Privacy Policy
Privacy Policy for FOUND Global AG
1. Data controller and content of this privacy statement
We, FOUND Global AG, a company incorporated in Switzerland, under license number CHE-221.192.515, with registered office and principal place of business at Stettbachstrasse 10, 8702 Zollikon, are the operator of the websites www.getfound.ioand www.getfound.io/company. We are responsible for the collection, processing and use of your personal data and the compatibility of the data processing with applicable data protection laws. Furthermore, other companies are responsible under data protection law(or jointly responsible with us) for individual data processing operations listed below, and in these cases, you should also take note of the information provided by these other companies, which is also applicable.
Please take note of the information below to know what personal data we collect from you and for what purposes we use it. In data protection matters, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP).
The following information may be amended from time to time. We therefore recommend that you consult this privacy statement regularly.
2. Contact person for data protection
If you have any questions about data protection or wish to exercise your rights,please contact our data protection contact by sending an email to the following address: nicolas.meili@foundglobal.io
3. Scope and purpose of the collection, processing, and use of personal data
3.1 Applying to the FOUND Talent Community
When you get in contact with us and are interested in being part of the FOUND talent community, the first step is the onboarding. Within the onboarding process we collect the below mentioned personal data from you.
In connection with our services, we work with the software application Typeform provided by TYPEFORM SL C/Bac de Roda, 163, Barcelona, Spain. We use Typeform to create your profile and therefore process the following personal data:email-address, first name and last name, phone number and URL to LinkedIn profile. We will only collect and process the personal data from you that is necessary for the application process. You can find more information about the data processing in connection with Railway here.
In connection with Typeform, we work with the software application Slack of the company Slack Technologies Limited Salesforce Tower, 60 R801, North Dock,Dublin, Ireland. We use Slack for internal organizational communication and process the following personal data: first and last name, the phone number, URL to LinkedIn profile and email-address. You can find more information about the data processing in connection with Slack here.
The data collected during this onboarding is centrally stored (section 3.8).
3.2 Assessment and approval / rejection
Asa next step in the application process to be part of the FOUND talent community,we will organize an assessment with a third party.
We use for that purpose a neuroscience-based assessment software tool called Equalture from the company Equalture, Mauritsweg 35, 3012 JT Rotterdam,Netherlands. You can find more information about the data processing in connection with Equalture here.
Please note that Equalture will not receive any personal data relating to you. Equalture will receive a pseudonym and not your family name nor any other personal data. After the execution of the assessment, Equalture will return the results of the assessment relating to your pseudonym.
The personal data will only be processed for the purpose of this assessment. The result of the assessment will be further processed by us for the purpose of vetting process.
Based on the assessment results and the general fit of your profile according to a set of criteria (e.g. experience in specific segment or industry, number of years of experience), you will either be approved or rejected to the FOUND talent community.
3.3 Voluntary Video Call
After the approval into the FOUND talent community, we will provide the option to book a voluntary video call with the customer success team.
For scheduling a videocall, we will use the scheduling tool Calendly. Calendly is operated by the company Calendly LLC, 271 17th St NW, Ste 1000, Atlanta,Georgia, 30363, USA. For the purpose of scheduling the video call, you have to submit the following personal data: your name, email, calendar availability and further appointment information. We and Calendly will only process the personal data from you that is necessary to make an appointment for a video call. You can find more information about the data processing in connection with Calendly here.
After the video call has been scheduled, we will conduct the video call with you.
We work with a software application called ZOOM of the company Zoom Video Communications Inc, 55 Almaden Blvd 6th Floor, San Jose, USA. You can find more information about the data processing in connection with ZOOM here.
We will collect personal data that you provide to us during the video call. During the video call, we may ask you to provide us additional information and we will record the video call provided you give your consent. Furthermore, we collect basic meeting data and personal data: e.g., name/profile name, profile picture, time of participation, duration and subject of the meeting etc.
During the video call, we use Grain for recording the call. Grain is operated by Grain Technology Inc., 2443 Filmore St #380-2910, San Francisco, California, 94115,USA. You can find more information about the data processing in connection with Grain here.
We will only process the personal data from you that is necessary to assess whether you fit the needs of the employers.
