Dear Customer, Dear interested Parties,

Thank you for your interest in our company and the services and products we offer.

Castle corporation  (hereinafter referred to as CC) take the protection of your personal data very seriously. Data protection is a particularly high priority for CC.

Our team of selected and experienced specialists is familiar with the requirements of data protection law. They implement them with due care and in accordance with our high quality standards.

The confidential and responsible handling of personal data from our relationships with customers, business partners, employees, or job applicants and suppliers forms the basis of our entrepreneurial success. We therefore adhere to the following principles when handling personal data:

Confidentiality and fairness

Compliance with our corporate policies

Compliance with all applicable laws and regulations

1. Data protection - general information

CC treats your personal data confidentially and in accordance with the statutory data protection regulations, in particular in accordance with the Swiss Federal Act of Data Protection (FADP or DPA) and this data protection declaration.

CC processes personal data about the contractual partner in direct connection with the conclusion or execution of a contract (justification).

As a rule, the use of our website is possible without providing personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will obtain the consent of the data subject in an appropriate form after providing adequate information.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps despite the high security requirements we have put in place. A complete protection of the data against access by third parties is not possible.

As the (natural) person concerned, it is in your personal interest to secure the system(s) you use (PC, laptop, etc.) against unauthorised access by third parties, to protect it with an adequate password and not to pass on the password to third parties. Please install a virus protection (“Internet Security”) designated in the market and update it regularly.

2. Collection of general data and information

The website of the CC companies collects a number of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server’s log files.

The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-sites to which an accessing system accesses our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to avert danger in the event of attacks on our information technology systems.

When using this general data and information, CC does not draw any conclusions about the data subject. Rather, this information is required (1) to provide the content of our website correctly, (2) to optimise the content of our website and the advertising for it, (3) to ensure the long-term operability of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, CC analyses anonymously collected data and information for statistical purposes, as well as for the purpose of increasing the data protection and data security of our enterprise, in order to ensure an optimal level of protection for the personal data processed by us. Anonymous server log file data is stored separately from any personal data provided by a data subject.

3. Data Transfers

As a user, you authorise CC to transfer personal data to employees or third parties. Employees and third parties who have access to personal data are obliged by CC to ensure compliance with all applicable data protection regulations.

If personal data of you as a user is transferred to other countries, CC will ensure data protection by granting the level of protection required by the applicable law.

CC reserves the right to disclose personal data to regulatory and supervisory authorities as well as to service providers. In doing so, CC will at all times comply with the applicable regulations and laws.

4. Definitions

CC’s privacy policy is based on the definitions used by the legislator for the adoption of the Data Protection Act (DPA).

Our privacy policy should be easy to read and understand for the public as well as for our clients, interested parties and business partners. To ensure this, we explain the terms we use.

5. Cookies

Some websites, including those of CC, use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. These are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies allow us to recognise your browser on your next visit.

You can set your browser to notify you when a cookie is placed, to accept cookies only in specific cases, to refuse cookies in specific cases or generally, and to automatically delete cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.

6. Server-Log-Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version;

Operating system used; referrer URL;

Host name of the accessing computer;

Time of the server request.

This data cannot be linked to specific individuals. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of concrete indications of illegal use.

7. Contact option via the website

If you send us an enquiry by email, we will store your details from the enquiry form, including your contact details, for the purposes of processing your enquiry and any follow-up enquiries. We will not share this information without your consent.

8. Newsletter order, data, and revocation

If you would like to receive the newsletter offered on the website, we require a valid e-mail address intended for your direct access and information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter (so-called confirmation e-mail in the “double opt-in procedure”). No other data will be collected. We will only use this information to send you the requested information and will not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address, and their use for sending the newsletter at any time, e.g. via the link provided for this purpose in the newsletter.

9. Newsletter-Tracking (Tracking Pixel)

CC newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails, which are sent in HTML format, to enable log file recording and log file analysis. This enables statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, CC can see whether and when an e-mail was opened by a data subject and which links contained in the e-mail were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the person responsible for processing or the electronic portal of a third party provider commissioned by the latter in order to optimise the dispatch of the newsletters and to adapt the content of future newsletters even better to the interests of the data subject. This personal data will not be disclosed to third parties, nor will it be used for purposes other than those indicated above.

