Privacy Policy

1. General information


Data protection is very important to us. We therefore process your personal data with great care and in accordance with the applicable legal requirements. Negal Engineering AG, Gaiserwaldstrasse 16a, 9015, St. Gallen, Switzerland processes your personal data for various purposes and provides transparent information about this data processing in this document. ‘Personal data’ refers to all information that can be associated with an identified or identifiable natural person. The term ‘processing’ covers all handling of personal data, e.g. obtaining, disclosing, storing, deleting, etc.


Please read the entire privacy policy carefully. This will tell you how and why we process your personal data and what rights you have in connection with this data processing.


This privacy policy is based on the Swiss Data Protection Act (DSG). It is also based on the European General Data Protection Regulation (GDPR). The extent to which the GDPR is applicable depends on the individual case.


To whom and when does this privacy policy apply?


  • If you purchase services or products from us or have a contractual relationship with us
  • Visitors to our website https://www.negal.ch/
  • If you contact us, e.g. via email, letter, our contact form or another contact tool
  • If you receive information or marketing communications from us
  • If you apply for a job with us
  • If you deal with us in the context of further data processing related to our offers



2. Responsibility


The company that determines the purpose and means of processing personal data is responsible for processing that data. For data processing in accordance with this privacy policy, the following company or person is the ‘controller’ within the meaning of the DSG, i.e. the body responsible for data protection, unless otherwise communicated in specific individual cases (identity):


Negal Engineering AG Gaiserwaldstrasse 16a 9015, St. Gallen Switzerland


If you have any concerns or questions about data protection, you can contact us at the following address:


info@negal.ch



3. Personal data to be processed


We process different categories of personal data for different purposes. We process less personal data for contractual partners who are companies – in this case, we process in particular data relating to contact persons at the companies (e.g. name, email address, position in the company, communication data). You provide us with much of the following personal data yourself. However, you are generally not obliged to do so. If you provide us with data about other persons, we assume that you are authorised to do so and that this data is also correct. You automatically confirm this when you transmit data about these third parties to us. Please ensure that the third parties concerned have been made aware of this privacy policy.


3.1.  Basic data and contact information


Basic data and contact information relate directly to you and your characteristics (e.g. for the purpose of contacting you). We process the following basic data, for example:

  • Surname, first name
  • Gender
  • Date of birth
  • Address
  • Email address
  • Telephone number
  • Nationality and residence permit status
  • Information on language preferences
  • Information from ID or passport
  • Family data (e.g. marital status)
  • Information on professional role and employment (e.g. employment relationship, employer)
  • Information on education
  • Information on income and financial situation
  • Information on living situation
  • Signatory authorisations and declarations of consent


We receive this master data directly from you. Under certain conditions, however, we may also obtain personal data from third parties, such as our contractual partners, associations and address brokers, and from publicly accessible sources such as the Internet.



3.2. Contract data


Contract data is information that arises in connection with the execution of a contract. We process the following data:


  • Information provided prior to the conclusion of a contract and information relating to the conclusion of the contract itself (e.g. the subject matter of the contract), as well as information required or used for processing
  • Date, information on the type, duration and terms of the contract in question, data on the termination of the contract
  • Customer history
  • Information on payments and payment terms, mutual claims
  • Information on complaints, information on customer satisfaction, complaints, feedback
  • Responses to customer and satisfaction surveys


3.3. Application data


Application data is data that is collected in connection with your application to us, e.g. the following data:


  • CV, letter of motivation
  • Work and degree certificates
  • Information about your current job (e.g. notice period)
  • Salary expectations
  • Information in connection with a job interview



3.4. Communication data


Communication data is data that arises in connection with communication with you, e.g. the following data:

  • Contact details such as postal address, email address and telephone number
  • Content of all correspondence
  • Information on the type, time and other marginal data of the communication


3.5. Behavioural data


In order to tailor our offers and services to you, we try to get to know you better. To do this, we process data about your behaviour. Behavioural data is information about your use of our website. It can also be collected on the basis of technical data. We can also use your other interactions with us as behavioural data, and we can link behavioural data with other information. This data then provides us with information about your likely needs and interests. We evaluate behavioural data for this purpose. This gives us overall knowledge of your preferences and likely behaviour, or that of groups of people with similar characteristics.


3.6. Location data and technical data


When you visit our website, technical data is collected. This includes, for example, the following data:


  • Location and traffic data
  • IP address of the end device and device ID
  • Information about your device, the operating system of your end device
  • Information about your Internet provider
  • Content accessed or logs in which the use of our systems is recorded
  • Date and time of access to the website
  • Date and time of access to the website


3.7. Other possible data


Depending on necessity, we may also process the following additional data:

  • In connection with official or legal proceedings, data may be collected (e.g. evidence) that may also relate to you.
  • We may also be required to collect data for health protection reasons (e.g. as part of protection concepts).
  • We may also process photos or videos in which you may be recognisable (e.g. from events).
  • We may collect data about who participates in events and when
  • We may collect data about whether you participate in promotions (e.g. competitions).



