Privacy policy

This English translation is provided for convenience. The German version is legally binding.

Last updated: August 2024

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Federal Act on Data Protection, FADP), every person has the right to protection of their privacy and to protection against misuse of their personal data. We comply with these provisions. Personal data is treated in strict confidence and is neither sold nor passed on to third parties. This privacy policy gives you an overview of the processing of your data at Cloudworks AG and its services such as umbaumanager.ch. It applies to all websites, apps and other services offered by Cloudworks AG and its services such as umbaumanager.ch. Privacy policy of Cloudworks AG and its services such as umbaumanager.ch. With this privacy policy we would like to inform you which personal data we process and for what purposes when you visit our website and use its features.

I. Controller

The website at the domain “umbaumanager.ch” is operated by us, Cloudworks AG, and we are also the controller for the personal data processed in connection with the website.

II. What is “personal data”?

Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

III. Personal data processed by us

In order to operate the website and offer all its functions and communication channels, it is necessary for us to process certain personal data.

1. Registration on umbaumanager.ch for partners

1.1 When you register for our members' area for the first time, we ask you for certain information, including personal data about you. We ask for: your first name and surname, your company, your address (street, town) and the number of employees of your company, your email address and your telephone number, and a password for later access. We use this data to manage your customer account; the information about your company serves to ensure that you are a commercial customer.

1.2 To log in to the area for registered users from our website, you use your access data (your email address and your password).

2. Registration on umbaumanager.ch for customers: price enquiries for renovation services and obtaining other offers. If you submit a price enquiry for a renovation on our website or are interested in one of our services without registering for our service and creating a customer account, we also need certain information from you. This includes personal data about you, among other things: your first name and surname, your gender and your date of birth, your address (street, town) and your email address and your telephone number. We use this data to be able to submit a corresponding offer from our partners to you and to contact you.

2.1 To log in to the area for registered users from our website, you use your access data (your email address and your password).

3. Chat function

On our website we offer you the opportunity to contact one of our experts. Depending on the situation, we may also ask you for personal data during the conversation. We use this data to provide you with the best possible service as a customer or prospective customer.

4. Applications

4.1 If you use our application portal and submit an application, we process the personal data you provide, as well as any data added later, in order to carry out the application process and to be able to contact you. If you apply for a vacancy or send a speculative application on our website, you voluntarily transmit personal data and information (first name, surname, email address, telephone number, and any attachments such as CV, cover letter, etc.).

4.2 If you send a speculative application directly by email to info@umbaumanger.ch, your data is generally transmitted unencrypted. Responsible employees of our company can access the database in order to fill vacant positions with suitable candidates.

5. Typical internet usage data

In addition to the information typically understood as personal data, we also process certain data that arises as a result of technical processes in the course of your visit to and use of our website.

5.1 Log files

When our website is visited, our web server generally stores the following information in log files: name of the requested file and notification of successful retrieval, date and time of retrieval, amount of data transferred, requesting provider, referrer URL, web browser/user agent used. The IP address assigned to your device at the time of your visit to our website is automatically fully anonymised before the log files are created. The above data is processed solely for security reasons, in order to detect, trace and stop cases of misuse of our website.

5.2 Cookies

We also use cookies on our website. Cookies are small text files that are stored on your computer and in which information can be saved. Our website (like almost all websites) sets one or more so-called “session cookies”. Session cookies allow, for example, form data that is needed across several pages to be retained. When the respective session ends, this data is removed from the session; the session cookie is deleted. The other cookies set by our website generally have a validity period of only one day, in exceptional cases of up to two years and in the rarest cases of 10 years. They are deleted when their validity period expires. In addition, the web analysis tools of the service providers we have commissioned, as well as the other tools integrated into our website, may set one or more cookies. You will find more information on this in sections 5.3, 5.4 and 5.5 below.

5.3 Web analysis: Google Analytics

Our website uses Google Analytics, a web analysis service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies” (see above on cookies), which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. IP anonymisation has been activated on this website, so that your IP address is first shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. However, we would point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection and Google Analytics can be found on the Google website at https://www.google.com/analytics/learn/privacy.html?hl=de.

5.4 Social media plugins

We may implement so-called “social media buttons” on our website. These are small buttons from social networks or other websites that you can click to share the content of an offer with others or to say that you like it, for example. The buttons are provided by the respective social network.

a) Facebook and Instagram

Facebook and the Instagram service are a social network of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland (“Facebook”). The Facebook plugins (e.g. the “share” button) are marked with the Facebook logo and generally bear the name of the corresponding social function (e.g. “share”). With the plugins you can give your friends on Facebook and other Facebook users positive feedback, share content, etc. When you call up one of our web pages that contains such a Facebook plugin, your browser establishes a direct connection with the Facebook servers and the plugin is loaded from there. In the process, Facebook is informed that you have called up the specific page. If you click the respective button, Facebook may process further data about you. Facebook may set cookies that allow Facebook to recognise on other websites that you have previously clicked the button. If you are logged in to Facebook while visiting our pages, Facebook can also assign the page view to your Facebook profile. If you log in to Facebook after clicking the respective button, this information may be published in short form on Facebook in your profile and in your timeline. In this case Facebook may collect and store further usage data. In this way, user profiles may be created at Facebook that go beyond what you yourself have disclosed in your Facebook profile. You can find out exactly what data Facebook collects and for what purposes this data is collected or used in Facebook's privacy policy. There you will also find further information on your rights relating to data collection and processing. Facebook's privacy policy is available at https://www.facebook.com/policy.php. Further information from Facebook on so-called social media buttons is available at: https://www.facebook.com/about/privacy/your-info-on-other. At no time do we learn which Facebook plugins you have used and when. We only receive from Facebook a summarised statistic on the use of Facebook plugins on our website that does not relate to any specific user.

