Privacy Policy

I. General Information

Zühlke makes a Zühlke Group website and blog (collectively referred to as the ‘website’) available via the web address https://www.zuehlke.com. The purpose of the website, in particular, is to provide information about Zühlke’s products and services and about Zühlke as an employer. Interested parties also have the opportunity to contact Zühlke.  Furthermore, it is possible to interact with external parties via other channels, whether via events, social media or as part of contractual relationships or in the steps leading up to creating a contractual relationship. 

In this privacy policy, we, the companies of the Zühlke Group (hereinafter collectively referred to as ‘Zühlke’, ‘we’ or ‘us’), explain how we collect and process your personal data. Personal data is any data that concerns you personally, e.g. your name, address, email addresses, user behaviour. This privacy policy is not exhaustive; if necessary, other privacy policies, such as the privacy policy for our employees, or general terms and conditions, contracts, terms and conditions of participation and similar documents, govern specific matters.

This privacy policy was compiled on the basis of Regulation (EU) 2016/679 (GDPR) and the FADP (Switzerland), taking into account data protection laws that apply locally where our company headquarters are located. For simplicity, we refer to GDPR provisions in some places. If your personal data is processed outside the scope of the GDPR, these references do not apply. 

II. Information about the Controller

1. Name and contact details of the controller

Zühlke is the controller responsible for processing your personal data. Within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the controller responsible for processing your personal data is the Zühlke Group company that processes your personal data as part of its services or when communicating with you and that decides on the purposes and means of such data processing. The following companies are part of the Zühlke Group:

  • Zühlke Engineering AG, Zürcherstrasse 39J, 8952 Schlieren, Switzerland 
  • Zühlke Engineering GmbH, Düsseldorfer Str. 38, 65760 Eschborn, Germany 
  • Zühlke Engineering (Austria) GmbH, Rivergate, Handelskai 92, 1200 Vienna, Austria 
  • Zuhlke Engineering Ltd, 25 Moorgate, London, EC2R 6AY, United Kingdom 
  • Zuhlke Engineering d.o.o., Bulevar Milutina Milankovića 1i, 11070 Belgrade, Serbia 
  • Zuhlke Engineering Pte Ltd, 4 Battery Road #25-01, Bank of China Building, Singapore 049908 
  • Zuhlke Engineering Hong Kong Ltd, 17/F, Spaces 8QRE, 8 Queens Road East, Wanchai, Hong Kong  
  • Zuhlke Engineering EOOD, Studentski District, 83 Nikola Gabrovski str., floor 5, Sofia, Bulgaria 
  • Zühlke Engineering, Unipessoal, Lda., Rua Júlio Dinis, nº 826, 4o 4050-322 Porto, Portugal
  • Zuehlke Engineering Vietnam LLC, Dreamplex Ngo Quang Huy Building, 42 Ngo Quang Huy, Thao Dien Ward, District 2, Thu Duc City, Ho Chi Minh City

2. Contact details for your enquiries 

  • info@zuehlke.com for general enquiries; and
  • academy@zuehlke.com in connection with Academy courses. 

Zühlke has also appointed a data protection officer for the Zühlke Group. They can be contacted at dataprotection@zuehlke.com.

III. Purpose of Data Processing

Zühlke processes your personal data for the following purposes:

  • to operate this website in a secure, stable fashion;
  • to provide you with news, including promotions, that may be of interest to you;
  • to furnish and improve Zühlke’s range of services (e.g. event registration and implementation or provision of services, etc.);
  • for reach measurement, impact KPI collection and for marketing purposes; and
  • to conclude a contract/fulfil a contract.

IV. Collecting and Storing Personal Data and the Nature and Purpose of its use

Personal data may be provided by you on a voluntary basis or, in the case of usage data, collected automatically when the website is used.

Any use of cookies – or other tracking tools – by this website or third-party service providers used via this website is for the purpose of providing the service you have requested and for the purposes described in this policy. 

