Privacy Policy
of InfoGuard AG

1. General

InfoGuard AG (hereinafter "InfoGuard", "we", "us") is a leading and independent Swiss company for comprehensive cyber security and innovative network solutions. Information and data protection is one of our core competencies - accordingly, the protection of your data is important to us. In this data protection declaration, we inform you comprehensively about our handling of your personal data, among other things, as our website and event visitor, applicant, and newsletter subscriber. We explain your rights in connection with the processing of personal data in our company. The processing of personal data of our employees, customers and clients outside our websites is regulated exclusively within the framework of our employee and management contracts.

A. Scope

This privacy policy applies to all processing activities related to personal data:

  • Visiting our website
  • Contact form
  • Mail contact
  • Customer portal
  • Use of the chat function
  • Newsletter subscription
  • Registration for events
  • Webinars
  • Organisation of virtual events
  • Hybrid events
  • Application
  • Cookies
  • IFrame from social media

 

Depending on the data processing, in addition to the applicable Swiss law (Federal Act on Data Protection (FADP) of 19 June 1992, SR 235.1), European data protection law (Regulation (EU) 2016/679 (GDPR)) may also or exclusively apply.


B. Responsibility

Verantwortlich für die Bearbeitung von Personendaten auf unserer Webseiten ist:
InfoGuard AG
Lindenstrasse 10
6340 Baar
Email: info@infoguard.ch
Telefon: +41 41 749 19 00

 

C. Data Protection Advisor

Fabian Illi
InfoGuard AG
Lindenstrasse 10
6340 Baar
Email: datenschutz@infoguard.ch
Phone: +41 41 749 19 00

 

D. Contact details of the Swiss supervisory authorities

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
Feldeggweg 1
3003 Bern
Tel. +41 58 462 43 95

2. Processing activities

Depending on your relationship with us, we process different personal data about you for different purposes and on different legal bases.

A. Visiting our website

Data processing

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.

 

The data is processed by HubSpot Inc, Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("HubSpot"). Further details can be found in the HubSpot privacy policy at https://legal.hubspot.com/de/privacy-policy.

 

Personal data

The following information is collected without your intervention and stored until automatic deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the accessed URL
  • Website or source from which the access is made (referrer URL, social media channel, e-mail, etc.)
  • Browser type and version as well as other information transmitted by the browser, such as the operating system of your computer, your device type, your geographical origin, language setting, etc.

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data in the USA is therefore not subject to a level of data protection comparable to that in Switzerland or the EU.

 

If you consent to processing by HubSpot, you therefore consent at the same time to your data being transferred to the USA in accordance with Art. 17 FADP (data protection law) or Art. 49 Para. 1 lit. a GDPR).

Purpose

The said data are processed for the following purposes:

  • Ensuring a smooth connection of the website
  • Ensuring a comfortable use of our website
  • Evaluation of system security and stability

 

Under no circumstances do we use the data collected to draw conclusions about your person or to create user profiles with the help of this data.

Legal basis

The legal basis for this data processing lies in our private interest pursuant to Art. 13 para. 1 FADP and Art. 6 para. 1, p. 1 lit. f GDPR respectively.

Necessity

This information is necessary for the functioning of the website.

Retention period

After your session has expired, the session cookies are deleted.

B. Contact form

Data processing

We offer a contact form for general, product- or service-specific quotation requests and resource downloads (white papers, etc.), as well as for access to event recordings.

 

For the contact form, we use HubSpot Inc, Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("HubSpot"). Further details can be found in the HubSpot privacy policy at https://legal.hubspot.com/de/privacy-policy.

Personal data

The following information must be provided:

  • Salutation
  • First name
  • Surname
  • E-mail address (optional)
  • Company (voluntary)
  • Function (voluntary)
  • Company size (voluntary)
  • Message (voluntary)
  • Telephone (voluntary)
  • Reason for contact request (voluntary)
  • Form of contact (voluntary)
  • Subject area of the contact request (voluntary)
  • Additional product- or offer-specific fields (voluntary)
  • - Date, time and type of consent

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data is therefore not subject to a level of data protection in the USA comparable to that in Switzerland or the EU.

