# Privacy policy

Dear Sir or Madam

DFX AG (hereinafter referred to as DFX) takes the protection of your personal data very seriously. DFX attaches great importance to data protection.

The confidential and responsible handling of personal data from our relationships with customers, business partners, employees, applicants and suppliers is the basis of our business success. Personal data is all information that relates to an identified or identifiable person. We therefore adhere to the following principles when handling personal data:

  • Confidentiality and transparency
  • Compliance with our company guidelines and privacy policy
  • Compliance with all applicable laws and regulations

In case of discrepancies, the German version will prevail.

# 1. Information on the responsible body (imprint)

The responsible body on the basis of the Federal Act on Data Protection (DSG) is

Address: DFX AG, Bahnhofstrasse 7, 6300 Zug, Switzerland
Commercial register: CHE-429.856.521
Register court: Zug, Switzerland
Telephone: +41 41 511 46 35

Website: https://dfx.swiss
Electronic contact: https://services.dfx.swiss/support

# 2 General information on data protection

DFX treats your personal data confidentially and in accordance with the applicable data protection regulations, in particular the Swiss Federal Act on Data Protection (FADP) and this privacy policy. DFX processes personal data of the contractual partner in direct connection with the conclusion or execution of a contract (justification).

The use of our website is generally possible without providing personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will obtain the consent of the data subject in a suitable form after providing appropriate information.

We would like to point out that, despite the security precautions we have taken, data transmission over the Internet (for example, when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

As the (natural) person concerned, it is in your personal interest to protect the system(s) you use (PC, laptop, etc.) from unauthorised access by third parties, to provide it with adequate password protection and not to disclose the password to third parties. It is recommended that you install a commercially available virus protection programme and update it regularly.

# What do we use your data for?

Some of the data is collected to ensure that the website and DFX services are provided without errors. In principle, no additional data is collected to analyse user behaviour.

# What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact our Support (opens new window) at any time with regard to this and other questions on the subject of data protection.

# 3. Hosting

# Hosting with All-Inkl

We host our website with All-Inkl. The provider is ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter: All-Inkl). Details can be found in the privacy policy of All-Inkl (opens new window).

# 4. General notes and mandatory information

# Storage period

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will take place once these reasons no longer apply.

The website only stores and processes the minimum data required to operate the website. No additional data is stored or collected.

# Note on the transfer of data abroad

We use the hosting service All-Inkl, a company from Germany. When these tools are accessed, your personal data is transferred to this third country and could be processed there.

# SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

# Rights of data subjects

As a user whose personal data is processed under this Privacy Policy, you have the following rights:

  • Right to information about whether and in what form DFX stores personal data (e.g., which categories of data, recipients or categories of recipients, retention periods or criteria for retention).
  • Right to rectification or correction of inaccurate or incomplete personal data.
  • Right to erasure of personal data, provided that the legal requirements are met.
  • Right to restriction of the processing of personal data, provided that the legal requirements are met.
  • Right to object to the processing of your personal data, in particular for marketing purposes.
  • Right to data portability: You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

The above rights may be denied or restricted if the interests, rights and freedoms of third parties prevail or if the processing is necessary for the establishment, exercise or defence of legal claims.

# Objection to advertising emails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

# 5. Data collection on this website

# Cookies

DFX uses cookies exclusively to maintain the operation of the IT systems and their functionality. No cookies are used for tracking user behaviour or similar purposes.

# Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your enquiry including all personal data (name, enquiry) for the purpose of processing your request. We will not pass on this data without your consent.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (for example, after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

# 6 Analysis tools and advertising

DFX does not use website analysis tools such as Google Analytics, Adobe Analytics or others.

# 7. Newsletter and social media

# Newsletter data

If you would like to receive the newsletter offered on the website, we require a valid e-mail address from you, which is intended for direct access to the website, as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter (so-called confirmation e-mail in the "double opt-in procedure"). No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

# Our social media presence

# Data processing by social media networks

We maintain publicly accessible profiles on social media networks. The individual social media networks we use are listed below.

Social media networks such as Facebook, Instagram, etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you within and outside the respective social media presence. If you have an account with the respective social media network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

# Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data that is stored by the operators of social media networks for their own purposes. For details, please contact the operators of the social media networks directly (e.g., in their privacy policies and statements, see below).

# Social media networks in detail

# Facebook

We have a profile on Facebook (opens new window). The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

We have concluded an agreement with Facebook on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: Information on Page Insights (opens new window).