The data collected during the video call is centrally stored (section 3.8). Existing data is updated, if necessary.
3.4 Matching with potential employers
After the approval into the FOUND talent community, we will match your talent profile anonymously against (an) open role(s), if your profile fits the criteria of the employer and the specific role.
To complete your profile and to make you familiar with more details for the open role(s), we will approach you for scheduling a video call.
For the video call we will use Zoom (section 3.3).
For the recording of the video call we will use Grain (Section 3.3).
The further matching process consists of phone calls between us and the potential employer, e-mail communication between us and the potential employer, a video pitch by the potential employer, communication between us and you and at the end direct communication between you and the potential employer. We will receive the status of the matching process and also the information whether the matching was successful.
For scheduling a videocall between talent and employer, we will use the scheduling tool called Cronofy. provided by Cronofy Ltd., 12 St. Andrew’s Hill, London, EC4V 5BJ,United Kingdom. We and Calendly will only process the personal data from you that is necessary to make an appointment for a video call. You can find more information about the data processing in connection with Cronofy here.
3.5 Data processing on LinkedIn
We may approach you on LinkedIn. In doing so, we collect and process the following personal data:personal data which you have provided to us during our communication on LinkedIn or which we collect from you and by using Sales Navigator on LinkedIn and LinkedIn Insight Tag. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your profile and within the data privacy framework of LinkedIn.
LinkedIn, the Sales Navigator of LinkedIn, LinkedIn Recruiter and LinkedIn Insight Tag are software applications of LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.You can find more information about the data processing in connection with LinkedIn here.
We create automated routines on LinkedIn to track your messages on LinkedIn. Therefore, we work with a software application called LaGrowthMachine. The application is operated by the company LaGrowthMachine, Saint-mandé, Ile-de-France, France. You can find more information about the data processing in connection with LaGrowthMachine here.
3.6 Data processing on Facebook
We may approach you on Facebook. In doing so we collect and process personal data which you have provided to us during our communication on Facebook and which we collect by using Meta Pixel. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your job profile.
Facebook and Meta Pixel are software applications of the company Meta Platforms, Inc.,1601 Willow Road, Menlo Park, CA 94025, USA. You can find more information about the data processing in connection with Facebook here.
3.7 Communication by email
We may contact you by email using a software application of Microsoft Corporation,One Microsoft Way Redmond, WA 98052-6399 USA. However, our contractual partner is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. In doing so, we collect and process the following personal data: email-address and personal data which you have provided to us during the onboarding and matching process. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your profile. You can find more information about the data processing in connection with Microsoft here.
We also use automated emails while contacting you by email. For the automating of the emails, we work with a software application called LaGrowthMachine. The application is operated by the company LaGrowthMachine, Saint-mandé,Ile-de-France, France. You can find more information about the data processing in connection with LaGrowthMachine here.
We also use automated emails while contacting you by email. For the automating, we work with a software application call Mailchimp. The application is operated by the company The Rocket Science Group LLC, 675 Ponce de Leon Ave NE Suite 5000,Atlanta, GA 30308, USA. You can find more information about the data processing in connection with Mailchimp here.
In addition, we use Bitly for link shortening and tracking. The application Bitly is operated by Bitly Inc., 85 5th Avenue, 5th Floor, New York, NY 10003, USA. You can find more information about the data processing in connection with Bitly here.
3.8 Central data storage
We will store and link the data described in this privacy statement, in particular your personal details, your contact details, the information you provided to us during the onboarding, vetting, video calls, assessments, the information you provided on LinkedIn and Facebook and your surfing behavior on our websites, in a central database. This serves the efficient administration of applicant data,allows us to adequately respond to your requests and enables the efficient provision of the services you have requested.
In connection with the central data storage and the analysis of this data, we work with the infrastructure platform of the company Railway Corp., 2261 Market Street #4240, San Francisco, California, 94114, USA. You can find more information about the data processing in connection with Railway here.
