Privacy Policy

General Notice

Last updated on: 23.02.2026
‍
Transparent handling of personal data is very important to us. This data protection statement provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.

Which Services We Use

  • Highlevel
  • Webflow
  • Google Tag Manager
  • Google ads
  • Google Ads conversion tracking
  • Linkedin ads
  • Google customer reviews
  • Google My Business
  • Cookie-script
  • Microsoft 365
  • Google Workspace
  • Recruitee

contact information

If you have any questions or concerns about how to protect your data, you can always email us at info@callista.ch or call +41 43 540 56 85. Responsible for data processing by this website is:
‍
Callista Group AG
General-Guisan-Strasse 8
6300 Zug
Switzerland

Callista ACE
General-Guisan-Strasse 8
6300 Zug
Switzerland

Callista Data Engineering AG
General-Guisan-Strasse 8
6300 Zug
Switzerland
‍

General Principles

What data we collect from you and from whom we receive this data

  • personal master data (name, address, dates of birth, etc.);
  • contact information (mobile number, email address, etc.);
  • financial information (such as account information);
  • online identifiers (e.g. cookie identifier, IP addresses);
  • location and traffic data;
  • sound and image recordings;
  • particularly sensitive data (e.g. biometric data or information about your health).

We primarily process personal data that you provide to us or that we collect when operating our website. We may also receive personal information about you from third parties. These may include the following categories:

Under which conditions do we process your data?

We process your information fairly and for the purposes set out in this privacy statement. In doing so, we ensure transparent and proportionate processing. If we are unable to comply with these principles in exceptional cases, data processing may still be lawful because there is a justification. In particular, a justification may be:

  • your consent;
  • the implementation of a contract or pre-contractual measures;
  • our legitimate interests, unless your interests prevail.

How can you withdraw your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of that consent, unless we have another justification. You can withdraw your consent at any time by sending an e-mail to the address given in the Impressum. Data processing that has already been carried out remains unaffected by this.

In which cases can we share your information with third parties?

a) Principle

We may need to rely on the services of third parties or affiliated companies and commission them to process your data (so-called contract processors). Categories of recipients include in particular:

  • accounting, trust and audit companies;
  • consulting firms (law, tax, etc.);
  • IT service providers (web hosting, support, cloud services, website design, etc.);
  • payment service providers;
  • providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliated companies comply with data protection requirements and keep your personal information confidential. We may also be required to share your personal information with government agencies.

b) Social media

We may have embedded links to our social media channels on our website. This is visible to you in each case (usually through corresponding icons). If you click on the icons, you will be redirected to our social media channels. In this case, social media providers learn that you are accessing their platform from our website. Social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data and its use by the operators.

c) Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are committed to data protection to the same extent as we are. The transmission can be carried out worldwide. If the level of data protection does not match that in Switzerland, we carry out a risk assessment beforehand and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. by means of the new standard contractual clauses of the EU Commission or other measures required by law). If our risk assessment is negative, we will take additional technical measures to protect your data. The EU Commission's standard contractual clauses can be found under the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

How long do we keep your data?

We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected.

Data that we save when you visit our website is kept for twelve months. An exception is analysis and tracking data, which can be kept for a longer period of time. We store contract data longer because we are required to do so by legal regulations. In particular, we must keep business communications, concluded contracts and accounting records for up to 10 years. If we no longer need this data from you to provide the services, the data will be blocked and only used for accounting and tax purposes.

How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse, or alteration.

Our contract partners and employees who have access to your data are required to comply with data protection regulations. In some cases, it will be necessary for us to forward your inquiries to companies affiliated with us. Even in these cases, your data will be kept confidential.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser.

What are your rights?

a) Right to information

You can request information about the data we have stored about you at any time. We invite you to submit your request for information at
together with proof of identity to info@callista.ch You also have the right to receive your data in a common file format when we process your data automatically and when:

  • you have given your consent to process this data; or
  • You have passed on data in connection with the conclusion or performance of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests, or the interests of a third party. The processing of your request is subject to the legal processing period of 30 days. However, we may extend this period due to a high volume of inquiries, for legal or technical reasons, or because we need more detailed information from you. You will be notified of the deadline extension in good time, at least in text form.

b) Deletion and correction

You have the option to request the deletion or correction of your data at any time. We may reject the request if we are required by law to keep the data longer or unchanged, or if your request is contrary to a legal obligation.

