Data protection declaration
DATA PROTECTION DECLARATION
Your personal data is important to us. The purpose of this data protection declaration is to inform you in advance about the personal data we collect and process from you and the purpose for which it is processed in accordance with the revised Swiss Federal Act on Data Protection (Data Protection Act, DPA) and – if applicable in individual cases – the European General Data Protection Regulation (GDPR).
RESPONSIBLE PARTY
Altefco AG, Stockenstrasse 3, 8362 Balterswil, Switzerland, is responsible for data processing and related issues. For questions and concerns, please contact us at the following email address: altefco@altefco.ch or by telephone on +41 71 973 90 30.
WITCH PERSONAL DATA DO WE COLLECT OR PROCESS?
We generally receive applicants’ names, address details, date of birth, CVs and application documents.
We collect standard employee master data (name, birth date, address, social security number, photo, bank details, contact details).
We collect full names, addresses, telephone numbers, email addresses, as well as payment details and information from our customers and business partners.
Where permitted and necessary, we also use information from publicly accessible sources (e.g., debt collection registers, land registers, commercial registers, press, internet) or receive such information from authorities or third parties.
We also automatically collect data related to the use of our website, www.altefco.ch. We use cookies on our website which are essential for the correct functioning of the website and which are only stored in the user’s browser (e.g. PHPSESSIONID or current language (WPML)). We may also collect, for example, your IP address, the MAC address of your smartphone or computer, information about your device and settings, the date and time of your visit, pages and content accessed, functions used, referring websites and location data.
There is a contact form for vacancies. The website uses a database to store the data provided by applicants (name, email).
WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA AND WHY DO WE NEED IT?
We only collect the personal data that we really need for the operation of our company and business relationships.
We use the personal data provided by applicants to optimise our recruitment process for vacant positions.
We use the personal data of our customers and business partners for the processing of orders and for advertising purposes in order to keep you up to date. If you no longer wish to receive advertising from us, you can opt out of the use of your data for advertising purposes at any time and we will no longer send you marketing material.
We may also require personal data for the assertion of our legal claims and/or for defence in connection with legal disputes and official proceedings.
Insofar as the GDPR applies in individual cases, we base the processing of your personal data in particular on the following legal bases:
- processing on the basis of consent given by you as the data subject to the processing of your personal data for one or more specific purposes (Art. 6 para. 1 lit. a GDPR), e.g., via a corresponding declaration on our website (Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR);
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR);
- processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6 para. 1 lit. c GDPR) or is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1 lit. d GDPR);
- processing is necessary for the purposes of the legitimate interests pursued by us or by third parties as described in the processing purposes, namely for communication with you or third parties, to operate our website, to improve our electronic offers and registration for certain offers and services, for security purposes, for compliance with Swiss law and internal regulations for our risk management and corporate governance and for other purposes such as training and education, administration, evidence and quality assurance, organisation, implementation and follow-up of events and for the protection of other legitimate interests (Art. 6 para. 1 lit. f GDPR).
THIRD-PARTY PERSONAL DATA
If you provide us with data from third parties (such as your own customers), please ensure that these persons have been informed in advance about the disclosure of their personal data to us or have subsequently consented to this, that the data is correct and that these persons are also aware of the content of this data protection declaration.
TRANSFER OF DATA TO THIRD PARTIES OR ABROAD
We only disclose your personal data to third parties to the extent that this is necessary for the fulfilment of the contractual relationship with you and only for the stated purposes. Should a legal requirement arise, your personal data may be shared with domestic and international authorities, as well as courts. In some cases, your address may be disclosed to a subcontractor for the purpose of delivering goods.
We also use a range of other service providers (such as suppliers, contractual partners, banks, and insurance companies) as well as our contracted processors (such as IT service providers, IT providers, advertising agencies, and printers).
The photos and content on our website are accessible to the public.
Data is generally transmitted and forwarded to the aforementioned recipients in Switzerland and within Europe.
