Privacy Policy and Impressum
honesto AG
Soodstrasse 59 Äulestrasse 2
8134 Adliswil 9490 Vaduz
Switzerland Liechtenstein
Email: info@honesto.swiss
Phone: +41 43 377 12 70
We are available for you on weekdays from 9:00 AM to 6:00 PM.
CH: Registered in the Swiss Commercial Register under the company name honesto AG with the company identification number (UID) CH-308.013.290.
EU: Entered in the commercial register of the Principality of Liechtenstein under the company Honesto AG and the company identification number (UID) FL-0002.619.011-6.
Privacy Policy
Version valid from 24 July 2023 (based on DSAT.ch)
With this Privacy Policy, honesto AG, a company registered in Switzerland with the address Soodstrasse 59, 8134 Adliswil (hereinafter “honesto”, “we” or “us”), describes how we collect and process personal data. This Privacy Policy is not an exhaustive description of our data processing. Other privacy policies, general terms and conditions, participation conditions, or similar documents may apply in specific circumstances.
Please read this Privacy Policy carefully and make sure you understand it. By using the website for the first time, you are deemed to have accepted it.
If you do not accept and agree to this Privacy Policy, you must immediately stop using the website.
The term “personal data” in this Privacy Policy refers to all information that identifies a person or could reasonably be used to identify a person. If you provide us with personal data of other persons (e.g., family members, colleagues), please ensure they are aware of this Privacy Policy and only share their data with us if you are authorized and the information is correct.
This Privacy Policy complies with the EU General Data Protection Regulation (“GDPR”).
Controller
The “Controller” for data processing under this Privacy Policy is honesto, unless we inform you otherwise in specific cases. You can contact us regarding all data protection concerns:
honesto AG, Soodstrasse 59, 8134 Adliswil, Switzerland, info@honesto.swiss.
Collection and Processing of Personal Data
We primarily process personal data that we receive from our customers, business partners, and other individuals in the course of our business relationships, or that we collect from users while operating our websites, apps, and other applications.
Where permitted, we may obtain certain personal data from publicly accessible sources or receive such data from affiliated companies, authorities, or other third parties.
For credit checks, your personal data may be forwarded to and stored by Intrum AG, Schwerzenbach.
You must provide us with all personal data required for establishing and fulfilling a business relationship and for fulfilling our contractual obligations. Without this information, we are generally unable to enter into or perform a contract with you (or the entity or person you represent). Additionally, the website cannot be used unless certain information is disclosed (e.g., IP address).
Data Security and Data Transfer
We have implemented appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse.
In the course of our business activities and as legally permitted, we may transfer data to third parties if we deem it appropriate for them to process the data on our behalf or for their own purposes. The following categories of recipients may be affected (“Recipients”):
– Our service providers (internal or external, e.g., banks, insurers), including processors (e.g., IT providers);
– Dealers, suppliers, subcontractors, and other business partners;
– Customers;
– Domestic and foreign authorities or courts;
– Media;
– The public, including users of our websites and social media;
– Competitors, industry organizations, associations, and other bodies;
– Buyers or parties interested in acquiring business units, companies, or other parts of honesto;
– Other parties in potential or pending legal proceedings;
– Affiliated companies of honesto.
Some recipients may be located in Switzerland, but they may also be in any country worldwide, especially in Liechtenstein, Europe, and the USA, depending on where our service providers are located.
If we transfer data to a country without adequate legal data protection, we ensure an adequate level of protection as required by law, e.g., through standard contractual clauses or binding corporate rules, or rely on legal exceptions such as consent, contract performance, legal claims, public interests, published personal data, or protection of integrity.
Purpose of Data Processing and Legal Basis
We primarily use collected data to conclude and fulfill contracts with our customers and business partners, especially regarding the use of our “honesto App” and procuring products and services from our suppliers and subcontractors, as well as to comply with legal obligations.
Additionally, we may process personal data for the following purposes under applicable law:
– Providing and developing our products, services, websites, apps, and other platforms;
– Communicating with third parties and handling their inquiries;
– Reviewing and optimizing procedures for needs assessment and direct customer communication, including acquiring personal data from public sources for customer acquisition;
– Advertising and marketing (you can opt-out of marketing communications at any time);
– Market and opinion research, media monitoring;
– Asserting legal claims and defending against legal disputes and administrative proceedings;
– Preventing and investigating crimes and other misconduct (e.g., internal investigations, fraud prevention analysis).
If you have given consent for specific data processing, we process your data based on that consent. Consent can be revoked at any time, but this does not affect data processed before the revocation.
Your Rights
You have the right under applicable law to access, correct, and delete your personal data, restrict or object to processing, and receive certain personal data in a portable format.
Please note:
– We may enforce legal limitations on these rights.
– Exercising these rights may conflict with contractual obligations and lead to consequences like contract termination or costs.
Proof of identity is usually required to exercise these rights. Contact us at the address provided above.
You also have the right to enforce your rights in court or lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch/edoeb/en/home.html.
Cookies
We may use “cookies” and similar technologies on our websites. A cookie is a small text file stored on your computer or mobile device when visiting our website.
We use session cookies (deleted after the session) and permanent cookies (stored for a specific period).
You can configure your browser to block or delete cookies. If cookies are blocked, some functionalities may no longer be available.
By using our website and agreeing to receive newsletters and marketing emails, you consent to the use of such technologies.
We may also use visible and invisible image files in newsletters to determine whether and when you opened the email. You can disable this in your email program settings.
Google Analytics
We use Google Analytics or similar services integrated via Google Tag Manager. These services allow us to measure and evaluate website usage (on an anonymized basis).
Permanent cookies are used for this purpose. The service provider does not receive personal data from us but may track your website usage and combine it with other data.
If you are registered with the service provider, your identity is known to them, and your data is processed under their privacy policies.
Social Media
We may use plug-ins from social networks such as Facebook, Twitter, YouTube, Google+, Pinterest, or Instagram. These are visible (usually via icons) and are deactivated by default.
By activating them, the respective network operators may record your visit to our site and use this information according to their privacy policies. We do not receive any information about you from these operators.
Retention Periods for Your Personal Data
We retain your personal data as long as necessary to fulfill our contractual and legal obligations or other processing purposes.
Personal data may be stored beyond this period for legal retention or documentation obligations or for legitimate business interests (e.g., evidence and documentation purposes).
Once no longer needed, your data will be deleted or anonymized. Operational data (e.g., system logs) usually have shorter retention periods of up to twelve months.
Profiling and Automated Individual Decisions
We may partially process your personal data automatically to evaluate personal aspects (profiling), e.g., for marketing and customer advice purposes.
We generally do not use fully automated individual decision-making (such as under Article 22 GDPR) when establishing or carrying out a business relationship.
Changes to This Privacy Policy
We may change this Privacy Policy at any time without prior notice. The current version published on our website applies.
If this Privacy Policy is part of an agreement with you, we will notify you of changes via email or other appropriate means.