Privacy policy

Data controller

The data controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

upskilled Crista Henggeler

Crista Henggeler
Bahnhofstrasse 58
8001 Zurich
Switzerland

Telephone: +41 44 211 66 00
Email: crista@upskilled.ch

General information

Pursuant to Article 13 of the Swiss Federal Constitution and the provisions of Swiss data protection law (Federal Act on Data Protection, FADP), everyone is entitled to privacy and to protection against the misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable statutory data protection provisions and this privacy policy.

In cooperation with our hosting providers, we endeavour to protect our databases as effectively as possible against unauthorised access, loss, misuse or falsification.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

By using this website, you consent to the collection, processing and use of data in accordance with the following provisions. This website can generally be visited without registering. In doing so, data such as the pages accessed or the names of files retrieved, as well as the date and time of access, are stored on the server for statistical purposes without being directly linked to your identity. Personal data, in particular your name, address or email address, is collected on a voluntary basis wherever possible. Data will not be disclosed to third parties without your consent.

Processing of personal data

Personal data means any information relating to an identified or identifiable individual. A data subject is an individual whose personal data is processed. Processing includes any handling of personal data, irrespective of the means and procedures used, in particular the retention, disclosure, collection, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, where and insofar as the EU GDPR applies, we process personal data on the following legal bases within the meaning of Article 6(1) GDPR:

Consent (Article 6(1)(a) GDPR)
The data subject has given consent to the processing of their personal data for one or more specific purposes.

Performance of a contract and pre-contractual enquiries (Article 6(1)(b) GDPR)
Processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract.

Legal obligation (Article 6(1)(c) GDPR)
Processing is necessary for compliance with a legal obligation to which the controller is subject.

Protection of vital interests (Article 6(1)(d) GDPR)
Processing is necessary to protect the vital interests of the data subject or another natural person.

Legitimate interests (Article 6(1)(f) GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

Recruitment procedures as a pre-contractual or contractual relationship (Article 9(2)(b) GDPR)
Where special categories of personal data within the meaning of Article 9(1) GDPR (e.g. health data, such as information relating to a disability, or data concerning ethnic origin) are requested from applicants as part of a recruitment procedure, processing takes place on the basis of Article 9(2)(b) GDPR. This applies insofar as the processing is necessary for the controller or the data subject to exercise rights or fulfil obligations arising from employment law and social security and social protection law.

In cases where processing is necessary to protect the vital interests of applicants or other individuals, Article 9(2)(c) GDPR applies. Processing may also take place for purposes of preventive or occupational medicine, for the assessment of an employee's capacity to work, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services, in accordance with Article 9(2)(h) GDPR.

Where special categories of personal data are disclosed on the basis of voluntary consent, processing takes place on the basis of Article 9(2)(a) GDPR.

We process personal data for as long as is necessary for the relevant purpose or purposes. Where longer retention periods apply due to statutory or other obligations to which we are subject, we restrict processing accordingly.

Applicable legal bases

In accordance with Article 13 GDPR, we inform you of the legal bases for our data processing activities. Where the legal basis is not specified in this privacy policy, the following applies:

The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR. The legal basis for processing data in order to provide our services, fulfil contractual obligations and respond to enquiries is Article 6(1)(b) GDPR. The legal basis for processing data to fulfil our legal obligations is Article 6(1)(c) GDPR. The legal basis for processing data to protect our legitimate interests is Article 6(1)(f) GDPR.

Where the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

Security measures

In accordance with statutory requirements, and taking into account the state of the art, implementation costs, the nature, scope, circumstances and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access to, input of, disclosure of and protection of the availability of data, and ensuring that data is kept separate.

We have also established procedures to ensure that data subjects can exercise their rights, that data can be deleted and that appropriate responses can be made in the event of threats to data security.

Furthermore, we take the protection of personal data into account from the outset when developing or selecting hardware, software and procedures, in accordance with the principles of data protection by design and data protection by default.

Disclosure of personal data

As part of our processing activities, personal data may be transferred to or disclosed to other entities, companies, legally independent organisational units or individuals.

Recipients of such data may include, for example, service providers commissioned to carry out IT-related tasks or providers of services and content integrated into a website.

In such cases, we comply with the applicable statutory requirements and, in particular, enter into appropriate contracts or agreements with recipients to ensure the protection of your data.

Data processing in third countries

Where we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or where processing takes place in connection with the use of third-party services or the disclosure or transfer of data to other individuals, entities or companies, this is done only in accordance with the applicable statutory requirements.

Unless you have given your explicit consent, or the transfer is necessary for contractual or legal reasons, we process data in third countries only where an adequate level of data protection is recognised, where contractual obligations are in place through the European Commission's standard contractual clauses, or where certifications or binding internal data protection rules exist (Articles 44 to 49 GDPR).

Further information is available from the European Commission:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de

Cookie policy

This website uses cookies. Cookies are text files containing data from visited websites or domains, which are stored by the browser on the user's computer.

Cookies are primarily used to store information about a user during or after their visit to an online service. The information stored may include, for example, language preferences on a website, login status, the contents of a shopping basket or the point at which a video was last viewed.

The term cookies also includes other technologies that perform the same functions, such as the storage of user information through pseudonymous online identifiers, also known as user IDs.

The following types of cookies and functions are distinguished:

Temporary cookies (also known as session cookies)
Temporary cookies are deleted at the latest when a user leaves an online service and closes their browser.

Permanent cookies
Permanent cookies remain stored even after the browser has been closed. They may, for example, store login status or display preferred content directly when a user revisits a website. User interests, which may be used for audience measurement or marketing purposes, can also be stored in such cookies.

First-party cookies
First-party cookies are set directly by us.

Third-party cookies
Third-party cookies are primarily used by advertisers and other third parties to process user information.

Necessary cookies (also known as essential or strictly necessary cookies)
Some cookies are essential for the operation of a website, for example to store login details or other user inputs, or for security purposes.

Statistics, marketing and personalisation cookies
Cookies are also generally used for audience measurement and where a user's interests or behaviour (e.g. viewing specific content or using certain functions) are stored in a user profile across individual websites.

Such profiles are used, for example, to display content that may correspond to users' interests. This process is also known as tracking, meaning the monitoring of users' potential interests.

Where we use cookies or tracking technologies, we will provide separate information in this privacy policy or as part of the consent process.

Information on legal bases

The legal basis for processing your personal data through cookies depends on whether we ask for your consent. If we do so and you consent to the use of cookies, your consent constitutes the legal basis for processing your data.

Otherwise, data processed through cookies is processed on the basis of our legitimate interests (e.g. the efficient operation and improvement of our online services) or, where the use of cookies is necessary, to fulfil our contractual obligations.

Storage period

Unless we provide explicit information about the storage period of permanent cookies (e.g. as part of a cookie opt-in process), you should assume that the storage period may be up to two years.

General information on withdrawal of consent and objection (opt-out)

Depending on whether processing is based on consent or a legal authorisation, you have the right at any time to withdraw any consent you have given or to object to the processing of your data through cookie technologies. These options are collectively referred to as opt-out.

You can initially exercise your right to object through your browser