Data privacy policy

Version 2, November 2023

1. Overview of data protection

General

Our data protection policy gives you an overview of what happens to your personal information when you visit our website and when you enter into communication or business activities with us. Personal information is any data with which you can be personally identified.

Data collection on our website and by Creaholic in general

Who is responsible for collecting and processing data?

Creaholic SA, Rue Centrale 115, P.O. Box 333, 2501 Biel/Bienne, is responsible for the data collected on this website. It is also our company that processes all the personal data required for the proper performance of its tasks.

Why do we collect and process your data?

Creaholic processes and collects the personal data necessary for its work, either for marketing purposes, or during the preparatory phase of the contract, during its execution and afterwards. If necessary, and in particular because of its legal obligations, this includes postal and e-mail addresses, telephone numbers, correspondences, data relating to services ordered and provided, and any disputes, etc.

We also collect data to improve and optimise the use of our site (see also section 4 below).

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, data you send us by e-mail or information provided during an exchange.

Other data is collected automatically by our computer systems when you visit our website. This data is mainly technical data such as the browser and operating system you use or the time you access the page. This data is collected automatically as soon as you enter our website. Some of the data is collected to ensure that the website is provided without error. Other data may be used to analyse user behaviour.

Data storage

Generally speaking, our data is stored on Microsoft SharePoint servers in Switzerland and on Hubspot servers in Germany. We and our partners are implementing various appropriate organisational and technical measures to prevent any undue access to your data.

When you visit our website, the data relating to this visit is tracked using various tools, in particular those provided by Google (see below).

How long is data kept

Personal data will be deleted as soon as the purpose of storage ceases to be applicable, at the latest after 10 years, subject to legal provisions to the contrary.

Your rights

You always have the right to request, free of charge, information about your stored data, its origin, its recipients and the purpose for which it was collected. You also have the right to request that your data be corrected and/or deleted. You can contact us at any time if you have any further questions on the subject of confidentiality and data protection (cf. articles 25 ff DPA). You may also, of course, submit a request to the competent authorities.

Analyses and third-party tools

When you visit our website, statistical analyses may be carried out on your browsing behaviour. This is done mainly using cookies and analysis tools. The analysis of your browsing behaviour is generally anonymous, i.e. we cannot identify you from this data. You may object to this analysis or prevent it by not using certain tools (see section 4 below).

2. Detailed information

General

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal provisions on data protection and this data protection policy.

If you use this website, various personal data will be collected. Personal data is any data with which you can be personally identified. This data privacy statement explains what information we collect and for what purposes we use it. It also explains how and for what purpose this happens.

Please note that data transmitted via the Internet (e.g. by electronic communication) may be subject to security breaches. Complete protection of your data against access by third parties is not possible.

Notice concerning the data controller

The data controller is the private individual who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Creaholic SA
Zentralstrasse 115
PO Box 333
2501 Biel-Bienne
dataprivacy@creaholic.com

Rights of the individuals concerned

You may ask us at any time whether your personal data is being processed, in accordance with Article 25 of the DPA.

You have the right to ask us to provide you with your personal data in a commonly used electronic format.

You may request that inaccurate data be corrected, that data be deleted and that it not be passed on to third parties, subject to any legal provisions to the contrary (cf. art. 32 DPA).

Right to lodge complaints with the competent authorities

In the event of a breach of data protection legislation, the data subject may lodge a complaint with the relevant criminal prosecution authorities or supervisory authorities. In Switzerland, the Public Prosecutor's Office and the Federal Data Protection and Information Commissioner (FDPIC) are responsible for this.

Right to data portability

You can request to receive your data, processed based on your consent or a contract, in a standard machine-readable format, either for yourself or a third party. If you request the direct transfer of data to another controller, this will only be done to the extent that it is technically possible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon appears in your browser's address bar.

If SSL or TLS encryption is activated, the data you send us cannot be read by third parties.