Please note that the exercise of your rights is contrary to contractual agreements and may have corresponding effects on the execution of the contract (e.g. premature contract termination or cost consequences).

c) Legal action

If you are affected by the processing of personal data, you have the right to assert your rights in court or to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

Privacy Policy Changes

We may change this privacy policy at any time. The changes are set out at callista.ch published, you will not be notified separately.

Individual data processing operations

Provision of the website and creation of log files

By visiting callista.ch or callista-group.com is certain data automatically stored on our servers or on servers of services and products that we obtain and/or have installed, for system administration, statistical or backup purposes, or for tracking purposes. These are:

  • the name of your Internet service provider;
  • your IP address (in certain circumstances);
  • the version of your browser software;
  • the operating system of the computer with which the URL is accessed;
  • the date and time of access;
  • the website from which you are accessing the URL;
  • the search terms you used to find the URL.

This data cannot be attributed to specific persons and there is no merging of this data with other data sources. The log files are stored to ensure the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest. The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of the respective session. The storage of log files is absolutely necessary for the operation of the website, so you have no option to object.

Highlevel

Our website uses Highlevel, a service provided by Highlevel Inc. for various marketing and sales activities. HubSpot is an integrated software solution that we use for our inbound marketing activities, lead generation, email marketing, CRM (customer relationship management), and contact form management. When you visit our website or interact with us using the forms provided on our website, certain information about your visit is collected and stored. This includes your IP address, the date and duration of your visit, the pages you visit, and information about the browser and operating system you use. If you contact us via a form, the data you provide (e.g. name, email address) will also be stored. Highlevel uses cookies to analyze the behavior of visitors to our website. This helps us improve the user experience on our website and make our marketing activities more effective. The information collected by Highlevel helps us to better tailor our marketing and sales activities to the needs of our visitors and customers, maintain and optimize our customer relationships, and measure the effectiveness of our marketing campaigns. Data processing is carried out securely and in accordance with applicable data protection regulations. Highlevel is certified under the EU-US Data Protection Regulation and is committed to complying with all data protection requirements applicable in the European Union (EU).

Webflow

Our website is hosted and operated by Webflow, Inc. Accordingly, we use the services of Webflow, Inc. to provide and manage our website. When a visitor accesses our website, personal access data is automatically collected, such as the requesting device, the web browser you use and the operating system of your device, the IP address of the requesting device, the inquiries and answers sent to your device, the website from which our website was accessed, and your behavior on our website (e.g. pages visited, time spent, and interactions). In addition, Webflow uses technical cookies, which are necessary for the website to function properly. The collection of this personal data and the integration of Webflow as part of your visit to our website and the associated data processing is necessary to ensure the provision, security and performance of the website, based on our legitimate interest in the technically flawless and efficient operation of our online presence. The data collected by Webflow can be stored on servers in the USA. Webflow, Inc. is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection in accordance with the requirements of the GDPR.

For more information about Webflow's privacy policy, please see Webflow's privacy policy at https://webflow.com/legal/privacy.

Google Tag Manager

To manage website tags via an interface, we use Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not process any personal data. The service triggers other tags, which in turn can collect data. Google Tag Manager has no access to this data. If a deactivation has been made at the domain or cookie level, it persists for all tracking tags implemented with Google Tag Manager. By using Google Tag Manager, scripts (so-called tags) can be automatically activated on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you use, the sub-pages of our website visited, and other interactions during your visit to the website.

Google Ads

On our website, we use the Google Ads service, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Ads allows us to place ads in Google search results and on the Google advertising network.

Google Ads Conversion Tracking

We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking. Google Ads Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie is set on your device for conversion tracking. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. The information obtained using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users. You can prevent cookies from being saved by making the appropriate technical settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. They will then not be included in the conversion tracking statistics. In addition, you can deactivate personalized advertising for you in Google's advertising settings. Instructions on how to do this can be found at https://support.google.com/My-Ad-Center-Help/answer/12155764

Linkedin Ads

On our website, we use advertising services from LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). LinkedIn Ads enable us to deliver targeted advertising based on users' interests and behavior. LinkedIn uses cookies and similar technologies to serve ads based on your previous visits to our and other websites. This allows us to measure and optimize the effectiveness of our advertising measures. The information collected by LinkedIn Ads is anonymous to us, which means that we do not receive any personal data from individual users. However, LinkedIn stores and processes this data so that a link to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with the LinkedIn privacy policy.

If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected through LinkedIn Ads will be linked to your LinkedIn account. The purpose of using LinkedIn Ads is to analyze and optimize the effectiveness of our advertising measures. Data processing is based on our legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.

