Privacy Policy

At this point we would like to inform you about the processing of your personal data
in connection with your visit to the website “https://www.hfs-ag.ch” (the “Website”).
The protection of privacy and your personal data is important to us.

1. RESPONSIBLE PARTY
The responsible party within the meaning of the General Data Protection Regulation (“GDPR”) with regard to the processing of
personal data in connection with the Website is (unless otherwise stated in this Privacy Policy; see section 3(II) below) the:

HFS Helvetic Financial Services AG
Center Staldenbach 5
CH-8808 Pfäffikon SZ

2. DATA PROTECTION OFFICER
You can reach our data protection officer at the following contact details:

Data Protection Officer
CORESTATE Capital Group
Friedrich-Ebert-Anlage 35-37 | Tower 185
60327 Frankfurt am Main, Germany
E-mail: datenschutz@corestate-capital.com
Telephone: +49 69 3535630-139

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
directly to our data protection officer.

3. PROCESSING OF YOUR DATA
(i) processing of data in the case of purely informational use of the website
In the case of merely informative use of the website, i.e. if you do not actively transmit information to us, we generally do not collect any personal data (subject to the further information in this data protection declaration), with the exception of the data that your browser automatically transmits, in particular to enable you to visit the website. This includes, for example:

– IP address of the requesting computer
– Date and time of the access in each case transferred data volume
– Browser type and browser version
– Operating system used
– referrer URL

The aforementioned processing of personal data is basically carried out for the purpose of enabling the use of the website (connection establishment) or to improve the attractiveness and usability of the website and, if necessary, to detect technical problems and faults on the website at an early stage.
In individual cases, individual data (information regarding the browser; see above) is stored for a maximum period of four weeks. Insofar as the processing of the aforementioned data involves personal data, the corresponding processing of this data is based on Art. 6 (1) sentence 1 lit. f DSGVO (legitimate interest; the legitimate interest follows from the aforementioned purposes).

(II) CONTACT FORMS.
If you contact us via the contact forms provided on the website, the personal data you provide in this context (such as your name, e-mail address) will be processed in order to respond to your request.
The legal basis for the processing of the aforementioned personal data is Art. 6 para. 1 p. 1 lit. f DSGVO (legitimate interests; the legitimate interest arises from the fact that only through appropriate data processing can the action desired by the user (e.g. answering an inquiry) be carried out). If the contact aims at the conclusion of a contract, then (additionally) Art. 6 para. 1 p. 1 lit. b DSGVO (contract performance or pre-contractual measures) is the legal basis for the processing.

Please note that with regard to individual contact forms on the website, not only CORESTATE Capital Holding S.A. processes the corresponding personal data, but also technical service providers (order processors) of CORESTATE Capital Holding S.A., if applicable. (cf. section 4 below) and the following companies affiliated with CORESTATE Capital Holding S.A., if a corresponding request concerns one of these companies:

– Corestate Capital Group GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Tel.: 0049 (0)69 3535630-0, e-mail: datenschutz@corestate-capital.com

– Corestate Capital Advisors GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Tel.: 0049 (0)69 3535630-0, E-Mail: datenschutz@corestate-capital.com

– Corestate Capital Investors (Europe) GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Tel.: 0049 (0)69 3535630-0, E-Mail: datenschutz@corestate-capital.com

In this case, (i) you will be informed in direct connection with the relevant contact form that your inquiry will (also) be sent to one of the aforementioned companies, and (ii) the respective company will (also) be the responsible party for the relevant data processing in connection with your inquiries via the contact form. The information in this privacy statement under sections 2 and 4 to 7 applies accordingly to these companies with regard to the aforementioned processing of personal data concerning a contact form.

(III) COOKIES
The website partly uses so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser.
We use so-called session cookies to recognize that you have already visited individual pages of our website. Session cookies are only stored for the duration of your access to the website and are automatically deleted when you close the browser or leave the website. These cookies do not contain any personal data, but merely identify the browser used to access the website. They are used to make the website more user-friendly, effective and secure or to make it easier for you to navigate through the website.

