Privacy Policy

1. General Information

This Privacy Policy explains how personal data is collected, used, and processed when using the GieniABX platform and website ("Platform"), operated by Orderfox Schweiz AG.

We are committed to protecting your personal data and ensuring transparency in how it is used.

2. Controller

The controller responsible for data processing is:

3. Data We Collect

We may collect and process the following types of personal data:

• › Contact data (e.g. name, email address)
• › Account data (e.g. login details, user preferences)
• › Usage data (e.g. interactions with the Platform)
• › Technical data (e.g. IP address, device type, browser information)
• › Tracking data (e.g. cookies, UTM parameters, analytics data)

Personal data may be collected when:

• › Visiting the website
• › Submitting forms
• › Creating an account
• › Using the Platform

4. Purpose of Data Processing

We process personal data for the following purposes:

• › Providing and operating the Platform
• › Managing user accounts
• › Processing requests and inquiries
• › Improving services and user experience
• › Analytics and performance tracking
• › Marketing and communication (where permitted)
• › Ensuring security and preventing misuse

5. Legal Basis

Data processing is based on:

• › Consent (Art. 6(1)(a) GDPR)
• › Performance of a contract (Art. 6(1)(b) GDPR)
• › Legal obligations (Art. 6(1)(c) GDPR)
• › Legitimate interests (Art. 6(1)(f) GDPR)

Where consent is required, users can withdraw it at any time.

6. Cookies and Tracking

We use cookies and tracking technologies to analyze website usage, improve performance, measure marketing campaigns, and store user preferences. This includes first-party cookies, UTM parameter tracking, session tracking and Google Analytics 4. Where you have consented via our cookie banner (Marketing category), we additionally use Google Signals, the LinkedIn Insight Tag and the Meta Pixel for advertising, remarketing and retargeting, as described in sections 6.1 to 6.3. You can manage or withdraw your consent at any time via the cookie banner or our Cookie Settings.

6.1 Google Analytics Advertising Features and Google Signals

Google Analytics Advertising Features and Google signals - We use Google Analytics 4 together with Google Signals. When enabled, and where you have consented to marketing/advertising cookies via our cookie banner (Marketing category), these features help us understand how visitors use our website across different devices and to deliver and measure advertising, including remarketing (showing you relevant ads on other websites and services after you have visited ours). Where you are signed in to a Google account and have enabled Google's "Ads Personalization" setting, Google may associate your visit information with your Google account and use it to provide these advertising and cross-device measurement features. This association is performed by Google as an independent controller under its own privacy terms; we do not receive or store this signed-in information ourselves. Where personal data is transferred to Google LLC in the United States, such transfers are based on the EU-U.S. and Swiss-U.S. Data Privacy Framework, under which Google is certified. You can withdraw your consent at any time through our cookie settings. You can also control or opt out of Google's ads personalization at adssettings.google.com, and prevent Google Analytics collection using Google's browser add-on at tools.google.com/dlpage/gaoptout. For more information on how Google uses data, see policies.google.com/technologies/partner-sites.

6.2 LinkedIn Insight Tag and Retargeting

LinkedIn Insight Tag & Retargeting - We use the LinkedIn Insight Tag on our website to measure campaign performance, track conversion events, and deliver personalized retargeting advertisements to LinkedIn members. The tag collects metadata including IP addresses, device/browser characteristics, visited URLs, referrer, and timestamps. According to LinkedIn, direct identifiers are removed within seven days to pseudonymize the data, and the remaining pseudonymized data is deleted within 180 days. This processing takes place only where you have consented via our cookie banner (Marketing category), and you can withdraw your consent at any time through our cookie settings. With respect to the collection and transmission of this data, we and LinkedIn Ireland Unlimited Company act as joint controllers; LinkedIn's subsequent processing is carried out under its own responsibility and privacy policy. Where personal data is transferred to LinkedIn in the United States, such transfers are based on the EU-U.S. and Swiss-U.S. Data Privacy Framework, under which Microsoft/LinkedIn is certified. You can manage or opt out of interest-based advertising at any time in your LinkedIn account settings under "Advertising data" or through our site's Cookie Settings.

6.3 Meta Pixel and Custom Audiences

Meta Pixel & Custom Audiences - We utilize the Meta Pixel on our website to analyze campaign performance and deliver targeted advertisements to users across Facebook and Instagram. The pixel processes technical metadata, device indicators, visited pages, and event data. This processing takes place only where you have consented via our cookie banner (Marketing category), and you can withdraw your consent at any time through our cookie settings. With respect to the collection and transmission of this data via the pixel, we and Meta Platforms Ireland Ltd. act as joint controllers; Meta's subsequent processing is carried out under its own responsibility and data policy. Where personal data is transferred to Meta Platforms, Inc. in the United States, such transfers are based on the EU-U.S. and Swiss-U.S. Data Privacy Framework, under which Meta is certified. You can manage your ad preferences or opt out of interest-based ads via your Meta account settings or through our site's Cookie Settings.

7. AI and Data Processing

The Platform uses artificial intelligence to process data and generate outputs.

8. Data Sharing

We may share data with:

• › Service providers (e.g. hosting, analytics tools)
• › Group companies within Orderfox
• › Legal authorities where required

Data is only shared:

• › With legal basis
• › Under data processing agreements
• › In compliance with GDPR

9. International Transfers

If data is transferred outside the EU/EEA:

• › Appropriate safeguards are implemented
• › Standard Contractual Clauses (SCCs) may be used

10. Data Retention

Personal data is stored only as long as necessary for:

• › The purposes described
• › Legal obligations
• › Business requirements

11. Data Security

We implement technical and organizational measures to protect data, including:

• › Encryption
• › Access control
• › Secure data transmission

12. User Rights

Users have the right to:

• › Access their data
• › Correct inaccurate data
• › Request deletion (right to be forgotten)
• › Restrict processing
• › Data portability
• › Object to processing
• › Withdraw consent at any time

Users may also lodge a complaint with a supervisory authority.

13. Changes to this Policy

We may update this Privacy Policy from time to time.

Users will be informed of significant changes where required.