Linkedin Insight Day

We have integrated the LinkedIn Insight Tag on our website, a tool from LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The LinkedIn Insight Tag allows us to collect information about visitors to our website, in particular about the type of LinkedIn features that visitors to our website use and how they interact with these features. This tool helps us create targeted ads on the LinkedIn platform and measure the effectiveness of those ads. By using the LinkedIn Insight Tag, cookies are set on your device that allow pseudonymous data to be collected, such as the URL of the page you visited, the referrer URL, the IP address (in abbreviated form), device and browser properties, and time stamps. The data collected with the LinkedIn Insight Tag is anonymous to us, i.e. we do not receive any personal data from individual users. However, LinkedIn stores and processes this data so that it can be linked to the respective user profile and LinkedIn can use the data for its own advertising purposes in accordance with LinkedIn's privacy policy. If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected via the LinkedIn Insight Tag will be linked to your LinkedIn account. The purpose of using the LinkedIn Insight Tag is to analyze and optimize the effectiveness of our advertising measures. Data processing is based on our legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.

Google Customer Reviews

On our website, we use the Google Customer Reviews service, which is offered by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Customer Reviews allows our customers to give us feedback about their buying experience with us and helps us improve our service quality and customer experience. After making a purchase on our website, you may be invited to participate in a Google Customer Reviews survey. If you choose to participate, Google will send you a survey where you can rate your experience with us. The information you provide is processed and summarized by Google to give us an overall picture of customer satisfaction. When you use Google customer reviews, data, including your IP address, the date and time of the survey, and your reviews, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. If you don't want to participate in Google Customer Reviews, you can simply ignore or decline the survey invite. For more information about Google's data collection and privacy practices with regard to Google Customer Reviews, please see Google's privacy policy at https://www.google.de/intl/de/policies/privacy/ as well as in the information specifically about Google Customer Reviews.

Google My Business

On our website, we use features from Google My Business, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google My Business allows companies to manage their presence on Google, including Google Search and Google Maps, and interact with customers. By visiting our website or interacting with our Google My Business listing, such as leaving reviews or asking questions, data, in particular your IP address and the content of your interactions, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. Google uses this information to provide Google My Business services, to make it easier for users to interact with companies, and to provide us with reports and analytics about the interactions and performance of our business listing.

Cookie-Script

Our website uses Cookie-Script, a service provided by Objectis Ltd., for cookie consent and compliance with regulations. Cookie-Script helps us obtain and manage our users' consent for cookies and online tracking in accordance with legal requirements. When you visit our website, CookieScript may collect information about your consent choices and your interaction with the consent pop-up. This information is used to ensure that only the cookies and tracking technologies that you have consented to are activated on your device.

Microsoft 365

For various office and communication tasks, we use Microsoft 365, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft 365 offers a range of productivity tools, including email (Outlook), document storage (OneDrive), collaboration tools (teams), and office applications such as Word, Excel, and PowerPoint. When you contact us, for example via email, or when we approve documents, these interactions are processed and stored via Microsoft 365. Our data is stored on Microsoft servers in Switzerland. In addition, Microsoft has implemented various security and privacy measures to protect its customers' data.

Recruitee

We publish numerous job advertisements directly on Recruitee B.V.. Accordingly, we use Recruitee B.V.'s services to organize and process the application. When a visitor visits the Recruitee website, personal access data is automatically collected, such as the requesting device, the web browser you use and the operating system of your device, the IP address of the requesting device, the inquiries and responses sent to your device, the website from which the Recruitee website was accessed, and your behavior on the Recruitee website. The collection of personal data and the integration of Recruitee as part of your visit to our Recruitee website and the associated data processing is necessary to monitor and improve the recruitment process and the performance of the Recruitee website, based on our legitimate interest in efficiently designing our internal processes and services. In addition, the following personal application data may be processed as part of the application process, in particular, but not exclusively, any personal data that you provide to us via the application form: name, email address, telephone number, picture, cover letter, resume, LinkedIn profile and the position you have applied for, status, notes and plans relating to your application and email communication. The collection of your personal data and the involvement of Recruitee as part of the application process and the associated data processing is necessary to carry out pre-contractual measures.

For more information about Recruitee's privacy policy, please see Recruitee's Privacy Policy.

BrainBox

BrainBox Generators is a service provided by BrainBox Solutions GmbH , to identify all privacy-relevant services on a website and, among other things, to help create the privacy policy. No personal data is collected or processed in the process.

‍