You can customise your advertising settings yourself in your user account. To do this, click on the following link and log in: Personalisation of your user account on Facebook (opens new window).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: Contractual Addendum for the Transfer of European Data (opens new window) and Standard Contractual Clauses (opens new window).

For details, please refer to the Facebook Privacy Policy (opens new window).

# X

We have a profile at X (opens new window) (formerly: Twitter)]. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

We would like to point out that, as the operator of these pages, we have no influence on the processing of the transmitted data by X and are not informed about its exact content or use.

You can adjust your X data protection settings yourself in your user account. To do this, click on the following link and log in: Personalisation from your user account to X (opens new window).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: Controller-to-Controller Transfers (opens new window).

Details can be found in the Privacy Policy of X (opens new window).

# Instagram

We have a profile on Instagram (opens new window). The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We would like to point out that, as the operator of these pages, we have no influence on the processing of the transmitted data by Instagram and are not informed about its exact content or use.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: Meta-contractual addendum for the transfer of European data (opens new window) and Standard Contractual Clauses (opens new window).

For details on how they handle your personal data, please refer to the Instagram Privacy Policy (opens new window).

# LinkedIn

We have a profile on LinkedIn (opens new window). The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

We would like to point out that, as the operator of these pages, we have no influence on the processing of the transmitted data by LinkedIn and are not informed about its exact content or use.

If you wish to deactivate LinkedIn advertising cookies, please use the following link: unsubscribe from ads (opens new window).

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: LinkedIn Data Processing Agreement (opens new window) and Standard Contractual Clauses (EU) (opens new window).

Details on how they handle your personal data can be found in the LinkedIn Privacy Policy (opens new window).

# 8 Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of carrying out the application process. This processing may also take place electronically, in particular if applicants also send relevant application documents by e-mail (for example in PDF format or other file types).

If you apply for a job advertised by us, these data protection provisions apply in addition to our other data protection provisions, which have been communicated to you separately or are available on our website.

The application is made exclusively via LinkedIn. If you apply for a vacancy via LinkedIn, please note that LinkedIn may store your personal data and may collect further data in relation to the progress of your application. Any use of your data by LinkedIn will be in accordance with LinkedIn's privacy policy. LinkedIn undertakes to maintain the same high standards of data protection and data security as we do.

If the person responsible for processing concludes an employment contract with an applicant, the data transmitted will be stored at DFX for the purpose of processing the employment relationship in compliance with the statutory provisions and to ensure access for unauthorised persons.

If no employment contract is concluded, the application documents will be deleted automatically and without further notification 12 months after notification of the rejection decision, provided that no other legitimate interests of the data processing centre prevent deletion. Legitimate interests can be, for example, obligations to provide evidence in proceedings under the Swiss Equal Treatment Act (GlG).

# 9 Applicable law and place of jurisdiction

The DFX website with its registered office in Switzerland is governed exclusively by Swiss (data protection) law, unless other mandatory law, in particular the EU General Data Protection Regulation (GDPR), is applicable to the natural person concerned.

The court at the registered office of DFX (Switzerland) shall have exclusive jurisdiction for any disputes between you as a visitor and user of the DFX website arising from the operation of or visit to the websites, unless another mandatory place of jurisdiction is applicable to the natural person concerned.

# 10 Changes to the privacy policy

DFX regularly reviews this Privacy policy to ensure that it is always up to date and reserves the right to amend it as necessary. It is recommended that you check this page regularly for possible changes, as no individual notification of changes will be made.
In the event of discrepancies with the English version, the German version of this privacy policy shall prevail.

DFX accepts no liability for the accuracy and completeness of the content of the information.

Liability claims relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are fundamentally excluded.

All offers published by DFX in digital or electronic form are subject to change. DFX expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to cease publication temporarily or permanently.

DFX is not responsible for references and links to third-party websites. Any responsibility for websites of third parties, i.e., outside the companies belonging to DFX, is rejected. Access to and use of such websites is at the user's own risk.

All offers published by DFX in digital or electronic form are subject to change. DFX expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to cease publication temporarily or permanently.

# 13 Copyrights and intellectual property

The copyright and all other rights to the content, images, photos or other files on the DFX website belong exclusively to DFX and its affiliated companies, their suppliers or the specifically named rights holders.

The customer accepts the content of the data protection declaration in its current version in full. In the event of contradictions, the Privacy policy takes precedence over the General Terms and Conditions of DFX.