Privacy Policy - cordictech

We, cordicTech AG (hereinafter “we” or “us”), take the protection of your data seriously. This privacy policy applies to our websites and social media profiles that contain personal data. In this privacy policy, we explain how we process and protect your data.

Name and contact details of the persons responsible for processing as well as the company data protection officers

This privacy policy applies to the processing of your data by:

cordicTech AG, Rehhalde 18, 6332 Hagendorn CH

Email: info@cordictech.ch

You can reach our Data Protection Officer at info@cordictech.ch

Collection and Storage of Personal Data, and the Nature and Purpose of Their Use

When you access our website at www.cordictech.ch, your browser automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following data is collected without your intervention and stored until automated deletion:

IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

We process the aforementioned data for the following purposes:

Ensuring a smooth connection to the website
Ensuring comfortable use of our website
Evaluating system security and stability
Other administrative purposes

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes listed above for data collection. We do not use the collected data to draw conclusions about your person.

During your visit to our website, we use cookies and analytics services. Detailed information is provided under the sections Cookies and Analytics Tools in this privacy policy.

We use https://wordpress.com/ for presenting our website. The applicable privacy policies of WordPress can be found at https://wordpress.com/de/ and https://automattic.com/de/privacy/.

Collection of Access Data and Log Files

In the context of providing our hosting services, we may process data related to users of our online offerings that arises from usage and communication. This typically includes the IP address, which is necessary to deliver content from online services to browsers, and any inputs made within our online offerings or websites.

We (or our web hosting provider) collect data on each access to the server (so-called server log files). Server log files may include the address and name of the accessed web pages and files, date and time of access, data volumes transferred, success messages for access, browser type and version, user’s operating system, referrer URL (the previously visited page), and generally IP addresses and the requesting provider.

Server log files are used for security purposes, such as preventing server overloads (especially in the case of malicious attacks, such as DDoS attacks), and to ensure server load and stability.

Processed Data Types: Content data (e.g., inputs in online forms), usage data (e.g., visited web pages, interest in content, access times), meta/communication data (e.g., device information, IP addresses). Affected Individuals: Users (e.g., website visitors, online service users).

Purpose of Processing: Providing our online offerings and user-friendliness.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Purpose Changes and Data Retention Period

Processing of your personal data for purposes other than those described occurs only if permitted by law or if you have consented to the changed purpose of data processing. In the case of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes before further processing and provide you with all relevant information.

We delete or anonymize your personal data as soon as it is no longer necessary for the purposes for which we collected or used it as described above. Unless otherwise specified, we retain your personal data for the duration of the use or contract relationship via the web app plus an additional period of 7 days, during which we keep backup copies after deletion, provided these data are not needed longer for criminal prosecution or for securing, asserting, or enforcing legal claims.

Specific information in this privacy policy or legal requirements for the retention and deletion of personal data, especially those we must retain for tax reasons, remain unaffected.

Usage Of Contact Form

We offer you the option to contact us via a form provided on our website. In this process, providing a valid email address and your first and last name is required so that we know who is making the request and can respond accordingly. In an optional free-text field, you may also voluntarily provide information on why you wish to contact cordicTech AG.

Data processing in this case is carried out for the purpose of contacting us based on your voluntarily given consent under Article 6(1)(a) GDPR. If you provide information in the free-text field that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, data processing will be based on your voluntary and explicit consent under Article 9(2)(a) GDPR.

Once we have completed handling your request, the personal data collected through the contact form will be automatically deleted.

Data Sharing

We do not disclose your personal data to third parties or processors for purposes other than those outlined below.

We only share your personal data with third parties if:

You have explicitly consented to it under Article 6(1)(a) GDPR,
The disclosure of your data is necessary under Article 6(1)(f) GDPR to assert, exercise, or defend legal claims, and we have no reason to believe that you have a prevailing interest in not disclosing your data,
We are legally required to disclose your data under Article 6(1)(c) GDPR, or
Such disclosure is legally permissible and necessary under Article 6(1)(b) GDPR for the fulfillment of contractual relationships with you.

Data Transfer to Third Countries

Your personal data is generally processed by us or companies in Europe, where the General Data Protection Regulation (GDPR) applies. If your personal data is ever processed by third parties outside the European Union or the European Economic Area, these companies must meet the specific requirements of Articles 44 et seq. GDPR. This means that third parties processing your data must adhere to special guarantees or enter into officially recognized special contractual obligations, known as “Standard Contractual Clauses.”

Cookies

We use cookies on our website. Cookies are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your device and do not contain viruses, trojans, or other malicious software.

A cookie stores information related to the specific device used. However, we cannot directly identify you through cookies.

We use cookies to make your experience on our site more enjoyable. This includes using session cookies, which show us that you have visited certain pages of our website. Session cookies are automatically deleted when you leave our site.

