1. introduction

In this Privacy Policy, we, f.energy by VANQUISH AG, VANQUISH AG (hereinafter "f.energy", "VANQUISH", "we" or "us"), explain how we collect and process personal data in the course of our business activities. This Privacy Policy is not necessarily an exhaustive description of our data processing activities. By "personal data" we mean any information relating to an identified or identifiable person.

This privacy policy complies with the EU General Data Protection Regulation (GDPR). Although the GDPR is not directly relevant to us, it may still apply. The Federal Act on Data Protection (FADP) is heavily influenced by EU law.

2. data of other persons

If you provide us with personal data of other persons (e.g. family members or work colleagues), please ensure that these persons are aware of this Privacy Policy and only share their personal data with us if you are authorized to do so and the personal data is correct.

3. visit our website

Thank you for visiting our website. Below we would like to inform you about the handling of your data in accordance with Art. 13 GDPR.

4. responsible person

The entity named in the legal notice is responsible for the data processing described below.

5. usage data

When you visit our websites, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our websites. This data record consists of:

• Name and address of the requested content,
• Date and time of the query,
• Amount of data transferred,
• Access status (content transferred, content not found),
• Description of the web browser and operating system used,
• Referral link, which indicates from which page you came to ours.

The legal basis for the processing of usage data is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in our legitimate interest in providing the content of the website and ensuring an optimized presentation.

6. storage of the IP address for security purposes

We store the full IP address transmitted by your web browser for a period of seven days strictly for the purpose of detecting, limiting and eliminating attacks on our websites. After this period has expired, we delete or anonymize the IP address. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

7. data security

We take technical and organizational measures to comprehensively protect your data from unauthorized access. We use an encryption process on our websites. Your data is transmitted using TLS encryption. You can recognize this by the lock symbol in the status bar of your browser and by the address line beginning with "https://".

8. required cookies

We use cookies on our websites, which are necessary for the use of our websites. Cookies are small text files that are stored on your end device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the session. We do not use these cookies for analysis, tracking or advertising purposes. The legal basis for their use is Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser so that it informs you about the placement of cookies. You can also delete them at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our web pages may then not be displayed in full and some functions may no longer be technically available.

9. consent banner

We use a consent management platform (consent or cookie banner) on our websites. The processing in connection with the use of this platform and the logging of your settings is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, in our legitimate interest in displaying our content according to your preferences and being able to prove your consent. Your settings and consent are stored in a cookie.

10. visitor measurement

We use web analysis tools to design our websites in line with requirements. These create user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In addition, we can retrieve recognition features for your browser or end device. Data processing takes place on the basis of your consent, provided you have given this via our banner.

11. contact form

You can get in touch with us via our contact form. We need the data marked as mandatory fields in order to answer your request (Art. 6 para. 1 sentence 1 lit. f GDPR). We process voluntary information on the basis of your consent. Your data will only be processed to answer your request and then deleted, provided there are no statutory retention requirements. This is usually the case 60 days after processing the request.

12. application via application portal

You can apply for advertised positions via our application portal. The data marked as mandatory fields in the application form are required for the decision on the establishment of an employment relationship (Art. 6 para. 1 sentence 1 lit. b GDPR and § 26 para. 1 sentence 1 BDSG). We process voluntary information on the basis of your consent. If your application is successful, your data will be used to implement the employment relationship. Otherwise, your data will be deleted after six months, unless you have consented to longer storage (talent pool).

13. storage period

Unless we have already informed you in detail about the storage period, we delete personal data if it is no longer required for the aforementioned processing purposes and there are no legitimate interests or legal reasons for storage that prevent deletion.

14 Your rights as a data subject

The GDPR grants you certain rights when processing your personal data:

• Right to information (Art. 15 GDPR): Right to confirmation and information about your personal data.
• Right to rectification (Art. 16 GDPR): Right to rectification of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): Right to immediate erasure of your personal data.
• Right to restriction of processing (Art. 18 GDPR): Right to restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): Right to receive and transfer your personal data.
• Right to withdraw consent (Art. 7 GDPR): Right to withdraw your consent.
• Right to object (Art. 21 GDPR): Right to object to the processing of your data.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): Right to lodge a complaint with a supervisory authority.

15. assertion of your rights

To assert your rights, please contact the office named in the legal notice.

16. contact details of the data protection officer

Our external data protection officer is available to provide you with information on the subject of data protection:

• E-mail: datenschutz@f-energy.ch

When contacting us, please also indicate the responsible body named in the legal notice.

‍

‍