We appreciate your interest in our company. The protection of personal data is important to us. The use of the website of Huba Control AG (hereinafter: "Huba Control") is generally possible without providing any personal data, unless you provide us with such data voluntarily (e.g. by requesting a quote, registering) or have given your consent or the relevant legal provisions on the protection of your data permit this.

We are committed to handling your personal data responsibly. Consequently, we consider it a matter of course to comply with the Swiss Federal Act on Data Protection, the associated ordinance and other applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR).

1 Controller

The controller within the meaning of data protection law is:

Huba Control AG
Industriestrasse 17
CH-5436 Würenlos

Phone: +41 56 436 82 00
e-mail: info.ch@hubacontrol.com

1.1 Data protection advisor

The contact details of our data protection advisor:

Swiss Infosec AG
Centralstrasse 8A
CH-6210 Sursee

Phone: +41 41 984 12 12
e-mail: dataprivacy@hubacontrol.com

2 General information on data processing

In the following we inform you in summarised form about the personal data processed by us, the purposes and legal basis of our processing, third parties to whom we disclose personal data and the duration of data processing. You will then find further information, in particular on data processing when you visit our website.

2.1 Personal data processed by us

Huba Control is primarily active in the business-to-business (B2B) sector. Various personal data is also processed in the B2B area, for example when you contact us using a form. The personal data processed by us is in particular personal data:

• that we receive from customers, future customers, interested parties, service providers, suppliers, business partners or other persons involved in the business relationship as part of our business relationships;
• that we receive from job applicants;
• which we are legally or contractually obliged to collect;
• that we collect when you use our website;
• that we receive from authorities and other third parties (address dealers, credit agencies).

We also collect contact data from many of the above-mentioned persons and the data generated in the course of the respective communication. In particular from interested parties, service providers, suppliers and other business partners and/or their respective contact persons we also collect information on their function, information on the previous relationship with these persons, information on creditworthiness, communication, information on business transactions, enquiries, offers, quotations, conditions and contracts, etc.

Depending on the type of relationship, we process your personal data as follows:

• Contact and communication data such as surname, first name, address, e-mail address, telephone number;
• Contract data such as contract type, contract content, type of products and services, consumption groups, consumption types, forecast data, applicable terms and conditions, contract start date, contract term, billing data;
• Financial data such as account information, payment information, payment history, creditworthiness data;
• marginal data from telecommunications traffic such as telephone number, value-added service numbers, date, time and duration of the connection, connection type, location data, IP address, device identification numbers such as MAC address;
• Interaction and usage data: Correspondence, preferences and target group information, end device type, device settings, operating system, software, information from assertion of rights;
• Website information: IP address, cookie information, browser settings, frequency of visits to the website, duration of visits to the website, search terms, clicks on content, website of origin.

2.2 Legal basis of the processing and processing purposes

In general, we rely on the following legal bases in connection with the processing of your personal data:

• your consent, which you can withdraw at any time (e.g. for processing during the application process or in connection with cookies on our website)
• the conclusion or fulfilment of a contractwith you or your request in advance (e.g. when you submit a job application or fill out an offer form)
• an consideration of interests (for example, to ensure information security), which you may object to under certain circumstances
• a legal obligation (e.g. for the storage of accounting-relevant documents by us), which can also be included in the weighing of interests

We primarily use the personal data we collect to conclude and process contracts with our customers and business partners.

We also rely on the processing of personal data for the purchase of products and services from our suppliers and subcontractors. If you work for a customer or business partner, your personal data may of course also be affected in this function.

