Elios, respects the privacy of Personal Data and is committed to protecting Personal Data. This Data Protection and Privacy Policy (this “Policy”) describes the policies and procedures Elios has implemented to protect Personal Data Processed by Elios in accordance with applicable Data Protection Laws.
Elios has voluntarily opted to apply the protections and obligations outlined in this Policy to all Data Subjects. However, such protections and obligations may be beyond the legal requirements of the jurisdiction of certain Data Subjects. Data Protection Laws vary widely across jurisdictions and while Elios will strive to meet this Policy for all Data Subjects, the Data Protection Laws for the Data Subject ultimately govern the protections conferred in the specific jurisdiction applicable to that Data Subject, and this Policy does not confer any rights beyond those granted by the relevant Data Protection Laws.
This Policy describes how Elios collects and uses Personal Data, the circumstances under which Elios may share Personal Data, the applicable rights of Data Subjects, and Elios’s technical and physical safeguards to protect the security of Personal Data.
“Controller” means a natural or legal person, public authority, agency, or other body that, independently or jointly with others, determines the purpose and means of Processing Personal Data, as defined in Data Protection Laws. Controller shall refer to Elios, and with regard to certain Processes, Elios may act as joint Controller with a third-party.
“Data Protection Laws” refer to applicable privacy legislations, regulations, or codes issued by data protection regulators.
“Data Subject” means a natural person who can be identified, directly or indirectly, by reference to their Personal Data.
“Personal Data” means any information attributable to an identified or identifiable natural person (a Data Subject), as defined in Data Protection Laws. Under the current Swiss Federal Data Protection Act Personal Data also includes information relating to legal entities. Personal Data does not include data where the identity has been removed (anonymous data). Personal Data shall encompass Special Category Data. Such information includes, but is not limited to:
“Process” or “Processing” or “Processed” or “Processes” means, as applicable, any operation or set of operations performed upon Personal Data, whether or not by automatic means, such as collecting, recording, using, organizing, structuring, storing, adapting or altering, retrieving, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing, or purging.
“Processor” means a natural or legal person, public authority, agency, or other body that Processes Personal Data on behalf of a Controller, as defined in Data Protection Laws. A Processors’ activities are limited to the more “technical” aspects of a Process and do not include the exercise of professional judgment or significant decision-making in relation to Personal Data. Processors may include third-party service providers, applications, or agencies utilized by Elios in the course of business.
“Special Category Data” means Personal Data revealing racial or ethnic origin, criminal history, political opinions, religious or philosophical beliefs, sexual orientation, trade union membership, or health, genetic, or biometric data, or data pertaining to a child or minor.
Elios is committed to processing data in accordance with its responsibilities under the Data Protection Laws, and in particular with the following principles:
Elios will only use Personal Data when Data Protection Laws allow Elios to do so. Personal Data shall be Processed in a manner that is adequate, relevant, and not excessive in relation to the intended business purpose(s) of such Processing. A legal basis is required to process Personal Data. Personal Data may be processed only if at least one of the following legal bases applies:
When applicable, Pyth shall honor Data Subject rights, as described herein. In accordance with Data Protection Laws and in certain circumstances, a Data Subject may possess the right to:
Elios shall accept, when applicable, any written requests through the appropriate channels from a Data Subject to exercise his or her rights and freedoms pursuant to Data Protection Laws. Elios shall use reasonable means to verify the identity of the requester.
Elios and its Personnel have implemented appropriate technical and organizational measures to provide adequate protection regarding Data Subjects’ rights and the lawful, fair, and transparent Processing of Personal Data, as described herein. Elios data protection obligations include the following:
Elios has executed appropriate documentation to protect the privacy and fundamental rights and freedoms of Data Subjects and has taken appropriate measures to ensure data protection during the sharing of Personal Data.
Elios may share Personal Data with third-parties to Process (maintain, store, use) on Elios’s behalf. Elios requires all such Processors to take appropriate security measures to protect Personal Data in accordance with Elios’s policies. Elios does not allow Processors to Process Personal Data for their own purposes and only permits them to Process Personal Data for specified purposes and in accordance with Elios’s instructions.
Elios may share Personal Data with third parties to Process on their own behalf. Such third parties will be considered joint-Controllers of such Personal Data. While joint-Controllers have shared discretion over the purposes of Processing, all such Controllers agree to Process such shared Personal Data in accordance with Data Protection Laws.
Various third-parties are explicitly mentioned in this Policy (e.g., in section “Tracking Tools”). The Personal Data is passed on or accessed for the purpose of providing and maintaining the functionalities of the website.
Elios may transfer your Personal Data to third-parties based abroad for the purposes of the data processing described in this Policy.
Such third-parties are obliged to protect the privacy of individuals to the same extent as Elios does. If the level of data protection in a country does not correspond to the Swiss or European level, Elios contractually ensures that the protection of your Personal Data corresponds to that in Switzerland or the EU at all times. To this end, Elios agrees on the EU standard contractual clauses with the third-parties and implements additional technical and organizational measures, if necessary.
