Privacy Policy
General Notice
Last updated on: 01.01.2025
Transparent handling of personal data is very important to us. This data protection statement provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.
What services we use
Highlevel
Google Tag Manager
Google Ads
Google Ads Conversion Tracking
Linkedin Ads
Google Customer Reviews
Google My Business
Cookie-Script
Microsoft 365
Google Workspace
Recruitee
Contact Information
If you have any questions or concerns about our protection of your data, you can always reach us by email at [email protected] or by phone +41 43 540 56 85. Responsible for data processing done through this website is:
Callista Group AG
General-Guisan-Strasse 8
6300 Zug
Switzerland
Callista ACE AG
General-Guisan-Strasse 8
6300 Zug
Switzerland
Callista ISS AG
General-Guisan-Strasse 8
6300 Zug
Switzerland
General principles
What data we collect from you and from whom we receive this data
Personal master data (name, address, dates of birth, etc.);
Contact information (cell phone number, email address, etc.);
Financial data (e.g. account details);
Online identifiers (e.g. cookie identifier, IP addresses);
Location and traffic data;
Sound and image recording;
particularly sensitive data (e.g. biometric data or information about your health).
First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:
Under what conditions do we process your data?
We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing. If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:
Your consent;
the execution of a contract or pre-contractual measures;
our legitimate interests, unless your interests are overridden.
How can you withdraw your consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification. You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.
In which cases can we share your data with third parties?
a) Principle
We may need to rely on the services of third parties or affiliates and engage them to process your data (known as processors). Categories of recipients are namely:
Accounting, fiduciary and auditing firm;
Consulting firms (legal, tax, etc.);
IT service provider (web hosting, support, cloud services, website design, etc.);
Payment service provider;
Provider of tracking, conversion and advertising services.
We ensure that these third parties and our affiliates comply with the requirements of data protection and treat your personal data confidentially. We may also be required to disclose your personal information to government authorities.
b) Social Media Channels
We may have embedded links to our social media channels on our website. This is apparent to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels. In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.
c) Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad in the course of order processing. These companies are obligated to data protection to the same extent as we are. The transfer may take place worldwide. If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in Switzerland (for example, by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link. https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de
How long do we keep your data?
We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected.
Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer. We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.
How do we protect your data?
We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.
Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially.
Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.
What rights do you have?
a) Right to information
You can request information about the data we have stored about you at any time. We ask you to send your request for information together
with proof of identity to [email protected]. You also have the right to receive your data in a common file format if we process your data automatically and if:
you have given your consent for the processing of this data; or
you have disclosed data in connection with the conclusion or performance of a contract.
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party. The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.
b) Deletion and correction
You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to retain it unchanged or if your request conflicts with a legal requirement.
Please note that exercising your rights may be in conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. premature termination of the contract or cost consequences).
c) Legal Process
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch
Changes to the privacy policy
We may change this privacy policy at any time. The changes will be published on callista.ch, you will not be informed separately.
Individual data processing operations
Providing the website and creating log files
By visiting callista.ch or callista-group.com, certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:
the name of your Internet service provider;
your IP address (in some circumstances);
the version of your browser software;
the operating system of the computer with which the URL is accessed;
the date and time of access;
the web page from which you are visiting URL;
the search words you used to find the URL.
This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest. The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website, you therefore have no possibility to object.
Highlevel
Our website uses Highlevel, a service of Highlevel Inc. for various marketing and sales activities. HubSpot is an integrated software solution that we use for our inbound marketing activities, lead generation, email marketing, CRM (customer relationship management), and contact form management. When you visit our website or interact with us through the forms provided on our website, certain information about your visit is collected and stored. This includes your IP address, the date and duration of your visit, the pages you visit, and information about the browser and operating system you use. In addition, if you contact us via a form, the data you provide (e.g. name, e-mail address) will be stored. Highlevel uses cookies to analyze the behavior of visitors to our website. This helps us improve the user experience on our website and make our marketing activities more effective. The information Highlevel collects helps us better tailor our marketing and sales activities to the needs of our visitors and customers, maintain and optimize our customer relationships, and measure the effectiveness of our marketing campaigns. Data processing is secure and in compliance with applicable data protection regulations. Highlevel is certified under the EU-US Data Protection Regulations and is committed to complying with all data protection requirements applicable by the European Union (EU).
Google Tag Manager
For the management of website tags via an interface, we use the Google Tag Manager, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process any personal data. The service provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. By using the Google Tag Manager, scripts (so-called tags) can be activated automatically on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you use, the subpages of our website visited and other interactions during your website visit.
Google Ads
We use the Google Ads service on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). Google Ads enables us to place advertisements in the Google search results as well as in the Google advertising network.
Google Ads Conversion Tracking
We use the online advertising program "Google Ads" on our website and in this context the conversion tracking. Google Ads Conversion Tracking is an analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a cookie for conversion tracking is set on your end device. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. The information obtained using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. You can prevent the storage of cookies by selecting the appropriate technical settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics. Furthermore, you can disable personalized advertising for you in Google's advertising settings. You can find instructions on how to do this at https://support.google.com/My-Ad-Center-Help/answer/12155764.
