Pri­va­cy poli­cy

If your per­so­nal data is pro­ces­sed, you are the data sub­ject and you have the fol­lo­wing rights vis-à-vis the con­trol­ler:

Right to infor­ma­ti­on
You can request con­fir­ma­ti­on from the con­trol­ler as to whe­ther per­so­nal data con­cer­ning you is being pro­ces­sed.
If such pro­ces­sing is taking place, you can request the fol­lo­wing infor­ma­ti­on from the con­trol­ler:

1. the pur­po­ses for which the per­so­nal data is pro­ces­sed;
2. the cate­go­ries of per­so­nal data that are pro­ces­sed;
3. the reci­pi­en­ts or cate­go­ries of reci­pi­en­ts to whom the per­so­nal data con­cer­ning you have been or will be dis­c­lo­sed;
4. the plan­ned dura­ti­on of sto­rage of the per­so­nal data con­cer­ning you or, if spe­ci­fic infor­ma­ti­on on this is not pos­si­ble, cri­te­ria for deter­mi­ning the dura­ti­on of sto­rage;
5. the exi­stence of a right to rec­ti­fi­ca­ti­on or era­su­re of per­so­nal data con­cer­ning you, a right to rest­ric­tion of pro­ces­sing by the con­trol­ler or a right to object to such pro­ces­sing;
6. the exi­stence of a right of appeal to a super­vi­so­ry aut­ho­ri­ty;
7. all available infor­ma­ti­on about the ori­gin of the data if the per­so­nal data is not coll­ec­ted from the data sub­ject;
8. the exi­stence of auto­ma­ted decis­i­on-making, inclu­ding pro­fil­ing and, at least in the­se cases, meaning­ful infor­ma­ti­on about the logic invol­ved, as well as the signi­fi­can­ce and the envi­sa­ged con­se­quen­ces of such pro­ces­sing for the data sub­ject.

You have the right to request infor­ma­ti­on as to whe­ther the per­so­nal data con­cer­ning you will be trans­fer­red to a third coun­try or to an inter­na­tio­nal orga­nizati­on.
In this con­text, you may request to be infor­med about the appro­pria­te safe­guards in con­nec­tion with the trans­fer.

Right to rec­ti­fi­ca­ti­on
You have a right to rec­ti­fi­ca­ti­on and/or com­ple­ti­on vis-à-vis the con­trol­ler if the pro­ces­sed per­so­nal data con­cer­ning you is incor­rect or incom­ple­te.
The con­trol­ler must make the cor­rec­tion wit­hout delay.

Right to rest­ric­tion of pro­ces­sing
Under the fol­lo­wing con­di­ti­ons, you can request that the pro­ces­sing of your per­so­nal data be rest­ric­ted:

1. if you con­test the accu­ra­cy of the per­so­nal data con­cer­ning you for a peri­od enab­ling the con­trol­ler to veri­fy the accu­ra­cy of the per­so­nal data;
2. the pro­ces­sing is unlawful and you refu­se the era­su­re of the per­so­nal data and instead request the rest­ric­tion of the use of the per­so­nal data;
3. the con­trol­ler no lon­ger needs the per­so­nal data for the pur­po­ses of the pro­ces­sing, but you need them for the estab­lish­ment, exer­cise or defen­se of legal claims, or
4. if you have objec­ted to the pro­ces­sing and it has not yet been deter­mi­ned whe­ther the legi­ti­ma­te rea­sons of the con­trol­ler out­weigh your rea­sons.

If the pro­ces­sing of per­so­nal data con­cer­ning you has been rest­ric­ted, this data — apart from its sto­rage — may only be pro­ces­sed with your con­sent or for the estab­lish­ment, exer­cise or defen­se of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for rea­sons of important public inte­rest of the Uni­on or of a Mem­ber Sta­te.
If the rest­ric­tion of pro­ces­sing has been rest­ric­ted in accordance with the abo­ve con­di­ti­ons, you will be infor­med by the con­trol­ler befo­re the rest­ric­tion is lifted.