5.5 Other tools

We also use the following tools – above all to be able to offer you user-based advertising that is relevant to you, but also to make it easier for you to use our services. a) DoubleClick: DoubleClick by Google is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to present you with advertisements that are relevant to you. For this purpose Google assigns a pseudonymous identification number (ID) to your browser. This is used to check which advertisements have been displayed in your browser and which advertisements have been called up. The Google DoubleClick cookies enable Google and its partner websites to serve advertisements based on previous visits to our website or other websites on the internet. No personal data is stored in the cookies. The cookie set may occasionally contain an additional anonymised identifier in order to track the user's contact with a particular campaign. It is not possible to draw conclusions about a person's general behaviour on the internet. The information generated by the cookies is transmitted by Google to a server in the USA and stored there. The data collected and stored in this way is only evaluated for statistical purposes and in anonymised form. Google only transfers the data to third parties on the basis of legal provisions or within the framework of commissioned data processing. Google will not combine your data with other data collected by Google unless you are actively logged in to your Google account. Google complies with the provisions of the EU-US Privacy Shield agreement. You can prevent the collection of data generated by the cookies and relating to your use of the website by Google and the processing of this data by Google by deactivating it at the following link: http://www.google.com/settings/ads.

a) Google AdWords

Our website uses AdWords, a technology from Google. On the one hand we use conversion tracking. This means that – if you have reached our website by clicking on an advertisement placed by Google – we can recognise which advertisement it was and what behaviour it triggered on our website. A cookie is set for this purpose. In this way we record the effectiveness of our advertisements for the purposes of statistics and market research. For us this data is anonymous, which means we cannot assign it to you personally. On the other hand, our website uses the remarketing function of Google AdWords. This function serves to present visitors to the website with interest-based advertisements within the Google advertising network. For this purpose the website visitor's browser stores cookies on your device that make it possible to recognise you when you call up websites that belong to Google's advertising network. On these pages you may then be presented with advertisements relating to content that you have previously called up on websites that also use Google's remarketing function. We do not receive any personal data from you in this way. You can deactivate the remarketing function by making the corresponding settings at http://www.google.com/settings/ads.

b) Use of Mouseflow

Our website uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. Mouseflow records random, anonymised individual visits (only with an anonymised IP address). The data obtained is used to evaluate and optimise the usability of our website. Mouse movements, clicks, scrolling behaviour and entries made may be logged, but no personal data.

The information collected is not personal and is not passed on to third parties. Mouseflow stores the collected data for a maximum of 90 days and then deletes it automatically.

You can deactivate recording by Mouseflow at any time by activating “Do Not Track” in your browser settings or by using the opt-out option at www.mouseflow.de/opt-out.

5.6 Notes on refusing cookies and on opting out of web analysis and other tools

The following applies in principle: if you wish to prevent the use of cookies, your browser gives you the option of preventing the acceptance and storage of new cookies or of deleting individual cookies. You can also use online tools such as that of the Digital Advertising Alliance (http://www.aboutads.info/choices/) or Your Online Choices (http://www.youronlinechoices.com/at/praferenzmanagement). However, we would point out that in this case you may not be able to use all functions of our website to their full extent. In addition, the collection of usage data will resume if you delete the opt-out cookie. This applies accordingly to analysis and advertising services (cf. sections 5.3 and 5.5). Where there are special opt-out options explained for the individual tools, you must also note that the opt-out only applies to the device you are currently using, or possibly only to the respective program in which you call up the website.

IV. Purpose, legal basis and how long do we process personal data?

As already explained above, we process personal data in order to be able to offer and operate the functions and communication options available on our website. The processing of personal data is necessary to safeguard our legitimate interests, i.e. precisely to operate our website and its functions and communication options for our users, and, where contractual relationships exist, to perform the contract. If you register with us, or enquire about or order one of our services, we use in particular your contact details, such as telephone number and email address, for any queries and to answer your enquiries to your satisfaction. We process the access data you provide during registration as such exclusively to give you access to your customer account. If you provide us with personal data as part of one of your customer enquiries, we will only process it in order to answer your enquiry as well as possible and, if necessary, to contact you in this context. We process the data collected as part of web analysis about the use of our website for market research and in order to be able to make you attractive offers. We also use this data to continuously improve the design of our website and to optimise its performance and functions. Your personal data is processed as part of the application process exclusively for the purpose of filling the vacant position for which you have applied. Unless already stated above, we keep personal data stored for as long as we need it in order (in the case of communication with us as a customer) to process your enquiry and to allow the results to continue to benefit you as a customer or user, and to perform the contracts concluded (web shop, newsletter subscription, etc.) and to fulfil or assert and enforce all claims arising from them. You will be informed separately about the storage period for application data.