In addition, we also process personal data of you and other persons for the following purposes, where permitted and where we deem it appropriate, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

• Offer and further development of our products, services and website and other platforms on which we are present. This may include the storage, processing and communication of personal data and communication to our globally active subsidiaries;
• Communication and processing of enquiries (e.g. email, telephone, offer forms, job applications, media enquiries);
• Advertising and marketing if you have consented/not objected to the use of your data (if we send you advertising from us as an existing customer, you can object to this at any time and we will put you on a blacklist against further advertising mailings);
• Cooperation with business partners such as suppliers, commercial customers of goods and services and service providers (e.g. IT service providers)
• Customer relationship management such as customer orientation, customer satisfaction and customer loyalty;
• Administration and accounting
• Market research, media monitoring
• Enforcement of legal claims and defence in connection with legal disputes and official proceedings
• Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations)
• Guaranteeing our operations, in particular IT, our website and other platforms

If you have given us your consent to process your personal data for specific purposes, we will process your personal data within the scope of and based on this consent, unless we have another legal basis and require one. Consent that has been granted can be revoked at any time, but this has no effect on data processing that has already taken place. You can send us a cancellation by e-mail or by post to the (e-mail) address stated in section 1.1.

2.3 Third parties to whom we disclose personal data

We also disclose personal data to third parties within the scope of our business activities and for the above-mentioned purposes, insofar as this is permitted and appropriate, either because they process it for us (commissioned data processing) or because they wish to use it for their own purposes (data disclosure). This relates in particular to:

• service providers, including processors
• Our subsidiaries
• External third parties such as tax consultants, lawyers, management consultants, recruiters / headhunters
• Logistics services for the delivery of goods
• Business information and debt collection services
• IT service providers (e.g. web hosting providers, e-mail dispatch service providers, online tools)
• Suppliers
• Authorities
• Insurances
• Banking institutions and payment service providers
• Bureaucracies and courts

The recipients are partly in Germany, but partly also abroad. If we transfer data to a country where there is no adequate legal level of data protection, we require that the recipient takes appropriate measures to protect personal data (e.g. by means of the agreement of so-called EU standard clauses [current version], other precautions or based on justification grounds).

2.4 Duration of data processing

We process personal data for as long as is necessary for the fulfilment of our contractual obligations or otherwise for the purposes pursued with the processing, for example for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against us and insofar as we are otherwise legally obliged to do so or legitimate interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymised.

3 Visiting our website

As a rule, you can use our website without providing any personal data. This does not apply to areas and services that naturally require your name, address or other personal data, e.g. if you apply for a job with us.

In addition, you can contact us on a voluntary basis by e-mail and/or telephone. The data collected and/or transmitted by you will be processed or stored for the respective purpose for which you have communicated it to us or for contacting us.

3.1 Server log files

When you visit our website, our servers temporarily store every access in a log file, the so-called server log files.

For example, your IP address, the date and time of your visit, the name of the file accessed, the access status (completed, partially completed, not completed, etc.), the web browser and operating system used and other similar information used for security purposes in the event of attacks on our information technology systems are recorded.

The purpose of processing this information is to correctly display our website and its content and offers to you and to ensure data traffic, to optimise our website, content and offers, to permanently guarantee the stability and security of our website and systems and to enable the investigation, defence and prosecution of cyber attacks, spam and other unlawful acts in relation to our website and systems and to enforce claims in this regard and thus on the basis of our legitimate interests.

We delete your personal data as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of our website, the deletion takes place when the respective session has ended.

For the hosting of the website, we may use the services of third parties in Switzerland and abroad who carry out the above-mentioned processing on our behalf. Our websites are currently hosted exclusively by Swiss or EU hosting providers on their servers.

3.2 Contacting us

You have the option of contacting us by e-mail or telephone on our website. If you contact us by e-mail, we will process the information you provide in the e-mail, such as your e-mail address, the subject of the contact (subject) and your message for the purpose of processing your enquiry, handling it and in the event of follow-up questions. This information is stored by us and will not be passed on to unauthorised third parties without your consent. Of course, this also applies to requests that you send us by post.

We may use your name and e-mail address to send you notifications, updates, invitations to events and other information by e-mail. However, we will first ask for your consent to do so, unless we have already received your contact details from you elsewhere in connection with our services.

