1. Data Controller and Contact
The entity responsible for data processing via this website is:
Pharmabotix AG
Schulstrasse 9
5707 Seengen
Aargau
Switzerland
Website: https://pharmabotix.ch/
Contact Person for Data Protection:
Fabian Stutz, CEO
Email: solutions@pharmabotix.ch
2. Legal Basis
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, to the extent applicable, the General Data Protection Regulation of the European Union (GDPR).
Processing is based on the following legal grounds:
Consent (Art. 6 (1) (a) GDPR / Art. 6 (6) FADP) – applies in particular to optional cookies and tracking technologies authorized via our cookie banner.
Performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR / Art. 6 (3) FADP) for direct inquiries or within the recruitment process.
Legitimate interests (Art. 6 (1) (f) GDPR / Art. 6 (1) FADP) to ensure the IT security, stability, and optimization of our website.
3. Cookie Consent (Real Cookie Banner)
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent management tool “Real Cookie Banner” provided by devowl.io GmbH (Tannet 12, 94539 Grafling, Germany).
When you access our website, your consent or refusal is recorded. Your IP address, device information, and consent status are transmitted pseudonymously to devowl.io and stored for 12 months to demonstrate compliance.
Legal Basis: Legal obligation to obtain consent (Art. 6 (1) (c) GDPR / Art. 6 (1) FADP).
4. Data Collection on Our Website
4.1 Server Log Files
Our provider automatically collects technical data (IP address, browser type, operating system, referrer URL, time) necessary to display the website securely and stably.
4.2 Contact Forms and Email
If you contact us via form or email, your details (name, email, phone, message) will be stored to process the inquiry and in case of follow-up questions.
4.3 Applications and Careers
If you apply to us (e.g., via email or a designated form), we process your personal data (e.g., CV, certificates, qualifications, contact details) exclusively for the purpose of conducting the application process. If your application does not result in employment, your data will be deleted after completion of the process, unless you explicitly consent to a longer retention period.
Legal Basis: Pre-contractual measures (Art. 6 (1) (b) GDPR / Art. 6 (3) FADP).
5. Google Services and Third-Party Providers
We use services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA). For data transfers to the USA, we rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework as well as EU Standard Contractual Clauses.
5.1 Google Analytics
We use Google Analytics to analyze user behavior. The service is only activated after your active consent via the cookie banner. We use Google Analytics exclusively with IP anonymization enabled, meaning your IP address is shortened before transfer to the USA.
Legal Basis: Consent (Art. 6 (1) (a) GDPR / Art. 6 (6) FADP).
5.2 Google Maps
We integrate maps from Google Maps to display our location. If you consent via the cookie banner, your browser loads the map, and Google registers your IP address and the specific subpage visited.
Legal Basis: Consent (Art. 6 (1) (a) GDPR) or legitimate interest in providing a user-friendly presentation of our location.
5.3 Google reCAPTCHA
To protect our forms from automated abuse and spam, we use Google reCAPTCHA. The service analyzes user behavior (e.g., mouse movements, IP address).
Legal Basis: Legitimate interest (Art. 6 (1) (f) GDPR / Art. 6 (1) FADP) in the security of our website.
6. Social Media and Networks (LinkedIn)
Functions and links to the LinkedIn network are integrated into our website (LinkedIn Ireland Island Limited, Wilton Place, Dublin 2, Ireland).
When you visit our LinkedIn company page or activate interactive elements (such as the LinkedIn Insight Tag for ad analysis) via our cookie banner, a direct connection is established between your browser and LinkedIn’s servers. LinkedIn receives the information that you visited our site with your IP address. LinkedIn transfers data to the USA and is certified under the Data Privacy Framework.
Legal Basis: Consent for tracking (Art. 6 (1) (a) GDPR) or legitimate interest in linking our social media presence.
7. Data Retention Period
We store personal data only as long as necessary to fulfill the respective purposes or as required by statutory retention periods (e.g., the 10-year statutory record-keeping obligation in Switzerland).
8. Your Rights
You have the right to access, rectification, erasure, restriction, data portability, and the withdrawal of consent. Please direct requests via email to solutions@pharmabotix.ch.
You also have the right to lodge a complaint with a competent data protection authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).