 

You hereby acknowledge that HubSpot is used in the background to operate the contact form and that your data will therefore be transmitted to the USA. If you do not wish this, please contact us by telephone or e-mail.

 

Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

 

IP anonymisation

We have also added the code "ano-nymizeIP" to Google Analytics on this website. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google Analytics data is automatically deleted after 14 months.

 

Google reCAPTCHA

In some forms on our website, we use Google reCAP-TCHA to check and prevent interactions on our website by automated access, e.g. by so-called bots. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

Purpose

The said data will be processed for the following purposes:

  • Answering your enquiry
  • Contacting you about general topics and service

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

This information is necessary for making contact.

Retention period

The data stored for the purpose of contacting you will be saved by us until you unsubscribe from further email communication. Once you have unsubscribed, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses for events or newsletter registrations, etc.) remain unaffected by this.

C. Mail contact

Data processing

You have the option of contacting us at the e-mail addresses provided on the "Contacts" sub-page («info@infoguard.ch», «media@infoguard.ch»).

Personal data

The following data will be processed from you:

  • E-mail address
  • IP address

Purpose

The said data will be processed in order to respond to your request.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

This information is necessary for making contact.

Retention period

The emails are automatically deleted after 2 years.

D. Customer portal

Data processing

When you access the customer portal, as a customer you have access to Reporting & Service information.

Personal data

The following data will be processed from you:

  • IP address
  • Username
  • Password

Purpose

The said data will be processed for the purpose of fulfilling the contract with the clients.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

This information is necessary for the orderly use of our customer portal.

Retention period

The data required for the purpose of portal access will be retained until the contract expires or until the client requests deletion.

E. Use of the chat function

Data processing

You have the option to use the chat function on our website.

 

For the chat function we use HubSpot Inc., Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("Hubspot").

Personal data

The following information must be provided:

  • Valid e-mail address (voluntary)
  • Details of the enquiry (voluntary)

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data is therefore not subject to a level of data protection in the USA comparable to that in Switzerland or the EU.

 

You hereby acknowledge that HubSpot is used in the background to operate the contact form and that your data will therefore be transmitted to the USA. If you do not wish this, please contact us by telephone or e-mail.

Purpose

The said data will be processed for the purpose of responding to your requests.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

The data mentioned are not necessary within the framework of the website functionality.

Retention period

All data will be deleted 30 days after the request has been dealt with.

F. Newsletter

Data processing

You have the possibility to subscribe to our blog, our job offers and our newsletter, in which we inform you about important news concerning our business activities and upcoming events.

 

For your consent to our newsletter dispatch, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed the e-mail address to us beforehand. You will receive a notification e-mail asking you to confirm the link contained in the e-mail. You can unsubscribe from the newsletter at any time, e.g. by clicking on the link at the end of each newsletter or by sending us a message to unsubscribe at marketing@infoguard.ch.

 

We use the services of HubSpot Inc., Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("HubSpot") to send the newsletter. Further details can be found in the HubSpot privacy policy at https://legal.hubspot.com/de/privacy-policy.

Personal data

When registering for the newsletter, we collect the following data from you:

  • Salutation
  • First name
  • Surname
  • E-mail address
  • Company (voluntary)
  • Function (voluntary)
  • Subject area (voluntary)
  • LinkedIn Account (voluntary)
  • Xing Account (voluntary)
  • Job interest (voluntary)
  • Date, time and type of consent

 

We then process data to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected:

  • Time of access
  • IP address
  • browser type
  • Operating System

Purpose

The said data will be processed for the following purpose:

  • Dispatch of the newsletter
  • Analysis of the newsletter campaign

 

The analysis of the newsletter campaign by HubSpot enables us to determine whether a newsletter message was opened and which links were clicked on. This information is used exclusively for the statistical evaluation of newsletter campaigns.

