Privacy Policy
1. What is this privacy notice about?
Essence Origin GmbH (hereinafter also referred to as “we”, “us”) collects and processes personal data concerning you or other individuals (so-called “third parties”). Here, we use the term “data” interchangeably with “personal data” or “personally identifiable data”. In this privacy notice, we describe what we do with your data when you use CHE-382.732.022, our other websites or our apps (collectively, the “Website”), use our services or products, otherwise interact with us in the context of a contract, communicate with us or otherwise have dealings with us. If applicable, we will inform you in advance in writing about additional processing activities not mentioned in this privacy notice. We may also inform you separately about the processing of your data, for example in consent forms, terms of contract, additional privacy notices, forms and notices. This privacy notice is designed to comply with the requirements of the EU General Data Protection Regulation (“GDPR”) and the Swiss Federal Act on Data Protection (“FADP”). However, whether and to what extent these laws apply depends on the individual case.
2. Who is responsible for processing your data?
For the data processing activities described in this privacy notice, Essence Origin GmbH, Suhr (the “Essence Origin GmbH”), is responsible for data protection purposes, unless otherwise stated in the individual case.
You can contact us regarding your data protection concerns and the exercise of your rights under Section 11 as follows:
Essence Origin GmbH
Bahnhofstrasse 6
5034 Suhr
Switzerland
3. What data do we process?
We process various categories of data about you. The main categories are as follows:
Technical data
When you use our website or other electronic offers, we collect the IP address of your device and other technical data to ensure the functionality and security of these offers. This data also includes logs recording the use of our systems. We generally retain technical data for 6 months. To ensure the functionality of these offers, we may also assign you or your device an individual code. Technical data alone generally does not allow us to infer your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, it may be linked with other categories of data (and thus, if applicable, with you).
Registration data
Certain offers and services may only be used with a user account or registration, which may be carried out directly with us or through our external login service providers
and may require you to provide us with certain data, while we collect data about the use of the offer or service. We generally retain registration data for 12 months after the end of the use of the service or the termination of the user account.
Communication data
When you contact us via the contact form, by email, telephone, post or other means of communication, we collect the data exchanged between you and us, including your contact details and the metadata of the communication. If we want or need to establish your identity, we collect data to identify you (e.g. a copy of an ID). We generally retain this data for 12 months from the last exchange with you. This period may be longer if required for evidence purposes or to comply with legal or contractual requirements, or if technically necessary. Emails in personal mailboxes and written correspondence are generally retained for at least 10 years.
Master data
We refer to master data as the basic data we require, in addition to contractual data (see below), to process our contractual and other business relationships or for marketing and advertising purposes, such as your name, contact details and information about, for example, your role and function, your bank details, your date of birth or your customer history. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person for the business partner), or because we want to contact you for our own purposes or for the purposes of a contracting party (e.g. in the context of marketing and advertising). We receive master data from you directly (e.g. during a purchase or registration), from the organizations you work for, or from third parties such as our contracting partners, associations and address data providers, and from publicly available sources such as public registers or the internet (websites, etc.). We generally retain this data for 10 years from the last exchange with you, but at least until the end of the contract. This period may be longer if required for evidence purposes or to comply with legal or contractual requirements, or if technically necessary. For pure marketing and advertising contacts, the period is normally significantly shorter, usually no more than 2 years from the last contact.
Contractual data
This is data that arises in connection with the conclusion or processing of a contract, e.g. details about contracts and the services to be provided or provided, as well as data from the preliminary stages of concluding a contract, the details required or used for processing, and information about reactions. We generally collect this data from you, from contracting partners and from third parties involved in the processing of the contract, but also from third-party sources (e.g. credit reporting agencies) and from publicly available sources. We generally retain this data for 10 years from the last contractual activity, but at least until the end of the contract. This period may be longer if required for evidence purposes or to comply with legal or contractual requirements.
You provide us with many of the data mentioned in Section 3 yourself (e.g. via forms, during communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, subject to individual cases. If you want to conclude contracts with us or claim services, you must also provide us with data as part of your contractual obligations under the relevant contract, in particular master, contractual and registration data. When using our website, the processing of technical data is unavoidable.
Where this is not impermissible, we also extract data from publicly available sources or receive data from authorities and other third parties.
4. For what purposes do we process your data?
We process your data for the purposes we explain below. These purposes or the underlying objectives represent our legitimate interests and, if applicable, those of third parties.