Right to era­su­re

Obli­ga­ti­on to era­se
You have the right to obtain from the con­trol­ler the era­su­re of per­so­nal data con­cer­ning you wit­hout undue delay and the con­trol­ler has the obli­ga­ti­on to era­se this data wit­hout undue delay whe­re one of the fol­lo­wing grounds applies:

1. The per­so­nal data con­cer­ning you are no lon­ger neces­sa­ry for the pur­po­ses for which they were coll­ec­ted or other­wi­se pro­ces­sed.
2. You with­draw your con­sent on which the pro­ces­sing was based and the­re is no other legal basis for the pro­ces­sing.
3. You object to the pro­ces­sing and the­re are no over­ri­ding legi­ti­ma­te grounds for the pro­ces­sing.
4. Your per­so­nal data has been pro­ces­sed unlawful­ly.
5. The dele­ti­on of per­so­nal data con­cer­ning you is neces­sa­ry to ful­fill a legal obli­ga­ti­on under the law to which the con­trol­ler is sub­ject.
6. The per­so­nal data con­cer­ning you was coll­ec­ted in rela­ti­on to infor­ma­ti­on socie­ty ser­vices offe­red.

Infor­ma­ti­on to third par­ties
If the con­trol­ler has made the per­so­nal data con­cer­ning you public and is obli­ged to era­se it, the con­trol­ler, taking account of available tech­no­lo­gy and the cost of imple­men­ta­ti­on, shall take rea­sonable steps, inclu­ding tech­ni­cal mea­su­res, to inform con­trol­lers which are pro­ces­sing the per­so­nal data that you as the data sub­ject have reque­sted the era­su­re by such con­trol­lers of any links to, or copy or repli­ca­ti­on of, this per­so­nal data.

Excep­ti­ons
The right to era­su­re does not app­ly if the pro­ces­sing is neces­sa­ry

1. to exer­cise the right to free­dom of expres­si­on and infor­ma­ti­on;
2. for com­pli­ance with a legal obli­ga­ti­on which requi­res pro­ces­sing by law to which the con­trol­ler is sub­ject or for the per­for­mance of a task car­ri­ed out in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty vested in the con­trol­ler;
3. for rea­sons of public inte­rest;
4. for archi­ving pur­po­ses in the public inte­rest, sci­en­ti­fic or histo­ri­cal rese­arch pur­po­ses or sta­tis­ti­cal pur­po­ses in so far as it is likely to ren­der impos­si­ble or serious­ly impair the achie­ve­ment of the objec­ti­ves of that pro­ces­sing, or
5. for the asser­ti­on, exer­cise or defen­se of legal claims.

Right to infor­ma­ti­on
If you have asser­ted the right to rec­ti­fi­ca­ti­on, era­su­re or rest­ric­tion of pro­ces­sing against the con­trol­ler, the con­trol­ler is obli­ged to noti­fy all reci­pi­en­ts to whom the per­so­nal data con­cer­ning you have been dis­c­lo­sed of this rec­ti­fi­ca­ti­on or era­su­re of the data or rest­ric­tion of pro­ces­sing, unless this pro­ves impos­si­ble or invol­ves a dis­pro­por­tio­na­te effort.

You have the right to be infor­med about the­se reci­pi­en­ts by the con­trol­ler.

Right to data por­ta­bi­li­ty
You have the right to recei­ve the per­so­nal data con­cer­ning you, which you have pro­vi­ded to the con­trol­ler, in a struc­tu­red, com­mon­ly used and machi­ne-rea­da­ble for­mat.
You also have the right to trans­mit this data to ano­ther con­trol­ler wit­hout hin­drance from the con­trol­ler to which the per­so­nal data has been pro­vi­ded, whe­re

1. the pro­ces­sing is based on con­sent or on a con­tract and
2. the pro­ces­sing is car­ri­ed out using auto­ma­ted pro­ce­du­res.