Certain third-parties mentioned in this Policy are based in the USA (see section “Links to Our Social Media Presences” or section “Tracking Tools”). Further explanations regarding data transfers to the USA can be found below under section “Note on Data Transfers to the USA”.
Some of the third-parties mentioned in this Policy are based in the USA. For the sake of completeness, Elios would like to point out for Data Subjects who are resident or domiciled in Switzerland or the EU that there are surveillance measures in place in the USA by US authorities, which generally allow the storage of all Personal Data of all persons whose data has been transferred from Switzerland or the EU to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and their subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated with both the access to and the use of this data. Furthermore, Elios would like to point out that in the USA, Data Subjects from Switzerland or the EU do not have any legal remedies that allow them to obtain access to the data concerning them and to obtain their correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities.
Elios would like to point out to Data Subjects who are resident in Switzerland or a member state of the EU that the USA does not have a sufficient level of data protection from the point of view of the European Union and Switzerland – among other things due to the issues mentioned in this section. Insofar as Elios has explained in this Policy that recipients of data (such as Google) are based in the USA, Elios will ensure through contractual arrangements with these companies, as well as any additional appropriate guarantees required, that your Personal Data is protected with our partners with an appropriate level.
Elios has implemented appropriate elements of privacy by design in conjunction with technical and physical safeguards to protect the security of Personal Data from unauthorized or unlawful Processing. Elios uses a number of systems and applications to protect Personal Data at all times, which also allow for the following capabilities: (i) the anonymization and encryption of Personal Data; (ii) the ability to ensure the ongoing confidentiality, integrity, availability, and resilience of Processing Personal Data; (iii) the ability to restore the availability and access to Personal Data in a timely manner in the event of a physical or technical incident; and (iv) a process for regularly testing, assessing, and evaluating, at least annually, the effectiveness of such security measures.
In assessing the appropriate level of security as well as the risks of varying likelihood and severity for the rights and freedoms of Data Subjects, Elios assesses the risks presented by the Processing of Personal Data. Such risks may include, but are not limited to, any accidental, unlawful, or unauthorized destruction, loss, disclosure, alteration, or access to Personal Data Processed by or on behalf of Elios, or other factors that may impact Data Subject rights and freedoms. Elios shall make reasonable attempts to ensure that any risks presented by the Processing of Personal Data are sufficiently mitigated by technological and/or organizational controls, including limited access of Personal Data utilizing access controls and password protections.
This website may contain content and links to third-party websites that are not owned, operated, or controlled by Elios. Elios is not responsible for the privacy practices of or the content displayed on such third-party websites.
When engaging with Elios’s content on or through a third-party social networking website, plug-in, or application, Elios may Process Personal Data associated with your social media account.
When you visit our websites, our servers temporarily save each access in a log file. The following data may be collected without your intervention and stored by Elios until deletion, as is necessary in compliance with applicable laws:
The collection and processing of this data is carried out for the purpose of enabling the use of the website (connection establishment), to permanently guarantee system security and stability and to enable the optimization of our internet offer as well as for internal statistical purposes. Our legitimate interest in data processing lies in the purposes described above.
Only in the event of an attack on the network infrastructure or a suspicion of other unauthorized or abusive website use will the IP address be evaluated for the purpose of clarification and defense and, if necessary, used in the context of criminal proceedings to identify and take civil or criminal action against the users concerned. Our legitimate interest in data processing lies in the purposes described above.
Finally, Elios uses cookies and other applications based on cookies when you visit the website. For further information, please refer to sections “Cookies” and “Tracking Tools”.
On the website you have the possibility to contact Elios or one of its experts by e-mail. You can also contact Elios for support questions by e-mail.
You are responsible for the message and/or transmitted content that you send to Elios. Elios recommends that you do not send any confidential data. Personal Data is only collected if you provide it to Elios voluntarily. Therefore, you yourself are responsible for what data you transmit to Elios. In order to be able to answer your questions, Elios may ask you to provide additional information. Elios only collects Personal Data from you if this is necessary to answer your questions or to provide the services you have requested.
When processing your enquiry by e-mail, Elios has a legitimate interest in data processing. You can object to this data processing at any time (see section “Contact”).
If you submit a letter of application by e-mail, Elios processes the Personal Data you provide in order to check your application and, if necessary, to contact you in this context. The legal basis for the processing of your Personal Data lies in pre-contractual measures and the performance of a contract as well as in our legitimate interest. Insofar as Elios bases data processing on the legitimate interest, you can object to this data processing at any time (see section “Contact”).
The website includes a job section with current job offers. When using this application mechanism, you will be redirected to the website operated by Greenhouse Software Inc. where you have to enter specific Personal Data, such as your first name, family name, e-mail, phone, location and information about your education. You are able to upload other application documents, such as your resume, on the website. We will process your Personal Data for the administration and processing of your application, i.e. as pre-contractual measure and in our legitimate interest.
