This policy provides information about which information and data is collected and evaluated by wy.by AG, for what purpose this information is used and with whom it is exchanged. When handling your data, wy.by AG complies with the applicable legislation - in particular the EU Data Protection Regulation (DSGVO) and Swiss data protection law. wy.by AG allows itself the processing of personal data based on the consent of the data subjects.

Collection of general information

When you access our website, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. This is exclusively information which does not allow any conclusions to be drawn about your person. This information is technically necessary to correctly deliver the content you have requested from websites and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us to optimize our Internet presence and the technology behind it.

Processing of personal data

Person categories

Customers
This category includes, as the term suggests, our customers, clients and other parties for whom wy.by AG provides services during its business activities.

Vendors
The term refers to partnerships and companies (including sole proprietors) as well as atypical employees such as independent contractors and freelancers who provide services for wy.by AG. Under certain circumstances, wy.by AG subcontracts services that it provides to its customers to external suppliers who provide the services on behalf of wy.by AG. In this context, suppliers who are individual contractors, freelancers or employees of suppliers are treated as candidates for data protection purposes.

Website Visitors
All persons accessing an wy.by AG website.

Customer Data

Processing Purpose
With data processing we ensure that the contractual agreements between wy.by AG and our customers can be properly implemented and a smooth business relationship can be guaranteed.

Type of Processing
We are processing data as follows:

• Collecting your information from you and other sources, e.g. LinkedIn
• Storing (and, if necessary, updating) your data in our database so that we can contact you about services to be provided
• Preparation of meeting and meeting notes so that we can provide specific services for you
• Processing your data to fulfil obligations to authorities in the course of our activities or in order to be able to address suitable information and advertising campaigns to you

Processed Data
We collect data about our customers only to a very limited extent. We only need your contact details or the contact details of individual contacts within your organization (such as names, business addresses, telephone numbers and e-mail addresses) to ensure a smooth business relationship. We may also store additional information that someone from your organization has voluntarily provided to us.

Vendor Data

Processing Purpose
We need the contact details of the responsible persons within your organization in order to communicate with you. We also need further information, such as your bank details, so that we can pay for the services you provide (if this is part of the contractual agreements).

Type of Processing
Information shall be provided in particular in the following ways:

• Collecting information from you and other sources
• Storing (and, if necessary, updating) your data in our database
• Developing appropriate targeted advertising campaigns

Processed Data
We collect information about our contacts within your organization, such as names, phone numbers and e-mail addresses. We also collect bank information to make payments to you.

Website Visitor Data

Processing Purpose
We collect anonymous data from visitors to our website and use it to make it easier for you to use our website and to better manage the services we offer.

Processed Data
This includes information on how you use our website, how often you access our website, your browser type, the location from which you access our website, the selected language and the times at which our website is particularly in demand.

Passing on of personal data

We may disclose your personal data to the following categories of persons for the following purposes:

• Tax, audit or other authorities, if we are required by law or other regulations to disclose this information (for example, because of a request from a tax authority or relating to an anticipated lawsuit)
• External service providers providing services on our behalf (including external consultants, business partners and professional consultants such as lawyers, auditors and accountants, technical support functions and IT consultants who develop and test our company's technological systems)
• Providers of externally assigned IT services and storage providers, if a corresponding processing agreement (or comparable security) exists

If wy.by AG merges with or is acquired by another company (or there are meaningful discussions about such a possibility) in the future, we may disclose your personal data to the (future) new owners of the company or society.

Protection of your Data

The data that we process is treated confidentially and protected against loss and manipulation as well as against unauthorized access by third parties by means of suitable technical and organizational measures. Your data is stored exclusively on servers in Switzerland.

If you suspect that your personal information has been misused, lost or accessed by unauthorized persons, please let us know as soon as possible.

Duration of Storage / Revocation of Consent

We process and store your data until you revoke your consent to the storage or further processing of the data. If you do so, we will delete your personal information from our systems unless we are required by law or other regulations to keep it (for example, because you have a request from a tax authority or the information is required relating to an anticipated lawsuit).

Privacy Rights

Under certain conditions you can assert your data protection rights against us:

Right to revoke consent
If you have given your consent for certain types of processing activities, you can revoke this consent at any time with effect for the future. However, this revocation does not affect the legality of the processing prior to the revocation of your consent or insofar as the processing can be justified on another legal basis.

Right to Information
You have the right pursuant to Art. 15 DSGVO to receive information from us about your data stored by us.

Right to Rectify
At your request, we will correct the data stored about you in accordance with Art. 16 DSGVO if it is inaccurate or incorrect.

Right of Deletion
If you wish, we will delete your data in accordance with the principles of Art. 17 DSGVO, provided that other legal regulations (e.g. statutory retention obligations) or a predominant interest on our part (e.g. in defense of our rights and claims) do not conflict with this.

Right to Restrict Editing or Blocking
You may request us to restrict the processing of your data, considering the requirements of Art. 18 DSGVO.

Right of objection
You may also object to the processing of your data in accordance with Art. 21 DSGVO. This right of objection exists in the event of certain reasons arising from your particular situation. In this case, we will no longer process your data unless we are legally entitled to reject your objection. However, any objection to advertising measures is mandatory for us and we may no longer process your data for these purposes.

If you have given your consent for advertising measures and no longer wish to receive these advertising measures, you must revoke your consent.

Right to Data Transferability
You also have the right to receive your data in a structured, common and machine-readable format in accordance with the regulations of Art. 20 DSGVO or to transmit them to a third party.

Right of Appeal to the Data Protection Authority
You also have a right of appeal to any competent data protection supervisory authority (Art. 77 DSGVO). However, we recommend that you always address a complaint to our data protection officer first, so that we can resolve your request as quickly and customer-oriented as possible.

For a quick processing we ask you to send your applications for the exercise of your rights in writing to wy.by AG.

SSL-Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (for example SSL) via HTTPS.

Changes to our privacy policy

This Privacy Policy was last updated on May 17, 2018.
We reserve the right to occasionally adapt this data protection guideline so that it always complies with current legal requirements or to implement changes to our services in the data protection guideline, for example when introducing new services. The current data protection guideline published on this website and mobile application applies in each case.

Responsible Body and Contact

wy.by AG is responsible for the processing of personal data. You can view, change, update your personal data or request further information by contacting our contact person for data protection law (via e-mail to info@wy.by or to the postal address: wy.by AG, Höchistrasse 6, 6353 Weggis).

Cookies

Change cookie settings