PRIVACY POLICY CG24 (GROUP) AG
Content
- Definitions of terms
- Scope of application
- Type of data collected, processed and used
- Purpose of data collection
- Disclosure of information to third parties
- Use of cookies
- Data processing for marketing and analysis purposes
- Interaction with social networks
- Direct marketing and online advertising
- Data security and security of transmission
- Use of Google Inc. applications by CG24
- Data retention period
- Right to be informed, rectify, erase and lodge a complaint
- Scope of application
- Contact person
- Up-to-dateness and changes to the privacy policy
CG24 Group AG (formerly CreditGate24 (Schweiz) AG) (hereinafter also CG24, we or us) attaches great importance to protecting the personal data you provide. Your trust is of great importance to us. For these reasons, the following privacy policy will provide you with information on how we ensure data protection at CG24, what types of data are collected and how the data provided is processed and used.
You are informed on our website’s home screen that you accept our privacy policy when you use our website. Please note that we will amend the privacy policy from time to time. The revised version will apply from the published effective date.
You can access the privacy policy at any time in the footer on all pages via the "Data protection" link. Any third-party websites that can be accessed via our portals are not subject to the principles set out here. We accept no responsibility or liability for the observance of data protection by third party websites.
1. Definitions of terms
Personal data: Any information relating to the personal or material circumstances of a specific (identified) or identifiable (identifiable) person. It is information that is personally identifiable and can tell something about you. For example, a person's telephone number, credit card or personal numbers, bank account details, a car number plate, appearance, customer number or address are all personal data.
Editing/processing: any handling of personal data carried out with or without the aid of automated procedures, regardless of the means and procedures used, in particular obtaining, storing, using, disclosing, archiving or destroying your data.
2. Scope of application
By using our website and, if applicable, creating a personal account, you declare that you agree with the privacy policy below and the manner in which the data is collected, processed, stored, passed on and used.
3. Type and scope of data
The type and scope of the collection and use of your data differs depending on how you use the CG24 website. A distinction is made as to whether you use the website purely for information purposes or to make use of services (e.g. register for the newsletter) and/or the protected access area. The latter is only accessible after you first register and then log in.
- Use of the website without registering
You can use a large part of our website without registering. As an unregistered user, no personal data is collected from you other than your IP address. However, our web server automatically collects computer-related data when you visit the CG24 website. This data includes the (anonymised) IP address, the type of browser software used, including settings, the date and time you access our website and the duration of your visit. When calling up Internet pages, this data is technically mandatory and is transmitted by your browser. - Collection of personal data (for registration and/or use of services)
When visiting and using our website as a registered user, we collect, store and process personal data including: - User data that you provide to us yourself when filling out forms on our website. This includes information that you provide to us when entering the registration page or when registering for the newsletter (e.g. personal details such as name, date of birth, civil status, address, telephone number, e-mail address, etc.); other information required for the use and provision of our services.
CG24 observes and complies with the principles of good faith, lawfulness, transparency, purpose limitation, accuracy, integrity, confidentiality and proportionality.
4. Purpose of the data collection
For what purpose is your data collected?
CG24 collects, stores and uses data, both personal and non-personal, for the following purposes:
- To provide and perform our services in an optimal, safe, pleasant and efficient manner;
- To efficiently administer and continuously improve our website;
- To analyse visitor or user behaviour on our website, record trends and compile statistics;
- To produce a website that is optimally tailored to your needs;
- To send newsletters as well as for (personalised) advertising measures, provided the user has given us the necessary consent;
- To carry out other measures in connection with the operation of the website;
- To fulfil CG24’s legal obligations, e.g. for creditworthiness checks, combating money laundering and terrorism financing.
5. Disclosure of information to third parties
CG24 may pass on the data collected to affiliated group companies, cooperation partners and commissioned third parties in Switzerland and abroad for the above-mentioned purposes. The respective data recipients who have access to the data collected by CG24 are obliged to observe data protection. Third-party service providers receive data only to the extent necessary and are obliged to use the data exclusively for order processing and not for any other purposes. In the case of cross-border data transfer, CG24 ensures that the data recipients ensure appropriate data protection.
However, CG24 would like to point out here that the FDPIC has, for example, deemed the USA to be a country without adequate data protection. CG24 applies its best efforts to achieve an adequate level of data protection, for example by applying standard contractual clauses approved by the FDPIC. Nevertheless, anyone using the Internet must be aware that most services are provided by globally active companies and that therefore, there is always a residual risk that data may end up in countries without adequate data protection.
Disclosure of your data to supervisory authorities, judicial authorities or other competent persons is also expressly permitted if required by applicable law.
The bilateral contractual data protection provisions between borrowers and CG24 apply notwithstanding.
6. Use of cookies
What are cookies and how are they used on our platform?
Our website uses technologies, including cookies, to collect certain information and to design the website according to your needs. The purpose of cookies is to facilitate communication and Internet use and to help make your visit to our website easier, more pleasant and more meaningful.