You can object to this data processing at any time. Please send your objection to the (e-mail) address stated in section 1.1 and we will examine your request. In such a case, your contact will not be processed any further.

Your personal data will be deleted as soon as the request you have made has been dealt with. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and the deletion does not conflict with any statutory retention obligations.

3.3 Job applications

If you apply for a job with us, we process the personal data that we receive from you as part of the application process.

We may also, in particular via professional social networks such as Xing and LinkedIn, actively contact people who could become potential applicants or employees based on their professional background and qualifications (so-called "active sourcing"). The purpose of this measure is the targeted recruitment of qualified personnel.
Your application data will only be stored, analysed, processed or forwarded internally as part of your application. The processing is mainly carried out electronically.

Details on data processing for job applications can be found in our privacy policy for applicants. You can download it below.

3.4 Social media presence

We maintain social media profiles on LinkedIn, XING, Facebook, Instagram and YouTube.

The data you enter on our social media profiles will be published by the social media platform and will not be used or processed by us for any other purpose at any time. However, we reserve the right to delete content should this be necessary. We may communicate with you via the social media platform. This is based on your and our legitimate interest in communicating with each other in this way.

Be aware that the operator of the social media platform uses web tracking methods. Web tracking, over which we have no influence, can also take place regardless of whether you are logged in or registered with the social media platform.

For more detailed information on data processing and further information on your rights in this regard and setting options to protect your privacy as well as your right to object to the creation of user profiles by the provider of the social media platform, please refer to the privacy policy of the respective provider:

LinkedIn
LinkedIn Corporation (USA)/LinkedIn Ireland Unlimited Company (Ireland):
https://de.linkedin.com/legal/privacy-policy

YouTube
YouTube LLC (USA):
https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/

3.5 Links to third-party websites

Some links on this website lead to third-party websites. These are no longer under the control of Huba Control. Huba Control therefore accepts no responsibility for the accuracy, completeness and legality of the content contained therein and links to other websites or for any offers, products and services contained therein. The use of linked websites is at the user's own risk.

3.6 Session cookies (technically necessary)

These temporary cookies are required for the basic functionality of our website. For example, they save your language settings and products in comparisons and enquiries as you navigate our site. Session cookies are automatically deactivated as soon as you close your browser.

4 Data security

We take technical and organisational security precautions to protect your personal data against manipulation, loss, destruction or access by unauthorised persons.

Our security measures are continuously improved in line with technological developments.

Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with data protection regulations. Furthermore, they are only granted access to your personal data to the extent necessary.

5 Your rights

You are generally entitled to the rights of access, rectification, erasure, restriction, data portability, objection to processing and withdrawal of consent with regard to your personal data.

Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or need it to assert claims.

Note that the exercise of these rights may conflict with contractual agreements and may have consequences such as premature cancellation of the contract or cost consequences. We will inform you in advance if this is not already contractually regulated.

If you believe that the processing of your personal data violates data protection law or your data protection rights have otherwise been violated in any way, you can also lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner.

The exercise of your rights under data protection law generally requires that you clearly prove your identity (e.g. by means of a copy of your identity card, where your identity is otherwise not clear or cannot be verified). To assert your rights, please contact us at the (e-mail) address specified in section 1.1.

6 Video surveillance

Video surveillance monitors the entrances and delivery zones to protect Huba (prevention and preservation of evidence in the event of break-ins, theft, damage to property).

The recording area is limited to the protected object. The cameras are in operation 24 hours a day, but are not monitored live. Only a limited number of people have access to this data. They are only analysed to investigate break-ins, theft, damage to property or door alarms. The data is deleted regularly, except for data that is required for investigations. These are destroyed as soon as they are no longer required to fulfil the purpose. Huba Control AG, Industriestrasse 17, 5436 Würenlos, phone: +41 56 436 82 00, e-mail: +41 56 436 82 00, is responsible for video surveillance: dataprivacy@hubacontrol.com