Privacy policy

Our data privacy philosophy

bbv Software Services AG takes the protection of your personal data very seriously. We treat personal data confidentially and comply with applicable statutory data protection regulations and this Privacy Policy.

Depending on the data processed and the circumstances, Swiss data protection law, European data protection law including the General Data Protection Regulation, or other national law may apply.

This Privacy Policy applies to your use of bbv websites and their content and explains what data we collect when you visit our websites or use our offerings and how we process and use it. It does not apply to linked websites of other providers or to the processing of employees' and customers' personal data.

Contact data

This Privacy Policy applies to data processing by the following controllers and supervisory authorities.

Controller in Switzerland

bbv Software Services AGBlumenrain 106002 Luzern, SwitzerlandMail: info@bbv.chTelephone: +41 41 429 01 11

Controller or representative in the EU

bbv Software Services GmbHAgnes-Pockels-Bogen 180992 Munich, GermanyMail: info@bbv.euTelephone: +49 89 452 4383-0

Supervisory authority for Switzerland

Federal Data Protection and Information Commissioner (EDÖB)Feldeggweg 13003 Bern, Switzerland

Lead supervisory authority for the EU

Bavarian State Office for Data Protection SupervisionPostfach 60691511 Ansbach, GermanyMail: poststelle@lda.bayern.deTelephone: +49 (0) 981 53 130

Processing of personal data: nature, purpose and use of the data

3.1 When you visit bbv's websites

When you visit our websites, your browser automatically sends information to our web server. This information is stored temporarily in a log file until it is automatically erased.

The recorded information can include your browser and version, operating system, referrer URL, pages or files requested, host name, request time and IP address.

We use this information to establish connections, make the websites convenient to use, analyse security and stability, and perform statistical analysis. We do not use it to identify you or create user profiles. Session cookies are deleted when your session ends, while logs are retained in accordance with statutory requirements.

3.2 Online application under “Jobs”

When you apply for a job on our websites, we process the information required to assess your suitability and handle the application process. If you are hired, the data is forwarded to HR and stored in your personnel file.

Application data is automatically erased no later than six months after you are notified that your application was rejected, unless you explicitly consent to storage in our prospective applicant database.

Form of address, surname and first name
E-mail address
Telephone number
Preferred place of work
Application documents or a link to a LinkedIn or XING profile

3.3 Job advertisements on LinkedIn, XING and Stack Overflow

When you interact with our job advertisements or use a job search function on these platforms, profile data may be shared with us. Depending on how you interact with an advertisement, this can include your name, e-mail address, preferred place of work, profile information, training and education, previous employers and uploaded CVs.

We use this information to assess your suitability and handle the application process. The platforms control their own further processing, advertising and retention activities.

3.4 Online application on Yousty.ch

Young people can apply for a work trial or apprenticeship through Yousty.ch. We assume that under-age applicants have obtained the consent of a parent or guardian.

We process the application data to assess suitability, handle the application and, where permitted, retain the documents for a future opportunity. The data is erased according to the applicable retention rules unless continued storage has been agreed.

Form of address, surname and first name
E-mail address
Telephone number
Preferred place of work
Application documents such as a CV, certificates or testimonials

3.5 Booking of an academy course online

When you enrol for an academy course, we process the information required to handle the course and, where applicable, send a newsletter. Additional voluntary information may help us handle registration and queries more quickly.

Form of address, surname and first name
Postal address and e-mail address
Consent to the General Terms and Conditions
Telephone number, company, function and separate invoice address where provided voluntarily

3.6 Participation in an online course

We use Zoom to hold online courses. Depending on the information you provide and the functions you use, this can include your name, e-mail address, meeting metadata, device information, telephone number, start and end time, chat or survey entries, audio and video data.

This information is processed to hold the online course. Further processing and retention by Zoom are governed by Zoom's own privacy policy.

3.7 Participation in a webinar

We use Zoom to hold webinars. The data processed can include registration information, meeting metadata, device information, chat or survey entries, audio and video data and participation details.

After a webinar, we may compare the participant list with customer information. Non-customers may subsequently be contacted by e-mail for consent to add their contact data to our customer list.

3.8 E-mail communication

If you contact us by e-mail, we process the contact data you provide to reply to your enquiry. E-mail is not a secure means of transferring data; for confidential or sensitive information, we recommend using an encrypted communication channel.

Form of address, surname and first name
E-mail address
Postal address, if provided

3.9 Sending of the bbv newsletter

We use a double opt-in procedure for newsletters. We only send a newsletter after you explicitly confirm your subscription.

