Privacy

Privacy policy

1. Scope of the privacy policy

This privacy policy at www.arete-ethik.ch applies to the use of our website.

Swiss data protection law (DSG) and the revised Swiss Data Protection Act (revDSG) apply. Specific reference is made to any additional applicable law from the European General Data Protection Regulation (GDPR).

1. Processing of personal data; nature, purpose and use thereof
2. Accessing our website

When you visit our website www.arete-ethik.ch, information is temporarily stored in log files on our server. This is information that the browser on your end device automatically sends, such as

• IP address of the contacting device;
• Date and time;
• the web browser and operating system used and other device information;
• Language and version of the browser software;
• URL of the requested page;
• Referrer URL;
• the amount of personal data transferred in each case.

We process the aforementioned data for the following purposes:

• Connection establishment of the website;
• Use of our website;
• System security and stability.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR and 13 para. 1 FADP. We use the automatically collected personal data to fulfill the following purposes:

• to enable the display, operation and functionality of the portal;
• ensure the stability and security of the system;
• to improve and protect our services;
• for statistical purposes in the event of attacks on the network infrastructure on which the website is made available.

1. Use of cookies

Cookies are used on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. If you access our website, a cookie may be stored on your operating system. This cookie enables your browser to be uniquely identified when you return to our website.

We use these cookies to ensure a user-friendly design of our website. Some elements of our website require that your browser can be identified even after a page change. The following data is stored and transmitted in cookies:

• Language settings;
• Log-in information.

These cookies simplify the use of our website for you. Without the cookies, some functions of our website could not be offered, such as the adoption of language settings and the remembering of search terms. Our legitimate interest in processing your personal data also lies in these purposes. The user data collected by these cookies is not used to create user profiles.

All cookies are stored on your computer and transmitted from it to our website. As a user of our website, you therefore have control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. However, it is possible that not all functions of our website can be used to their full extent if you deactivate cookies for our website.

1. Personal data that you transmit to us

Contact form

There is a contact form on our website which you can use to contact us electronically. If you use this option, the data you enter as well as the date and time of the inquiry will be transmitted to us and stored. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

E-mail contact

If you contact us via the e-mail address provided, the personal data transmitted with your e-mail will be stored. The data will be used to process the conversation and for evidence purposes. Our legitimate interest in processing your personal data also lies in these purposes. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

Purpose of personal data processing and legal basis

Personal data may be processed if the data subject gives consent (Art. 6 para. 1 lit. a GDPR and Art. 13 para. 1 FADP), if the processing is justified by an overriding private or public interest (Art. 6 para. 1 lit. e and f GDPR and 13 para. 1 FADP) or by law (Art. 6 para. 1 lit. c GDPR and 13 para. 1 FADP). An overriding interest is considered in particular if personal data is processed in direct connection with the conclusion or execution of a contract (Art. 6 para. 1 lit. b GDPR and 13 para. 2 lit. a FADP).

We process your personal data in order to conclude a contract with you and to provide our services to you in the best possible way and to comply with legal obligations.

Duration of personal data storage

Your personal data will be stored for as long as is necessary to achieve the purposes for which it was collected. With regard to legal obligations, reference is made in particular to the ten-year retention period for transactions carried out. Your personal data will also be stored if we have a legitimate interest in doing so, for example to enforce our rights.

III Disclosure of data to third parties

Arete Ethik Invest AG may pass on your personal data to third parties, for example to:

• Service providers who process personal data on behalf of and on the instructions of Arete Ethik Invest AG (so-called processors, e.g. in the area of IT hosting and support);
• Service providers, other business partners and auxiliary persons (e.g. lawyers, trustees, suppliers, etc.);
• Payment service providers or credit institutions;
• Shipping company;
• Authorities, official bodies, courts or other state institutions;
• other parties in potential or actual legal proceedings.

The transfer to third parties is necessary in order to fulfill our services for you in the best possible way and takes place on the basis of Art. 13 para. 1 DSG and Art. 6 para. 1 lit. b and f. GDPR.

Other cases are also conceivable in which your data is transferred to third parties in order to safeguard our legitimate interests or due to legal regulations. In any case, we will ensure that these third parties provide adequate data protection.

If we transfer your personal data abroad, we will ensure that adequate data protection is guaranteed, especially if data is transferred to countries that do not guarantee an adequate level of protection.

1. Protection of your personal data

Your personal data is protected by us against unauthorized processing by means of appropriate technical measures such as data security systems and data security mechanisms as well as appropriate organizational measures. Your personal data should be protected against the following risks in particular:

• unauthorized or accidental destruction;
• accidental loss;
• technical errors;
• Forgery, theft or unlawful use;
• unauthorized modification, copying, access or other unauthorized processing.

1. Your rights

You have the right:

• to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details (Art. 15 GDPR). In the event of a disproportionate effort, we reserve the right to request proof of identity and the assumption of the actual costs in advance;
• to immediately request the correction of incorrect or incomplete personal data stored by us (Art. 16 GDPR);
• to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims (Art. 17 GDPR);
• to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR (Art. 18 GDPR);
• to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller (Art. 20 GDPR)
• to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future (Art. 7 (3) GDPR);
• to lodge a complaint with a supervisory authority (see below) (Art. 77 GDPR).

1. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

VII Contact details

This privacy policy applies to data processing by

VIII. Up-to-dateness and amendment of this privacy policy

We may change or adapt this privacy policy at any time. The current privacy policy can be found at www.arete-ethik.ch.

Arete Ethik Invest AG, Talstrasse 58, 8001 Zurich, Switzerland

Zurich, January 20, 2021