Additionally, we use temporary cookies to optimize user experience, which are stored on your device for a specific period. If you visit our site again, these cookies allow us to recognize that you have visited before and remember your previous inputs and settings.

For statistical purposes and to analyze and optimize our offerings (see Analytics Tools), we also use cookies. These cookies help us recognize that you have previously visited our site. They are automatically deleted after a defined period. You can also delete cookies yourself at any time through your browser’s security settings.

The data processed through cookies is necessary to protect our legitimate interests and those of third parties under Article 6(1)(f) GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to prevent cookies from being stored on your device or to notify you before a new cookie is set. Disabling cookies entirely may result in not being able to use all functions of our website.

Google

Google ReCAPTCHA

We use the anti-spam function “reCAPTCHA” from Google (Google Ireland Limited, Registration No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website and in email communications. By using “reCAPTCHA” in our forms, we can determine whether data input is performed by a human or a machine (robot).

When using “reCAPTCHA,” your IP address and possibly other required data may be transmitted to Google servers in the USA.

The purpose of processing this data is to prevent spam and abuse and to optimize our website. The legal basis for this is our legitimate interest in protecting our web offerings from abusive automated spying and spam, under Article 6(1)(f) GDPR.

For more information, visit Google’s ReCAPTCHA page at https://www.google.com/recaptcha/ and Google’s privacy policy at https://policies.google.com/privacy.

Fonts

The fonts on this website are installed locally.

Web Analytics, Monitoring, and Optimization

Web analytics (also known as “reach measurement”) is used to evaluate visitor flows to our online offerings and can include pseudonymous data such as behavior, interests, or demographic information about visitors, like age or gender. Reach measurement helps us understand when our online offering or its features or content are most frequently used or to encourage repeated use. It also allows us to identify areas needing optimization.

In addition to web analytics, we may use testing procedures to test and optimize different versions of our online offering or its components.

For these purposes, user profiles may be created and stored in a file (a “cookie”) or similar methods may be used. These can include viewed content, visited web pages, used elements, and technical information such as the browser used, computer system, and usage times. If users consent to the collection of location data, this may also be processed depending on the provider.

IP addresses are also stored, but we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, no clear personal data (e.g., email addresses or names) is stored in the context of web analytics, A/B testing, and optimization, only pseudonymous data. We and the providers of the software do not know the actual identity of users, only the pseudonymous data stored in their profiles.

Legal Basis: If we ask users for consent to use third-party services, the legal basis for processing data is consent. Otherwise, data processing is based on our legitimate interests (i.e., efficient, economic, and user-friendly services). Please refer to the information on the use of cookies in this privacy policy.

Processed Data Types: Usage data (e.g., visited web pages, interest in content, access times), Meta/communication data (e.g., device information, IP addresses).

Affected Persons: Users (e.g., website visitors, online service users).

Processing Purposes: Reach measurement (e.g., access statistics, recognition of recurring visitors), user-related profiles (creating user profiles).

Security Measures: IP masking (pseudonymization of the IP address).

Legal Bases: Consent (Article 6(1)(a) GDPR), Legitimate interests (Article 6(1)(f) GDPR).

Rights

Rights of Affected Individuals

If we process your personal data, you have the following rights:

Under Article 15 GDPR, you can request information about your personal data processed by us. This includes data processing purposes, the categories of personal data, categories of recipients, planned storage duration, rights to rectification, deletion, restriction of processing, objection, the existence of a complaint right, the origin of your data if not collected from you, and the existence of automated decision-making including profiling and relevant details.
Under Article 16 GDPR, you can request immediate correction or completion of your personal data stored with us.
Under Article 17 GDPR, you can request deletion of your personal data, provided the processing is not required for the exercise of the right to freedom of expression and information, compliance with a legal obligation, public interest, or for the assertion, exercise, or defense of legal claims.
Article 18 GDPR gives you the right to restrict the processing of your personal data under certain conditions, such as disputing data accuracy, unlawful processing, data no longer needed, or if you have objected to processing under Article 21 GDPR.
You can request your personal data to be provided to you in a structured, commonly used, and machine-readable format, or transmitted to another controller under Article 20 GDPR.
If you wish to lodge a complaint, you can do so with a supervisory authority under Article 77 GDPR. The competent authority is usually the one responsible for your place of residence or our business location.

Right to Withdraw Consent and Objection

If we process your personal data based on legitimate interests under Article 6(1)(f) GDPR, you can object to the processing under Article 21 GDPR if you have reasons arising from your specific situation or if your objection is against direct marketing. If the reasons are related to your specific situation, please also provide reasons for your objection so we can assess it. If your objection is against advertising, no justification is needed.
If you have consented to data processing under Article 6(1)(a) GDPR, you can withdraw your consent at any time with future effect (Article 7(3) GDPR). We must stop processing data based on consent from the moment of withdrawal.
To exercise your right of withdrawal or objection, you only need to send an email to info@cordictech.ch. There are no costs associated with exercising this right.