When you apply as Elios Data Provider, you may have to enter the following information into the online application form:
The legal basis for the processing of your Personal Data lies in the processing for pre-contractual purposes or for the performance of a contract as well as our legitimate interest. If Elios invokes our legitimate interest for data processing, you can object to this data processing at any time (see section “Contact”).
When you visit this website, Elios and its third-party service providers receive and record Personal Data that you may have provided and your digital signature, such as your IP address. The technologies we use to track your movements around our website include cookies, tracking scripts and pixels, and tagging technologies, which we may employ to understand your preferences, improve your experience on our website, etc.
Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your end device or a message always appears when you receive a new cookie.
On the following pages you will find explanations on how to configure the processing of cookies in the most common browsers.
Please note that disabling cookies may prevent you from using all the features of the Websites.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland or Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics uses methods that enable an analysis of the use of the website, such as cookies. These generate information about your use of the website, such as:
This information is transmitted to Google servers in the USA and stored there. In doing so, the IP address is shortened by activating IP anonymisation on the website before transmission within the Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area, as well as in Switzerland. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these cases, we ensure that Google complies with a sufficient level of data protection by means of contractual guarantees, in particular by agreeing to the EU standard contractual clauses and additional measures.
The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services associated with website and internet use for the purposes of market research and demand-oriented design of the website. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. According to Google, under no circumstances will the IP address be associated with other data relating to the user.
The legal basis for processing the data for the above purposes is your consent, which you give us by using the cookie banner. You can revoke your consent at any time (section “Contact”).
You can prevent the collection of the data generated by the cookies (including the IP address), which relate to the use of the website, by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
An opt-out cookie will be stored on your device. If you delete all cookies, the link must be clicked again.
Google Tag Manager
We use Google Tag Manager, a service of Google Ireland Limited, Google Building, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland or Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, to manage cookies and pixels for tracking tools and other tools. The Tag Manager tool itself is a cookie-less domain and does not collect any Personal Data. Instead, the tool triggers other tags that may in turn collect data. If you opt for a deactivation at the main or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
This processing is based on our legitimate interest. You can object to this data processing at any time (see section “Contact”).
Cloudflare Insights
We use on the website functions from Cloudflare. The provider is Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare offers a globally distributed content delivery network with DNS. We have concluded a corresponding data processing agreement and EU standard contractual clauses with Cloudflare.
Cloudflare creates copies of our website and places them on their own servers. When you visit our website, you are automatically connected to Cloudflare’s nearby servers, which deliver the data. This significantly reduces the loading time.
The information processed may include, but is not limited to, IP addresses, system configuration information and other information about traffic to and from our websites, devices, applications and/or networks (collectively, “Log Data”). In addition, Cloudflare stores server and network activity data, as well as observations and analytics collected by Cloudflare in the course of providing the services (collectively, “Operational Metrics”). Examples of Operational Metrics include service availability and service uptime metrics, request volumes, error rates, cache rates and IP threat scores. Cloudflare uses and processes End User Log Data to fulfil its obligations under our agreement.
We use Cloudflare to increase the speed of our website and at the same time reduce latency and in this way improve/optimise the user experience. The data processing takes place on the basis of our legitimate interest. You can object to this data processing at any time (see section “Contact”). You can also deactivate or block the cookies set by this service as indicated in the section “Cookies”. Please find more information about the data processing by Cloudflare under https://www.cloudflare.com/privacypolicy/.
This website uses so-called web fonts provided by Adobe Typekit for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Adobe Typekit’s servers. This enables Adobe Typekit to know that our website has been accessed via your IP address. Adobe Typekit Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Adobe Typekit Web Fonts can be found at https://fonts.adobe.com/and in the Adobe Typekit privacy policy: https://www.adobe.com/uk/privacy/policies/adobe-fonts.html.
On the website, we have set up links to our social media presences on the following social networks:
If you click on the corresponding icons of the social networks, you will automatically be redirected to our profile / channel on the respective social network. To be able to use the functions of the respective network, you must partially log into your user account for the respective network.
When you open a link to one of our social media presences, a direct connection is established between your browser and the server of the social network in question. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged into your account on the network concerned, the content of our website may be linked to your profile on the network, i.e. the network may link your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the relevant links. In any case, an association takes place when you log in to the relevant network after clicking on the link.
If you click on one of these links, you thereby give your consent to the subsequent data processing.
Elios will review and may update this Policy to reflect changes to Elios’s privacy practices or security measures as needed. If a review is not satisfactory, Elios will take immediate steps to remedy any noted deficiencies. Please periodically review this Policy for the latest on Elios’s privacy practices. The use of Elios’s website after any updates constitutes an acknowledgement of having read and understood the Policy.
Please contact Elios by email at [email protected] should you have any questions or comments about this Policy or your Personal Data.
Subscribe To Our Newsletter For Latest Updates And Promos
2022 All Rights Reserved By Elios