3.9 Email marketing
If you register for our marketing emails, the following personal data will be collected. Mandatory data is marked with an asterisk (*) in the registration form:
- E-Mail address
- Salutation
- First and last name
To avoid misuse and to ensure that the owner of an e-mail address has actually given their consent, we use a double opt-in procedure for registration. After sending the registration form, you will receive an e-mail from us containing a confirmation link. To register for our marketing emails, you must click on this link. If you do not click on the confirmation link within the specified period,your data will be deleted again, and our marketing email will not be sent to this address.
By registering, you consent to the processing of your data to receive messages from us about our company, our offers, and related services. This may also include invitations to evaluate our services. The collection of the salutation and name allows us to verify any link between the registration and a possibly already existing customer account and to personalize the content of our messages to you. The link to a customer account helps us to make the offers and content contained in the marketing emails more relevant to you and better tailored to your potential needs.
We will use your data to email you until you revoke your consent. Revocation is possible at any time, in particular via the unsubscribe link in all our marketing emails.
Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information on which addresses have not yet received the email, to which addresses it was sent and for which addresses the sending failed. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimize our promotional emails in terms of frequency, timing,structure, and content. This allows us to better tailor the information and offers in our emails to the individual interests of recipients.
The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set the parameters of your email program so that HTML is not displayed in messages if this is not already the case by default. In the help section of your email software you will find information on how to configure this setting, e.g. here for Microsoft Outlook.
By subscribing to the marketing emails, you also consent to the statistical evaluation of user behavior for the purpose of optimizing and adapting the marketing emails.
We use the email marketing software HubSpot from HubSpot Inc. (European Headquarters), 1 Sir John Rogerson's Quay, Dublin 2, Ireland, to send the marketing emails. You can find more information about the data processing in connection with HubSpot here. Your data will be stored in a database of Amazon Web Services (AWS) in the Germany. This allows AWS to access your data if this is necessary for the provision of the software and for support in the use of the software. You can find more information about the data processing in connection with AWS here.
4. Disclosure and transfer
4.1 Disclosure to and access to third parties
Without the support of other companies, we would not be able to provide our services in the desired form. For us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place to the extent that it is necessary for the fulfilment of the service requested by you, for example the disclosure to potential employers.
Furthermore,data is passed on to selected service providers, but only to the extent necessary for the provision of their services. Various third-party service providers are explicitly mentioned in this privacy statement, e.g., in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consultancies.
In addition your data may be disclosed to authorities, legal advisors, or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carryout due diligence or to complete the transaction.
4.2 Transfer of personal data abroad
We are entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this privacy statement.In doing so, we will of course comply with the statutory provisions on the disclosure of personal data to third parties. If the country in question does not have an adequate level of data protection, we guarantee through contractual regulations that your data is adequately protected by the recipients.
4.3 Note on data transmission to the USA
Some of the third-party service providers mentioned in this privacy statement are based in the USA. For the sake of completeness, we would like to point out that there are surveillance measures in place in the USA by US authorities, which generally allow the storage of all personal data of all persons, whose data has been transmitted to the USA. This is done without any differentiation,limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and its subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated with both the access to and the use of this data. Furthermore, we would like to point out that in the USA, foreign data subjects do not have any legal remedies that allow them to obtain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the attention of data subjects to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.
We would like to point out that the USA does not have a sufficient level of data protection from the perspective of Switzerland – among other things, due to the issues mentioned in this section. Insofar as we have explained in this privacy statement that recipients of data are based in the USA, we will ensure that your data is protected at an appropriate level with our partners through contractual arrangements with these companies as well as any additional appropriate guarantees required, which protect the rights of individuals, whose personal data is transmitted to a third country.
5. Special provisions applicable to the use of our website
5.1 Log file data
When you visit our website, the servers of our hosting provider Amazon Web Services(AWS) located in Germany temporarily store every access in a log file. You can find more information about the data processing in connection with AWS here.
The following data is collected without your intervention and stored by us until automatically deleted:
- The IP address of the requesting computer,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which the access was made. If applicable, with the search word used,
- the operating system of your computer and the browser used (incl. type, version and language setting),
- device type in case of access by mobile phones,
- the city or region from where the access was made,
- the name of your internet access provider.
The collection and processing of this data is carried out for the purpose of enabling the use of our website (connection establishment), to permanently guarantee system security and stability as well as for error and performance analysis and enables us to optimize our website.
