1. Data Controller

The entity responsible for processing personal data in connection with this website is: 

GRITEC AG
Trutwisstrasse 9
CH-7214 Grüsch, Switzerland
Phone: +41 58 733 38 00
Email: info@gritec.ch.

2. General Information

GRITEC AG processes personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European Union General Data Protection Regulation (GDPR). This Privacy Policy explains what data is processed when you use our website and the purposes for which such processing takes place.

3. Website Visits and Server Log Data

When you visit our website, technical data required for the operation, security and stability of the website is collected. This includes, in particular, your IP address, the date and time of access, the pages accessed, browser type, operating system, referrer URL and access status. This data is used to provide the website, analyse errors, ensure security and optimise the website.

4. Cookies

Our website uses cookies and similar technologies. Technically necessary cookies are required for the operation of the website. Analytics functions or external media are only used where consent is required and has been provided. You may withdraw or adjust your consent at any time via the cookie settings.

5. Services Used

5.1 Drupal

Our website is operated using the Drupal content management system. Drupal is used to create, manage and publish website content. In this context, technically necessary cookies, session data and log data may be processed.

5.2 Google Analytics

We use Google Analytics to statistically evaluate the use of our website. In this context, usage data, device information, browser information, page views and IP addresses may be processed. Google Analytics is only used on the basis of your consent where such consent is required. You may withdraw your consent at any time via the cookie settings. Further information: Google Privacy Policy.

5.3 Google Maps

Our website may include maps provided by Google Maps. When you access the relevant content, personal data, particularly your IP address and usage data, may be transmitted to Google. Google Maps is used to display locations and provide directions.

5.4 YouTube

Our website may include videos provided by YouTube. When you access or play such content, data such as your IP address, device information and information about the page you have accessed may be transmitted to Google or YouTube.

5.5 LinkedIn

Our website may include links to or content from LinkedIn. When you click on or access the relevant content, personal data may be transmitted to LinkedIn. Further information: LinkedIn Privacy Policy.

6. Applications via Dualoo

We use the applicant management system provided by Dualoo AG, Rietbergstrasse 27, 9403 Goldach, Switzerland, for online job applications. If you apply through our careers page, the data you enter and submit will be processed for the purpose of carrying out the recruitment process. This may include, in particular, personal details, contact information, your CV, references, certificates, information about your education and professional experience, as well as any other information you voluntarily provide. The data will only be used for the recruitment process and will only be made accessible to persons involved in the selection process. If no employment relationship is established, application documents will generally be deleted three months after notification of the rejection, unless statutory obligations, overriding legitimate interests or consent to a longer retention period apply. Further information: Dualoo Privacy Information.

7. Disclosure of Data

Personal data is only disclosed where this is necessary for the purposes stated above, where there is a legal obligation to do so, where consent has been provided or where legitimate interests justify such disclosure. Service providers acting on our behalf are required to comply with appropriate data protection and security requirements.

8. International Data Transfers

When individual services are used, particularly services provided by Google or LinkedIn, personal data may be processed outside Switzerland or the European Economic Area. Where required, appropriate safeguards are implemented.

9. Data Security

GRITEC AG implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. The website uses an encrypted connection where this is technically available.

10. Rights of Data Subjects

Within the scope of applicable data protection law, data subjects may request access to, rectification or deletion of their personal data, restriction of processing, object to processing and withdraw any consent previously provided. Requests may be sent to info@gritec.ch. Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority.

11. Amendments

GRITEC AG may amend this Privacy Policy at any time, particularly if changes are made to the website, the services used or the applicable legal requirements. The version published on the website at the relevant time shall apply.