Atlas logo

OKR Circle

Privacy Policy

1. General Privacy Policy

Data protection and data security is very important to us at evolvee GmbH (hereinafter “evolvee”). Protecting your privacy is important to us. That is why the protection of personal data has priority during all business processes. We respect your personality and privacy and ensure their protection as well as the lawful processing of your personal data.

With this data protection declaration we inform you which of your data we process, what we need this data for, how you can object to the data collection and what other rights you have.

evolvee is responsible for processing your data.

If you have any questions or suggestions regarding data protection, you can contact our company data protection officer. Either by mail to the following addresses or electronically by email to:

Company data protection officer: evolvee GmbH Data Protection Officer Eigerstrasse 12 3007 Bern or by email to: info@evolvee.ch

2. Collection of Personal Data

In the context of this data protection declaration, personal data refers to all data relating to an identifiable user of our services. This includes both people who use our website for information purposes and people who use other services, regardless of whether they register with us.

As evolvee, we collect in particular the personal data that is required for the conclusion and execution of service contracts with you as an evolvee customer. In addition, we collect the personal data that you as a user disclose when registering for one of our services or the newsletter and during other contacts with us. This includes in particular the following categories of personal data:

  • User data that you provide when registering for an evolvee service (e.g. personal data and service-specific settings).
  • Your responses to evolvee offers made to you by e-mail, letter, or telephone.
  • Non-personal data that is generated by technical processes when using the evolvee website or services, and IP addresses.

In detail, this can be the following, non-exhaustive list of data:

  • Personal data
    • Name and first name
    • Birthday and age
    • Gender
    • Home address
    • Customer and shopping preferences
    • Billing address
    • Language preferences
    • Telephone number(s)
    • E-mail address(es)
    • Identification numbers of technical devices
  • Information about subscribed newsletters or other advertisements
  • Consent to receive advertising
  • Online customer account information (including opening date, usernames, profile pictures)
  • Memberships within the evolvee business unit
  • User activity data
  • Contract information (including date of contract, type of contract, content of contract; party to contract; term of contract; value of contract; claims made under contract)
  • Customer service information
  • session data relating to visits to Internet sites, apps for mobile devices or offers on Internet platforms, multimedia portals or social networks (including duration and frequency of visits, language and country preferences, information about browser and computer operating system, Internet protocol addresses, search terms and search results)
  • ratings submitted
  • location-based data when using mobile devices
  • communications via telephone, facsimile, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging.

We reserve the right to collect such personal data from third parties and to process it together with the other data of the user in accordance with the provisions of this data protection declaration. Users will be informed in an appropriate manner about this data collection.

3. Processing Purposes

As evolvee, we process the personal data collected primarily to fulfill our contractual obligations and to provide our services. All data processing takes place only for specific purposes. These can result, for example, from technical necessity, contractual requirements, legal regulations, overriding interest, i.e. legitimate reasons, or your express consent.

We collect, store and process personal data as far as this is necessary, for example for the administration of the customer relationship, the provision of our services and products, the processing of orders and contracts, sales and invoicing, answering questions and concerns, the information our products and services and their marketing, support with technical matters and the evaluation and further development of services and products.

Visiting the website:

For technical reasons, we have to collect and store certain data when you visit our website (the date, the duration of the visit, the websites used, the browser used and its version, the operating system used and its version, Internet protocol addresses and the website, from which you are visiting us).

Contract:

For contractual reasons, we also need personal data (e.g. your contact details) in order to provide our services and to be able to carry out the contractual relationships concluded with you.

Newsletter / Advertising:

For the delivery of our newsletter or individual advertising, we need an email address from you. Providing further data is voluntary. We use this data exclusively for the delivery of the newsletter resp. of individual advertising (see Section 4).

Legal basis of processing:

Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis in accordance with Article 6 Para. 1 lit a) GDPR.

When processing personal data that is required to fulfill a contract with you, the contract is the legal basis in accordance with Article 6 Para. 1 lit. b) GDPR. Article 6 Para. 1 lit. b) GDPR also applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Article 6 Para. 1 lit. c) GDPR.

In the case of legitimate interests on our part as the person responsible or a third party, the processing is based on Art. 6 Para. 1 lit f) GDPR.

