Privacy Policy

The controller responsible for data processing on this website is:

Certalys Zugerstrasse 70 6340 Baar Switzerland Email: info@certalys.ch

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses and similar).

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection rules, in particular the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR), as well as this privacy policy.

Some data is collected because you provide it to us, for example via the contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page request).

This website uses no analytics or advertising tools and creates no usage profiles.

Please note that data transmission on the internet (e.g. communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

This website is hosted by cyon GmbH, Brunngässlein 12, 4052 Basel, Switzerland (https://www.cyon.ch). When the website is accessed, information is automatically collected in so-called server log files, which your browser transmits automatically:

- browser type and browser version - operating system used - referrer URL - host name of the accessing computer - time of the server request - IP address

This data is not merged with other data sources. It is collected to ensure the technically error-free and secure operation of the website; we have a legitimate interest in this (Art. 6 (1) (f) GDPR).

This website only uses technically necessary cookies. No analytics, tracking or advertising cookies are used.

One cookie stores your language choice (German/English). In addition, the spam protection Cloudflare Turnstile (see below) may set technically necessary cookies. These cookies do not damage your computer and contain no viruses. They are stored on the basis of Art. 6 (1) (f) GDPR; we have a legitimate interest in the technically error-free provision of our services.

You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases or to reject them in general. Disabling cookies may limit the functionality of this website.

If you send us an enquiry via the contact form, the details you provide (email address, order/test ID if given, subject, message) including an optionally uploaded attachment are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

Uploaded files are stored with Cloudflare R2 (Cloudflare, Inc.) at a storage location within the European Union and are accessible only to us.

Processing is carried out to handle your enquiry and to perform pre-contractual steps (Art. 6 (1) (b) GDPR). The data you enter in the contact form remains with us until you ask us to delete it or the purpose for storing it no longer applies. Statutory retention periods remain unaffected.

To protect the contact form against abuse by automated programs, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an input was made by a human and processes technical characteristics of your browser and your IP address for this purpose.

It is used on the basis of our legitimate interest in protecting our website against abusive access and spam (Art. 6 (1) (f) GDPR). Further information can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

We collect, process and use personal data only to the extent necessary for establishing, structuring or amending the order relationship (master data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual steps.

We transfer personal data to third parties only where necessary for handling the order, for example to the institution entrusted with payment processing. Any further transfer takes place only if you have expressly consented to it. Your data is not passed on to third parties for advertising purposes.

Customer data collected is deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.

No personal data is stored when a report is verified via its Test-ID. To fend off automated bulk queries, your IP address is processed briefly for technical purposes, but it is not stored permanently and not merged with other data.

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address line changing from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing, as well as a right to rectification, blocking or deletion of this data.

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal message by email to us is sufficient. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

You also have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format (data portability). If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). Persons in the EU/EEA may additionally contact their national data protection authority.

For any privacy matters you can reach us at info@certalys.ch.

We hereby object to the use of contact details published on this website for sending advertising and information material not expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.