Privacy
policy

03 · Legal

Privacy policy

01.Name and address of the controller

The controller within the meaning of the Swiss Federal Act on Data Protection (revFADP) and the General Data Protection Regulation (GDPR) of the European Union is:

successfactor GmbH
Haslerastrasse 17
3186 Düdingen
Switzerland

Phone: +41 79 915 00 00
Email: enableyour@successfactor.ch

02.General information on data processing

As a rule, we only process personal data of our users to the extent required to provide a functional website along with our content and services. Processing is generally carried out only on the basis of consent, or in cases where prior consent cannot be obtained for factual reasons and processing is permitted by law.

03.Legal bases for processing

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR and Art. 6(6) revFADP serve as the legal basis.

Where processing of personal data is necessary for the performance of a contract, Art. 6(1)(b) GDPR and Art. 31(2)(a) revFADP serve as the legal basis. The same applies to processing required to take pre-contractual steps.

Where processing of personal data is necessary for compliance with a legal obligation, Art. 6(1)(c) GDPR and Art. 31(1) revFADP serve as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or of a third party, Art. 6(1)(f) GDPR and Art. 31(1) revFADP serve as the legal basis.

04.Data deletion and storage period

The data subject's personal data is deleted or blocked as soon as the purpose for storage ceases to apply. Data may additionally be stored if the Swiss or European legislator has provided for this in ordinances, laws or other regulations. The data is also blocked or deleted when a prescribed storage period expires, unless there is a need for the further storage of the data for the conclusion or performance of a contract.

05.Provision of the website and log files

Each time our website is called up, our system automatically collects data and information from the computer system of the requesting device. The following data is collected:

• The user's IP address (anonymised)
• Date and time of access
• Browser type and version
• The user's operating system
• Requested URL and referrer URL

The data is stored in the log files of our hosting provider Infomaniak. This data is not stored together with other personal data of the user. Log files are deleted after 30 days.

06.Contacting us

You have several ways to get in touch with us:

• Contact form on the website: data is sent to us by email and not stored in a database. Spam protection is provided by Google reCAPTCHA v3.
• Email to enableyour@successfactor.ch
• Phone: +41 79 915 00 00
• WhatsApp: via the link on our website

Your details are stored to process the enquiry and any follow-up questions, and are deleted once the enquiry has been concluded, provided that no contractual relationship arises.

07.Cookies

Our website uses cookies. Cookies are small text files that are stored in the browser of your device. They make it possible to recognise you on subsequent visits to our website and to provide certain functions.

Strictly necessary cookies

These cookies are required for the website to work, for example for storing your choice of light or dark mode. They are set without consent; the legal basis is our legitimate interest in operating a functional website.

Analytics and tracking cookies

These cookies are only set with your explicit consent. They include Google Analytics 4. You can withdraw your consent at any time via the cookie banner.

08.Web analytics via Google Analytics

We use Google Analytics 4 (Measurement ID G-CN0XRCPYX6) to analyse user behaviour on our website, exclusively after you have given your consent. Until consent is given, Google Consent Mode v2 prevents cookies from being set and personal data from being transferred. Google Analytics 4 uses IP anonymisation by default and does not store full IP addresses. We have disabled Google Signals in the GA4 settings and limited the retention period to 14 months.

The information generated by Google Analytics is transferred to Google servers in the EU and, where applicable, to the USA, and processed there. The transfer to the USA is based on Standard Contractual Clauses and the EU-US Data Privacy Framework.

You can prevent the collection of your data by Google Analytics by installing the browser add-on to disable Google Analytics.

09.Embedded third-party services

You will find a detailed description of all services we use in the section «Which services we use» above on this page. In concrete terms, we use:

• Google reCAPTCHA v3 (spam prevention)
• Google Analytics 4 (with consent)
• Google Fonts (typefaces)
• Microsoft 365 (project data & communication)
• WhatsApp (messenger contact)
• Infomaniak (hosting and email)

10.Sharing data with third parties

Your personal data is not transferred to third parties for purposes other than those listed below. We only share your personal data with third parties if:

• you have given your explicit consent to do so,
• the disclosure is necessary to assert, exercise or defend legal claims,
• there is a legal obligation to disclose, or
• disclosure is permitted by law and necessary for processing contractual relationships with you.

11.Transfers to third countries

Some of the services we use (Google, WhatsApp, Microsoft 365) also process data outside Switzerland and the EU, in particular in the USA. We base these transfers on:

• Standard Contractual Clauses (SCC) of the EU Commission
• EU-US Data Privacy Framework for US providers that are certified
• Your explicit consent via the cookie banner

12.Your rights as a data subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and the revFADP. You have the following rights:

• Right to information: you can ask whether personal data relating to you is processed by us.
• Right to rectification: you have a right to rectification if the personal data concerning you is incorrect or incomplete.
• Right to erasure: you can request the immediate deletion of your personal data.
• Right to restriction of processing: you can request that the processing of your personal data be restricted.
• Right to data portability: you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
• Right to object: you have the right to object to the processing of your personal data at any time.
• Right to withdraw consent: you have the right to withdraw your data protection consent at any time.

To exercise these rights, simply contact us at enableyour@successfactor.ch.

13.Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. The competent authority in Switzerland is:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch

14.Data security

We use technical and organisational security measures to protect your data against manipulation, loss, destruction or access by unauthorised persons. These include:

• SSL/TLS encryption of the entire website (HTTPS)
• Encrypted mail delivery via SMTP with SSL/TLS
• Servers in Switzerland (Infomaniak)
• Regular security updates of software
• Access controls on back-end configurations
• Spam and bot protection via Google reCAPTCHA v3 and honeypot mechanisms

Our security measures are continuously improved in line with technological developments.

15.Currency and amendments to this privacy policy

This privacy policy is currently in effect and was last updated in May 2026. As we develop our website and services further, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be retrieved and printed at any time on the website at successfactor.ch/en/privacy-policy.