Privacy notice

1. What is this privacy notice about?

The Gsell Medical- / Engineering Plastics AG (also «we», «us») collects and processes personal data that concerns you but also other individuals («third parties»). We use the word «data» here interchangeably with «personal data».

In this Privacy Notice, we describe what we do with your data when you use https://www.gsell.ch (collectively «website»), obtain services or interact with us in relation to a contract, communicate with us or otherwise deal with us. When appropriate we will provide a just-in-time notice to cover any additional processing activities not mentioned in this Privacy Notice.

If you disclose data to us or share data with us about other individuals, such as family members, co-workers, etc., we assume that you are authorized to do so, and that the relevant data is accurate. When you share data about others with us, you confirm that. Please make sure that these individuals have been informed about this Privacy Notice.

This Privacy Notice is aligned with the EU General Data Protection Regulation («GDPR»), the Swiss Data Protection Act («DPA») and the revised Swiss Data Protection («revDPA». However, the application of these laws depends on each individual case.
 

2. Who is the controller for processing your data?

Gsell Medical- / Engineering Plastics AG, Pilatusstrasse 32, 5630 Muri (AG) Schweiz, is the controller for processing under this Privacy Notice, unless we tell you otherwise in an individual case.

You may contact us for data protection concerns and to exercise your rights under Section 10 as follows:

Gsell Medical Plastics AG
Gsell Engineering Plastics AG
Pilatusstrasse 32
5630 Muri (AG)
Switzerland

+41 56 675 40 40
info@gsell.ch
 

3. What data do we process?

We process various categories of data about you. The main categories of data are the following:
 

• Technical data: When you use our website or other online offerings, we collect the IP address of your terminal device and other technical data in order to ensure the functionality and security of these offerings. This data includes logs with records of the use of our systems. In order to ensure the functionality of these offerings, we may also assign an individual code to you or your terminal device (for example as a cookie, see Section 12). Technical data as such does not permit us to draw conclusions about your identity.
   
• Communication data: When you are in contact with us via the contact form, by e-mail, telephone, or by letter or other means of communication, we collect the data exchanged between you and us, including your contact details and the metadata of the communication. If we have to determine your identity, we collect data to identify you (for example a copy of an ID document).
   
• Master data: With master data we mean the basic data that we need, in addition to contract data (see below), for the performance of our contractual and other business relationships or for marketing and promotional purposes, such as name and contact details, and information about for example, your role and function, customer history. We process your master data if you are a customer or other business contact or work for one (for example as a contact person of the business partner), or because we wish to address you for our own purposes or for the purposes of a contractual partner (for example as part of marketing and advertising, with invitations to events, with vouchers, with newsletters, etc.). We usually receive master data from yourself.
   
• Contract data: This means data that is collected in relation to the conclusion or performance of a contract, for example information about the contracts and the services provided or to be provided, as well as data from the period leading up to the conclusion of a contract, information required or used for performing a contract. We generally collect this data from you, from contractual partners and from third parties involved in the performance of the contract, but also from third-party sources (for example credit information providers) and from public sources.
   
• Other data: We may obtain or create photos, videos, and sound recordings in which you may be identifiable at events. We may also collect data about who enters certain buildings, and when or who has access rights (including in relation to access controls, based on registration data or lists of visitors, etc.)

We usually keep this data for 12 months from the last exchange with you. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. E-mails in personal mailboxes and written correspondence are generally kept for at least 10 years.
 

4. For what purposes do we process your data?

We use personal data provided by the user to fulfil the following purposes:
 

• To provide, maintain, protect and optimize the services and information offered or agreed. We use this personal data to communicate with you and to provide you with the best possible and personalized information that you require from us.
• For the establishment, administration and processing of contractual relationships
• To offer you new services and information and, based on your profile, to suggest tailored services and information that may be of interest to you.
• To comply with legal or other regulatory requirements and internal rules.
• To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings.
• For other lawful purposes where such processing arises from the circumstances or was indicated at the time of collection.