We also use so-called temporary cookies. These enable specific information related to the device to be stored on the user’s access device (PC, smartphone or similar), even beyond one session. They are used, for example, to retain page settings for future visits to the website. These cookies remain stored on your terminal device for a maximum period of four weeks (usually for a shorter period). These cookies enable us to recognize your browser on your next visit.

The aforementioned cookies are used to the greatest possible extent to carry out the electronic communication process or to provide certain functions requested by you (e.g. shopping cart function). The legal basis for the corresponding processing of personal data is Art. 6 para. 1 p. 1 lit. f DSGVO (legitimate interest; the legitimate interest follows from the above-mentioned purposes, in particular optimization of website use).

As a rule, you can configure your browser so that no cookies are stored or a notice always appears before a new cookie is created. However, deactivating cookies may mean that you cannot (fully) use all the functions of our website.

Insofar as other cookies or cookie-like tools (e.g. tools for analyzing your surfing behavior) are used on or in connection with the website, these are treated separately in this data protection declaration (see in particular below under section 3(V)).

(IV) IT THEMES SECURITY
This website uses the tool “iThemes Security”. In this context, the IP addresses of visitors to the Website are processed in order to detect malicious activities and to protect the Website from certain types of attacks. The IP addresses are only stored in one of our local databases and are not transmitted to third parties. The legal basis for the corresponding processing of personal data is Art. 6 para. 1 p. 1 lit. f DSGVO (legitimate interest; the legitimate interest is that we need to protect the website against corresponding attacks by third parties).

(V) GOOGLE TOOLS
GOOGLE ANALYTICS
The Website uses – (with regard to your visit to the Website) if you give your consent when (first) visiting the Website – Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on the website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

This website uses IP anonymization in the aforementioned sense.

You may refuse the use of cookies (after giving your consent) by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of the website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google Analytics, please click here:
http://www.google.com/analytics/terms/de.html, http://www.google.de/intl/de/policies/privacy/
and at Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

We have concluded an order processing agreement with Google (see also below under point 4).

GOOGLE MAPS
On this website, you may be able to use content from Google’s “Google Maps” service. With each individual call of “Google Maps”, a cookie is set by Google in order to process user settings and data when displaying the page on which “Google Maps” is integrated. As a rule, this cookie is not deleted by closing the browser, but expires after a certain time, unless you delete it manually beforehand. If you do not agree to this processing of your data, you have the option of deactivating the “Google Maps” service and preventing the transfer of data to Google in this way. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or only to a limited extent. However, the data processing described above will only be carried out (with regard to your visit to the website) if you give us the corresponding consent when you (first) visit the website (if you do not give such consent, Google Maps content on the website will not be available or will only be available to a limited extent).
For more information on the purpose and scope of data collection and processing by Google, please refer to the relevant Google privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy

GOOGLE ADS
We use the Google Ads offer from Google to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers’ websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of ads, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

You can prevent participation in this procedure in various ways: a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers; b) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; c) by permanent deactivation in your browsers Firefox, Internetexplorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

GOOGLE WEB FONTS
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google web fonts are installed locally on our server (in this respect, data processing may take place as described above under section 3(I); cf. also the information there on the relevant legal basis). A connection to Google servers does not take place.

INTEGRATION OF YOUTUBE VIDEOS
On this website, we may integrate YouTube videos from the online video platform “YouTube” of the operator YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are stored on YouTube servers and can be played directly from our website (YouTube, LLC is a subsidiary of Google).

The videos are integrated in the so-called extended data protection mode, which means that personal data about you as a user is only transmitted to YouTube when you play the videos. We have no influence on this data transmission. This data transmission takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google at the same time, your data will be directly assigned to your account. If you do not wish to have your data associated with your YouTube profile, you must log out before playing the video (or waive your consent to the corresponding data processing when (first) accessing the website; see below). YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

In addition, when you (first) access the website, a notice window will open that also contains information about YouTube content on the website. Only if you give your consent in this context, the above data processing will take place (if you do not give such consent, YouTube content on the website will not be available or will only be available for use).