HubSpot processes information such as newsletter opens, clicked links, IP address, browser and operating system for statistical campaign analysis. Newsletter data is stored until you cancel your subscription and is then deleted from our and HubSpot's systems where applicable.

Cookies

4.1 Fundamentals

Some bbv websites use cookies. Session cookies are deleted when your visit ends. Temporary cookies can remain on your device for a defined period to improve usability and remember settings.

Technically necessary cookies are used on the basis of our overriding private interests. Technically unnecessary cookies are used only with your voluntary consent, which you can withdraw through the cookie settings or by deleting stored cookies.

4.2 Technically necessary cookies

A consent cookie stores the current status of your cookie settings. It does not process personal data and is necessary for the technical operation of the websites. It is automatically deleted after one year.

4.3 Technically unnecessary optional cookies

Optional cookies and tracking measures help us analyse use of the websites and continuously improve the offering. They are used only after explicit consent and are not necessary for website functionality.

4.3.1 Google Tag Manager and Google Analytics

Google Tag Manager helps manage website tags. Google Analytics uses cookies and can process device, browser, truncated IP address and website activity data for statistical analysis. Google Analytics is used only with explicit consent.

4.3.2 LinkedIn Insight Tag

The LinkedIn Insight Tag can collect IP address, device and browser characteristics and page events. The data is encrypted and deleted after 90 days. It may also support retargeting and is used only with the required consent.

5.1 Facebook plug-ins

Facebook functions can establish a direct connection between your browser and Facebook and transmit your IP address and the fact that you visited our website. The functions are used for marketing only with your explicit consent.

5.2 X, formerly Twitter

X functions can link pages you visit to your X account and share information with other users. X can receive your IP address and the fact that you visited our website. The functions are used only with explicit consent.

5.3 XING

XING functions can link pages you visit to your XING account and disclose information to other users, including your IP address and the fact that you visited our website.

5.4 LinkedIn

When you use a LinkedIn button, a connection to LinkedIn can be established and LinkedIn can be informed that you visited our website. The function is used for marketing only with explicit consent.

5.5 YouTube

YouTube videos are embedded using extended data protection mode. If you play a video, YouTube can be informed of your IP address and the fact that you visited our website. This processing is subject to explicit consent.

5.6 Leadinfo

Leadinfo helps identify visits by companies using IP addresses and publicly available company information. It also uses first-party cookies and can analyse email interactions. Leadinfo provides opt-out options for website and email tracking.

5.7 HubSpot

HubSpot helps analyse website use and can link certain usage data to registration information stored in its CRM. This enables tailored information and offers. Processing is based on our legitimate interest, and you can object by contacting us.

We maintain presences on LinkedIn, XING and YouTube to present our company and maintain contact with customers, suppliers, employees and other people. When you visit these presences, the operators may record personal data such as your IP address and cookie information.

bbv and the relevant operator can be joint controllers for data collected on social media. We use this information, among other things, to obtain statistical information and for marketing. Further processing and retention are governed by the respective operator's policy.

Transmission of data to third parties

Your personal data is not transferred to third parties for purposes other than those specified in this Privacy Policy.

Technology providers help us operate the websites and social media presences and provide the services described above. Personal data may also be made available to companies within our group where required for these purposes.

International transfer to third countries

Data is not transferred to third countries without an adequate level of data protection, or is transferred only where the recipient has contractually undertaken to provide an adequate level of protection, for example through EU standard contractual clauses.

Data security

We protect personal data through technical and organisational security measures against unauthorised access, accidental or intentional manipulation or misuse, destruction and loss. Our measures are continuously improved to reflect technological developments.

Personal data includes information relating to an identified or identifiable person, such as a name, address, telephone number, e-mail address or IP address. Our websites use SSL encryption to protect the transmission of confidential content.

Your rights

Depending on applicable national and international law, you can exercise the following rights as a data subject. We may process your personal data again to handle your request.

Request information about and access to your personal data, including purposes, categories, recipients, retention periods and the origin of data not collected from you.
Request rectification of incorrect or incomplete personal data.
Request restriction of processing in the cases provided by law.
Receive personal data you provided in a structured, commonly used and machine-readable format or request transmission to another controller.
Request erasure of personal data unless a legal exception applies.
Withdraw consent with future effect where processing is based on consent.
Object to processing based on legitimate interests or to direct marketing and lodge a complaint with a supervisory authority.

Up-to-dateness and amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy or adapt it to new methods of processing at any time. The latest version is available on this page.