The personal data that Zühlke processes independently or via third parties (more detailed information provided in Chapters VIII and IX) includes:

  • master data (e.g. personal master data, names, addresses, gender for the purpose of forms of address); 
  • contact details (e.g. email, telephone numbers); 
  • content data (e.g. text input, photographs, videos); 
  • usage data (e.g. websites visited, interest in content, access times, cookies); and 
  • meta/communication data (e.g. device information, IP addresses).

Full details on each type of personal data processed are provided below in this privacy policy or through explanatory texts (referred to as ‘disclaimers’ in emails and on forms) that are displayed at select points when the data is being collected. 

1.  When visiting the website

If you have accepted the use of cookies via the cookie banner (see Section VI of this privacy policy and our cookie policy), the browser used on your device will automatically send information to our website server when you visit our website. This information is temporarily stored in what is known as a ‘log file’. The following information is collected without any intervention by you and is stored until it is automatically erased:

  • name of file retrieved;
  • date and time of retrieval;
  • amount of data transferred;
  • report confirming whether the retrieval was successful;
  • description of the type of web browser used;
  • operating system used;
  • page previously visited;
  • provider; and
  • your IP address.

The data mentioned is processed by us for the following purposes:

  • to ensure that a smooth connection to the website is established;
  • to ensure that the user is able to easily use our website;
  • for analysis, further development, reach measurement, impact KPI collection and for marketing purposes;
  • to evaluate system security and stability; and
  • for other administrative purposes.

We process this data based on your consent (Art. 6(1a) GDPR, where the GDPR applies) with regard to the data collection purposes listed above. Under no circumstances do we draw conclusions about you personally from the data that has been collected.

2. When using our contact form 

If you have any questions, we give you the opportunity to contact us via a contact form provided on the website. It is necessary for you to provide your name, contact details (last name, first name and email address) and a message so we can respond to these questions. Mandatory fields are marked as such. Sending further information is optional. The subsequent processing of your personal data is based on the legal basis of your consent (Art. 6(1a) GDPR, where the GDPR applies).

3. When accessing information

Zühlke gives you the option to access further information (e.g. white papers, etc.). To do so, you are required to complete a form, where we collect personal data such as your email address, first name and last name. Mandatory fields are marked as such. The legal basis for this data processing is your consent (Art. 6(1a) GDPR, where the GDPR applies) and our legitimate interest within the meaning of Art. 6(1f) GDPR (where the GDPR applies). 

The following data is collected, as a minimum, in order to provide the requested service: email address, type of service requested (e.g. white paper). The services are only initiated after completion of a DOI procedure (double opt-in procedure). This means that we will send an email to the email address you have provided. We ask you to confirm that this is the correct email address and that you have actually requested our service. In addition to the email address you have provided, we also save your IP address, the time of your registration and your confirmation for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.

If you would like more detailed information regarding this process, you can contact the controller (see Section II).

4. When subscribing to the newsletter

You can also subscribe to our newsletter on our website. We use this newsletter to inform you about our new offerings that may be of interest. To subscribe to the newsletter, you must provide us with your email address.

Newsletter subscription then takes place via the ‘double opt-in procedure’. This means that we will send an email to the email address you have provided after you have subscribed. We ask you to confirm that this is the correct email address and that you actually want to subscribe to our newsletter. If you do not confirm this subscription, the information you have provided will be made unavailable and automatically erased after one month. In addition to the email address you have provided, we also save your IP address, the time of your registration and your confirmation for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.

The legal basis for processing is your consent in accordance with Art. 6(1a) GDPR, where the GDPR applies. You can withdraw this consent at any time with effect for the future by clicking on the unsubscribe link in the newsletters sent to you.

5.  When registering for (online and offline) events

You will find an overview of the events/courses/events we are planning in the near future on our website (Eventhub or Academy website). You can register for these events/courses via the contact form. Mandatory fields are marked as such. Where the provision of personal data is explicitly marked as voluntary on the registration form, you can decide whether or not you wish to provide this data. This decision has no impact on your registration and participation in the event/course. 