Consent

The recipient of our newsletter consents to this form of data processing on the basis of the above information by accepting the privacy policy.

In the event of revocation by the recipient, the personal data will be deleted by the data controller. CC automatically regards the cancellation of the receipt of the newsletter as a revocation. CC shall unilaterally initiate the above measures.

10. SSL-Encryption

For security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL encryption is enabled, the information you send to us cannot be read by third parties.

11. Your Rights

As a user whose personal data is processed within the scope of this privacy policy, you have the following rights:

to obtain information on whether CC may store personal data and in what form (which categories of data, recipients or categories of recipients, retention periods for personal data or criteria for retention periods);

to obtain a copy of the personal data;

to request the rectification or correction of inaccurate or incomplete personal data;

to request the deletion of personal data;

to request restrictions on the processing of personal data;

to object to the processing of your personal data for marketing and other purposes.

The above rights may be denied or restricted if the interests, rights, and freedoms of third parties take precedence or if processing is necessary to establish, exercise or defend legal claims of CC.

If you have any questions or requests regarding data or data protection, please contact us using the information provided above.

As a user, you also have the right to lodge a complaint with the data protection authority responsible for you or at the place where you believe a problem has arisen in connection with the data.

12. Objection to advertising mails

The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. CC expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

13. Data protection in applications and in the application process

The data controller collects and processes the personal data of applicants for the purpose of managing the application procedure. The processing may also be carried out electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller by electronic means, e.g. by e-mail with pdf files or other file types as attachments via a web form on the website.

For the application process, CC works with an internationally recognised system provider and its online software application to support our recruitment process. We use this software to process personal data as a data processor on our behalf. The system provider is only authorised to process your personal data in accordance with our instructions.

If you apply for a vacancy advertised by us, the provisions of this privacy notice will apply to our processing of your personal data in addition to our other privacy notices provided to you separately or available on our website.

If you apply for a vacancy via the application facility on a job site or similar online service provider (“Partner”), you should note that the relevant Partner may hold your personal data and may also collect data (including collection data) from us in relation to the progress of your application. Any use of your data by the Partner will be in accordance with the Partner’s privacy policy. The Partner has the same high standard of data protection and data security as our standard (“GDPR Compliance”).

If the data controller concludes an employment contract with an applicant, the transmitted data will be stored at CC companies for the purpose of processing the employment relationship in compliance with the statutory provisions and will be protected from access by unauthorised employees and third parties.

If the data controller does not conclude an employment contract with the applicant as the data subject, the application documents will be deleted automatically and without further notice to the applicant 12 months after notification of the rejection decision, unless other legitimate interests of the data controller prevent such deletion.

14. Registration function

The data entered during registration will be used for the purpose of using the service. Users may be informed by e-mail about information relevant to the service or registration, such as changes to the scope of the service or technical circumstances. The data collected during registration can be seen in the input mask. This includes, for example, name, postal address, e-mail address, IP address and their purpose.

15. Social Media Buttons

If functions (plug-ins) of third-party providers or social media platforms (e.g. Facebook, Twitter X, LinkedIn, etc.) are integrated on the CC website, these plug-ins enable the user to share content on the aforementioned social networks. The buttons are deactivated by default when the website is accessed. This means that no personal data is transmitted to the respective third party providers without the user’s intervention. If the user activates the buttons, the plug-ins will automatically transmit data, including personal data, to the relevant third party provider. If the user is logged into the network of the respective third-party provider at the same time as visiting the website, the provider may assign the visit to the user’s network account. CC has no influence on this. The purpose and scope of this data collection and the further processing and use of personal data are set out in the data protection information of the respective social networks. There, the user can also obtain information on rights and settings regarding the protection of privacy

Legal notice / Disclaimer

CC does not assume any liability with regard to the correctness and completeness of the content of the information.

Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.

All offers published by CC companies in digital or electronic form are non-binding. The CC companies expressly reserve the right to change, supplement, delete or temporarily or permanently cease publication of parts of the pages or the entire offer without prior notice.