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data in the USA is therefore not subject to a level of data protection comparable to that in Switzerland or the EU.

 

If you consent to processing by HubSpot, you therefore consent at the same time to your data being transferred to the USA in accordance with Art. 17 FADP (data protection law) or Art. 49 Para. 1 lit. a GDPR).

Legal basis

We only store your personal data for sending the newsletter if you have voluntarily given us your consent to do so in accordance with Art. 13 para. 1 FADP or Art. 6 para. 1 p. 1 lit. a GDPR.

Necessity

The processing is necessary for the dispatch of our newsletter and the statistical evaluation.

 

If you do not want HubSpot to analyse your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

Retention period

The data stored for the purpose of the newsletter subscription will be saved by us until you unsubscribe from the newsletter. Once you have unsubscribed from the newsletter, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses for events or course registrations, etc.) remain unaffected by this.

G. Registration for events

Data processing

You can also register for upcoming InfoGuard events on our website.

 

We use HubSpot Inc, Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("HubSpot") for the registration form. For further details, please refer to the HubSpot privacy policy at https://legal.hubspot.com/de/privacy-policy.

Personal data

The following information must be provided:

  • Salutation
  • First name
  • Surname
  • E-mail address
  • Company name
  • Function
  • Postal code (depending on the type of event)
  • Place (depending on the type of event)
  • Date, time and type of consent

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data is therefore not subject to a level of data protection in the USA comparable to that in Switzerland or the EU.

 

You hereby acknowledge that HubSpot is used in the background to operate the contact form and that your data will therefore be transmitted to the USA. If you do not wish this, please contact us by telephone or e-mail.

Purpose

The said data will be processed for the purpose of handling your registration and participation in the event.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

This information is necessary for contact.

Retention period

The data stored for the purpose of event registration will be saved by us until you unsubscribe from further email communication. Once you have unsubscribed, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses such as contact requests or newsletter registrations, etc.) remain unaffected by this.

H. Webinars

Data processing

You have the option to register for webinars via our website. The registration takes place via a form from HubSpot Inc., Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("Hubspot").

 

To participate in the webinar, we use GoTo Webinar from the GoTo Group, Inc, 333 Summer Street, Boston, MA 02210, USA.

 

For more information, please see GoTo Webinar's privacy policy at https://www.goto.com/company/legal/privacy/international and HubSpot's privacy policy at https://legal.hubspot.com/de/privacy-policy.

Personal data

The data transmitted is usually:

  • Salutation
  • first name
  • Surname
  • e-mail address
  • Company name
  • Function
  • Postcode (Zip code)
  • City
  • Picture/ Camera image (voluntary)

 

Note: Your data will be processed by HubSpot in the USA. LogMeIn may also process your data in unsafe third countries. The USA is a so-called unsafe third country (see also section IV). Your data in the USA is therefore not subject to a level of data protection comparable to that in Switzerland or the EU.

 

You hereby acknowledge that your data will be processed by HubSpot and LogMeIn/GoTo for the purpose of registering for and conducting the webinar and that your data will therefore be transferred to unsafe third countries.

Purpose

We process this data for the purpose of registering for and conducting webinars.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

The data mentioned are not necessary within the framework of the website functionality.

Retention period

The data stored for the purpose of event registration will be saved by us until you unsubscribe from further email communication. Once you have unsubscribed, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses such as contact requests or newsletter registrations, etc.) remain unaffected by this.

I. Organisation of virtual events

Data processing

You have the opportunity to register via our website for virtual events on the platform of Expo IP GmbH, Robert-Bosch-Str. 7, 64293 Darmstadt, Germany. Registration takes place via a form from HubSpot Inc., Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("HubSpot").

 

Access to the virtual event is granted on the Expo IP platform.

 

For participation in the webinar, we use GoTo Webinar from the GoTo Group, Inc., 333 Summer Street, Boston, MA 02210, USA.