We process your data for purposes related to communicating with you, in particular to answer inquiries and assert your rights and to contact you with follow-up questions. For this purpose, we use communication data and master data, and in connection with offers and services you use, also registration data. We retain this data to document our communication with you, for training purposes, for quality assurance and for follow-up questions.
We further process data, among other things, for the acceptance, management and processing of contractual relationships, for marketing purposes and relationship management, for market research, to improve our services and operations, for product development, to comply with laws, instructions and recommendations from authorities and internal regulations (compliance), and for other purposes, e.g. in the context of our internal processes and administration.
5. On what basis do we process your data?
Where we ask you for your consent for certain processing activities, we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time by written notice (by post) or, where not otherwise stated or agreed, by email; our contact details can be found in Section 2. For revoking your consent to online tracking, see Section 12. If you have a user account, revocation or contact with us may also be carried out via the relevant website or other service. As soon as we receive the notice of revocation of your consent, we will no longer process your data for the purposes you originally agreed to, unless we have another legal basis for doing so. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of consent up to the time of revocation.
Where we do not ask you for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or processing of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, in particular to pursue the purposes and associated objectives described above in Section 4 and to take corresponding measures. Our legitimate interests also include compliance with legal requirements, insofar as these are not already recognized as a legal basis under the applicable data protection law.
In individual cases, other legal grounds may apply, which we will communicate to you separately where necessary.
6. What applies to profiling and automated individual decisions?
We may automatically assess certain of your personal characteristics based on your data (Section 3) for the purposes mentioned in Section 4 (“profiling”), not only to determine preferences but also to identify abuse and security risks, conduct statistical evaluations or for operational planning purposes. For the same purposes
we may also create profiles, i.e. we may combine behavioral and preference data, as well as master and contractual data and technical data associated with you, to better understand you as an individual with your different interests and other characteristics.
In both cases, we ensure that the results are proportionate and reliable and take measures against the misuse of these profiles or profiling. If these may have legal effects or result in significant disadvantages for you, we generally provide for a manual review.
7. Who do we disclose your data to?
In connection with our contracts, the website, our services and products, our legal obligations or otherwise to safeguard our legitimate interests and the further purposes listed in Section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:
Service providers
We work with service providers in Germany and abroad who, on our behalf or under joint responsibility, process data about you or receive data about you from us under their own responsibility.
Authorities
We may pass on personal data to offices, courts and other authorities in Germany and abroad if we are legally obliged or authorized to do so or if this appears necessary to safeguard our interests.
Contracting partners including customers
This primarily refers to customers (e.g. service users) and other contracting partners of ours, because this data transfer arises from these contracts. If you work for such a contracting partner yourself, we may also pass on data about you to them in this context. The recipients also include contracting partners with whom we cooperate.
Other individuals
This refers to other cases where the inclusion of third parties arises from the purposes under Section 4.
All these categories of recipients may themselves involve third parties, so that your data may also become accessible to them. We may restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
8. Is your personal data also transferred abroad?
As explained in section 7, we also disclose data to other parties. These are not only located in Switzerland. Your data can therefore be processed both in Europe and in any country in the world.
If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with applicable data protection (for this purpose we use the European Commission's revised standard contractual clauses, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? ), unless it is already subject to a legally recognised framework ensuring data protection and we
cannot rely on an exemption. An exemption may apply, for example, in the case of legal proceedings abroad, but also in cases of overriding public interest or if contract fulfilment requires such disclosure, if you have consented or if the data has been made generally available by you and you have not objected to its processing.
Please also note that data exchanged over the internet is often routed through third countries. Your data can therefore be transferred abroad even if the sender and recipient are located in the same country.
9. How long do we process your data?
We process your data for as long as is required by our processing purposes, statutory retention periods and our legitimate interests in processing for documentation and evidentiary purposes, or as technically required for storage. Further information on the respective storage and processing duration can be found for each data category in section 3 or for the cookie categories in section 12. Unless there are any legal or contractual obligations to the contrary, we delete or anonymise your data after the storage or processing period expires as part of our usual procedures.
10. How do we protect your data?
We implement appropriate security measures to maintain the confidentiality, integrity and availability of your personal data, to protect it against unauthorised or unlawful processing and to prevent the risks of loss, accidental alteration, unauthorised disclosure or unauthorised access.