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy regarding YouTube. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

FURTHER INFORMATION ON THE TOOLS MENTIONED IN ITEM 3(V).
The legal basis for the aforementioned processing of your personal data in connection with Google Analytics, Youtube and Google Maps is Art. 6 para. 1 p. 1 lit. a DSGVO (consent; you can revoke the corresponding consents at any time with effect for the future).
The legal basis for the aforementioned processing of your personal data in connection with Google Ads is Art. 6 para. 1 p.

1 lit. f DSGVO (legitimate interests). The legitimate interest here is that we have a legitimate economic interest in understanding whether, and how (often) the website is used or how we can successfully advertise. The interests of the website users, on the other hand, are not affected in this context, or only to a very limited extent (since the data processed in this context only allows an allocation with difficulty and no particularly critical data is processed). Against this background, our legitimate interests outweigh the interests of the user.

If applicable, personal data of you will be processed in the USA in connection with the aforementioned tools (see above). Google has undertaken to comply with the Privacy Shield Agreement between the EU and the USA on the collection, use and storage of personal data from EU member states published by the US Department of Commerce. Google has declared by certification that it complies with the relevant Privacy Shield principles. The EU Commission expects the United States to provide adequate legal protection for personal data transferred under the Privacy Shield from the EU to self-certified organizations in the United States. For more information, please visit: https://www.privacyshield.gov/EU-US-Framework

(VI) USE OF SOCIAL MEDIA PLUGINS
Plugins from social networks are used on our pages (e.g. from Facebook, Twitter, Instagram, XING, LinkedIn; further information on the tools used can be found below).

You can recognize these plugins on the website by the respective social media logos. Some of the tools we use (Twitter, Facebook, Instagram, LinkedIn, Matterport) would in principle (without the precautions we take) transmit certain personal data to the providers of these plugins directly when you visit the website. To prevent this, we use plugins from such providers only in conjunction with the so-called “Avada” solution. This application prevents the plugins integrated on the website from transmitting data to the respective provider of the corresponding plugins as soon as the user first enters the website.

Only when you activate the respective plugin by clicking the corresponding button, a connection to the provider’s server may be established.

If you activate the plugin, the respective provider usually receives the information that you have visited the website with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, the respective provider may be able to assign your visit to the website to your user account.

The activation of the plugin described above constitutes consent to the aforementioned processing of personal data (you grant consent by pressing the corresponding button; Art. 6 para. 1 p. 1 lit. a DSGVO; you will find further information in the immediate vicinity of the corresponding buttons) . You can revoke this consent at any time with effect for the future.

FACEBOOK
The website uses share plugins of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (e.g. white “f” on blue tile, the terms “Like”, “Like” or a “thumbs up” sign). When a user activates a corresponding Facebook plugin by pressing the corresponding button, his browser establishes a direct connection with Facebook’s servers (cf. for details above under “Use of social media plugins”).

LINKEDIN
A share plugin of LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA is integrated on our website. LinkedIn is a social network that allows users to connect with existing business contacts as well as make new business contacts.
When a user activates a corresponding LinkedIn plugin by pressing the corresponding button, his browser establishes a direct connection with the servers of LinkedIn (cf. for details above under “Use of social media plugins”).

LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.

Information on LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. The applicable privacy policy of LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.

XING
The website uses a so-called “share button” of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. When you click the corresponding button, a connection to the Xing servers is established via your browser. Your personal data relating to the call-up of this website will not be stored in the process. In particular, XING does not store IP addresses. Nor is your usage behavior evaluated. The current information on data protection with regard to the Xing share button and other relevant information can be found at https://www.xing.com/app/share?op=data_protection.

TWITTER
Our website uses share plugins from the Twitter service of Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA.
With the help of this plugin, it is possible, for example, to share a post or a page of this website via Twitter or to follow us on Twitter. As further content, individual tweets in particular can be integrated into the website.

When a user activates a corresponding Twitter plugin by pressing the corresponding button, his browser establishes a direct connection with the servers of Twitter (cf. for details above under “Use of social media plugins”).

Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy.

INSTAGRAM
Our website uses share plugins from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”.
When a user activates a corresponding Instagram plugin by pressing the corresponding button, his browser establishes a direct connection with the servers of Instagram (cf. for details above under “Use of social media plugins”).

