Privacy Policy

This privacy policy is provided in several languages solely for the convenience of our visitors. In the event of discrepancies, contradictions or questions of interpretation between the language versions, the German version shall prevail.

1. Controller

The controller responsible for data processing on this website is:
aePlus GmbH, Sinserstrasse 67, 6330 Cham, Switzerland
E-mail: privacy@aeplus.ch

We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the European General Data Protection Regulation (GDPR).

2. Hosting and Server Logs

Our website is hosted on servers in the EU (Finland). When the website is accessed, server log data is processed for technical reasons (IP address, date and time, page accessed, browser and operating system information). This data serves the operation and security of the website.

3. Cookies & Consent

When you first visit our website, we ask for your consent for the categories Analytics and Marketing. The same applies when you first open a link from one of our e-mails. Strictly necessary storage, such as session cookies and the random identifier used to record your consent decision, is always active and cannot be deselected. Beyond this, we do not set any identifying cookies without your consent. Usage is then recorded without persistent identifiers that would allow recognition. You can adjust or withdraw your consent at any time with effect for the future: via the «Cookie settings» link in the footer of our website, by contacting us (Section 6), or by deleting your browser cookies. In that case, the consent prompt will appear again.

4. Data Processing by Us

4.1 Visitor Tracking & Web Analytics (First-Party)

We operate our own tracking on our servers. It helps us understand how our website and portals are used, and enables us to identify and serve prospective clients. Without consent, usage is recorded without persistent identifiers that would allow recognition. With your Analytics consent, we set cookies containing random identifiers (valid for 24 months). These link your visits across our subdomains. We also record clicks on links in our e-mails. In addition, we use self-hosted web analytics software with its own cookies, running entirely on our servers. We can attribute its visit data to the profile via the same random identifier. Your data is attributed to you as a person or to your organisation only once you actively provide your e-mail address or, after giving consent, click a link sent to you personally. From this data, we create usage and interest profiles for analysis and sales support. We do not make decisions based solely on automated processing that would have legal or similarly significant effects. We retain the data until you withdraw your consent or request deletion (Section 6). Subdomains of our website that we provide for clients are analysed under this section as well. We may make the data and analyses collected there available to the respective client, in varying levels of detail depending on the agreement, up to and including individual visitor profiles, and also in return for payment. The recipient is always limited to the client for whose subdomain the data was collected. Beyond this, we do not share tracking data.

4.2 Contact, Access Form and Client Portals

When you use our contact form, we use the information you provide to respond to your enquiry and to serve you afterwards. If you request in-depth content via our access form, we store your e-mail address and the confirmation status (double opt-in) and link them to your visitor profile (Section 4.1). This data is stored in our own, self-operated systems. System e-mails are sent via e-mail providers commissioned by us, with processing in Switzerland or the EU/EEA. In all other respects, Section 5.1 applies. When you sign in to one of our client portals, we additionally process your login data in order to provide the portal. Business correspondence is retained in accordance with statutory retention obligations.

5. Third-Party Services

5.1 Microsoft 365 (Appointment Booking and E-mail)

For our business communication and online appointment booking, we use Microsoft 365 services provided by Microsoft Ireland Operations Ltd. (Ireland). Our booking page embeds Microsoft Bookings. When you open this page, data is transmitted to Microsoft for technical reasons, including your IP address and browser information. When you make a booking, your booking details are transmitted as well. E-mails that you send to us or receive from us are also processed via Microsoft systems. Data may be transferred to the USA. Such transfers are based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework, including its Swiss extension (Swiss-U.S. Data Privacy Framework). Details: Microsoft Privacy Statement.

5.2 LinkedIn Insight Tag

With your Marketing consent, we use the Insight Tag of LinkedIn Ireland Unlimited Company (Ireland) for conversion measurement and audience-based advertising (retargeting). In doing so, data may be transferred to LinkedIn Corporation in the USA. LinkedIn bases such transfers on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework, including its Swiss extension (Swiss-U.S. Data Privacy Framework). Details: LinkedIn Privacy Policy.

5.3 Leadinfo

With your Marketing consent, we use Leadinfo B.V. (Netherlands) to identify the company from which our website is being visited. For this purpose, the IP address is technically processed and matched against a company database. Only companies are identified, not individual private persons. Processing takes place in the EU. Details: Leadinfo Privacy Statement.

6. Your Rights

You have the right to obtain information about the data stored about you, as well as the rights to rectification, erasure, restriction of processing and data portability. You may withdraw any consent at any time with effect for the future. You may also object at any time to the processing of your data for direct marketing. To exercise these rights, please contact privacy@aeplus.ch. We implement deletion requests in our productive systems, unless statutory retention obligations or overriding grounds prevent this. Backup copies are overwritten as part of the regular backup cycles. You also have the right to lodge a complaint with the competent supervisory authority.

7. Changes

We may amend this privacy policy at any time. In the event of substantial changes to our data processing, we will ask for your consent again. The version published on this page applies. The version number and effective date are shown at the top of this page.