Privacy policy

1. 1.1.

   Name and address of the person responsible

   The person responsible for the processing of your data is

   SIGA Services AG
   Rütmattstrasse 7
   CH-6017 Ruswil

   E-Mail: webmaster@siga.swiss
   Phone: +41 (0) 41 499 69 69
   Internet: http://www.siga.swiss

2. 1.2.

   Name and address of the representative in the EU

   The representative in the EU for the person responsible is the:

   SIGA Cover GmbH Deutschland
   Willy-Brandt-Platz 2
   12529 Schönefeld
   Germany

   E-Mail: webmaster@siga.swiss

1. 2.1.

   Visit of the online shop

   Personal data are "information relating to an identified or identifiable natural person". Online identifiers, such as IP addresses, may be considered personal data unless they are specifically anonymized.

   We process your personal data for the following purposes:

   • Requests via contact forms
   • Customer Service
   • Making an appointment
   • Opening of customer account
   • Order (e.g. in the online shop)
   • Applications (via online form or e-mail)
   • Marketing purposes
   • Optimization of the website (adaptation of the online shop to your needs)
   • Defense and recording of hacking attacks
   • Creation of usage statistics
   • Clarification of needs (e.g. via surveys and evaluations)

   We have a legitimate interest in the temporary storage of your personal data and log files. This legitimate interest exists to

   • to deliver the contents of our online shop correctly
   • to optimize the contents of our online shop and the advertising for them
   • to provide law enforcement authorities with information necessary for law enforcement in the event of a cyber attack
   • to further improve our offer and our Internet presence
   • in order to collect statistical data
   • to process orders in our Onlineshop

2. 2.2.

   Newsletter

   If you want to subscribe to our newsletter, we need your e-mail address.

   For the processing of your data after registration for the newsletter it is our legitimate interest to provide existing business customers (business-to-business) with information and advertising about our products.

   For the newsletter registration we use the so-called double-opt-in procedure. This means that after entering your e-mail address, we will send you a confirmation e-mail to the e-mail address you entered, in which we ask you to confirm that you wish to receive the newsletter. The confirmation is made by clicking on an activation link contained in the confirmation e-mail. 

   The newsletters are sent via "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The e-mail addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore MailChimp may use this data according to its own information to optimize or improve its own services, e.g. for technical optimization of sending and presentation of newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them itself or pass them on to third parties. We trust in the reliability and the IT- and data security of MailChimp. MailChimp is protected under the US-EU data protection agreement „Privacy Shield“ and thus undertakes to comply with the EU data protection regulations.
   Furthermore we have developed with MailChimp a „Commissioned processing contract.“ This is a contract, in which MailChimp commits itself to protect the data of our users, to process them according to its privacy policy on our behalf and especially not to pass them on to third parties.
   You can read the privacy policy of MailChimp here .

   You have the possibility to unsubscribe from the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. To do so, click on the corresponding button in the newsletter sent to you. Furthermore you have the possibility to send your request for objection to the following e-mail address newsletter@siga.swiss

3. 2.3.

   Contact us

   On our website you have the possibility to contact us via a contact form and/or by e-mail. Which data is collected in the case of a contact form, is evident from the respective contact form

   • Contact form: http://www.siga.ch/de/footer/kontakt.html
   • Academy registration: http://www.siga.ch/de/academy/formular.html
   • Workshop registration: http://www.siga.ch/de/externer-workshop/formular.html
   • Webinar registration: https://www.siga.swiss/ch_de/dienstleistungen/webinare

   These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.

   Our and YOUR legitimate interest is to answer your request. If the contact serves the fulfilment of a contract to which you are a party or as a request within the framework of pre-contractual measures, this is an additional legal basis for the processing of your personal data.

   You can object to this data processing at any time. Please send your request for objection to the following e-mail address webmaster@siga.swiss

4. 2.4.