4. Advertising and Newsletters

We will only send you advertising and newsletters with your consent (opt-in). You can register accordingly on our website for receipt. You hereby consent to us evaluating the collected user data for our own marketing and advertising purposes. This applies to data that you have given us orally, in writing or electronically, publicly available data and data that we obtain from third parties. Target groups consisting of users with similar user and purchase data can be formed (clusters). This serves to deliver individual offers tailored to the needs of the user and to improve evolvee’s services. The user data including clusters are not passed on to unauthorized third parties.

You can waive the delivery of advertising with effect for the future at any time by notifying us. A successful registration for the newsletter can be revoked at any time via the link in each newsletter.

5. Cookies

We currently do not use cookies and do not collect any data. For this reason, no cookie banner is used.

6. Web Analysis Tools

We currently do not use web analytics tools.

7. Other third-party services integrated on our website

In order to offer you excellent service on our website, we use the following third-party services:

Google Fonts: We use fonts provided by Google on our website.

8. Sharing of Personal Data and Outsourcing

We do not disclose any personal data to third parties without obtaining the consent of the customer concerned. Statutory information obligations to authorities remain reserved.

We can transfer the processing of personal data to external contractors (outsourcing). At evolvee, we ensure compliance with data protection and data security. The contractors are obliged to only process the data in the way we are allowed to do it ourselves. It is ensured that the commissioned companies do not use the data beyond the specific order and that they neither use the data for themselves nor pass it on to a third party. We are granted the appropriate audit and control rights for this.

If necessary, data processing is transferred to contractors abroad. We make sure that the data is mainly processed in EU countries. If the data is processed outside the EU and Switzerland, we ensure compliance with data protection and data security through additional guarantees, in particular through contractual obligations of the contractor.

We mainly host our own systems and data ourselves. The servers used are located exclusively in Switzerland or in countries of the European Union.

9. Data Security

We use appropriate technical and organizational measures to protect the data, in particular against loss, destruction, falsification or unauthorized access.

Data is transmitted in encrypted form. To protect the security of personal data during transmission, we use Transport Layer Security (TLS). This protocol encrypts the information transmitted by the user. As evolvee, we assume no liability for the security of the information transmitted on the Internet, insofar as this is legally permissible.

10. Retention Obligation / Deletion of Data

We keep users’ personal data for as long as necessary or appropriate to comply with applicable laws or as long as it is necessary for the purposes for which it was collected. We delete personal data as soon as they are no longer required and in any case after the legally prescribed maximum retention period has expired.

11. Right to Information, Right to Rectification, Right to Erasure, Right to Restriction of Processing, Right to Data Portability, Right to Object and Right to Lodge a Complaint

According to the Swiss Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR), you as a user have the following rights:

Right of providing information:

You can request information at any time about what data is stored about you, processing purposes, any recipients of the data and the planned storage period.

Right to rectification:

You have the right to correct your personal data if it is incorrect or no longer up to date.

Right to erasure (“right to be forgotten”):

You have the right to request the deletion of your personal data. evolvee’s statutory or contractual storage obligations remain reserved.

Right to restriction of processing:

Under certain conditions, you can request the restriction of processing (blocking) of your personal data if deletion is not possible or the obligation to delete is disputed.

Right to data portability:

You have the right to portability of the data that you have provided to us on the basis of consent or a contract (data portability). This means that you can receive the data that you have provided to us in a common machine-readable format such as CSV and, if necessary, transmit it to others.

Right to object:

If you have given us your consent to data processing, you can revoke this at any time with effect for the future. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation.

Right of appeal:

You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Federal Data Protection and Information Commissioner Feldeggweg 1 3003 Bern Website: https://www.edoeb.admin.ch Telephone:  +41 (0)58 462 43 95 (Monday to Friday, 10 a.m. to 12 p.m.)

To exercise your rights, please either send a letter to the following address:

evolvee GmbH Data Protection Officer Eigerstrasse 12 3007 Bern

or an email to the following email address: info@evolvee.ch.

12. Changes

evolvee reserves the right to change this data protection declaration at any time and to inform customers of the changes in an appropriate manner. The current version is available at www.okrcircle.org.