Privacy Policy

Version 2.0 – 12 October 2022

This privacy policy (“Privacy Policy“) explains how we process and protect your personal data when you use our Webapp (app.cahuu.com & app.cahuu.ch) or our services provided via the website (together the “Platform“).

The Platform is operated by cahuu GmbH, Max-Högger-Strasse 6, 8048 Zurich, Switzerland (“cahuu“, “we“, “our“, or “us”).

Unless otherwise defined in this Privacy Policy or our Terms and Conditions, the definitions used in this Privacy Policy have the same meaning as in the Swiss Federal Act on Data Protection.

1 Personal Data

We may collect the following personal data about you when you use our Platform:

1.1 Customers

1.1.1 Name

Purpose of processing:

To conclude a contract

Retention period: 2 years

1.1.2 Contact data (email, phone number, address)

Purposes of processing:

To conclude a contract
CRM
Marketing

Retention period: 2 years

1.1.3 Pickup Address

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.1.4 Delivery Address

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.1.5 Geolocation

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.1.6 Bank account

Purposes of processing:

To conclude a contract (repayment)

Retention period: 2 years

1.1.7 Type of transported Goods

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.1.8 Date of birth

Purposes of processing:

To conclude a contract
Marketing
Analytics

Retention period: 2 years

1.2 Carriers

1.2.1 Name

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.2 Contact data (email, phone)

Purposes of processing:

CRM
Marketing
To conclude a contract

Retention period: 2 years

1.2.3 Geolocation

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.4 Nationality

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.5 Passport, ID

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.6 Picture

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.7 Employment background

Purposes of processing:

To conclude a contract

Retention period: 2 years

1.2.8 Bank account

Purposes of processing:

Salary payment

Retention period: 2 years

1.3 Job applicants

1.3.1 Employment background

Purposes of processing:

Recruitment
To conclude a contract

Retention period: 6 months

1.3.2 Financial data

Purposes of processing:

Salary payment

Retention period: 6 months

1.3.3 Home address

Purposes of processing:

To conclude a contract

Retention period: 6 months

1.3.4 Nationality

Purposes of processing:

Recruitment
To conclude a contract

Retention period: 6 months

1.3.5 Passport, ID

Purposes of processing:

Recruitment
To conclude a contract

Retention period: 6 months

1.3.6 Picture

Purposes of processing:

Recruitment
To conclude a contract

Retention period: 6 months

2 How We Collect Personal Data

We collect information about you when you use our Platform, including taking certain actions within it.

Directly

When you access, use, or otherwise interact with our Platform.
When you correspond with us by electronic means.
When you sign up to receive our newsletter and other marketing material.

Indirectly

From third parties, such as social media plugins and third-party cookies.

3 Legal Basis and Purposes

Our legal basis for collecting and using the personal data described in this Privacy Policy depends on the personal data we collect and the specific purposes for which we collect it.

Contract: To perform our contractual obligations or take steps linked to a contract with you.

To provide and protect our Platform and services.
To conclude labour contracts and pay out salaries.
To administer, manage and develop our business and services.

Consent: We may rely on your freely given consent at the time you provided your personal data.

To provide you with news, special offers, newsletters, and general information about goods and services which we offer (with your explicit consent).

Legitimate interests: We may rely on legitimate interests based on our evaluation that the processing is fair and reasonable.

To maintain and improve our Platform and services.
To develop new services.

Public interest: To meet regulatory and public interest obligations.

To comply with applicable regulation and legislation.

4 Data Storage and Retention

We retain your personal data only for as long as is necessary for the purposes set out in Section 3 of this Privacy Policy, and to the extent necessary to comply with our legal obligations, resolve potential disputes and enforce our legal agreements and policies.

5 Service Providers and Data Transfers

We may employ third party companies (“Service Providers“) to facilitate the operation of our Platform, assist us in analysing how our Platform is used, or perform Platform-related services, such as payment or IT infrastructure services. These third parties have access to your personal data only and insofar as necessary to perform these tasks on our behalf and are required to safeguard it in accordance with our contractual obligations and applicable data protection legislation.

Such safeguards may include transfer to countries that have been deemed to provide an adequate level of protection according to lists of countries published by the Federal Data Protection and Information Commissioner; applying standard data protection model clauses, binding corporate rules or other standard contractual obligations which provide for appropriate protection of data.¨

We work in particular with the following service providers:

Facebook

This website uses functions of Meta Platforms, Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. When you call up our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. In the process, data is already transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions such as using the comment function or clicking the “Like” or “Share” button are also passed on to Facebook. You can learn more at https://facebook.com/policy.php

Google Ads

This website uses the online marketing tool Google Ads by Google. Google Ads uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Google Ads can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later buys something on the advertiser’s website using the same browser. According to Google, Google Ads cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. Through the integration of Google Ads, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, your visit can be assigned to your Google account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will obtain and store your IP address.

