Valid from 1 September 2023
- Who is responsible for your personal data
- How we process personal data
- Which personal data do we collect for which processing purposes
- On what legal basis do we process your personal data
- With whom do we share your personal data
- Transmission of personal data to countries outside the EEA
- How long do we keep information about you
- Cookies, Google services
- Social media plug-ins
- No automated decision-making, including profiling, with legal effect
- Third-party providers’ Privacy Policies
- What are your rights
1. Who is responsible for your personal data
The responsible party in terms of data protection legislation is:
Telephone: +41 55 220 12 12
2. How we process personal data
3. Which personal data do we collect for which processing purposes
3.1 Personal data provided automatically through the use of the website
- browser type and browser version;
- operating systems used;
- referrer URL (the website previously visited);
- host name of the accessing computer;
- date and time of the server request;
- Internet protocol address (IP address);
- volume of data transferred;
- other similar data and information that serves to avert danger in the event of attacks on our IT systems.
This personal data is not merged with other personal data and is stored separately from any other personal data provided by the user. It is deleted once it has fulfilled its purpose.
Antistress AG uses the personal data automatically collected to fulfil the following purposes:
- to enable the display, operation and functionality of the website
- to ensure the stability and security of the system
- to improve and protect our services
- for statistical purposes in the event of attacks on the network infrastructure on which the website is made available
- to analyse your user behaviour
3.2 Personal data provided to us by the user
Antistress AG collects and processes personal data that the user voluntarily provides to us using the online form directly on the website, via our contact email address, via any other applications associated with the website, by telephone or in any other manner (for example, to process specialist information, job applications, newsletters, product orders, etc.). This information can include, for example, the following personal data:
- last name, first name, postal address, email address, telephone number, date of birth, gender
- education, area of expertise, employer, company name
- your message or enquiry
- health information such as height, weight, diagnoses, state of health, information on diseases, symptoms, laboratory analyses, treatments
- product orders
- images, videos
- cover letter, photo, contact details of reference persons, CVs, proof of performance, OASI number
This personal data is provided expressly on a voluntary basis. Without this personal data, however, we will not be able to provide the services requested by the user with the desired level of quality or even at all.
Antistress AG uses the personal data provided to us by the user to fulfil the following purposes:
- to provide, maintain, protect and optimise the services and information offered
- to communicate with you and provide you with the best possible and personalised information you need from us (for example, about our products and services)
- to offer you new services and information and, based on your profile, suggest tailored services and information that may be of interest to you
- to comply with legal or other regulatory requirements and internal regulations
- to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings
- for other lawful purposes if such processing arises from the circumstances or was indicated at the time of collection
- for processing complaints and adverse reaction reports in accordance with statutory provisions
- to respond to enquiries and consultations in the healthcare sector
- to support customers
- for the purpose of recruiting employees
4. On what legal basis do we process your personal data
The processing of this personal data is based on the following legal foundations:
- your consent, only if it can be withdrawn at any time (for example, if you subscribe to our newsletter and other marketing communications)
- to fulfil a contract with you or with the intention of entering into a contract with you (for example, when purchasing a product)
- to comply with a legal obligation (such as for tax reasons or for the purpose of judicial investigations or proceedings) or
- to safeguard our legitimate interests (such as protecting and securing our services, systems, assets; complying with legal, regulatory and contractual obligations; asserting, exercising or defending legal claims; maintaining and organising business operations efficiently; improving and developing our services as well as selling and marketing our services)
If the processing is based on your consent or our legitimate interests, you may withdraw your consent at any time or object to this processing by contacting us directly. However, please note that the withdrawal of your consent does not affect the lawfulness of processing based on consent prior to withdrawal.
5. With whom do we share your personal data
Antistress AG takes the necessary measures to ensure that only our authorised staff and our auxiliary persons who have the required knowledge have access to your personal data in order to fulfil the purposes for which your personal data has been collected.
We may disclose your personal data to the following possible categories of recipients in accordance with the purposes and legal bases of processing described above, insofar as this is necessary for the intended data processing:
- service providers who process the personal data on behalf of and upon the instructions of Antistress AG (who are known as processors in the areas of IT, hosting and support, for example)
- customers, partners, suppliers, insurers and other business partners
- media agencies, the general public, including visitors to Group websites and social media
- industry organisations, associations and other bodies
- courts, arbitration boards, law enforcement agencies, regulators, lawyers and other parties in potential or actual legal proceedings where this is necessary to comply with law or to establish, exercise or defend rights or legal claims.
We select our partners and processors with care and only if there is sufficient guarantee that they have appropriate technical and organisational measures in place in accordance with legal requirements. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfil the purpose for which your personal data was collected, unless otherwise required by law.
6. Transmission of personal data to countries outside the EEA
7. How long do we keep information about you
In principle, personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless a longer retention period is necessary to comply with legal obligations (such as retention and documentation obligations), contractual or pre-contractual obligations or our legitimate business interests (for example, to assert, exercise or defend legal claims).
8. Cookies, Google services
When you access or use the website, we use what are known as cookies. We use these cookies to identify you as a user of the website in order to adapt content, improve the performance of the website and to make it more user-friendly. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files placed on your computer and stored by your browser.
a) Categories of cookies that we use
Depending on their function and purpose, the cookies we use can be divided into the following categories: functional cookies, performance cookies and advertising cookies.
- Functional cookies: These cookies serve a variety of purposes and are necessary in part for the presentation, functionality and performance of a website and, in particular, for improving the experience and enjoyment of visitors to the website. They allow a website to store information that has already been provided (such as user name, location or language selection) and offer visitors improved, more personal features. Functional cookies are used, for example, to remember things such as your login details. These cookies cannot track your movements on other websites.
