Privacy policy

vmh partners ag, Churerstrasse 85c, CH-8808 Pfäffikon, collects and processes personal data, in particular data relating to business partners, visitors to our website, event participants, newsletter recipients, applicants and other contacts and employees of the people we deal with. Handling data responsibly and lawfully matters to us. We comply at all times with applicable law, in particular Swiss data protection law (FADP and DPO) and any applicable foreign data protection law such as the EU General Data Protection Regulation (EU GDPR). Personal data is treated in strict confidence and is not sold. It is passed on to third parties only where this is necessary for the purposes set out in this privacy policy or permitted by law.

1. Controller

The controller for the data processing described in this privacy policy is:

2. Collection and processing

We process various types of personal data. The main categories are:

• Master data: e.g. name, address, contact details, date of birth, powers of attorney, photographs, information about your role (e.g. client, applicant, supplier) and contact persons.
• Application data: information from application documents, CV, references, qualifications, testimonials, salary expectations, and where applicable from public sources (such as LinkedIn).
• Contract and financial data: contract details, invoicing information, service delivery, client feedback, billing data.
• Communication data: content and metadata of emails, telephone calls, letters, contact forms and the like.
• Registration data: information you provide when signing up for newsletters or events, or when booking an appointment via Microsoft Bookings.
• Technical data: IP address, device information, region, time of access.
• Behavioural and preference data: e.g. responses to newsletters, website use (Google Analytics), interactions on social media.
• Other data: e.g. image and sound recordings at events, official documents, legal documents.

3. For what purposes do we process your data?

Your personal data is used for a range of purposes, in particular:

• Entering into and performing contracts
• Communication
• Marketing and relationship management
• Market research and further development of our services
• Technical operation of our website
• Registration for services (e.g. newsletters)
• Compliance with legal requirements
• Recruitment management
• Internal administration and business development
• Event management

4. Where the data comes from

We receive personal data:

• Directly from you: through what you enter, your communication and your interaction with our online services.
• Indirectly from third parties: authorities, employers, business partners, publicly accessible sources (e.g. the internet, registers, media).

5. Use of cookies and similar technologies

Our website uses cookies and comparable technologies to enable usability, analysis and marketing. These include:

• Necessary cookies
• Preference cookies
• Analytics and marketing cookies (in part set by third parties).

You can adjust the cookie settings in your browser individually. You will find details in the cookie information on our website.

6. Booking appointments via Microsoft Bookings

We use Microsoft Bookings for online appointment booking. The details you enter – in particular your name, email address, appointment details and any further information – are processed in order to arrange and hold the appointment.

Microsoft may process this data as part of providing Microsoft Bookings. Processing may also take place abroad. Further information can be found in Microsoft’s privacy statement.

7. Disclosure and transfer of data

We disclose personal data only where:

• it is necessary in order to perform a contract,
• statutory provisions require it,
• there is a legitimate interest, or
• you have given your consent.

Recipients include:

• IT service providers, hosting providers, advisers, lawyers
• Authorities and courts
• Third parties in the context of transactions or representation.

Transfers of data abroad take place subject to appropriate data protection safeguards (e.g. EU standard contractual clauses).

8. Retention period

We store personal data:

• for as long as it is needed to fulfil the purpose,
• in line with statutory retention obligations,
• or for as long as legitimate interests exist (e.g. evidence).

After that, data is deleted or anonymised.

9. Data security

We take appropriate technical and organisational measures to ensure data security (e.g. access restrictions, encryption, training). Even so, there is always a residual risk when using the internet.

10. Obligation to provide data

In principle you are not obliged to provide personal data. Without certain information, however, we may not be able to provide services or enter into contracts.

11. Social media / LinkedIn

We run company profiles on platforms such as LinkedIn. When you interact with our LinkedIn profile we may receive corresponding usage and interaction data. We link to LinkedIn from this website. If you click the link, the privacy provisions of the platform operator apply to any further processing. LinkedIn also processes personal data for its own purposes.

12. Your rights

You have the following rights:

• access,
• rectification,
• erasure,
• restriction,
• data portability,
• objection,
• withdrawal of consent.

To exercise these rights, please contact us (see section 1). We may request proof of identity.

13. Changes

This privacy policy may be amended at any time. The version published on our website at the relevant time applies.

This is a translation for convenience. In case of any discrepancy, the German version of this privacy policy prevails.