 

Using Wonder.me, we enable our participants to connect with each other. Wonder.me is a service of Wonder Technologies GmbH, Schnellerstraße 60, 12439 Berlin, Germany.

 

For direct contact with exhibitors or us, we use the chat platform of Tawk.to. Tawk.to is a service of tawk.to Inc, 7 East Warm Springs Rd, SB298, Las Vegas, 89119 Nevada, USA. Tawk.to. We use Tawk.to for predominant interest, so that we can offer additional information services to the participants.

 

For more information, please see Expo IP's privacy policy at https://expo-ip.com/datenschutzhinweis/, GoTo Webinar's privacy policy at https://www.goto.com/company/legal/privacy/international, Wonder.me's privacy policy at https://www.wonder.me/privacy-policy, Tawk.to's privacy policy at https://www.tawk.to/privacy-policy and HubSpot's privacy policy at https://legal.hubspot.com/de/privacy-policy.

Personal data

The data transmitted are usually:

  • First name
  • Surname
  • e-mail address
  • Company (not for GoTo)
  • Function (not for GoTo)
  • Postcode (not for Expo IP and GoTo)
  • City (not for Expo IP and GoTo)
  • Visited content URL (only Expo IP)
  • Visited conferences (only Expo IP and GoTo)
  • Recordings visited (only Expo IP and GoTo)

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data is therefore not subject to a level of data protection in the USA comparable to that in Switzerland or the EU.

 

You hereby acknowledge that HubSpot is used in the background to operate the contact form and that your data will therefore be transmitted to the USA. If you do not wish this, please contact us by telephone or e-mail.

Purpose

We process this data for the purpose of conducting virtual events.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

The data mentioned are necessary within the framework of the website functionality.

Retention period

The data stored for the purpose of event registration will be saved by us until you unsubscribe from further email communication. Once you have unsubscribed, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses such as contact requests or newsletter registrations, etc.) remain unaffected by this.

J. Hybrid events

Data processing

You have the option to register for hybrid events via our website. The registration takes place via a form from HubSpot Inc., Headquarters 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("Hubspot").

 

For participation in hybrid events, we use the Streaming Solutions tool from Apoint Film GmbH, Hinterbergstrasse 30, 6312 Steinhausen, Switzerland.

 

For more information, please see the Streaming Solutions privacy policy at https://www.streaming-solutions.ch/de/ and the HubSpot data protection policy at: https://legal.hubspot.com/de/privacy-policy.

Personal data

The data transmitted are usually:

  • Type of participation
  • Salutation
  • first name
  • Surname
  • e-mail address
  • Company name
  • Function
  • Postcode (Zip code)
  • City

 

Note: Your data will be processed by HubSpot in the USA. The USA is a so-called unsafe third country (see also section IV). Your data is therefore not subject to a level of data protection in the USA comparable to that in Switzerland or the EU.

 

You hereby acknowledge that HubSpot is used in the background to operate the contact form and that your data will therefore be transmitted to the USA. If you do not wish this, please contact us by telephone or e-mail.

Purpose

We process this data for the purpose of conducting hybrid events.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

The data mentioned are not necessary within the framework of the website functionality.

Retention period

The data stored for the purpose of event registration will be saved by us until you unsubscribe from further email communication. Once you have unsubscribed, it will be deleted from our servers and from HubSpot's servers. Data stored by us for other purposes (e.g. email addresses such as contact requests or newsletter registrations, etc.) remain unaffected by this.

K. Application

Data processing

You have the option of applying to us for vacancies or spontaneously via the application tool on our website or via e-mail. In these cases, we process all the data that you send us with your application file.

 

For application management (including applications sent by e-mail), we use Onlyfy, a service provided by XING New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. You can find additional information at: https://onlyfy.com/de/datenschutz/.

 

We also use the application tool for staff leasing. The personal data of candidates sent to us is uploaded by the recruitment agency to the Onlyfy application platform and examined.

