3. What do we understand by personal data?
4. When do we collect your data?
In general, personal data can be collected, used, stored, erased or transferred (“processing”) whenever we contact you, you interact with us, communicate with us or obtain services from us.In the course of your business relationship and interaction with us, we will collect personal data directly from you. We may also collect personal data from other sources (e.g., public registers, the Internet, other Group companies, from authorities, from third parties or credit rating agencies, etc.).We will be in contact with you under various circumstances, in particular we may collect personal data in the following situations. The following list is only an exemplary overview:The creation or editing of your member profile;The ordering services from us;Communication with us;You make use of our customer support;You receive a newsletter or other advertisements concerning our services;You contact us via our contact form; orCommunicate with us by telephone, fax, e-mail, voice messages, text messages, video messages, chat, or instant messaging.
5. Which personal data do we process?
As part of our business activities and the performance of services, we process various personal data for different purposes. Depending on the service, we collect such data either automatically or manually.In particular the following categories of personal data may be collected and processed by us:Personal and contact information, including, but not limited to; first and last name, residential or business address, billing address(es), shipping address(es), telephone number, email address, date of birth, gender, occupation, etc;data relating to the business relationship with you.Also relating to offers, requests for quotations, agreements, financial solvency, claims, other personnel involved in the business relationship;Data in connection with products and services marketing, in particular regarding information such as opt-in and opt-out for newsletters, documents received, invitations to and participation at events and other activities, as well as preferences and interests in general;Data in connection with the use of a website, apps, and our other offers, in particular IP address and other identifiers (e.g., MAC address and other identifiers of smartphones, computers or other devices, cookies, etc.), date and time of visits, websites and content visited, linked websites;Data relating to communication, such as preferred means of communication, correspondence and communications with us and other entities of the Group, etc;
6. For what purposes do we use the personal data?
We or other group companies process your data primarily to provide our services and contractual obligations to you. In addition to our customers, personal data of users, suppliers and subcontractors may also be processed. If you work in any capacity for customers or business partners (e.g., as an employee), your personal data might also be processed in connection with the below listed purposes. We are committed to minimize data processing to the minimum necessary amount. Yet, your data may be processed for various purposes.In addition to processing for the purpose of providing our services and fulfilling contracts, we process your personal data in particular, but not limited, for the following purposes:Depending on the applicable law, the processing of personal data may require us to state a legal basis. Therefore, we have added a reference to a legal basis for each purpose.In connection with the use and performance of our services, we process your personal data for the following purposes:business planning;the execution and processing of offers;The exchange of information;In connection with the conclusion of a contract;A credit assessment;For the performance, delivery, and processing of services;The organization and implementation of customer support;For internal coordination or for the coordination with sub-contractors.The data processing is based on the performance or pre-contractual measures of the contract and on a legitimate interest of ours (to keep our records updated and to avoid or recover debts due to us).In connection with communication, we process personal data for the following purposes:To communicate with you when you contact us (e.g., via a contact form or chat);To communicate important information, such as changes to our terms and conditions, adjustments to services or prices that directly affect customers;To administer and carry out customer communications by post or via electronic means of communication.To communicate with third parties and process their requests (e.g. applications, media enquiries).To maintain and develop customer and other business relationships;Within the scope of acquiring new customers;For the communication of events, promotions, advertising, and marketing (including the sending of newsletters or other electronic messages; this is described in more detail below under Newsletter)].The data processing is based on the performance or pre-contractual measures of the contract and on a legitimate interest of ours. By contacting us directly you implicitly consent to the processing of such data for the purpose of communicating with you.We may process personal data for the purpose of operating, analyzing and further developing our services, in particular our digital offerings:The development, operation, administration, and maintenance of our digital offers require or might lead to the identification and the processing of personal data.For the analysis of our digital offers (websites, online platforms, and apps);For evaluations concerning the services we procure and general customer behaviour;For statistical evaluation on the basis of anonymised user data.For market and opinion research, media monitoring. The data processing is necessary for our legitimate interests (to study how customers use our products/services, to develop them, grow our business, to keep our digital offers updated, to innovate, and to and to inform our marketing strategy).We also process personal data to protect you and your personal data, to generally ensure adequate data security, to comply with regulatory and legal requirements and to effectively combat fraud:To ensure secure operations;To monitor the general terms and conditions, the general rules of conduct, and the legal requirements;To monitor and control access to our digital services;For general risk management;Asserting legal claims and defending in connection with legal disputes and official proceedings;To prevent and resolve criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud).The data processing is necessary to comply with a legal obligation or our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud or misuse of our websites or apps. For other purposes, where there is legal obligation to process data, if such processing was recognizable from the circumstances or appropriate at the time of collection.