Linkedin Ads
We use advertising services on our website provided by LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). LinkedIn Ads allow us to serve targeted ads based on users' interests and behavior. LinkedIn uses cookies and similar technologies to display ads based on your previous visits to our and other websites. This allows us to measure and optimize the effectiveness of our advertising efforts. The information collected by LinkedIn Ads is anonymous for us, which means that we do not receive any personal data of individual users. However, this data is stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with the LinkedIn privacy policy.
If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected by LinkedIn Ads will be linked to your LinkedIn account. The use of LinkedIn Ads serves the purpose of analyzing and optimizing the effectiveness of our advertising measures. The data processing is based on our legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.
Linkedin Insight Tag
We have integrated the LinkedIn Insight Tag on our website, a tool from LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The LinkedIn Insight Tag allows us to collect information about visitors to our website, specifically the types of LinkedIn features that visitors to our website use and how they interact with those features. This tool helps us create targeted ads within the LinkedIn platform and measure the effectiveness of those ads. Through the use of the LinkedIn Insight Tag, cookies are set on your device that enable the collection of pseudonymized data, such as the URL of the page visited, the referrer URL, IP address (in shortened form), device and browser properties, and timestamps. The data collected by the LinkedIn Insight Tag is anonymous for us, which means that we do not receive any personal data of individual users. However, this data is stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with the LinkedIn privacy policy. If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected through the LinkedIn Insight Tag will be linked to your LinkedIn account. The use of the LinkedIn Insight Tag serves the purpose of analyzing and optimizing the effectiveness of our advertising measures. The data processing is based on our legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.
Google Customer Reviews
We use the Google Customer Reviews service on our website, offered by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Customer Reviews allows our customers to provide feedback on their buying experience with us and helps us to improve our service quality and customer experience. After making a purchase on our website, you may be invited to participate in a Google Customer Reviews survey. If you choose to participate, Google will provide you with a survey in which you can rate your experience with us. The information you provide will be processed and aggregated by Google to give us an overall picture of customer satisfaction. When you use Google Customer Reviews, data, including your IP address, the date and time of the survey and your ratings, are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. If you don't want to participate in Google Customer Reviews, you can simply ignore or decline the survey invitation. For more information about Google's data collection and privacy practices with respect to Google Customer Reviews, please see Google's privacy policy at https://www.google.de/intl/de/policies/privacy/ and the information specific to Google Customer Reviews.
Google My Business
On our website, we use functions of Google My Business, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google My Business allows businesses to manage their presence on Google, including Google Search and Google Maps, and to interact with customers. By visiting our website or by interacting with our Google My Business entry, such as leaving reviews or asking questions, data, in particular your IP address and the content of your interactions, are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. Google uses this information to provide Google My Business services, to facilitate user interactions with businesses, and to provide us with reports and analytics about the interactions and performance of our business listing.
Cookie-Script
Our website uses Cookie-Script, a cookie consent and compliance service provided by Objectis Ltd. Cookie-Script helps us obtain and manage our users' consent for cookies and online tracking in accordance with legal requirements. When you visit our website, CookieScript may collect information about your consent decisions and your interaction with the consent popup. This information is used to ensure that only the cookies and tracking technologies you have approved are enabled on your device.
Microsoft 365
For various office and communication tasks, we use Microsoft 365, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft 365 offers a range of productivity tools, including email (Outlook), document storage (OneDrive), collaboration tools (Teams), and Office applications such as Word, Excel, and PowerPoint. When you contact us, for example by email, or when we share documents, these interactions are processed and stored through Microsoft 365. Our data is stored on Microsoft servers in Switzerland. In addition, Microsoft has implemented various security and privacy measures to protect its customers' data.
Recruitee
We publish numerous job advertisements directly on Recruitee B.V.. Accordingly, we use the services of Recruitee B.V. to organize and process the application. When a visitor visits the Recruitee Website, personal access data is automatically collected, such as the requesting device, the web browser you use and the operating system of your device, the IP address of the requesting device, the requests and responses sent to and from your device, the website from which the Recruitee Website was requested and your behavior on the Recruitee Website. The collection of personal data and the integration of Recruitee as part of your visit to our Recruitee website, as well as the related data processing, is necessary to monitor and improve the recruitment process and the performance of the Recruitee website, based on our legitimate interest in the efficient design of our internal operations and service. Furthermore, the following personal application data may be processed as part of the application process, in particular, but not exclusively, all personal data that you provide to us via the application form: Name, email address, phone number, picture, cover letter, resume, LinkedIn profile, and the job you have applied for, status, notes and plans regarding your application and email communications. The collection of your personal data and the integration of Recruitee as part of the application process, as well as the associated data processing, is necessary for the implementation of pre-contractual measures.
For further information about data protection at Recruitee, please refer to the Recruitee privacy policy.
BrainBox Generators
BrainBox Generators is a service of BrainBox Solutions GmbH to recognize all data protection-relevant services on a website and, among other things, to help with the creation of the privacy policy. No personal data is collected or processed in the process.
© 2025 Callista
© 2025 Callista