 

If a direct employment does not take place and another applicant declines, we would take the liberty of contacting you again and keeping your documents for this purpose.

Personal data

Depending on the data actually transmitted, these are usually:

  • Contact details of the applicant and the reference persons
  • e-mail address
  • Salutation (voluntary)
  • Telephone number (optional)
  • Address/place (voluntary)
  • Date of birth (optional)
  • Citizenship (optional)
  • Curriculum Vitae
  • Application photo or video (voluntary)
  • language Knowledge
  • Letter of application (optional)
  • Certificates of achievement (voluntary)
  • Data and documents you may upload
  • Applicant source

Purpose

We process this data for the purpose of checking your suitability for the position applied for or for the purpose of handling the application process.

Legal basis

This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a FADP or Art. 6 para. 1, p. 1 lit. b GDPR.

Necessity

The data mentioned are not necessary within the framework of the website functionality.

Retention period

Your data will be automatically deleted no later than two years after notification of rejection, unless you insist on extended data retention in order to remain in the talent pool.

L. Cookies

Data processing

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site.

 

A detailed list of the cookies we use can be found at https://www.infoguard.ch/de/cookie-richtlinie.

Personal data

A cookie does not necessarily mean that we can identify you.

Purpose

The use of cookies serves to statistically record the use of our website and to evaluate it for the purpose of optimization and user-friendliness.

Legal basis

We process technically necessary cookies based on our overriding private interest. We only process cookies that are not technically necessary if you have given your consent voluntarily in accordance with Art. 13 Para. 1 FADP or Art. 6 Para. 1, S. 1 lit. a GDPR.

Necessity

In the default setting of most internet browsers, cookies are accepted automatically.If you do not wish to store cookies from our websites on your device, you can configure your browser settings so that you receive a warning before certain cookies are stored.

 

Please note that the partial or complete deactivation of cookies may mean that you cannot use all the functions of our websites.

Retention period

Cookies have different retention periods.

 

If they are cookies from third-party manufacturers, we have no influence on the retention period. A distinction is made between session cookies, which are deleted after a session, and permanent cookies, which can also be stored for different lengths of time beyond the session.

M. IFrame from social media

Data processing

We use IFrames from the following social media on our website:

  • Xing, operated by New Work SE, am Strandkai 1, 20457 Hamburg, Germany,
  • Facebook, Meta Platforms Ireland Ltd, 4 Grand CAnal Square, Grand Canal Harbour, Dublin 2, Ireland
  • Twitter, X Corp (X)., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA,
  • LinkedIn, LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA,
  • YouTube, YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA,

 

This means that the functions of the above-mentioned social media are integrated on our website. If you have an account with one of these social media and are logged in, you can visit our profile on the social medium by clicking on the icon or you can link the content of our website to your profile.

Personal data

By clicking on the IFrame, the visitor is redirected to the website of the provider. We have no influence on the processing of personal data on the social media platforms.

For more information on the data collected, please refer to the following data protection provisions:

Purpose

An IFrame is used to structure our website and to place other web content on our website. It also allows our website visitors to share our content on social media.

Legal basis

Data processing in connection with IFrames is carried out on the basis of our legitimate interests pursuant to Art. 13 para. 1 FADP or Art. 6 para. 1, p. 1 lit. f GDPR.

Necessity

The data mentioned are not necessary within the framework of the website functionality.

Retention period

Since the data is processed by the operators of the social media platform and we have no influence on this, it is not possible to determine the retention period.

 

3. Disclosure of data to third parties

Data processing

Your personal data will not be transferred to third parties for purposes other than those listed or to contractors other than those listed and their subcontractors.

 

Third parties are technology providers for the optimal operation of the websites and social media presences as well as for the provision of the services listed above.

4. Cross-border disclosure to third countries without adequate level of data protection

Data processing

No data is disclosed to third countries without an adequate level of data protection or only under the contractual obligation to comply with a sufficient level of data protection (e.g. EU standard clauses).