   Use for advertising purposes

   We also use your personal data on the basis of our legitimate interest for the following purposes:

   • to permanently improve your shopping experience and to make it customer-friendly and individual for you
   • to communicate with you through your orders
   • as well as existing business customers (business-to-business) to communicate occasionally about certain products or marketing campaigns for which we need your e-mail address
   • and to recommend products or services that may be of interest to you

   As involved person, you have the right to object to our direct marketing at any time, or to unsubscribe from it: webmaster@siga.swiss

5. 2.5.

   Market research

   We do not use the data collected within the scope of market and opinion research for advertising purposes. You will find detailed information (in particular on the evaluation of your data) in the respective survey or where you provide your data. Your answers in surveys will not be passed on to third parties or published.

   RThe legal basis for the processing of your personal data is the existence of consent and/or a legitimate interest.

6. 2.6.

   Online Shops

   1. 2.6.1.

      General information

      If you wish to make use of the services of our online shops at shop.siga.swiss, it is necessary for you to provide us with the data required to process your order. The mandatory data required for the processing of the contract are marked separately. Further details are voluntary.

      In the course of processing your order, the service providers we use receive the data necessary for processing your order. This data includes, among other things, your e-mail address and telephone number, for example, to be able to arrange an individual delivery date with you. You can find more information on data protection at these service providers on their Websites.

   2. 2.6.2.

      Setting up a customer account

      By opening a customer account you will receive password-protected direct access to your inventory data stored with us (e.g. name and address). On the customer account you can view, among other things, data about your completed, open and recently shipped orders.

      For the processing of an order we need your correct name, address and payment data. We need your e-mail address so that we can confirm the receipt of your order and its dispatch and generally to be able to communicate with you. We also use your e-mail address for your identification (as login name) when you log in to your customer account.

      The customer accounts are not public and cannot be indexed by search engines. If you close your customer account, the corresponding data will be deleted, subject to legal retention obligations. It is up to you to save your personal data in case of termination before the end of the contract. We are entitled to irretrievably delete all data stored during the contract period.

   3. 2.6.3.

      Use of the customer account

      You can use your customer account to log in to our online shop.

      If you do not log out of your customer account, you will automatically remain logged in for a certain period of time on the device you are using. This function enables you to access the online shop faster.

      If you create a customer account or revise data already entered, the data you entered in your account settings will be stored revocably and can be used for further orders without having to enter it again.

      Your personal data is used for the purpose of processing your order, if you have created a customer account in our online shop, and also to facilitate further orders. To prevent unauthorised access to your personal data by third parties, the ordering process is encrypted using TLS technology.

      Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests and to protect against abuse and other unauthorized use. This data is not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so. We process usage data (e.g. the visited websites of our online offer, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile, in order to show you e.g. product information based on your previously used services.

7. 2.7.

   Online applications

   If you apply for a job with us, we process your information to process your application. During the application process, your personal details, postal and contact addresses and the documents belonging to the application such as letter of motivation, CV and certificates are stored in the applicant database. In addition, applicants can voluntarily provide us with additional information. This data is stored, evaluated, processed or forwarded internally exclusively in the context of your application. The data may be processed for statistical purposes (e.g. reporting). No conclusions can be drawn about individual persons. By submitting your application to us, you agree to the processing of your data for purposes of the application procedure.

   Otherwise, your application data will be processed by a host provider on our behalf on the basis of contracts pursuant to Art. 28 DSGVO. 

   The legal basis for processing your personal data is the common interest in processing your application. If the processing of application data serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, this is an additional legal basis.

   If we conclude an employment contract with you, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the application procedure ends without employment, your personal data will be stored for six months for documentation purposes and then deleted, unless you have given us permission to use your data for further application procedures with us.

   Irrespective of the above, you have the possibility of having your electronic data deleted at any time. You can send your request for deletion to the person named as contact person in the job advertisement or to hr@siga.swiss

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this is provided for by laws or regulations to which we are subject. If the purpose of storage ceases to apply and a prescribed retention period expires, your data will be blocked or deleted routinely and in accordance with legal requirements. If your data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted.

In addition, we will delete your data if you send us an e-mail under webmaster@siga.swiss and we have no legal or contractual obligation to store or otherwise process this data.