The following data is collected as a minimum in order to provide the requested service: email address, last name, first name, title, type of service required (e.g. registration for an event/course) and a billing address for courses. In addition to the data listed above, we also store your IP address and the time of your registration as well as your confirmation. This is for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.

If you would like more detailed information regarding this process, you can contact the controller (see Section II).

The legal basis for processing is your consent (Art. 6(1a) GDPR, where the GDPR applies) or the fulfilment of a contract or the implementation of pre-contractual measures (Art. 6(1b) GDPR, where the GDPR applies).

6. When providing services 

We also process your data within the scope of our contractual agreements. This concerns master data (e.g. customer master data, such as names or addresses), contact details (e.g. email addresses, telephone numbers), content data (e.g. text input, etc.), contract data (e.g. subject of the contract, term), payment details (e.g. bank details, payment history), usage and metadata (e.g. in the context of evaluating and measuring the success of marketing measures). Data subjects are our customers, course participants, service providers, interested parties and their customers, users, website visitors or employees and third parties. The purpose of the processing is to provide contractual services, for billing and to provide customer services. The legal bases for processing are derived from Art. 6(1b) GDPR (pre-contractual measure/contractual fulfilment) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. Data is only disclosed to external parties if this is necessary as part of a project/order and we are entitled to do so. For Academy courses, data will only be shared with third parties if you have registered for a certification course with an official certification provider. In this case, your last name, first name and email address and, for certification courses provided by the SAQ (Swiss Association for Quality), also your private address, hometown and date of birth, will be forwarded to the certification provider. In turn, they will process the data disclosed to us as part of an order where they act as instructed by the client and in accordance with the legal requirements for processing as a processor (Art. 28 GDPR, where the GDPR applies) and do not process the data for any purposes other than those specified in the order.

We erase personal data relating to Academy courses one year after the date on which you registered for a course, at the latest. Alternatively, such data is anonymised. Otherwise, the data is generally erased once guarantee obligations and comparable obligations have expired. The requirement to store data is reviewed at irregular intervals. If there are any legal archiving obligations, erasure takes place after such periods have passed.

7. LinkedIn lead generation

We give you the opportunity to receive content and information from us as part of LinkedIn campaigns. In this context, we provide information about the processing of user data and refer to this privacy policy. By submitting the LinkedIn form, you are agreeing that the data you have publicly disclosed on the platform (LinkedIn) may be stored and processed by us. The processing of personal data is based on Art. 6(1a) GDPR (consent) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. You can request access to data that has been processed from the controller and you can also request that the controller erases such data (see Chapter II).

8. Processing of contact details via a personal exchange in a business context

We process personal data that arises through a personal exchange of contact details and at your request, provided that there is a specific interest in doing so. The processing is based on Art. 6(1a) GDPR (consent) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. The processing of personal data can be revoked at any time. 

9. Processing of personal data of applicants 

We also process personal data in the application process. All rules regarding the processing of the personal data of applicants are described in the Data protection information for applicants and talent management at Zühlke Engineering AG.

V. Cookies

If you give us your consent via a cookie banner, we typically use ‘cookies’ and similar technologies on our website that can be used to identify your browser or device.

A cookie is a small file that is sent to your computer or is automatically saved on your computer or mobile device by the web browser you use when you visit our website. This allows us to recognise you when you visit this website again, even if we do not know who you are. In addition to cookies that are only used during a session and are deleted after your visit to the website (‘session cookies’), cookies can also be used to save user settings and other information for a set period of time (e.g. two years; ‘permanent cookies’). However, you can change your browser settings so that it rejects cookies, only saves them for one session or otherwise deletes them well ahead of time.

You can find out more about our cookies, which cookies we use, what they are for and how you can manage them in our detailed cookie policy here.