7. When do we send out a newsletter?
There are two reasons why you may receive direct marketing communication and advertising (e.g., newsletters) from us via means of telecommunications (e.g., e-mail or SMS).Either you have registered yourself (e.g., for a newsletter) or we have received your contact information when you purchased services from us. If you, as a customer, do not wish to receive such information, you always have the option to opt-out. You can either write to us to the above contact information or click directly on the unsubscribe link in the marketing message.If you subscribe to our newsletter through our signup field you will receive an email containing a hyperlink immediately after signing up. By clicking on this link, you confirm your newsletter registration (double opt-in method). If this registration confirmation is not received within one week, we will delete the e-mail address from our temporary list and a registration will not have taken place.By confirming the newsletter registration, you give your consent to the storage of your e-mail address including the date of registration, IP address and the list name of the desired newsletter. We use your e-mail address and the simultaneously collected personal data such as first name and surname only for the administration and the sending of the chosen newsletter.Each newsletter contains a note on how you can unsubscribe from the newsletter.
8. How do we use information about your computer and cookies for targeting and analysis?
9. Social Media
10. What happens when I visit third-party websites?
11. When do we disclose personal data to third parties?
12. How long will your data be stored?
We store the personal data for as long as it is necessary to achieve the respective purpose. It is possible that personal data is stored for the time during which claims can be made against our company and insofar as we are otherwise legally obliged to do so (e.g. bookkeeping obligations) or justified business interests require it (e.g. for the execution of the contract but also for evidence and documentation purposes in the event of a subsequent legal dispute). As soon as we no longer need the concerned personal data, we will delete/destroy it. The personal data will be deleted/destroyed at the latest when the statutory retention period has expired.If we collect your IP address, it will only be stored for the time of your use of the website and then immediately deleted or made anonymous by shortening it.
13. Is the data stored securely?
We use an external data center for the operation of our services and the storage of our data. We have carefully selected and instructed this center and regularly monitor compliance with the defined security measures. We have instructed the processor to ensure the protection of data by implementing appropriate security measures and storage in secure servers.We have appropriate technical and organisational measures against loss, destruction and misuses implemented. In addition, your personal data is protected against access, alteration or misuses by unauthorized persons (e.g. via access controls and access restrictions as well as internal instructions). The data transfer of sensitive data is encrypted and can take place via various channels, including the Internet.. Although we take all appropriate and reasonable security precautions, you must be aware that access and transfer of data via the Internet always involves a certain security risk and that we can therefore not guarantee absolute security.
14.What rights do I have as a data subject?
Regarding the processing of your personal data, you are entitled to your rights in accordance with the applicable law. You have a right of information and, if necessary, you might demand the correction and | or deletion and|or blocking and | or transfer of your data. You may, in certain cases, request to restrict processing and have a right of objection and a right to data transfer. If you wish to exercise one of your rights and | or receive more detailed information on your rights, please contact the above-mentioned contact address.Information requests will usually be answered within 30 days of receipt.Every data subject also has the right to enforce your rights in court or to lodge a complaint with the competent data protection supervisory authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).