In the event of an attack on the network infrastructure of the website or a suspicion of other unauthorized or abusive website use, the IP address and the other data will be evaluated for the purpose of clarification and defense and,if necessary, used in the context of criminal proceedings to identify and take civil and criminal action against the users concerned.
When you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You will find more details on this in the subsequent sections of this data protection declaration, in particular section 5.2.
5.2 Cookies
Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.
Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary, i.e., "technically required", for your desired use of the website. For example, we use cookies to be able to identify you as a registered user after logging in, without you having to log in again each time when navigating the various sub-pages. The provision of the shopping basket and order function is also based on the use of cookies. Furthermore, cookies also perform other technical functions required for the operation of the website,such as so-called load balancing, i.e. the distribution of the performance load of the page to different web servers in order to relieve the servers. Cookies are also used for security purposes, for example to prevent the unauthorized posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.
Most internet browsers automatically accept cookies. However, when accessing our website, we ask you for your consent to the cookies we use that are not technically necessary, especially when using third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to define your desired settings. Details of the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this privacy statement.
We use on our website cookies of the following companies:
- CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, United Kingdom, MK12 5NW. You can find more information about the data processing in connection with CookieYes here.
- Google Tag Manager of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043,USA). You can find more information about the data processing in connection with Google Tag Manager here.
You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in selected browsers.
Deactivating cookies may mean that you cannot use all the functions of our website.
5.3 Tracking and web analysis tools
5.3.1 Tracking and web analysis tools
For needs-based design and continuous optimization of our website, we use the web analysis services listed below. In this context, pseudonymized usage profiles are created and cookies are used (section 5.2). The information generated by the cookie about your use of our website is usually transferred together with the log file data listed in section 5.1 to a server of the service provider,where it is stored and processed. This may also result in a transfer to servers abroad, e.g. the USA (see on this point, in particular on the guarantees taken,section 4.3).
In processing this data, we obtain the following information, among others:
- navigation path followed by a visitor on the site (including content viewed and products selected or purchased),
- time spent on the website or sub-page,
- the last sub-page viewed before leaving the website,
- the country, region or city from where access is made,
- end device (type, version, color depth, resolution, width and height of the browser window), and returning or new visitor.
The provider will use this information on our behalf to evaluate the use of the website, to compile reports on website activities for us and to provide other services related to website and internet use for the purposes of market research and needs-based design of these internet pages. For these processing operations, we and the providers may to a certain extent be considered joint data controllers.
For the further processing of your data by the respective provider as the (sole)data protection controller, in particular also any forwarding of this information to third parties such as authorities on the basis of national legal regulations, please refer to the respective data protection information of the provider.
5.3.2 Google (Universal) Analytics
We use the web analytics service Google Analytics from Google Ireland Limited(Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
The data described about the use of the website may be transmitted to the servers of Google LLC. in the USA for the processing purposes explained (section5.3.1). The IP address is shortened by activating IP anonymization ("anonymize IP") on the website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Users can prevent the collection of the data generated by the cookie and related to their website use (including the IP address) and its transmission to and processing by Google by downloading and installing a browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.
5.3.3 Google Analytics
We use Google Analytics 4 (GA4), a web analytics service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. In the European Economic Area (EEA) and Switzerland, the Irish company Google Ireland Limited is responsible. Google Analytics 4 (GA4) uses methods that enable an analysis of the use of the website, such as cookies (section 5.2).
Google Analytics 4 (GA4) does not log or store individual IP addresses. No precise location data is provided in Google Analytics 4 (GA4). Instead, the following meta data is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent","country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP address data is only used to derive location data and is then immediately deleted. They are not logged, are not accessible and are not used for further applications. When collecting measurement data in Google Analytics 4 (GA4) Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing.
Regional data centers are used in Google Analytics 4 (GA4). If a connection is established in Google Analytics 4 (GA4) to the nearest available Google data center,the measurement data is sent to Analytics via an encrypted HTTPS connection. At these centers, the data is further encrypted before being forwarded to Analytics' processing servers and made available on the platform. Based on the IP addresses, the most suitable local data center is determined.