We only pass on your personal data outside the SIGA Group if you have expressly agreed to this, if we are obliged to do so by law, if there is a legitimate interest in doing so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties as far as this is necessary within the scope of the use of the websites or for the possible provision of services requested by you. The use of the data passed on for this purpose by the third parties is strictly limited to the stated purposes.

We disclose certain of your personal data to the following categories of recipients in the EU/EEA/CH area, while ensuring the protection of your personal data:

• Companies of the SIGA Group 
• operators of IT, financial and travel services
• hosting providers
• transport and logistics company
• authorities

Your details will be stored in our Customer Relationship Management System ("CRM System") We use the CRM system FileMaker / MS Dynamics based on our legitimate interests (efficient and fast processing of user requests, customer service, marketing). For this purpose we have concluded a contract with Microsoft with so-called standard contract clauses in which Microsoft undertakes to process user data only in accordance with our instructions and to comply with the EU data protection level. Microsoft is also certified under the Privacy Shield Agreement and thus offers an additional guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK). 

Various third-party providers are also expressly mentioned in this data protection declaration (e.g. in section 8 "Web analysis tools"). Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer), we use content or service offers from third parties to integrate their content and services, such as fonts. The following presentation provides an overview of other service providers to whom the personal data collected via the website is passed on or who have or may have access to it:

• Location recognition is provided via Geo IP of the "ip-api" service of the third-party provider Artia International S.R.L. Privacy policy:https://members.ip-api.com/privacy-policy
• External code of the JavaScript framework "jQuery", provided by the third-party jQuery Foundation, https://jquery.org.
• Online survey tool of the "Google Surveys" service of the third-party provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/.
• Social media management tool "Hootsuite" of the third-party provider Hootsuite Inc. Privacy policy: https://hootsuite.com/de/legal/privacy.
• Handling of booking requests for the SIGA Guesthouse via Protel of the third-party provider protel hotelsoftware GmbH, Europaplatz 8, 44269 Dortmund, Germany. Privacy policy: http://www.protel.net/de/impressum/

If we use subcontractors to provide our services, we will take appropriate
legal precautions as well as appropriate technical and organizational measures to ensure the protection of your personal data in accordance with the relevant legal provisions.

Siga may also transfer your personal data to third companies abroad, in particular companies of the SIGA Group, provided that this is necessary for the data processing described in this privacy policy. In doing so, the legal regulations for the transfer of personal data to third parties are of course observed. These third parties are obliged to the same extent as we ourselves to protect data. If the data protection level in a country does not correspond to the Swiss or EU data protection law, we ensure by contract or with other measures that the protection of your personal data corresponds to that in Switzerland or the European Union at all times.

We use so-called cookies on our website based on the legitimate interest. These are small text files which are stored on your end device with the help of the browser. When you call up a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when you return to the website.

By means of a cookie, the information and offers on our website can be optimised in your interest. Cookies enable us to recognize visitors. The purpose of this recognition is to make it easier for you to use our website.

We use temporary cookies. These are automatically deleted when you close the browser. These include in particular the session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognised when you return to the website. We use this type of cookies to ensure the operation and functionality of our website.

In addition, we use cookies across sessions. These remain on your hard disk beyond the session. Thanks in particular to these cookies we can make our offer more user-friendly.

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region in which you are located.

You can view and delete the cookies stored on your computer and configure the handling of cookies in general via the settings of your browser. You can obtain further information on this from the manufacturer or in the help function of your Internet browser. However, deactivating cookies may mean that you cannot use all the functions of our portal.

The following links will inform you about this possibility for the most commonly used browsers:

• Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
• Firefox: https://support.mozilla.org/de/kb/cookies-informationen-Webseite s-auf-ihrem-computer
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
• Safari: https://www.verbraucher-sicher-online.de/anleitung/cookies-verwalten-in-apple-safari
• Opera: http://help.opera.com/Linux/12.10/de/cookies.html

We also use other technologies such as pixel counting and local storage. We use these technologies, for example, to determine which features are most popular, to create a more personalized user experience, and to serve user-relevant advertising.