V. Recipients of personal data

If you use our support via chat, the information exchanged is transmitted to Cloudworks AG within the framework of commissioned processing. We also transmit the necessary personal data to the partner companies that provide the services you request. We may transmit personal data to third parties if and to the extent that this is necessary to assert and enforce our own claims, if and to the extent that you have given your consent, and in cases where we are obliged to disclose personal data by law or by a court or official decision.

VI. Transfer of personal data abroad

We are entitled to transfer your personal data to third-party companies (commissioned service providers) abroad, provided that this is expedient for the data processing described in this privacy policy. These are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that of Switzerland, we ensure contractually that the protection of your personal data corresponds to that in Switzerland at all times. We ensure this in each case by one or more of the following measures: -by concluding EU Model Clauses with the commissioned service providers, cf. https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-datathird-countries_de -by ensuring that the commissioned service providers are Swiss-US or EU-US Privacy Shield certified (if the data recipient is based in the USA or stores the data there), cf. https://www.privacyshield.gov/ -by the commissioned service providers having Binding Corporate Rules (BCR) recognised by a European data protection authority, cf. https://ec.europa.eu/info/law/law-topic/data-protection/datatransfers-outside-eu/binding-corporate-rules_en

VII. Storage period

We only store personal data for as long as we are entitled to do so and the purpose of processing has not ceased to apply. After that it is deleted within a short period. In addition to the information on the storage period of certain data elsewhere in this privacy policy, we inform you as follows: if you have a customer account (see above), your orders and bookings are generally stored there until you delete your account. Transactions dating back more than four years are then deleted immediately, more recent transactions on a rolling basis at the end of the second year after booking. We store the (other) data of the customer account until you delete your account or have not logged in for more than 25 months. Data processing on the basis of consent is carried out, and the data is stored, until you revoke your consent to us. You can find the exact storage period of a cookie in the respective cookie by displaying the cookie in your browser. If an application is successful, your data is stored in your personnel file. Otherwise we delete your data after 6 months at the latest. In addition, applicable laws provide for certain minimum retention periods for emails and a range of other data that require retention. However, it is not possible for us to state the exact storage period for all data or data categories. We strictly base the storage period on legal considerations. If, for example, claims are still possible under a contract, we keep the corresponding data stored, and your interests or fundamental rights and freedoms limit the storage period within the framework of the weighing to be carried out and substantially help to determine it.

VIII. Data security

We use appropriate technical and organisational security measures to protect your personal data stored with us against unintentional, unlawful or unauthorised manipulation, deletion, alteration, access, disclosure or use and against partial or complete loss. Our security measures are continuously adapted and improved in line with technological developments. We accept no liability for the loss of data or for its being obtained and used by third parties. If you register with us as a user, access to your user account is only possible after entering your personal password. You should always treat payment and access information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others. We also take internal data protection very seriously. Our employees and the service companies we commission have been obliged by us to maintain confidentiality and to comply with data protection provisions.

IX. Your rights

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have a right to information about this personal data and, among other things, about the purposes of processing, the categories of personal data being processed and the recipients or categories of recipients to whom the personal data has been or will be disclosed. You also have the right to request that we correct inaccurate personal data concerning you or complete it without delay. Furthermore, you have the right to request that we delete personal data concerning you without delay if it is no longer necessary for the purposes for which it was collected or otherwise processed, if you have revoked a consent given to us and there is no other legal basis for the processing, if you have exercised a statutory right to object to the processing of your personal data to which you are entitled, if we have processed your personal data unlawfully, if deletion is necessary to fulfil a relevant legal obligation and/or if another legal reason exists. You also have the right to request that we restrict processing if you dispute the accuracy of the personal data, if the processing is unlawful and you refuse the deletion of the personal data and request the restriction of its use instead, if we no longer need the personal data for the purposes of processing but you need it to assert, exercise or defend legal claims, or if you have exercised a statutory right to object to the processing to which you are entitled, but it has not yet been determined whether our legitimate grounds override yours. Furthermore, you have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of a legitimate interest. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for the purpose of such marketing at the above contact address. This also applies to profiling insofar as it is connected with such direct marketing. In the case of processing based on consent or for the performance of a contract, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from us, or to have the data transmitted directly to the other controller, where technically feasible. You also always have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes applicable law.

X. Currency of and changes to the privacy policy

The further development of our website or the implementation of new technologies may make it necessary to change this privacy policy. Any material change to the privacy policy will be communicated to registered users by email to the email address provided during registration or by a corresponding notice in a suitable place after logging in to the user account. You can also call up and print the current privacy policy on our website at any time. The original privacy policy is in German. The translated versions serve only for better understanding. In the event of disputes, the German text takes precedence.

Last updated: August 2024