3. Data processing in foreign countries, in particular the European Union and the United States

Switzerland believes that the European Union countries ensure a sufficient standard of data protection.Generally speaking, we use appropriate technical and organisational measures to ensure that your personal data is protected in the same way in Switzerland.

Some of the data we process is stored on the servers of companies based in the United States. This may result in your personal data being transmitted to the American servers of the companies concerned and being processed and disclosed there. The European Commission considers that the United States provides a level of protection for personal data equivalent to that of the European Union (adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework). The US company in question, Google, is also members of the Data Privacy Framework (https://www.dataprivacyframework.gov/s/). We therefore ensure that your personal data is protected at all times.

4. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not damage your computer or contain viruses. Cookies help to make our website more user-friendly, more efficient and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are "session cookies". They are automatically deleted after your visit. Other cookies remain in the memory of your device until you delete them. These cookies enable us to recognise your browser the next time you visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether or not to accept a cookie. You can also configure your browser so that it automatically accepts cookies under certain conditions or so that it systematically rejects them, or so that it automatically deletes cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Essential cookies, needed for electronic communication or specific functions you request, ensure a streamlined service without technical errors. Other cookies, such as those used for marketing analytics, tracking and advertising, are addressed in separately in this privacy policy.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". This data includes:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Host name of the accessing computer

  • Time of server request

  • IP address

This data will not be combined with data from other sources.

Contact form

If you send us questions via the contact form, we will collect the data entered in the form, including the contact details you have provided, in order to answer your question and any follow-up questions. We do not share this information without your permission.

We will therefore only process the data you enter on the contact form with your consent. You may revoke your consent at any time. An informal e-mail making this request is sufficient.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent to its storage, or the purpose of its storage no longer applies. Mandatory legal provisions, in particular those relating to data retention periods, are not affected by this provision.

5. Subscribing to the Creaholic newsletter and downloading premium content

As a visitor to the website, you can subscribe to the Creaholic SA newsletter. You can also download content (e.g. guides and other documents relating to innovation). We will only send you the newsletter and premium content if you expressly ask us to do so. In return, you provide us with your surname, first name and e-mail address. The personal data you provide will be used to send you this information and to contact you about future projects. You can ask us to remove your details from our database at any time, in particular by clicking on a link in the newsletter.

6. External tools

Google Analytics

Google AdWords

Google Conversion Tracking

Google Webfonts

Google Tag Manager

Google Optimizer

LinkedIn Insight Tag 2.0

  • Provider: LinkedIn Ireland Unlimited

Hotjar

  • Provider: Hotjar Ltd. with registered office

HubSpot

  • Provider: HubSpot Inc.

  • Server location: European Union (Germany)

The legal basis for the utilisation of these various external tools is established under Article 17, paragraph 1, letter b, and Article 31, paragraph 2, of Switzerland’s new Data Protection Act (nFADP). Our aim is to optimise our marketing and sales efforts.

7. Online application process

We use breezy.hr to support the application process. You can find more detailed information about data collection by Breezy and data processing by Creaholic and Breezy in the Breezy HR privacy policy.

Breezy.hr complies with the standard contractual clauses regarding the collection, use, transfer, security, data integrity and access to personal data transferred to Creaholic through the Breezy services.

In addition, we have entered into a "Data Processing Agreement" with Breezy. This is a contract in which Breezy HR undertakes to protect our candidates' data, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

By submitting your application through BreezyHR, you are automatically using BreezyHR's services. If you do not agree with breezy.hr's privacy policy, please contact us.

The categories of personal data generally included in the processing below may, depending on your use, include user and/or candidate names, email addresses, address, telephone number, job titles, CVs, internal feedback and any other applicable recruitment data.

Only those people who need your data to run our application process have access to it.

8. Changes to this data protection policy

This data protection policy will be adapted if necessary and published here.

Footer

Contact us

Creaholic SA
Rue Centrale 115
2503 Biel/Bienne
Switzerland
T +41 32 366 64 44

Interesting content