11. What rights do you have?
To make it easier for you to control the processing of your personal data, depending on the applicable data protection law, you also have the following rights in connection with our data processing:
- the right to request information from us as to whether and what data we process about you;
- the right to have us correct data if it is incorrect;
- the right to request the deletion of data;
- the right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
- the right to withdraw consent, insofar as our processing is based on your consent;
- the right to request further information that is necessary for the exercise of these rights;
- the right, in the case of automated individual decisions (section 6), to state your point of view and request that the decision be reviewed by a natural person.
If you wish to exercise the above rights towards us, please contact us in writing, in person at our premises or, unless otherwise stated or agreed, by email; our contact details can be found in section 2. So that we can rule out misuse,
we must identify you (e.g. with a copy of your ID, unless this is not otherwise possible).
Please note that under applicable data protection law, requirements, exceptions or limitations apply to these rights (e.g. to protect third parties or trade secrets). We will inform you accordingly if necessary.
If you do not agree with our handling of your rights or data protection, please let us know (section 2). In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to complain to the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_de. You can contact the supervisory authority of the United Kingdom here: https://ico.org.uk/global/contact-us/. You can contact the Swiss supervisory authority here: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html.
12. Do we use online tracking and online advertising techniques?
On our website, we use various techniques that enable us and third parties we engage to recognise you during your use and, in certain cases, to track you across multiple visits. In this section, we inform you about this.
Essentially, this is so that we can distinguish your access (via your system) from the access of other users, enabling us to ensure the functionality of the website and to perform evaluations and personalisations. We do not intend to infer your identity, even if we can, insofar as we or third parties we engage can identify you by combining this with registration data. However, even without registration data, the techniques used are designed to recognise you as an individual visitor on every page visit, for example by having our server (or the third parties' servers) assign you or your browser a specific identification number (so-called "cookie").
We use such techniques on our website and allow certain third parties to do so as well. You can configure your browser to block, spoof or delete certain cookies or alternative techniques. You can also extend your browser with software that blocks tracking by certain third parties. Further information on this can be found on your browser's help pages (usually under the heading "Privacy") or on the websites of the third parties we list below.
The following cookies are distinguished (techniques with comparable functionality, such as fingerprinting, are also included here):
Necessary Cookies
Some cookies are necessary for the website to function or for certain functions. For example, they ensure that you can move between pages without losing information entered in a form. They also ensure that you remain logged in. These cookies are only temporary ("session cookies"). If you block them, the website may not work. Other cookies are necessary so that the server can store decisions or inputs you make beyond a session (i.e. a visit to the website), if you use this function (e.g. selected language, granted consent, the function for automatic login, etc.). These cookies have an expiry date of up to 24 months.
Performance Cookies
To optimise our website and corresponding offers and better adapt them to the needs
of users, we use cookies to record and analyse the use of our website, in certain cases beyond the session. We do this by using analysis services from third-party providers. We have listed these below. Performance cookies also have an expiry date of up to 24 months. Details can be found on the third-party providers' websites.
Marketing Cookies
We and our advertising contractual partners are interested in targeting advertising precisely to the intended audience, i.e. displaying it only to those we want to reach as far as possible. We have listed our advertising contractual partners below. For this purpose, we and our advertising contractual partners also use cookies, provided you consent, with which the accessed content or concluded contracts can be recorded. This enables us and our advertising contractual partners to display advertising that we assume will interest you, on our website, but also on other websites that display advertising from us or our advertising contractual partners. Depending on the situation, these cookies have an expiry period of a few days to 12 months. If you consent to the use of these cookies, you will be shown corresponding advertising. If you do not consent to these cookies, you will not see less advertising, but simply some other advertising.
In addition to marketing cookies, we use further techniques to target online advertising on other websites and thereby reduce waste. For example, we can transmit the email addresses of our users, customers and other persons to whom we want to display advertising to operators of advertising platforms (e.g. social media). If these persons are registered there with the same email address (which the advertising platforms determine by comparison), the operators display the advertising we have placed targeted at these persons. The operators do not receive personal email addresses of persons who are not already known. However, for known email addresses, they learn that these persons are in contact with us and what content they have accessed.
We can also embed further third-party offers on our website, in particular from social media providers. These offers are disabled by default. As soon as you activate them (e.g. by clicking a switch), the respective providers can determine that you are on our website. If you have an account with the social media provider, it can assign this information to you and thus track your use of online offers. These social media providers process this data under their own responsibility.
