Convenience translation

This English version of our privacy policy is provided for convenience only. Only the German version is legally binding; in the event of any discrepancy, the German version prevails.

Legally binding German version: Datenschutzerklärung

Privacy Policy

Valid from September 2026 · In accordance with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR), where applicable.

1. Controller

FIRMENFELS GRUPPE, Wiesentalstrasse 1, CH-9425 Thal. Contact: info@firmenfels.ch

2. What data we collect and the purposes for which we process it

When you visit our website, use our web application, work with us or otherwise deal with us, we process your personal data in particular for the following purposes:

When you use the website and/or web application

Access data (IP address, browser type, date/time) and usage data (clicks, sessions, logs) are stored for technical operation and for the purposes of authentication and traceability. Further information on cookies is provided below.

When you use the Management and Risk Check / Succession Check

Your answers to the check and your contact details are processed in particular to prepare and deliver your personal report.

When you use the e-learning portal

Your data from completing e-learning courses is used in particular to prepare and deliver your personal certificate.

When you contact us, use forms or communicate with us

Contact details (company, name, address, email, telephone number), the content of messages and communications and any identification data are used to process your enquiry and for oral and written communication with you and third parties.

When contracts are initiated, concluded and performed

In particular, your contact details, the content of messages and communications, any identification data, information about third parties, data provided by you or obtained from third parties and publicly available data in connection with the initiation, conclusion and performance of contracts are processed in order to fulfil contractual and statutory rights and obligations.

For advertising and marketing

Your contact details may be used for advertising and marketing purposes, for example newsletters, events or other forms of contact. You can withdraw your consent to advertising and marketing at any time by notifying us at: info@firmenfels.ch

Photographs and video recordings may be made at our events. We may use them for information and advertising purposes. By taking part, you agree to FIRMENFELS's unrestricted right to use them.

For electronic access

To ensure the secure use of our IT infrastructure, we may monitor and control the use of our IT.

For job applications

For recruitment, we use the data from your application as well as other data we obtain that is necessary or appears useful for assessing an application.

Other purposes

We use behavioural data and preferences as well as direct and indirect responses, feedback or other reactions of any kind to improve our offerings and services.

We also process data for the purposes of company administration and management, training and education, corporate governance and risk management. This list is not exhaustive, and the pursuit of further legitimate interests remains reserved.

As a rule, we do not collect special categories of personal data. Where we do so, we take the data protection law applicable to such data into account.

3. Why you provide us with data

Using our offerings and services requires the processing of personal data. You provide most of your data to us voluntarily. Some data is required to fulfil legal obligations. The website and web application cannot be used without data processing.

Data processing is based in particular on the processing purposes stated (Art. 6(1)(a) GDPR), including the purposes of initiating, concluding and performing contracts (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), the protection of legitimate interests (Art. 6(1)(f) GDPR) or (explicit) consent. Legal bases under Swiss data protection law remain reserved.

4. To whom we disclose your data

We work with service providers, for example IT and software service providers, specialist experts and consulting firms. These recipients fall into a) processors, b) joint controllers or c) independent controllers. As a rule, we have data processing agreements in place with our recipients in category a). All recipients (a-c) may in turn involve third parties.

We may be required by authorities and supervisory bodies to disclose data.

5. Data security and disclosure abroad

The website and web application are operated on Swiss servers. All data transfers are encrypted (HTTPS). Access to personal data is restricted to authorised persons.

As a rule, we process personal data in Switzerland. We may also process data worldwide. For recipients in a country without adequate data protection, we have safeguards in place to ensure adequate protection of your personal data or we meet the corresponding conditions for an exception under Swiss or European data protection law (in particular standard data protection clauses).

6. Cookies and tracking

We use various cookies to operate this website, including strictly necessary cookies that are essential for its use. The other cookie categories are only used with your explicit consent, for example analytics cookies (e.g. Google Marketing Platform). For the web application, we use strictly necessary cookies only. You can change your cookie settings at any time via your browser or the cookie banner.

Where we use social media plug-ins, the respective third-party provider receives the information that you have visited our website. Further details can be found in the respective provider's privacy policy.

In particular, we use the following cookie services:

Google reCAPTCHA

Functional
Processing company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection officer

Where Swiss data protection law applies: VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zürich, google_ireland_dprep@vischer.com

Otherwise: https://support.google.com/policies/contact/general_privacy_form

Categories of data
Online identifier, device and browser properties, usage and behavioural data
Retention period
13 months / 6 months / session
Privacy policy
https://policies.google.com/privacy

Google Maps

Functional
Processing company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection officer

Where Swiss data protection law applies: VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zürich, google_ireland_dprep@vischer.com

Otherwise: https://support.google.com/policies/contact/general_privacy_form

Categories of data
Online identifier, location data, usage and search data, device and browser properties
Retention period
6 months
Privacy policy
https://policies.google.com/privacy

YouTube videos

Functional
Processing company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection officer

Where Swiss data protection law applies: VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zürich, google_ireland_dprep@vischer.com

Otherwise: https://support.google.com/policies/contact/general_privacy_form

Categories of data
Online identifier, usage and interaction data, device and browser properties
Retention period
6 months / session
Privacy policy
https://policies.google.com/privacy

Adobe Analytics

Analytics
Processing company
Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland
Data protection officer
DPO@adobe.com
Categories of data
Online identifier, video interaction data, contextual website data, technical device data
Retention period
24 months / 7 days / session
Privacy policy
https://www.adobe.com/privacy/policy.html

Google Ads

Marketing
Processing company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection officer

Where Swiss data protection law applies: VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zürich, google_ireland_dprep@vischer.com

Otherwise: https://support.google.com/policies/contact/general_privacy_form

Categories of data
Online identifier, interaction and conversion data, technical device data
Retention period
13 months / 90 days
Privacy policy
https://policies.google.com/privacy

Google Marketing Platform

Marketing
Processing company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection officer

Where Swiss data protection law applies: VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zürich, google_ireland_dprep@vischer.com

Otherwise: https://support.google.com/policies/contact/general_privacy_form

Categories of data
ID data (e.g. session and browser IDs)
Retention period
13 months / 90 days
Privacy policy
https://policies.google.com/privacy

7. Retention period

The duration of data processing depends on the processing purposes stated, statutory retention periods, legitimate interests and the technical storage process. As a rule, data is deleted or anonymised once the retention period has expired, unless statutory or contractual obligations prevent this.

8. Your rights

You have the right to access, rectification, erasure, restriction of and objection to the processing of your data, as well as the right to receive your data and to data portability. Please send any such requests to: info@firmenfels.ch

You also have the right to lodge a complaint with your national data protection supervisory authority.

9. Changes

This privacy policy may be amended as required. The current version is always available on this page.