5. On what basis do we process your data?

Insofar as we ask for your consent for certain processing (e.g. for newsletters, marketing mailings, for the creation of personalized movement profiles and for advertising control and behavioral analysis on the website), we will inform you separately about the corresponding purposes of the processing. You may withdraw your consent at any time with future effect by notifying us in writing (by post) or, where not otherwise stated or agreed, by email; you will find our contact details in section 2. For withdrawal of your consent for online tracking, see section 10. Where you have a user account, withdrawal or contacting us may also be possible via the relevant website or other service. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of your consent will not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Where we do not ask you for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, so in particular in order to pursue the purposes and related objectives described above under section 4 and to be able to implement appropriate measures. Our legitimate interests also include compliance with legal requirements, insofar as this is not already recognized as a legal basis by the applicable data protection law in each case (e.g. in the case of the GDPR, the law in the EEA and Switzerland).
 

6. With whom do we share your data?

We take the necessary measures to ensure that only our authorized personnel and auxiliary persons who have the necessary knowledge have access to your personal data in order to fulfil the purposes for which your personal data was collected.

We may disclose your personal data to the following possible categories of recipients in accordance with the purposes and legal bases of processing described above, to the extent necessary for the intended data processing.
 

• Experts and other service providers of ours in the context of an enquiry
• Service providers who process personal data on our behalf and on our instructions (so-called order processors, e.g. in the area of IT hosting and support)
• Service providers, other business partners and auxiliary persons (e.g. lawyers)
• Authorities, official agencies, courts or other state institutions
• Other parties in potential or actual legal proceedings
• Social media

We select our partners and order processors carefully and only with sufficient assurance that they have appropriate technical and organizational measures in place in accordance with legal requirements. Our order processors can only process personal data on documented instructions from us. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfil the purpose for which your personal data was collected, unless otherwise required by law.
 

7. Is your personal data disclosed abroad?

The personal data collected is stored exclusively in Switzerland. In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the EU if this is necessary for the data processing described in this privacy policy in accordance with applicable law.

If data is transferred to countries that do not ensure an adequate level of protection, we ensure adequate data protection by taking appropriate safeguards, such as contractual safeguards (e.g. based on EU standard clauses), based on binding corporate rules, the transfer of data in accordance with your explicit consent, for the conclusion or performance of a contract with you, or in connection with the establishment, exercise or enforcement of legal claims. For more information about our reasonable security measures, please contact us with email info@gsell.ch.
 

8. How long do we process your data?

We process your data for as long as our processing purposes, the legal retention periods and our legitimate interests in documentation and keeping evidence require it or storage is a technical requirement. You will find further information on the respective storage and processing periods for the individual data categories in Section 3, and for cookies in Section 12. If there are no contrary legal or contractual obligations, we will delete or anonymize your data once the storage or processing period has expired as part of our usual processes.
 

9. How do we protect your data?

We take appropriate security measures in order to maintain the required security of your personal data and ensure its confidentiality, integrity and availability, and to protect it against unauthorized or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorized disclosure or access.
 

10. What are your rights?

Applicable data protection laws grant you the right to object to the processing of your data in some circumstances, in particular for direct marketing purposes, for profiling carried out for direct marketing purposes and for other legitimate interests in processing.

To help you control the processing of your personal data, you have the following rights in relation to our data processing, depending on the applicable data protection law:
 

• The right to request information from us as to whether and what data we process from you;
• The right to have us correct data if it is inaccurate;
• The right to request erasure of data;
• The right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
• The right to withdraw consent, where our processing is based on your consent;
• The right to receive, upon request, further information that is helpful for the exercise of these rights;

If you wish to exercise the above-mentioned rights in relation to us , please contact us in writing, at our premises or, unless otherwise specified or agreed, by e-mail; you will find our contact details in Section 2. In order for us to be able to prevent misuse, we need to identify you (for example by means of a copy of your ID card, unless identification is not possible otherwise).

Please note that conditions, exceptions or restrictions apply to these rights under applicable data protection law (for example to protect third parties or trade secrets). We will inform you accordingly where applicable.