Counting pixels (also known as clear GIFs, web beacons or pixel tags) are small units of code that are installed in or on a web page, mobile app or advertisement. These tracking pixels can retrieve certain information about your browser and device, such as operating system, browser type, device type and version, referring web page, web page visited, IP address and other similar information.

Local storage is an industry standard technology that allows a website or mobile app to store and retrieve data on a person's computer, mobile phone or other device.

Our website uses functions of the following web analysis and tracking services:

• Google Universal Analytics
• Google AdWords
• Google Tag Manager
• Inspectlet

The details of the individual services can be found in the following explanations.

1. 8.1.

   Google (Universal) Analytics

   Based on our legitimate interests, we use Google Analytics, a web analytics service provided by Google Ireland Limited ("Google") (Gordon House, Barrow Street, Dublin 4, Ireland). Google uses cookies. 

   We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activity on our pages across devices (e.g. when accessed via laptop and later via a tablet). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

   The information generated by the cookie about your use of our website (including your IP address) is transferred to Google's computer and stored there. It cannot be ruled out that data processing may take place outside the scope of EU law. Google has joined the Privacy Shield, so that Google guarantees compliance with EU data protection standards".
   (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

   Google uses this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with additional services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google. 

   We only use Google Analytics with activated IP anonymisation. This means that the IP address of the
   user is being used by Google within member states of the European Union or in other
   States party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

   You can prevent the collection and transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de) An opt-out cookie is set, which prevents the future collection of your data when visiting this website. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use. You can find more information about Universal Analytics here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376.

   Further information on terms of use and data protection can be found at Further information on terms of use and data protection can be found at www.google.com/analytics/terms/de.html bzw. unter www.google.de/intl/de/policies/ 

2. 8.2.

   Google AdWords

   Based on the legitimate interest will use the online advertising program "Google AdWords" belonging to Google marketing services. 

   Google AdWords will set a cookie on your computer ("conversion cookie") if you have reached our website via a Google ad. These cookies lose their validity after 30 days, do not contain any personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not expired, Google and we can recognise that you have clicked on the ad and been redirected to that page. Each Google AdWords customer receives a different cookie. As a result, there is no way that cookies can be tracked through the web pages of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. We do not receive any information that can identify you personally.

   The information collected by the cookie about your use of our websites is usually transferred to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law 
   (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

   You have the opportunity to object to interest-based advertising by Google. To do this, you must call up the link https://www.google.de/settings/ads and make the desired settings there.

   You can find more information about the terms of use and data protection in the context of Google AdWords under this link https://www.google.de/policies/technologies/ads/.

3. 8.3.

   Google Tag Manager

   We also use the "Google Tag Manager" to integrate and manage Google's analysis and marketing services into our website. Google Tag Manager, a service of Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland) ("Google"), is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself, which implements the tags, is a cookie-less domain and does not collect any personal information. However, the tool will trigger other tags that may collect data. Google Tag Manager itself does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented by Google Tag Manager. For more information, please see the usage policy for this service.

   Further information on the use of data for marketing purposes by Google can be found on the
   Overview page: https://www.google.com/policies/technologies/ads, the privacy policy of Google is under https://www.google.com/policies/privacy abrufbar.

   If you wish to opt-out of interest-based advertising through Google marketing services, you may use the opt-out and opt-in options provided by Google: http://www.google.com/ads/preferences.

4. 8.4.

   Hotjar

   We use functions of the Hotjar software (https://www.hotjar.com, Hotjar Ltd., St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta) for improvements in the use of our website. Using Hotjar, we are able to analyse user behaviour on our website. To this end, Hotjar saves cookies on the user’s device and may save user information such as browser information, operating system, length of visit to the site, etc. This information about your use of this website generated by the cookies is generally communicated to a Hotjar Ltd. server and stored there. You can find out more about Hotjar Ltd.’s data security and processing at https://www.hotjar.com/privacy. You can use a browser plugin to prevent the information collected by cookies from being sent to Hotjar Ltd. and used. The following link leads to the appropriate plugin: https://www.hotjar.com/legal/compliance/opt-out.

