force of the revised DSG (federal law on data protection in Switzerland scheduled for 1 September 2023), you have the right to lodge a complaint with the competent supervisory authority at the registered office of the controller if you believe that we have violated a provision of the DSG. The Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) is responsible for complaints from data subjects.

15. Changes to this Privacy Policy
Changes to this Privacy Policy will be effective as of the date of their publication on our website. The processing of personal data collected under an older privacy policy will be carried out in accordance with this privacy policy.

We reserve the right to change this Privacy Policy at any time and to inform customers of the changes in an appropriate manner.

Status: July 2023