In exer­cis­ing this right, you also have the right to have the per­so­nal data con­cer­ning you trans­mit­ted direct­ly from one con­trol­ler to ano­ther, inso­far as this is tech­ni­cal­ly fea­si­ble.
The free­doms and rights of other per­sons must not be impai­red by this.

The right to data por­ta­bi­li­ty does not app­ly to the pro­ces­sing of per­so­nal data neces­sa­ry for the per­for­mance of a task car­ri­ed out in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty vested in the con­trol­ler.

Right to object
You have the right to object at any time, on grounds rela­ting to your par­ti­cu­lar situa­ti­on, to the pro­ces­sing of per­so­nal data con­cer­ning you; this also applies to pro­fil­ing based on the­se pro­vi­si­ons.

The con­trol­ler will no lon­ger pro­cess the per­so­nal data con­cer­ning you unless the con­trol­ler demon­stra­tes com­pel­ling legi­ti­ma­te grounds for the pro­ces­sing which over­ri­de your inte­rests, rights and free­doms or for the estab­lish­ment, exer­cise or defen­se of legal claims.

In con­nec­tion with the use of infor­ma­ti­on socie­ty ser­vices, you have the opti­on of exer­cis­ing your right to object by means of auto­ma­ted pro­ce­du­res that use tech­ni­cal spe­ci­fi­ca­ti­ons.

Right to revo­ke the decla­ra­ti­on of con­sent under data pro­tec­tion law
You have the right to revo­ke your decla­ra­ti­on of con­sent under data pro­tec­tion law at any time.
The with­dra­wal of con­sent shall not affect the lawful­ness of pro­ces­sing based on con­sent befo­re its with­dra­wal.

Auto­ma­ted decis­i­on-making in indi­vi­du­al cases, inclu­ding pro­fil­ing
You have the right not to be sub­ject to a decis­i­on based sole­ly on auto­ma­ted pro­ces­sing, inclu­ding pro­fil­ing, which pro­du­ces legal effects con­cer­ning you or simi­lar­ly signi­fi­cant­ly affects you.
This does not app­ly if the decis­i­on

1. is neces­sa­ry for the con­clu­si­on or per­for­mance of a con­tract bet­ween you and the con­trol­ler,
2. is per­mis­si­ble on the basis of legal pro­vi­si­ons to which the con­trol­ler is sub­ject and the­se legal pro­vi­si­ons con­tain appro­pria­te mea­su­res to safe­guard your rights and free­doms and your legi­ti­ma­te inte­rests, or
3. with your express con­sent.

Howe­ver, the­se decis­i­ons may not be based on spe­cial cate­go­ries of per­so­nal data unless appro­pria­te mea­su­res have been taken to pro­tect the rights and free­doms and your legi­ti­ma­te inte­rests.

In the cases refer­red to in (1) and (3), the data con­trol­ler shall imple­ment sui­ta­ble mea­su­res to safe­guard your rights and free­doms and legi­ti­ma­te inte­rests, at least the right to obtain human inter­ven­ti­on on the part of the con­trol­ler, to express your point of view and to con­test the decis­i­on.

Right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty
Wit­hout pre­ju­di­ce to any other admi­ni­stra­ti­ve or judi­cial reme­dy, you have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of your habi­tu­al resi­dence, place of work or place of the alle­ged inf­rin­ge­ment if you con­sider that the pro­ces­sing of per­so­nal data rela­ting to you inf­rin­ges the Swiss Data Pro­tec­tion Act or the GDPR.
The super­vi­so­ry aut­ho­ri­ty with which the com­plaint has been lodged will inform the com­plainant of the sta­tus and out­co­me of the com­plaint, inclu­ding the pos­si­bi­li­ty of a judi­cial reme­dy.