Aquilas Company Builder AG
Ernst-Nobs-Platz 1
CH-8004 Zürich

E-mail: info@aquilas.com
Telephone: 0041 44 252 20 60
Commercial Register Nr.: CHE-287.068.001

Data Protection

Information on data protection

We, Aquilas Company Builder AG, Ernst-Nobs-Platz 1, CH-8004 Zurich Switzerland and all its subsidiaries worldwide, take data protection seriously and hereby inform you in the following statement on the collection, storage and possible use of personal data.

The use of the website and the use of Aquilas services may be connected with the processing of personal data. The handling of this data is regulated by law, in particular in the EU Data Protection Regulation (GDPR). We would like to inform you about the details of the processing of your personal data.

1. General Information

a.    Contact
If you have any questions about this privacy statement or wish to contact us to exercise your rights, please send your request to

Aquilas Company Builder AG
Ernst-Nobs-Platz 1
8004 Zurich

E-Mail: info@aquilas.com

For Switzerland, the EU Commission has issued an adequacy resolution (2002/518/EC), so that the appropriate level of data protection pursuant to Art. 45 GDPR is ensured.

b.    Scope of this data privacy statement
This statement applies to all services offered and operated by us, in particular to our website www.aquilas.com. It also applies accordingly to mobile devices or offers and presences adapted to other platforms.

c.    General information on data processing
When using this website and our services, personal data may be processed. The term "personal data" under data protection law refers to all information relating to a specific or identifiable person. The IP address can also be a personal datum. An IP address is assigned to each device connected to the Internet by the Internet provider so that it can send and receive data. When you use the Site, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit to the website.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR. Data will only be processed by us on the basis of legal permission. When using this website, we only process personal data with your consent (Art. 6 para. 1, lit. a) GDPR), for the performance of a contract to which you are a party, or at your request for the implementation of pre-contractual measures (Art. 6 para. 1, lit b) GDPR), for the fulfilment of a legal obligation (Art. 6 para.1 lit. c) GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data, prevail (Art. 6 para. 1 s, lit. f) GDPR.

d.    Duration of storage
Unless otherwise stated in the following information, we store the data only as long as necessary to achieve the purpose of processing or to fulfil our contractual or statutory obligations. Such statutory retention obligations may arise in particular from commercial or tax regulations.

e.     Technical Service Providers
Unless otherwise stated in the following information, the data will be processed on the servers of technical service providers commissioned by us for this purpose. These service providers process the data only according to express instructions and are contractually obliged to guarantee adequate technical and organizational measures for data protection.

Specifically, we use the services of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.  The server is located in Nuremberg, Germany. Hetzner Online is certified according to DIN ISO/IEC 27001. The certificate demonstrates adequate security management, data security, confidentiality of information and availability of IT systems. It also confirms that safety standards are continuously improved and sustainably controlled.

f.    SSL encryption
This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and by the lock icon in your browser line. If SSL encryption is activated, the data which you transfer to us cannot be read by third parties.

2.    Processing of server log files

When using our website for information purposes only, general information is initially stored automatically (i.e. not via registration), which your browser transmits to our server. These include as standard: Browser type/ version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 lit. f) GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted unless there is a justified suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason.


3.    Contact form

Our website contains a contact form where you can send us messages. The transfer of your data is encrypted. All data fields marked as mandatory fields are required to process your request. If you do not provide us with your data, we will be unable to process your request. The provision of further data is voluntary. Alternatively, you can contact us by e-mail. The legal basis for data processing in connection with a contact enquiry is Art. 6 para. 1 lit. b GDPR).


4.    Cookies

We use cookies on our website to make our website more user-friendly, effective and secure. Cookies are small text files that are stored by your browser when you visit a website. This leads to identification of the browser used and means it can be recognized by our web server.  The cookies we use are usually so-called "session cookies". They are automatically deleted after closing your browser. Other cookies ("persistent cookies") are automatically deleted after a specified period, which may vary depending on the cookie. These cookies make it possible to recognize your browser when you next visit the site. If this use of cookies results in the processing of personal data, this is on the legal basis of Art. 6 para.1 lit. f) GDPR. You can delete the cookies in the security settings of your browser at any time and you can fundamentally object to the use of cookies through your browser settings. Disabling cookies may limit the functionality of this website.