For more information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, please refer to Instagram’s privacy policy at https://help.instagram.com/155833707900388/.

MATTERPORT
We use components of the video or photo network provider Matterport on our site. Matterport is a service of Matterport, Inc, 352 East Java Drive, Sunnyvale, CA 94089, USA.

When a user activates a corresponding Matterport plugin by pressing the corresponding button, his browser establishes a direct connection with the servers of Matterport (cf. for details above under “Use of social media plugins”).
Further information on data protection and Matterport can be found at https://matterport.com/legal/privacy-policy/.

FURTHER INFORMATION ON THE AFOREMENTIONED TOOLS
The operators of the services Twitter, Instagram and Matterport mentioned above under item 3(VI) process personal data of you (possibly also) in the USA. Twitter and Matterport have committed to comply with the Privacy Shield Agreement between the EU and the USA on the collection, use and storage of personal data from EU member states published by the US Department of Commerce. These providers have declared by certification that it complies with the relevant Privacy Shield principles. The EU Commission assumes that the United States will provide adequate

legal protection for personal data transferred under the Privacy Shield from the EU to self-certified organizations in the United States. For more information, please visit: https://www.privacyshield.gov/EU-US-Framework Instagram ensures an adequate level of data protection in third countries outside the EU (e.g., the U.S.) by implementing sufficient safeguards, including the so-called standard contractual or standard data protection clauses approved by the EU Commission with regard to data transfers from the EU to the U.S.. Further information on this can be found at https://help.instagram.com/519522125107875. For more information on the standard contractual clauses used by Instagram, please contact Instagram.

WHATSAPP
The website uses a so-called WhatsApp sharing button. Unlike other social plugins, this is an HTML link programmed by ourselves, which creates a native deep link into your WhatsApp application. Data is therefore only transmitted to WhatsApp when a user activates the link AND forwards information within their WhatsApp application to a friend (so we do not directly transmit data to third parties (esp. the provider of WhatsApp) in this context).

4. TRANSFER OF DATA TO THIRD PARTIES.
The personal data collected in the course of using the website will – subject to other cases expressly described in this privacy policy – not be disclosed to third parties or transmitted in any other way without your consent.

We may use (technical) service providers who process personal data on our behalf (e.g. IT service providers). These service providers process the corresponding personal data exclusively in accordance with our instructions (order processors). The legal basis for such data processing is Art. 28 DSGVO (commissioned processing) in conjunction with, as a rule, Art. 6 (1) sentence 1 lit. f DSGVO (legitimate interest; cf. on the corresponding legitimate interest above).

We may disclose your personal data to third parties if we are legally obliged to do so (e.g. at the request of a court or law enforcement agency). The legal basis for such data processing is Art. 6 para. 1 sentence 1 lit. c DSGVO (legal obligation).

5. DURATION OF STORAGE OF YOUR PERSONAL DATA
Insofar as no other storage period results from the other regulations of this data protection declaration, we only store your personal data obtained by us in connection with the use of the website for as long as this is necessary, in particular, to process your inquiries to us or only for the period of time that is necessary to achieve the purpose of storage, thereafter only to the extent and insofar as we are obligated to do so due to mandatory legal storage obligations. If we no longer need your data for the purposes described above, it will only be stored during the respective statutory retention period and not processed for other purposes.

6. DATA SUBJECT RIGHTS
You have the right to request information from us at any time about the personal data we hold about you. Insofar as the legal requirements are met, you also have rights vis-à-vis us to correct, delete or restrict the processing of the relevant personal data and the right to object to the processing of your personal data by us and to receive from us the personal data relating to you that you have provided to us in a structured, common and machine-readable format (you may transmit this data to other bodies or have it transmitted).

If you have given your consent to the use of personal data, you can revoke this consent at any time for the future.
If you believe that the processing of personal data concerning you by us violates applicable data protection law, you may lodge a complaint with the competent data protection supervisory authority.

7. SECURITY OF YOUR DATA
The data you provide us with is protected by appropriate technical and organizational means to protect it from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously monitored and improved in accordance with technological developments and organizational possibilities.