You can prevent participation in this tracking process in various ways:

by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
by disabling conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com, https://adssettings.google.com, which setting will be deleted when you delete your cookies;
by disabling interest-based ads from the providers that are part of the About Ads self-regulatory campaign, through the link https://www.aboutads.info/choices, with this setting being deleted when you delete your cookies;
by permanently disabling them in your Firefox, Internet explorer or Google Chrome browsers at the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer in full.

The legal basis for the processing of your data is a balancing of interests, according to which the processing of your personal data described above is not opposed by any overriding interests on your part (Art. 6 para. 1 p. 1 lit. f DSGVO). Further information on Google Ads from Google can be found at https://ads.google.com, as well as on data protection at Google in general: https://policies.google.com/privacy .

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located outside the European Economic Area or Switzerland, then the Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as Google.

The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data”, “Personal data”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

Google Tag Manager

This website uses Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). The Google Tag Manager allows us to manage and bundle tags from Google’s and third party services and embed them into an online presence. Tags are small pieces of code on an online presence that can be used to measure traffic and behavior, measure the impact of online advertising and social channels, use remarketing and targeting, and test and optimize online presence. Google Tag Manager will trigger other tags that may collect data. Google Tag Manager does not access this data.

For more information about the Google Tag Manager, please visit http://www.google.com/intl/de/tagmanager/faq.html and Google’s privacy policy: https://policies.google.com/privacy?hl=de

With the following link you can deactivate the use of your personal data by Google: adssettings.google.de

LinkedIn

This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our pages that contains functions of LinkedIn, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you click the “Recommend Button” of LinkedIn and are logged into your account at LinkedIn, it is possible for LinkedIn to assign your visit to our website to you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.

For more information on this, please refer to LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy

Mailchimp

The newsletter is sent using the dispatch service provider ‘MailChimp’ of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO and an order processing agreement pursuant to Art. 28 para. 3 p. 1 DSGVO.

The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

You can find more information on this in Mailchimp’s privacy policy at: https://mailchimp.com/legal/privacy

6 Data Disclosure

We may disclose your personal data in the good faith belief that such action is necessary:

To comply with a legal obligation (i.e. if required by law or in response to valid requests by public authorities, such as a court or government agency);
To protect the security of the Platform and defend our rights or property;
To prevent or investigate possible wrongdoing in connection with us;
To protect ourselves against legal liability.

7 Data Security

We take reasonable technical and organizational security measures that we deem appropriate in order to protect your stored data against manipulation, loss, or unauthorized third-party access. Our security measures are continually adapted to technological developments.

We also take internal data privacy very seriously. Our employees and the Service Providers that we retain are required to maintain secrecy and to comply with applicable data protection legislation. In addition, they are granted access to personal data only insofar as this is necessary for them to carry out their respective tasks or mandate.

The security of your personal data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We recommend that you use antivirus software, a firewall, and other similar software to protect your system.

8 Data Protection Rights

You have the below data protection rights on the basis of the Swiss Federal Act on Data Protection. Please note that we may ask you to verify your identity before responding to such requests.

Right of access: You have a right to request a copy of your personal data, which we will provide to you in an electronic form.
Right to amendment: You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you.
Right to withdraw consent: If you have provided your consent to the processing of your personal data, you have the right to withdraw your consent. This includes cases where you wish to opt out from marketing communications. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal basis for processing. To stop receiving emails from us, please click on the ‘unsubscribe’ link in the email you received.
Right to erasure: You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, or when it was unlawfully processed.
Right to restriction of processing: You have the right to request the restriction of our processing of your personal data where you believe it to be inaccurate, our processing is unlawful, or where we no longer need to process it for the initial purpose, but where we are not able to delete it due to a legal obligation or because you do not want us to delete it.
Right to portability: You have the right to request that we transmit your personal data to another data controller in a common format such as Excel, where this is data which you have provided to us and where we are processing it on the legal basis of your consent or in order to perform our contractual obligations.
Right to object to processing: Where the legal basis for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have a compelling legal basis for the processing which overrides your interests, or if we need to continue to process the personal data for the exercise or defence of a legal claim.
Right to lodge a complaint with a supervisory authority: You have the right of appeal to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch/edoeb/en/home.html).

9 Links to Third-Party Apps and Sites

Our Platform may contain links to websites or apps that are not operated by us. If you click a third-party link, you will be directed to that third party’s site or app. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

10 Cookie Policy

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.

Our Platform uses these cookies to collection information and to improve our Platform. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Platform.

11 Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We therefore encourage you to review this Privacy Policy periodically for any changes.

Changes to this Privacy Policy are effective when they are posted on this page.

12 Contact Us

If you have any questions about this Privacy Policy, please contact us at: info(at)cahuu.ch.