Cookies do not damage your computer's hard drive, nor do they transmit personal user data to us.
Cookies are small text files that are placed on your local access device (PC, smartphone, tablet or similar) via your browser when you visit the CG24 website and temporarily or permanently store specific information related to the device. This includes, for example, the recording of the browser type, the pages visited or language settings. This enables our web server to recognise the user's access device on the next visit as soon as a connection to your browser has been established. The cookie thus helps to provide and present an individualised website tailored to the user's needs. This enables you to find your way around our website more quickly on a subsequent visit and to use it more efficiently. It is important to note that the cookie does not identify the person, but only the access device.
CG24 also uses cookie technology for statistical, analytical and marketing purposes. This enables us to identify the usage habits of our visitors and registered users, the type and number of visits to our website, to record trends and to compile statistics. This helps us to recognise where improvements can be made to our website and to be able to ensure continuous optimisation with regard to user-friendliness, speed and performance.
You can set your cookie preferences via our cookie banner. You control the storage of cookies on your access device and can also reject them. Furthermore, you are also able to delete cookies that have already been set. You can input your preferred settings in the menu bar of your browser. However, please note that deactivating cookies may result in restricted access to our website.
7. Data processing for marketing/analysis purposes
We use various web analysis tools on our website (including Google Analytics, Google AdWords and Google Tag Manager) to record and evaluate the usage behaviour of our visitors by means of tracking data. We work together with third-party companies that help us to collect this data. Technically, these tools also work with cookies. The data generated by the tracking code and the cookie about your visit to our website may be transmitted to third-party service providers for analysis purposes. Cookies used to collect tracking data do not contain any personal data, i.e. the IP address is shortened immediately on your access device and thus anonymised. This ensures anonymised transmission and storage of the data. This data is collected for the purpose of continuously optimising our website and improving advertising measures, as well as providing an even more secure and needs-based service. Detailed information about the data collected by the respective providers can be found on the respective website of the third-party provider (please find a description as well as the link immediately below). You can prevent your data being collected with the help of add-ons.
- Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google, Inc. ("Google") and create a Google user ID (more information: https://support.google.com/analytics/answer/3123662). Google Analytics uses cookies that enable an analysis of your use of the website and the mobile application. The information generated by the cookie about your use of the website and the mobile application is usually transmitted to a Google server and stored there. However, by activating IP anonymisation on our website and mobile application, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The full IP address qualifies as a personal data file. According to the FDPIC, the USA is considered a country with insufficient data protection, and the transfer of personal data to such a country would not be permitted without further ado. Therefore, Google has committed itself, at least contractually, to increased data protection with standard contractual clauses approved by the FDPIC and thus ensures adequate data protection.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website and the mobile application, compiling reports on website and application activity and providing other services relating to website activity, application activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website or mobile application. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website and the mobile application (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB
- Use of Google Remarketing
This website uses the remarketing function of Google Inc. ("Google"). This function is used to present interest-based advertisements to website visitors as part of the Google advertising network. The website visitor's browser stores cookies: text files that are stored on your computer and enable the visitor to be recognised when they visit websites that belong to Google's advertising network. On these pages, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function. According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google's remarketing function, you can deactivate it by inputting the appropriate settings at https://support.google.com/accounts/answer/2662856#everywhere. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/choices/. Further information on Google Remarketing and Google's privacy policy can be found at: http://www.google.com/privacy/ads/
- Use of Google AdWords conversion tracking
We use the online advertising programme "Google AdWords" and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is an analysis service provided by Google Inc. When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification.
If you visit certain web pages on our website and the cookie has not yet expired, we and Google will be able to recognise that you have clicked on the ad and have been redirected to that page. Each Google AdWords customer receives a different cookie. Thus, there is no way that cookies can be tracked across AdWords customers' websites.
The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Here, the customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking, you can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics. Further information as well as Google's privacy policy can be found at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/
- from Google Tag Manager
We use the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags (keywords) through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
8. Interaction with social networks
We use social plug-ins (hereinafter referred to as plug-ins) from social networks on the Internet. These plug-ins are recognisable on our website by the logo corresponding to the network.
When you call up a website with such a plug-in, a direct connection is established with the servers of the corresponding social network. It is important to note that we use a two-click solution of the plug-in for your protection. This means that the plug-ins on our website are initially inactive. Only when you click on one of the logos will the corresponding plug-in be activated and a connection, as well as a data transmission that you are visiting our website, among other things, will be granted to the third-party provider. If you are also logged in to this network with your username and password at this time, it is possible that all interactions with the plug-in concerning your profile will be assigned to you. For example, content from our website can be linked to your profile. Other users of the network may learn of such interactions. CG24 is not affiliated with or responsible in any way for the third-party operators whose websites are linked via plug-ins. We have no control over, and accept no responsibility or liability for, the use of personal data collected by third parties in this way. If you are not a member of the social network or are not logged in there, it is still possible that your IP address will be transmitted and stored.