We currently use offers from the following service providers and advertising contractual partners (insofar as they use data from you or cookies placed by you for advertising targeting):
Google Ireland
Google Ireland (with its registered office in Ireland) is the provider of the "Google Analytics" service and acts as our data processor. Google Ireland relies on Google LLC (with its registered office in the USA) as its data processor (both "Google"). Google uses performance cookies (see above) to track the behaviour of visitors on our website (duration, frequency of pages visited, geographical origin of access, etc.) and creates reports for us based on this. We have configured the service so that the IP addresses of visitors are truncated by Google in Europe before being forwarded to the USA and therefore cannot be traced. We have switched off the "Data Sharing" and "Signals" settings. Although we assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of the visitors from this data for its own purposes, create personal profiles and link this data with the Google accounts of these persons. If you agree to the use of Google Analytics, you explicitly consent to such processing, which also includes the transmission of personal data (in particular website and app usage data, device information and individual IDs) to the USA and other countries.
Information on the data protection of Google Analytics can be found here [https://support.google.com/analytics/answer/6004245] and if you have a Google account, further information on processing by Google can be found here [https://policies.google.com/technologies/partner-sites?hl=de].
Google AdSense
Our website uses Google AdSense, a service for embedding advertising from Google Inc. ("Google"). For this advertising embedding service, Google AdSense uses so-called "cookies", text files that are stored on your computer and enable an analysis of the use of the website. In addition, Google AdSense also uses web beacons (invisible graphics). Due to the web beacons, information such as website visitor traffic can be evaluated. Based on the cookies and the web beacons, information about the use of our website, including your IP address, is generated. The delivery of advertising formats is then transferred to a Google server in the USA and stored there, as with Google Analytics. The stored information can then be passed on by Google to its contractual partners. Nevertheless, the information Google collects about your IP address is not combined with other data you have stored. If this collection of information based on your stay on our page is not in your interest, you can prevent the storage or installation of the cookies through a corresponding setting in your browser software. At the same time, we would like to inform you that in this case you cannot fully use all the functions of this website. By using this website, you agree to the processing of the data collected about you by Google in the manner described above and for the purpose stated above.
X
Our websites incorporate plugins from the microblogging network X Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. You can identify the X plugins (Tweet button) by the X logo on our site. An overview of the Tweet button can be found at https://dev.X.com/. When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the X server. X thus receives information that you visited our page with your IP address. If you click the "Tweet button" while logged into your X account, you can link the content of our pages to your X profile. This allows X to associate your visit to our pages with your user account. We point out that as the provider of the pages, we receive no knowledge of the content of the transmitted data or its use by X. Further information on this can be found in X's privacy policy. If you do not want X to be able to associate your visit to our pages, please log out of your X user account.
Our websites use so-called social plugins from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted directly by Instagram to your browser and embedded in the page. Through this embedding, Instagram receives information that your browser visited the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA and stored there. If you are
logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights and privacy settings in this regard, please refer to Instagram's privacy notices: https://help.instagram.com/155833707900388/. If you do not want Instagram to immediately associate the data collected about our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with browser add-ons, e.g. with the script blocker "NoScript" (http://noscript.net/).
Our pages incorporate plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can identify them by the Facebook logo or the "Like button" ("Gefällt mir") on our page. An overview of possible Facebook plugins can be found at the following link: http://developers.facebook.com/docs/plugins/. Due to these Facebook plugins (Like button), a direct connection is established between your browser and the Facebook server if you visit our pages. Through your visit, Facebook receives information that you visited our pages with your IP address. If you now click on the Facebook "Like button" (Gefällt mir) on our pages while simultaneously logged into your Facebook account, the content of our pages will be linked to your Facebook profile. Consequently, Facebook can associate your visit to our page with your user account. We, as the service provider, point out that as the website provider, we receive no knowledge of the content of the transmitted data or its use by Facebook. Therefore, for further information regarding Facebook's privacy policy, we refer to the following link: http://de-de.facebook.com/policy.php. If you do not want Facebook to associate your visit to our website with your Facebook user account, we ask you to log out of your Facebook user account during your visit to our website.
13. Can this privacy policy be changed?
This privacy policy is not part of a contract with you. We can adapt this privacy policy at any time. The version published on this website is the currently valid version.
Last updated: 30.06.2026