We also use the technical extension "Google Signals", which enables cross-device tracking. This makes it possible to associate a single website visitor with different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and has also activated the "personalised advertising" option in their Google account settings. Even then, however, no personal data or user profiles are made available to us; they remain anonymous for us.
If you do not wish to use "Google Signals", you can deactivate the "personalised advertising" option in your Google account settings.
Users can prevent the collection of the data generated by the cookie and related to their website use (including the IP address) and its transmission to and processing by Google by downloading and installing a browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.Further information on data protection at Google can be found here.
5.3.4 Google Tag Manager
We use the web analytics service Google Tag Manager Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
Google Tag Manager is a solution with which website tags can be managed via an interface. The Tag Manager tool (which implements the tags) is a cookieless domain and does not collect any personal data. The tool provides for the forwarding of data and triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
5.3.5 Microsoft Clarity
We use the web analytics Clarity from Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA. However, our contractual partner is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
The data described about the use of the website may be transmitted to the servers of Microsoft in the EU for the processing purposes explained (section 5.3.1).The IP address is shortened by activating IP anonymization (“anonymized IP”) on the website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.Further Information on data protection at Microsoft Clarity can be found here.
5.4 Social Media
5.4.1 Social Media Profiles
On our website, we have included links to our profiles in the social networks of the following providers:
- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA;
- Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA
-LinkedIn Unlimited Company, Wilton Place,Dublin 2, Ireland.
When you click on the icon of a social network on our website, you are automatically redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. This provides the network with the information that you have visited our website with your IP address and clicked on the link.
If you click on a link to a network while you are logged into your user account with the network in question, the content of our website may be linked to your profile so that the network can assign your visit to our website directly to your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please note the information on the relevant network's website.
5.4.2 Social Media Plugins
On our website, you can use social plugins from the providers listed below:
- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy Policy;
- Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA, Privacy Notice;
- Twitter Inc, 1355 Market Street, Downtown San Francisco, CA 94103, USA, Privacy Policy;
- LinkedIn Unlimited Company, Wilton Place,Dublin 2, Ireland, Privacy Notice.
We use the social plugins to make it easier for you to share content from our website. The social plugins help us to increase the visibility of our content on social networks and thus contribute to better promotion of our offerings.
The plugins are deactivated by default on our websites and therefore do not send any data to the social networks when you simply call up our website. To increase data protection, we have integrated the plugins in such a way that a connection is not automatically established with the network’s servers. Only when you activate the plugins and thus give your consent to the transmission and further processing of data by the providers of the social networks, does your browser establish a direct connection to the servers of the respective social network.
The content of the plugin is transmitted directly to your browser by the social network and integrated into the website by it. This provides the respective provider with the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted from your browser directly to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, although from a data protection perspective we can to a certain extent be considered jointly responsible with the relevant social network provider.
If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a product of ours) may also be published on the social network and possibly displayed toother users of the social network. The provider of the social network may use this information for the purpose of placing advertisements and designing a respective offering according to your interests. For this purpose, usage,interest and relationship profiles could be created, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks, as well as your rights in this regard and options for changing your settings to protect your privacy can be found directly in the data protection information of the respective provider.
If you do not want the provider of the social network to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their data protection notice.
6. Online advertising and targeting
6.1 In general
We use services of various companies to provide you with interesting offers online. In the process of doing this, your user behavior on our website and websites of other providers is analysed to subsequently be able to show you online advertising that is individually tailored to you.
Most technologies for tracking your user behavior and targeting advertisements work with cookies (section 5.2), which can be used to recognize your browser across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different end devices (e.g.laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices.
In addition to the data already mentioned, which is collected when websites are called up ("log file data", see section 5.1) and the use of cookies(section 5.2) and which may be passed on to the companies involved in the advertising networks, the following data in particular is used to select the advertising that is potentially most relevant to you:
- Information about you that you provided when registering or using a service from advertising partners (e.g. your gender, age group);
- User behavior (e.g. search queries, interactions with advertising, types of websites visited, products viewed and purchased, newsletters subscribed to).