If you do not agree with the way we handle your rights or with our data protection practices, please let us (Section 2) know. If you are located in the EEA, the United Kingdom or in Switzerland, you also have the right to lodge a complaint with the competent data protection supervisory authority in your country.
 

11. Do we use Cookies?

We use various techniques on our website that allow us and third parties engaged by us to recognize you during your use of our website, and possibly to track you across several visits. This Section informs you about this.

In essence, we wish to distinguish access by you (through your system) from access by other users, so that we can ensure the functionality of the website and carry out analysis and personalization. We do not intend to determine your identity, even if that is possible where we or third parties engaged by us can identify you by combination with registration data.  However, even without registration data, the technologies we use are designed in such a way that you are recognized as an individual visitor each time you access the website, for example by our server (or third-party servers ) that assign a specific identification number to you or your browser (so-called «cookie»).

We use these technologies on our website and may allow certain third parties to do so as well. However, depending on the purpose of these technologies, we may ask for consent before they are used. You can also set your browser to block or deceive certain types of cookies or alternative technologies, or to delete existing cookies. You can also add software to your browser that blocks certain third-party tracking. You can find more information on the help pages of your browser (usually with the keyword «Privacy») or on the websites of the third parties set out below.

We distinguish the following categories of cookies:
 

• Necessary cookies: Some cookies are necessary for the functioning of the website or for certain features. For example, they ensure that you can move between pages without losing information that was entered in a form. They also ensure that you stay logged in. These cookies exist temporarily only («session cookies»). If you block them, the website may not work properly. Other cookies are necessary for the server to store options or information (which you have entered) beyond a session (i.e. a visit to the website) if you use this function (for example language settings, consents, automatic login functionality, etc.). These cookies have an expiration date of up to 24 months.
   
• Performance cookies: In order to optimize our website and related offers and to better adapt them to the needs of the users, we use cookies to record and analyze the use of our website, potentially beyond one session. We use third-party analytics services for this purpose. We have listed them below. Before we use such cookies, we ask for your consent. You can withdraw consent at any time through the cookie settings on our websitePerformance cookies also have an expiration date of up to 24 months. Details can be found on the websites of the third-party providers.

We may also integrate further third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (e.g. by clicking a button), the corresponding providers can determine that you are on our website. If you have an account with the social media provider, they can assign this information to you and thus track your use of online offers. These social media providers process this data under their own responsibility.

We currently use offers from the following service providers:

GoogleAnalytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited and Google LLC (Google). Google Analytics uses cookies that are stored on your device and enable an analysis of website usage. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the installation of cookies by selecting the appropriate settings in your browser software.

Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This informs Google that your IP address has been used to access this website. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or the access to information in the user's terminal device as defined by the TTDSG. The consent can be revoked at any time. If your browser does not support web fonts, a standard font from your computer will be used. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Tag Manager
Google Tag Manager is a solution that allows us to manage website tags via an interface and to integrate Google Analytics and other Google marketing services into our website. The Tag Manager itself, which implements the tags, does not process any personal data of the users. With regard to the processing of users' personal data, please refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

LinkedIn
This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "social button" and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website with you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. You can find more information on this in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

YouTube
We embed videos from YouTube on our website. The operator of the pages is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland. YouTube establishes a connection to the Google network regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no influence. YouTube is used in the interest of an appealing presentation of our website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device within the meaning of the TTDSG. The consent can be revoked at any time. For more information on data protection at YouTube, please see the privacy policy at: https://policies.google.com/privacy?hl=de.
 

12. How do we use application documents?

If you send us an application, we will process your personal data (contact details, application documents, notes, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Art. 6 para. 1 lit. b DSGVO (general contract initiation) and if you have given your consent Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.

If the application is successful, the data submitted by you will be stored in our data processing systems for the purpose of implementing the employment relationship. If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO). Subsequently, the data will be deleted and the physical application documents destroyed.
 

13. Can we update this Privacy Notice ?

This Privacy Notice is not part of a contract with you. We can change this Privacy Notice at any time. The version published on this website is the current version.

Last updated: 29.08.2023