1. Necessary cookies

We use ‘technically necessary cookies’ in some areas of our website. These file elements can be used to identify your computer as a technical unit during your visit to this website in order to allow you to use our site. Generally, however, you have the option to change your browser settings such that you are informed about cookies, so that you can enable or disable them, or delete cookies that are already present. Please use your browser’s help function to find out how to change these settings. You can also manage the cookies used on our website at any time via our cookie settings in the website footer. Please note that elements of our website may not work if you have disabled technically necessary cookies. Cookies do not allow a server to read private data from your computer or data saved by another server. They are not harmful to your computer and do not contain any viruses. We base the use of technically necessary cookies on Art. 6(1f) GDPR, where the GDPR applies; such processing is carried out to allow the website to function. It is therefore necessary to safeguard our legitimate interests.

2.  Optional cookies

We also use other cookies to understand how you use our site and to be able to provide you with interesting offerings. Such cookies are only used if you have previously given your consent (in accordance with Art. 6(1a) GDPR, where the GDPR applies) via our cookie banner. You can find detailed information about these optional cookies in our cookie policy.

VI. Your Rights

You can exercise certain rights in relation to data concerning you that is processed by us. In particular, you have the following rights: 

  • the right to obtain information from us as to whether and what data we process that concerns you; 
  • the right to request that we provide specific personal data in a commonly used electronic format or send it to another controller; 
  • the right to have your data rectified if it is inaccurate; 
  • the right to request that data is erased, provided there are no conflicting retention requirements or rights;
  • the right to object: if the processing of your personal data is based on our legitimate interest, you can object to the use of your personal data. However, this only applies if you find yourself in a special situation where your personal interests conflict with the use of your personal data. Please note that our compelling, overriding interests also remain reserved. Processing on the grounds of other legal bases remains unaffected by the objection.
  • the right to withdraw consent where our processing is based on your consent; 
  • the right, on request, to obtain further information necessary to exercise these rights; and 
  • the right to lodge a complaint with the competent supervisory authorities.

You can address all requests to exercise your rights to the controller directly (see Section II for contact details). Requests can be exercised free of charge; they will be processed by us as quickly as possible and within one month of receiving your request, at the latest.

VII. Data Processing Location

Your personal data will always be processed where the headquarters of Zühlke companies are located. If third parties are involved in processing as auxiliary parties (processors), for example to process commercial administrative services and in connection with IT services (in particular within the Zühlke Group or in the case of external IT service providers), it is likely that processing will take place outside of Zühlke locations. This may be in Switzerland, the UK, the EU or in third countries.

Tools from third parties based in third countries, e.g. the USA, may be integrated into our website or to provide services. If these tools are enabled, your personal data may be shared with the servers of the companies in question. However, any personal data processed will be stored in a European cloud.  
We run checks on all auxiliary parties from a variety of different angles (data protection, data security, IT, legal) and conclude appropriate data protection contracts, including current EU standard contractual clauses, before we use third-party services.

If you would like more detailed information, you can contact the controller at any time (see Section II).  

VIII. Retention Period / Erasure of Personal Data

Personal data is processed and stored for as long as the purpose for which it was collected requires. As such, the following applies:

  • personal data that is collected for the purpose of fulfilling a contract concluded between you and us is generally stored until the contract has been fulfilled in its entirety. Statutory retention requirements and post-contractual claims are taken into account;
  • personal data collected to safeguard our legitimate interests will be retained for as long as is necessary to fulfil such purposes. You can obtain more information about the legitimate interests in the relevant sections of this policy or by contacting the data controller;
  • otherwise, we store personal data for a longer period of time if you have consented to such processing. Data will, of course, be erased if consent is withdrawn; and
  • the data processed by us will be erased after the statutory retention periods and statutory retention rights have passed, and in accordance with the statutory provisions, or the processing of such data will be restricted. If data is restricted, the data will be made unavailable and not processed for other purposes. As an example, this applies to data that must be retained for commercial or tax reasons.

IX. Privacy Policy Date

The privacy policy is currently valid as at 03/08/2023.

We will adapt this privacy policy to new or changing needs. You can access the current version on our website at any time by clicking on this link.