 

Personal data is only transferred to third countries if the data protection requirements of Art. 6 FADP or Art. 44 et seq. GDPR are met.

 

A third country is defined as a country outside of Switzerland or the European Economic Area (EEA) in which the Swiss FADP or the European GDPR is not directly applicable. A third country is considered unsafe if, according to the FDPIC or the EU Commission, the country does not have an adequate level of data protection.

 

With the ECJ ruling of 16 July 2020 (C-311/18), the adequacy decision for the USA was declared invalid. The FDPIC has also revoked the USA's adequacy. The USA is therefore a so-called insecure third country.

 

When personal data is transferred to the USA, there is a risk that US authorities can gain access to the personal data. Swiss citizens have no effective legal protection against such access in the USA.

 

In this data protection information, we inform you when and how we transfer personal data to the USA or other unsecure third countries.

5. Data security

Data processing

We take appropriate measures to ensure that your personal data cannot be accessed or stolen by third parties without authorisation. In particular, through appropriate technical (e.g. firewall, password protection, SSL encryption, etc.) and organisational (e.g. restriction of authorised persons, training of authorised persons, etc.) measures, we ensure that only authorised persons have access to this data. Our data processing and security measures are continuously improved in line with technological developments.

Personal data

Personal data is any information relating to an identified or identifiable natural person, including name, address, telephone number or email or IP address.

Purpose

We use SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

 

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

6. Data retention

Data processing

We retain personal data for as long as we consider necessary or appropriate to comply with applicable laws or as long as it is necessary for the purposes for which it was collected.

 

We delete your personal data as soon as it is no longer required and in any case after expiry of the legally prescribed maximum retention period of five or ten years. Data that is no longer necessary and for which there is no legal obligation to retain it will be destroyed once the purpose and justification no longer apply.

Personal data

In detail, we retain your data for the following period:

  • We retain data that we process by law for the statutory retention period, for example if required by labour law, social security law, tax law or the Business Records Ordinance;
  • We retain data that we need for the performance of a contract for at least the duration of the contract and for a maximum of 10 years thereafter, unless we need the data to enforce our rights;
  • We retain data that we process to protect our legitimate interests for a maximum of ten years after the end of the contractual relationship, unless we need the data to assert our rights;
  • If you are not hired, your application documents will be deleted or returned to you after a maximum of 2 years.

7. Your rights

As a potentially affected person, you can assert various claims against us in accordance with the applicable national and international law.

 

In order to fulfil these claims, we may process your personal data again.

 

Depending on the applicable law, data subjects may exercise the following rights:

  • To request information about their personal data processed by us. In particular, information pursuant to Art. 8 FDPA or Art. 15 GDPR may contain information:
    • about the purposes of processing
    • the category of personal data
    • the categories of recipients to whom your data has been or will be disclosed
    • the planned storage period
    • the existence of a right to rectification, erasure, restriction of processing or objection
    • the existence of a right of appeal
    • the origin of your data, if it has not been collected by us
    • the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details thereof

  • Immediately request the correction of inaccurate or incomplete personal data stored by us (Art. 5 para. 2 FADP or Art. 16 GDPR).
  • To request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR (Art. 15 FADP or Art. 18 GDPR).
  • To receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller (Art. 20 GDPR).
  • request the deletion of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (Art. 15 FADP or Art. 17 GDPR).
  • You may revoke your consent at any time. This means that we may no longer process the data based on this consent in the future (Art. 4 FADP or Art. 7 Para. 3 GDPR).
  • You may object to the processing if your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1), p. 1 lit. f GDPR (Art. 21 GDPR) and if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
  • complain to a supervisory authority (see above) (Art. 77 GDPR).

8. Up-to-dateness and amendment of this privacy policy

We reserve the right to change this privacy policy at any time or to adapt it to new processing methods. The current data protection declaration can be accessed at any time at https://www.infoguard.ch/en/data-privacy.