5.    Analysis of our website with Google Analytics

We use the Google Analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") to evaluate our website visitors. Google uses cookies for this purpose. As a rule, the cookie-generated information regarding your use of this website will be forwarded to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate the use of our online offering by the user, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and the Internet. Pseudonymous usage profiles of users may be created from the processed data in this respect. We use Google Analytics only with activated IP anonymization. This means that the IP address of the user is shortened by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. The IP address sent by your browser will not be connected with other data from Google. The legal basis for the use of this service is Art. 6 para. 1, lit. f) GDPR and serves the legitimate interest of analyzing user behavior on our website and the design that is thus possible in line with requirements. You may refuse the saving of cookies by selecting the appropriate settings in your browser. You can also prevent the information generated by the cookie from being collected by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. If you visit our website via a mobile device, you can disable Google Analytics by clicking this link. Google is certified under the Privacy Shield Agreement and thereby offers a guarantee to comply with European and Swiss data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).


6.    Integrated services and contents of third parties

We collect on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f GDPR, we use the plug-ins listed below to analyze and optimize our offers. 
Our website uses so-called social plugins ("plugins") from the social networks Facebook, Instagram and the services YouTube and Linkedin. These services are provided by Facebook Inc, Instagram LLC, YouTube and Linkedin ("Providers").

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of Facebook plugins and their design can be found here: https://developers.facebook.com/docs/plugins

Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of the Instagram buttons and their appearance can be found here: https://www.instagram.com/developer/embedding/ 
YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). More information about YouTube can be found here: https://developers.google.com/youtube/

Linkedin is operated by Linkedin Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("Linkedin"). An overview of the Linkedin plugins and their appearance can be found here: https://developer.linkedin.com/plugins
When you visit a page of our website containing a social plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by the provider directly to your browser and integrated into the webpage. By integrating the plugin, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the relevant supplier or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA (or Germany) and stored there.

If you are logged in to one of the services, the providers can directly associate the visit to our site with your profile on Facebook, Google+, Twitter or Instagram. When you interact with the plugins, for example by pressing the "Like" or the "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on Facebook, Instagram, YouTube or Linkedin social networks and displayed to your contacts. For the purpose and scope of data collection and further processing and use of data by the providers as well as your rights and settings options for protecting your privacy, please see the privacy policies of the providers.

Privacy policy of Facebook: http://www.facebook.com/policy.php 
Instagram Privacy Notice: https://help.instagram.com/155833707900388/ 
Privacy policy of YouTube: https://www.google.de/intl/de/policies/privacy 
Privacy Policy of Linkedin: https://www.linkedin.com/legal/privacy-policy 

If you do not want Google, Facebook, Twitter, or Instagram to associate the data collected from our website directly with your profile in the respective social network, you must log out of the respective network before visiting our website. You can also completely prevent the loading of plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

7.    Your Rights

You have the right, in accordance with Art. 16 GDPR to request us to correct your data.

You have the right, in accordance with Art. 17 GDPR from us to delete your personal data.

You have the right, in accordance with Art. 18 GDPR to restrict the processing of your personal data.

You have the right, in accordance with Art. 20 GDPR to receive the personal data concerning you that you have provided to us, in a structured, common and machine-readable format and to transfer this data to another data controller.

You may revoke your consent in accordance with Art. 7 Para. 3 GDPR at any time. Such revocation does not affect the legality of the processing which has taken place until the revocation based on the consent.


7.    Complaint to a supervisory authority

If you believe that the processing of personal data concerning you violates the provisions of the GDPR, in accordance with Art. 77 GDPR you have the right of appeal to a supervisory authority.

Status: November 2018