Privacy Policy

This privacy notice applies to the CDQ Group (collectively “CDQ”, “we”, “us”, “our”). It explains what personal data we process, why and on what legal basis we process it, who we share it with, and the rights and choices you have.

Who is responsible

The organisation responsible for the personal data described here is:

We have appointed a Data Protection Officer, Dr. Clément Labadie, who can be reached with any privacy or data-protection question atdpo@cdq.com.

Your rights and choices

Subject to the applicable data-protection law, you have the right to:

• Information — receive information about the processing of your personal data by CDQ, before and during the processing, upon request.
• Access — receive a copy of the personal data we currently process about you, upon request.
• Rectification — request the correction of inaccurate personal data.
• Erasure — request the deletion of your personal data, unless there are lawful grounds for us to continue processing it.
• Objection — object to processing on grounds relating to your particular situation.
• Restriction — request that we restrict processing while a rectification or objection is verified, where processing is unlawful, or where we no longer need the data but you require it for legal claims.
• Withdrawal of consent — withdraw your consent at any time, for example using the dedicated link in the communications you receive from us.

To exercise any of these rights, contact our Data Protection Officer atdpo@cdq.com. You may also lodge a complaint with the data-protection supervisory authority of your country.

CDQ cloud services

Our clients use the CDQ Cloud Suite to assess and improve the quality of their business-partner data. On their behalf we process business-partner records, which may include:

• Legal name
• Legal form
• Tax and identification numbers
• Address(es)
• IBAN account number(s)
• Hierarchy relations

We process this data to generate data-quality assessment reports and to apply corrective data-quality rules, on the basis of our customer contracts and our legitimate interest in delivering these services. Records for our cloud services are stored in the EU — in Germany and Ireland — and are encrypted both “at rest” (in our databases) and “in transit” (when transferred between your browser and our cloud platform).

CDQ website

When you visit and interact with our website, we may process:

• First and last name
• Email address
• Company and industry
• Job description
• IP address
• Web logging and browsing data

We use this data to respond to enquiries, to manage newsletter and marketing subscriptions where you have given consent, and — on the basis of our legitimate interest — to understand and improve how our website is used.

Cookies and tracking

Necessary cookies are required for the website to function and cannot be switched off. Analytics cookies help us understand how visitors engage with the site; you can accept or decline them through the cookie notice shown on your first visit. We use the following services:

• HubSpot — marketing, forms and analytics (sets both necessary and analytics cookies).
• Google Analytics — statistical data such as the time of your visit, the pages you viewed, and how you arrived at our website.
• Google Ads — measurement of our advertising.
• DataDog — website performance and usage analytics.
• LinkedIn — analytics and marketing.

Some pages embed third-party content such as YouTube videos; where you interact with those services, their own privacy policies also apply.

Email communication

When you correspond with us by email, we process the contact details and content you provide in order to respond and to document our communication.

CDQ events and webinars

When you register for a CDQ event or webinar, we process your registration data:

• First and last name
• Email address
• Company and industry
• Job description

For webinars we also process attendance data such as your IP address and webinar logging data. Web conferencing is provided by LogMeIn (GoToWebinar), and attendance data is exported to CDQ systems for follow-up. Webinars may be recorded and subsequently made available publicly on our website and social-media channels.

CDQ contacts and clients

For representatives of our customers, we process:

• First and last name
• Email address
• Phone number
• Digital signature
• IP address and timestamps of various user actions

We process this data to provide product support, manage contracts, send service notifications and analyse usage, on the basis of our customer contract and our legitimate interest.

Data sharing and international transfers

We share personal data with carefully selected sub-processors who help us provide our website and services — for example analytics and marketing (Google, HubSpot), web conferencing (LogMeIn) and contract management. Where we work with sub-processors, we have Data Processing Agreements and Standard Contractual Clauses in place to protect your data.

Depending on the service, data may be stored on servers in Switzerland, the European Union or the United States of America. Whenever possible, we select data-storage locations among EU member states and Switzerland.

Data security

We apply risk-appropriate technical and organisational security measures and generally accepted security standards to protect your personal data, both during transmission and once we have received it.

Contact

For any privacy or data-protection matter, contact our Data Protection Officer, Dr. Clément Labadie, at dpo@cdq.com, or write to CDQ AG, Lukasstrasse 4, 9008 St. Gallen, Switzerland.