(1) In the following, we inform you about the collection of personal data when using our website.

(2) With reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the “General Data Protection Regulation” or “GDPR” for short), the term “personal data” means all data that can be related to you personally. This includes, for example, your name, address, email address and user behavior. With regard to other terms, in particular the terms “processing”, “controller”, “processor” and “consent”, we refer to the statutory data protection definitions in Art. 4 GDPR.

(3) The Swiss Federal Act on Data Protection, hereinafter referred to as “FADP”, also applies to matters that have an impact in Switzerland, even if they are initiated outside Switzerland. However, we use the terms of the GDPR throughout this document. The terms “personal data”, “processing”, “processor”, “special categories of data” and data portability used in the GDPR also refer to the terms “personal data”, “processing”, “processor”, “data portability” and “sensitive personal data” used in the FADP, insofar as the FADP applies. In this case, the legal meaning of the terms is determined by the FADP.

(4) We only process personal data to the extent necessary to provide a functional website and the content and services we offer. The processing of personal data only takes place regularly if you have given us your consent within the meaning of Art. 6 para. 1 lit. a) GDPR or if the processing is permitted by legal regulations, in particular by one of the legal bases mentioned in Art. 6 para. 1 lit. b) to lit. f) GDPR.

(5) Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this is provided for by national or European regulations to which we are subject. In this case, the data will be blocked or erased when the storage period prescribed by the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfilment of a contract.

(6) If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes.

(1) The controller within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other provisions and regulations of a data protection nature is:

(2) Further details on the responsible body can be found in our imprint.

You can reach and contact our data protection officer at the following address:

(1) You have the following rights with regard to the personal data concerning you:

• the right of access,
• the right to rectification and erasure,
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

(3) Within the scope of the FADP, you also have the right to:

• data surrender,
• data destruction.

(1) If you visit our website without registering or otherwise providing us with information (“informational use”), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure stability and security: IP address, date and time of the request, time zone difference to GMT, content of the website, access status (HTTP status), amount of data transferred, requesting website, web browser, operating system, language and version of the browser.

(2) The aforementioned data is also stored in log files on our servers. This data is not stored together with your other personal data.

(3) The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems.

(4) This data is not analyzed for marketing purposes. Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 para. 1 sentence 1 lit. f) GDPR. The aforementioned data for the provision of our website is deleted when the respective session has ended. The collection of the above data for the provision of our website is absolutely necessary for the operation of our website. There is no possibility of objection.

(5) All fonts used on this website are hosted locally on our own server. No connection to third-party font services (such as Google Fonts) is established when you access our pages; your IP address is not transmitted to third parties for this purpose.

(1) This website does not use cookies for analytics, marketing or audience measurement purposes. No user profiles are created and no data is analyzed for advertising purposes.

(2) Cookies are small text files that are stored on the storage medium of your end device and through which certain information flows to us as the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your end device.

(3) Should we use cookies in future that are not technically mandatory, we will only do so with your previously declared consent, which you can revoke at any time. The legal basis in that case is Art. 6 para. 1 lit. a) GDPR.

(4) You can configure the processing of data by cookies yourself. In the settings of your web browser you can, for example, reject third-party cookies or cookies altogether. Please note that you may then not be able to use all the functions of our website properly.

(1) In addition to the aforementioned informational use of our website, we offer various services that you can use if you are interested. This usually requires the provision of further personal data. We require this data to provide the respective service. The above data processing principles apply.

(2) In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored by us. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find more detailed information in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

(1) If you contact us by e-mail, the personal data you send us with your e-mail will be stored.

(2) The data will only be used to answer your questions. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. We also record your IP address and the time of sending.

(3) The processing of the above personal data serves solely to process your inquiries.

(4) This also constitutes our legitimate interest in processing your personal data. Insofar as you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 lit. a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR, in particular in the event that you send us the data by e-mail. Insofar as you wish to work towards the conclusion of a contract through your e-mail, Art. 6 para. 1 lit. b) GDPR constitutes an additional legal basis.

(5) Subject to statutory retention periods, the data will be deleted as soon as we have finally processed your request. If you contact us by e-mail, you can object to the storage of your personal data at any time. Please note that in this case your request cannot be processed any further. You can declare your revocation or objection by sending an e-mail to the e-mail address given in our imprint.

(6) We process and/or store your personal data on a server of an external provider in the European Union. This ensures that the standards and regulations of European data protection law are complied with.

(1) On our careers page we display our current job openings. These are retrieved directly from the servers of our applicant management provider, Personio, when the page is loaded. For technical reasons, your IP address is transmitted to Personio in the process.

(2) We retrieve the job listings without transmitting any credentials or cookies. Personio does not set any cookies on your end device during this step.

(3) The purpose of the processing is to display our open positions in an always up-to-date form. This constitutes our legitimate interest. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

(4) If you apply for a position, you leave our website and are forwarded to Personio's application portal. The privacy notices shown to you during the application process apply additionally to the processing of your application data there.

(5) The provider processes the data within the European Union.

Provider:

(1) Our website links in several places to publications and articles hosted by third parties (such as academic publishers or partner organizations). When you follow such a link, you leave our website; we have no influence on the data processing that takes place there. The privacy policy of the respective provider applies.

(2) Documents we provide ourselves (PDF files) are hosted on the same server as this website. The principles described in section V. apply to their retrieval.

(3) This website does not embed any videos, maps, fonts or other third-party content that would establish a connection to external servers when a page is merely opened. The retrieval of job listings described in section IX. is the one exception.

(1) Our website offers a search across our project references and publications. The search itself runs entirely in your browser: the index is downloaded once and evaluated locally. Your entry is not transmitted while you are typing.

(2) Once you stop typing, we record the search term you entered, the language version of the website, the date and the number of results found. We do so in order to learn which topics our visitors are looking for and where our website fails to answer them, and to improve it accordingly.

(3) We do not record your IP address, no cookie, no session identifier, no browser or device information and no referring page. The stored entries therefore cannot be assigned to a person or combined into a profile, and they cannot be linked to one another. Search terms shorter than three characters, as well as entries containing an "@" or a web address, are discarded and never stored.

(4) The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in understanding, on the basis of aggregate figures, which content is in demand and where our site falls short. Since no personal reference is created, your interests do not override this.

(5) The records are stored on the server of this website and are not passed on to third parties. They are deleted after 24 months at the latest.

(6) Please do not enter any personal data into the search field. Should a search term nevertheless contain such data, you may request its deletion at any time using the contact details given in section I.