9. Direct marketing and online advertising
With your registration and/or use of services on our portal, we may also use your personal data for personalised advertising measures. This is also the case if you register for the newsletter on our website. This concerns both the personalisation of advertising by e-mail, such as e-mails with general information or of an advertising nature (newsletter), and the delivery of personalised content and advertising on our portal. For this purpose, we may automatically evaluate information known to us about your usage behaviour on our portals so that we can avoid sending you inappropriate advertising.
By registering on our portal, you can also subscribe to one of our newsletters and your e-mail address can be used accordingly for our own advertising purposes until you unsubscribe from the corresponding newsletter. At the end of each e-mail sent, you will find a link that allows you to unsubscribe from the newsletter at any time.
You can also unsubscribe from the newsletter at any time by sending an e-mail to info@cg24.com.
We may commission third parties with the technical processing of advertising measures and advertising for ourselves and may pass on your data for this purpose.
10. Data security and security of transmission
The data collected by CG24 is subject to the highest standards of confidentiality and treated with the utmost care and discretion. CG24 has implemented adequate technical and organisational measures to protect against unauthorised access, destruction, misuse, disclosure and/or manipulation. CG24 uses servers in Switzerland or Europe to store your data. Their data centres meet the highest security requirements and are ISO 27001-certified. Furthermore, we would like to point out that we also take internal company data protection seriously. All our employees and the service companies we commission are committed to data protection and confidentiality and are informed about the legal requirements.
Communication via the website is carried out using secure SSL encryption (Secure Socket Layer). Please note that it is nevertheless possible that data which you transmit to CG24 via the Internet or an e-mail service can be viewed by third parties without permission.
However, CG24 can assure you that your data will be handled in accordance with the applicable data protection regulations and that further measures will be taken to protect against unauthorised access by third parties. Nevertheless, we cannot guarantee the confidentiality and complete protection of the messages and therefore cannot accept any liability.
If you are registered as a user with CG24, access to your account is only possible after entering your personal password. You should always treat payment and access information confidentially and close the browser window when you have finished communicating with us, especially if you are using the computer together with others.
11. Use of Google Inc. applications by CG24
CG24 is itself a user of Google Inc. ("Google") applications such as Google Workspace, Drive, Sheets, etc. As a user, CG24 is bound by the applicable terms of use of Google and has no influence on their respective changes by Google.
CG24 is giving official notice here that it uses Google applications. Your data may also be affected by this.
CG24 ensures in its own CG24 user profile of Google that only Google servers in Europe are used.
By using our website and, if applicable, creating a personal account, you expressly agree to CG24 using Google applications.
You can find Google's privacy policy and terms of use here: https://policies.google.com/privacy?hl=en
12. Data retention period
We only retain your data for as long as is legally necessary or in accordance with the purpose of processing. In the case of analyses, we store your data until the analysis is completed. If we store data on the basis of a contractual relationship with you, this data will remain stored at least as long as the contractual relationship exists and at the longest as long as limitation periods for possible claims by us run or legal or contractual retention obligations exist.
13. Right to be informed, rectify, erase and lodge a complaint
You have the right to assert your data protection rights at any time and to request information about whether and which personal data about you are being processed by us. You can also have your personal data rectified, blocked or, if technically possible, erased at any time by sending written notification and appropriate proof of your identity to: info@cg24.com
Please note that even after your request for the blocking or erasure of your personal data, we must retain some of this data within the scope of our legal or contractual retention obligations (e.g. for billing purposes) and in this case only block your personal data to the extent necessary for this purpose. Furthermore, erasing your personal data may mean that you can no longer obtain or use the services you have registered for. Under certain conditions, you have the right to have us pass on your personal data to you or to a third party designated by you in a common format.
You also have the right to lodge a complaint with the competent supervisory authority regarding data processing. You can do this with the supervisory authority at your place of residence, place of work or the place of the alleged data protection breach. You can find the Swiss data protection authority with its own website at the following link: Data protection - Switzerland
14. Scope of application
This privacy policy applies to all data we receive as a result of your use of our website. It does not cover the content of third-party websites, even if you access those third-party websites via links on our website. We have no control over the content, data processing and handling of third-party websites and therefore cannot accept any responsibility for them. We ask you to observe the specific privacy policies of the respective third-party websites.
When processing your personal data, CG24 is subject to Swiss data protection law. Other data protection laws apply should your data be processed abroad (e.g. by a commissioned service provider).
15. Contact person
If you have any questions about data protection on our website, would like to request information or would like to request the erasure of your data, please contact our contact person for data protection law by e-mailing info@cg24.com or writing to:
CG24 Group AG
Data Protection
Baslerstrasse 60
8048 Zurich
16. Up-to-dateness and changes to the privacy policy
The current privacy policy can also be accessed and printed out by you at any time on our website. The original privacy policy is in German. The translated versions are only provided for better understanding. In the event of any dispute, the German text shall prevail.
Version December 2021