On our website we have included links to our social media profiles on the following social networks:

• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
• Google Inc., 1600 Amphitheatre, Parkway, Mountain View, CA 94043, USA 
• Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA
• Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA
• Youtube, a service operated by Google Inc, 1600 Amphitheatre, Parkway, Mountain View, CA 94043, USA 
• LinkedIn Inc., 2029 Stierlin Ct, Mountain View, CA 94043, USA
• Xing SE, Dammtorstrasse 30, 20354 Hamburg, Deutschland

When you click on a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This gives the network the information that you visited our website with your IP address and called up the link. If you link to a network while logged into your account on that network, the content on our site may be linked to your profile on the network, which means that the network can associate your visit to our site directly with your account and we receive your personal information such as name, email, location, friend list and profile picture. This information allows us to provide certain features on the pages. If you wish to prevent this, you should log out before you click on the corresponding links. In any case, an assignment takes place when you log in to the relevant network after clicking the link.

If you are logged in to a social network via your user account while visiting our website, the respective provider can also assign the visit to the site to your user account. If you interact with a plug-in, the corresponding information is also transmitted directly to a server of the respective provider in the USA and stored there. The information is also published in the respective social network via your user account and displayed to your contacts.

Even if you are not logged in to the providers of the plug-ins during your visit to our website, the data collected by the plug-ins may be assigned to your respective user account. A plug-in sets a cookie with an identifier each time you visit the website. Since your browser sends this cookie with every connection to a server of the respective provider without being asked, social networks could in principle use it to create a profile of which website the user belonging to the identifier has called up. If necessary, it would then be possible to assign this ID to a person again later - for example, when logging in to the provider later on.

In addition, you can select the "Block third-party cookies" function in your browser settings, in which case your browser will not send cookies to the respective social network server. With this setting, however, other cross-site functions from other providers may no longer work, apart from the plug-ins. 

For further information on the purpose and scope of data collection and the further processing and use of your personal data, please refer to the data protection notices of the respective providers:

• https://instagram.com/about/legal/privacy/ 
• https://www.google.de/intl/de/policies/privacy/ 
• https://twitter.com/de/privacy 
• http://www.facebook.com/policy.php
• https://www.linkedin.com/legal/privacy-policy 
• https://privacy.xing.com/de/datenschutzerklaerung

There you will also find more detailed information on your rights in this regard and setting options to protect your privacy and your right to object to the creation of user profiles.

If the legal basis for the processing is our legitimate interest in processing your personal data, you can object to such data processing at any time and we will carefully examine such a request.

In the same way, you can revoke your consent for us to process your personal data at any time.

In addition, you are entitled to the rights of information, correction, deletion, restriction and data transfer with regard to your personal data. If you believe that the processing of your personal data violates data protection law or your data protection rights have otherwise been violated in any way, you can also complain to the supervisory authority. In Switzerland, this is the Federal Commissioner for Data Protection and the Public (FDPIC).

Please contact us for this and with your concerns, questions, suggestions and requests to webmaster@siga.swiss.

The website is intended for an adult audience. Minors, especially children under the age of 16, are prohibited from submitting personal information about themselves to us or registering for a service. If we discover that such data has been transmitted to us, it will be deleted from our database. The child's parents (or legal representative) may contact us to request deletion or deregistration.

We take technical and organisational security measures to protect your personal data against manipulation, loss, destruction or access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations.

DThe measures taken are intended to guarantee the confidentiality and integrity of your personal data and to ensure the availability and resilience of our systems and services when processing your personal data in the long term. They are also intended to ensure that the availability of and access to the data can be quickly restored in the event of a physical or technical incident.

Our data processing and security measures are continuously improved in line with technological developments. 

We also take our own internal company data protection very seriously. Our employees and the service companies we commission are obliged to maintain secrecy and to comply with data protection regulations. Moreover, they are only granted access to your data to the extent necessary.

We reserve the right to change this privacy policy at any time in accordance with the applicable data protection regulations. Current status is 26.06.2020