- Performance cookies (statistics): These cookies are used to collect information about how a website is used – for example, how visitors came to our website, which pages a visitor calls up most often, how visitors navigated during their visit to our website, and whether they received error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors called up our website. These cookies are used to monitor the level of website activity and to improve the performance of the website.
- Marketing cookies allow us or a third-party provider to place advertisements on our website or on third-party websites with products that you like, so that the advertisements the user sees may be more relevant to their preferences or interests (sometimes referred to as “targeting cookies”). The cookies can also be used to evaluate the effectiveness of advertising and sales promotions.
These cookies may be placed by us or by a third party on our behalf. You can configure your browser settings so that cookies are not stored on your computer. The complete deactivation of cookies may result in you not being able to use all the features of our website.
b) Google Analytics
On its website, Antistress AG uses the website analysis service of Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and thus enable an analysis of your use of the website.
We use Google Analytics on the basis of our legitimate interests in analysing and regularly improving our website, as well as making it more interesting for you, using the statistics obtained. Furthermore, the use of Google Analytics is based on your consent to the tracking of your surfing behaviour on our websites and the analytical evaluation.
The information generated by the cookie about your use of this website will usually be transferred to a Google server in the USA and stored there. These cookies may, for example, contain the following information: IP address, number, date and time of your visit, duration of your visit, your access page from which you are using the website (referrer URL), the pages visited on our website, browser type/version and operating system used. Google will use this information on our behalf because we have a legitimate interest in analysing user behaviour so that we can optimise the offer on our website as well as our advertising. Google uses this information to evaluate the use of our website, to compile reports on website activity and to provide us with other services relating to the use of the website and the Internet. The personal data processed can also be used to create pseudonymised user profiles for users.
We have activated IP anonymisation (known as IP masking) on this website. . This means that your IP address is truncated by Google in member states of the European Union and in other states party to the Agreement on the European Economic Area, as well as in Switzerland, before being transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.
c) Google Signals
We use Google Signals. These capture additional information in Google Analytics about users who have activated personalised ads (interests and demographic data), allowing ads to be provided to these users in cross-device remarketing campaigns.
Anonymisation of IP addresses is activated by default in Google Analytics 4. IP anonymisation means that your IP address is truncated by Google in member states of the European Union and in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The IP addresses transmitted from your browser as part of Google Analytics will not be merged with other Google data.
d) Google Maps
This website uses the Google Maps API, a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to show you interactive maps directly on the website and makes it easy for you to use the map function.
The legal basis for processing results from your consent based on the information you have supplied voluntarily for creating a route map and our legitimate interests in presenting our location as well as making it easy to find the location shown by us on the website.
When you use Google Maps, information about the use of our website, including your IP address, may be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained by Google Maps to third parties insofar as this is required by law or if third parties process the data on behalf of Google.
Google will never associate your IP address with any other data held by Google. Nevertheless, it would be technically possible for Google to identify at least some individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have no control and are not able to control.
You can find more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights in this regard and settings options to protect your privacy, at: https://policies.google.com/privacy?hl=en&gl=de.
9. Social media plug-ins
We use the social plug-ins listed below on our website to raise awareness of our company. Responsibility for data protection-compliant operation must be guaranteed by the respective providers. Data is processed in conjunction with these plug-ins with your consent when you use the plug-ins.
If you use the services of these social networks independently of or in connection with our website, the social networks evaluate your use of the plug-in. In this case, information is passed on to the social networks via the plug-in.
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
A connection to the Vimeo servers is established when you visit any of our pages that has a Vimeo plugin. The plugin tells the Vimeo server which of our pages you have visited. It also passes your IP address on to Vimeo. This is the case even if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
10. No automated decision-making, including profiling, with legal effect
We do not make any decisions about you that are based solely on automated processing – including profiling – and that have a legal effect against you or that significantly affect you in a similar manner.
Antistress AG has implemented organisational and technical measures to safeguard the security of personal data and protect it against unauthorised or unlawful processing, accidental loss, change, disclosure or access.
Antistress AG may use third parties as data processors to collect and process your personal data. The data processors commissioned by us will only process your personal data in accordance with our instructions and are legally obliged to take strict security precautions when handling personal data.
Unfortunately, the transmission of information over the Internet is not entirely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your data that is transmitted to our website or by email; any transfer is at your own risk. For this reason, you are free to transmit your personal data to us by other means, such as by telephone, at any time. Once we have received your data, we will apply strict procedures and security measures to prevent unauthorised access.
12. Third-party providers’ Privacy Policies
Our website is not intended for children and we do not knowingly collect personal information from children under the age of 16 unless we have the express consent of their parents. If we are notified or otherwise learn that personal data of a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete this personal data.
14. What are your rights
You have the right to request information from Antistress AG, while providing proof of your identity, as to whether personal data concerning you is being processed. In addition, you have the right to request the rectification, destruction or restriction of personal data concerning yourself and to object to the processing of your personal data. If the processing is based on your consent or our legitimate interests, you can withdraw your consent or object to this processing at any time by contacting us directly via email. In certain cases, you have the right to receive personal data generated when using online services in a structured, common and machine-readable format so that further use and transmission to any third-party provider is possible.
Requests in this regard should be sent to Antistress AG at the following email address: services[at]burgerstein.ch. Antistress AG reserves the right to restrict your rights under applicable law and, for example, not to disclose comprehensive information or delete personal data. Please note that even following a request to delete your personal data, we must retain it in whole or in part in accordance with our statutory and contractual retention obligations. The deletion of your personal data may result in you no longer being able to use our services.
If we reject your request or you are dissatisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and to lodge an appeal with the competent authority. The responsible authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern (http://www.edoeb.admin.ch).