4. Purposes of our data processing


We process your personal data, where permitted, for various purposes in which we have a legitimate interest:


  • To fulfill contracts
  • To improve our services and products
  • For communication (e.g., responding to your messages)
  • For marketing and information purposes (so that we can inform you about offers or new activities in line with your personal interests, for example)
  • To review your application (so that we can assess whether you are suitable for a position with us)
  • To maintain our IT security (in particular to monitor the performance of our website)
  • To enforce measures for operational and building security and to protect our employees, other persons, and valuables
  • For internal administration (e.g., for accounting or data archiving purposes)
  • To comply with legal requirements (e.g., to process complaints, prevent and investigate criminal offenses or other misconduct)
  • Assertion of legal claims (if necessary, we also process personal data in order to enforce claims in court, out of court and before authorities in Switzerland and abroad, or to defend ourselves against legal claims)
  • For corporate development (e.g. for corporate management, for the purchase and sale of business areas and the associated transfer of personal data)


On our website, we offer you the option of using a LinkedIn social media plugin to integrate the respective provider's functions into our website. These plugins are disabled by default, but are activated when you click on the social media icon on the website. You can send requests for information and other data subject requests in connection with these social media providers directly to the provider concerned.



5. Online advertising techniques


We use online advertising techniques such as cookies on our website. This allows us to measure the user-friendliness and success of the website and online advertising campaigns.


5.1. What are online advertising techniques such as cookies?


When we track you, we can distinguish your access from that of other users so that we can ensure the functionality of the website and perform statistical evaluations. Each time you visit a page, you are recognized as an individual visitor and can thus be distinguished from other people, for example by the server assigning a unique identification number to your browser (this is referred to as a “cookie”). Cookies are automatically stored on your device when you visit our website. We use cookies, for example, to store settings between your visits to the website or to collect statistical and technical data.


5.2. Which cookies and online advertising techniques do we use??


We use analytics services to help us optimize our website. Below, we explain how our most important analytics service providers work. Other third-party providers of similar tools generally process personal data in a similar manner.


Google Analytics, an analytics service provided by Google LLC and Google Ireland Ltd. Google Ireland Ltd. is responsible for processing personal data. Google uses cookies and online advertising techniques to analyze certain information about the behavior of individual users on the website. Based on the analyzed data, Google provides us with evaluations, but also processes data for its own purposes. Information on data protection at Google Analytics can be found here.



6. Disclosure of data to other companies and other recipients


We disclose your personal data to service providers. This applies in particular to IT service providers, but may also apply to analysis service providers, debt collection service providers, credit agencies, marketing service providers, etc., where necessary. Insofar as these service providers process personal data as contract processors, they are obliged to process personal data exclusively in accordance with our instructions and to take measures to ensure data security. Data may also be disclosed to other recipients, e.g. to courts and authorities in the context of legal proceedings.


In individual cases, we may also disclose personal data to other third parties for their own purposes, e.g. if you have given us your consent to do so or if we are legally obliged or entitled to do so.



7. Duration of data processing


We store and process your personal data for as long as it is necessary for the purpose of processing (in the case of data related to contracts, this is normally for the duration of the contractual relationship), as long as we have a legitimate interest in storing the data (e.g. to enforce legal claims or to ensure IT security) and as long as data is subject to a statutory retention obligation (for certain data, for example, there is a ten-year retention period that we are required to comply with). We destroy or anonymize your personal data after the storage or processing period has expired, unless prohibited by legal or contractual obligations.



8. Legal basis for data processing in accordance with the GDPR


Depending on the circumstances, data processing is only permitted if specifically allowed by applicable law. This does not apply under Swiss data protection law, but it does apply under the European GDPR, insofar as it is applicable. In this case, we base the processing of your personal data on the following legal grounds:


  • your consent (Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR);
  • that the processing is necessary for the performance of a contract or for pre-contractual measures (Art. 6 para. 2 lit. b GDPR)
  • processing is necessary for a legitimate interest in data processing (Art. 6 (1) (f) GDPR)
  • processing is necessary for the assertion or defense of legal claims or civil proceedings (Art. 6 (1) (f) and Art. 9 (2) (f) GDPR)
  • processing is necessary for compliance with domestic or foreign legal provisions (Art. 6 para. 1 lit. c and lit. f as well as Art. 9 para. 2 lit. g GDPR)



9. Rights of data subjects


You have certain rights under applicable data protection law so that you can obtain further information about our data processing and influence it.


These are, in particular, the following rights:

  • You have a right to information. This means that you can request information about how we process your data. We are happy to assist you in this regard. You can also submit a request for information if you would like further information and a copy of your data.
  • You have a right to transfer. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to have it transferred to a third party, provided that the corresponding data processing is based on your consent or is necessary for the performance of a contract.
  • You have a right to erasure and objection. This means that you can object to our data processing so that we can no longer process your data. You can then request that we delete your personal data. However, we would like to point out that we will continue to process and store your data if we are obliged to do so.
  • You have the right to rectification. This means that you can rectify or complete incorrect or incomplete personal data or have it marked with a so-called dispute note.
  • You have the right to withdraw your consent. This means that you can withdraw your consent at any time, provided that you have previously given your consent to data processing. The withdrawal of consent takes effect from that moment onwards, i.e. only for the future and not for the past. However, we may continue to process your data on another basis in the event of your withdrawal of consent.



If you exercise your rights as a data subject, we must verify your identity (e.g., by requesting a copy of your ID). The rights of data subjects listed are subject to legal requirements and restrictions. This means that it is not always possible to exercise these rights in full. For example, we may still need to process your personal data in order to fulfill an order with you, to protect our own legitimate interests, or to comply with legal obligations. To the extent permitted by law (e.g., to protect the privacy of third parties and to safeguard our own legitimate interests, such as the existence of trade secrets), we may restrict or deny your exercise of your rights. It should also be noted that you also have the option of contacting the competent data protection authority with your request.



10. Status of the privacy policy


This privacy policy is up to date and dated 24 August 2023.


This privacy policy was created by LEXDEX.ch – your data protection expert.