We and our service providers use this data to identify whether you belong to the target group we address and take this into account when selecting the advertisements. For example, after you have visited our site, you may be shown advertisements of the products you have consulted when you visit other sites("re-targeting"). Depending on the scope of the data, a user's profile may also be created, which is evaluated automatically, and the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviors. Such ads may be presented to you on various channels, which include, in addition to our website or app (as part of onsite and in-app marketing), ads provided through the online advertising networks we use, such as Google.
The data may then be analyzed for the purpose of billing the service provider and assessing the effectiveness of advertising measures to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the taking of an action (e.g. visiting certain sections of our website or sending information) is due to a particular advertising ad. We also receive aggregated reports from service providers of ad activity and information about how users interact with our website and ads.
You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (section 5.2). You can also find further options for blocking advertising in the information provided by the respective service provider, such as Google.
6.2 Google Ads
This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookie, which enable your browser to be recognized when visiting other websites. The information generated by the cookies about your visit to these websites(including your IP address) will be transmitted to and stored by Google on servers in the United States (section 4.3). Further information on data protection at Google can be found here.
You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (section 5.2). Further options for blocking advertising can be found here.
6.3 Facebook Ads / Facebook Pixel / Facebook Custom Audience
On our website, we use “Facebook Pixel” of the social network Facebook, which by Meta Platforms Inc., One Hacker Way Menlo Park, CA 94025, USA, or,if you are a resident in the EU, Meta Platforms Ireland Ltd., 4 Grand , Grand Canal Harbour, Dublin 2, Ireland.
Facebook can designate visitors to our website as a target group for displaying advertisements (so-called “Facebook Ads”) using Facebook-Pixel. Accordingly, we use Facebook-Pixel to display Facebook ads that are placed by us only to such Facebook users, who have also shown interest in our website or have shown specific characteristics (e.g. interests in specific topics or products that are determined based on the websites visited), which we transmit to Facebook(so-called “Custom Audiences”).
With the help of Facebook-Pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and are not harassing. Using Facebook-Pixel, we can also understand the effectiveness of Facebook Ads for statistical and market research purposes, in which we see as to whether users were forwarded to our website after clicking on a Facebook ad (so-called“Conversion”).
Facebook-Pixel is directly integrated by Facebook when accessing our website and can save a so-called cookie on your device. If you subsequently log in to Facebook or visit Facebook while being logged in, the visit to our website shall be noted in your profile. The data collected about you is anonymous for us, so it does not provide us with any conclusions about the identity of the users. However,the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The data can therefore be used by Facebook for its own market research and advertising purposes.
Furthermore,when using Facebook-Pixel, we use the additional function “expanded comparison”, in which data on the creation of target groups (“Custom Audiences”or “Look Alike Audiences”) is transmitted to Facebook in an encrypted form.
The processing of data by Facebook takes place within the framework of Facebook‘s privacy policy. You can obtain special information and details on Facebook-Pixel and its functionality in the Help Area of Facebook.
7. Data security
We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, namely unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to the personal data to the extent necessary for the fulfilment of their tasks.
Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.
8. Retention periods
We only store personal data for as long as is necessary to carry out the processing explained in this privacy statement within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data result from the provisions on accounting and from tax law regulations. According to these regulations, business communications, concluded contracts and accounting vouchers must be stored for up to 10 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data is deleted as soon as there is no longer any obligation to retain it and we no longer have any legitimate interest in retaining it.
9. Your rights
Provided that the relevant legal requirements are met, as a person affected by data processing you have the following rights:
Right of access: You have the right to request access to your personal data stored and processed by us at any time and free of charge. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.
Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.
Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of legal retention obligations, the right to deletion may be excluded. In this case, we may block your data instead, provided the conditions are met.
Right to restrict processing: You have the right to request that the processing of your personal data be restricted.
Right to data transfer: You have the right to obtain from us, free of charge, the personal data you have provided to us in a readable format.
Right to object: You can object to the processing of your data at any time, in particular for data processing in connection with direct advertising (e.g.advertising emails).
Right of withdrawal: In principle, where you have given consent you have the right to withdraw that consent at any time. However, processing activities that have already taken place based on your consent do not become unlawful because of your revocation of consent.
Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, for example against the way your personal data is processed
To exercise these rights, please send us an email to the following address:
nicolas.meili@foundglobal.io.
FOUND Global AG
Zollikon, 23 July 2024