In rare instances, if the recipient is situated in a country lacking sufficient statutory data protection regulations and is not already bound by a legally recognised framework for safeguarding data, and we are unable to rely on an exemption provision, we require the recipient to adhere to the relevant data protection measures through a contractual agreement. For this purpose, we use the revised standard contractual clauses of the European Commission (as of June 2021). An exception may arise, especially in the context of legal proceedings abroad, as well as in situations involving significant public interests or when the disclosure is necessary for contract fulfilment. This exception may also apply if you have provided consent or if the data in question has been publicly accessible and you have not objected to its processing.
HOW LONG DO WE STORE YOUR PERSONAL DATA?
We only store personal data of applicants until the vacant position has been filled or if it has been expressly agreed that the documents should be retained by us in the event that a suitable position becomes vacant again. We then store your personal data for as long as the current contractual relationship exists and also observe the statutory retention periods. Following the conclusion of a business partnership, we will retain personal data for as long as necessary for the purposes of asserting or defending against any potential claims. Once your personal data is no longer required for the aforementioned purposes, it will be deleted or anonymised where possible.
HOW DO WE ENSURE DATA SECURITY?
We have implemented various technical and organizational measures to safeguard the security of your personal data when transmitted to us. Our employees receive regular training, instruction and awareness on data security and the handling of personal data.
WHAT ARE YOUR RIGHTS?
You have the right to object to the processing of your data at any time, especially in relation to advertising purposes. Provided there are no legal provisions or a legitimate interest on our part to the contrary, you also have the following rights:
- Right to information about existing personal data;
- Right to correction of incorrect or incomplete personal data;
- Right to erasure or anonymisation or restricted processing of your personal data;
- Right to receive the specific personal data in a structured, commonly used and machine-readable format;
- Right to revoke consent given at any time with effect for the future.
If you wish to assert your rights, we may ask you to enclose a corresponding proof of identity with the respective requests.
It is important to note that the rights mentioned above may have certain restrictions. We are also subject to legal restrictions (such as retention obligations) or, for example, we may have an overriding legitimate interest in restricting your rights.
The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (https://edoeb.admin.ch).
NEWSLETTER
We use the MailChimp app to send our newsletter electronically. MailChimp is certified under the Privacy Shield Framework and thus ensures compliance with the European level of data protection.
The delivery service provider may use recipient data in pseudonymised form, i.e. without assigning it to a user, to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for statistical purposes. However, the delivery service provider may not use the data relating to our newsletter recipients to write to them directly, nor are these data given to a third party.
The privacy statement of The Rocket Science Group LLC, 675 Ponce De Leon Ave NE Suite 5000, Atlanta, GA 30308, United States, can be viewed here: https://mailchamp.com/legal/privacy/
SOCIAL MEDIA
To efficiently deliver important information about our company and products, we utilise social media plug-ins on our website. These can be identified by the logos of the respective companies displayed as buttons. We use LinkedIn in particular.
When you click on the company logos, you will be redirected to the websites of the respective operators, who may register that you have been to our website and use this information for their own purposes. This processing is beyond our control and is the responsibility of the respective operating company. We do not receive any information about you from the operating companies. Please refer to the applicable data protection declarations of the respective operating companies.
COOKIES/TRACKING WHEN YOU VISIT OUR WEBSITE
When using our website, cookies are used to identify your end device and enable us to recognise when the end device returns to our website. You can accept all cookies or manage the cookie settings individually on the website if you do not wish to do so or only want to accept essential cookies that are necessary for the use of our website. If you partially or completely block cookies, certain functions (e.g. shopping basket, ordering processes) may no longer work and you may no longer be able to use our website to its full extent.
We use Google Analytics or similar services on our website. These are services provided by third parties, which may be located in any country in the world. In the case of Google Analytics, it is Google Ireland (based in Ireland), which relies on Google LLC (based in the USA) as a processor (both “Google”), www.google.com), with which we can measure and analyse the use of our website (not on a personal basis). Permanent cookies are also used for this purpose, which are set by the service provider.
We use Google Analytics 4. It does not log or store individual IP addresses. Only the following data is collected: City (incl. longitude and latitude), browser minor version, browser user agent string, device brand, device model, device name, operating system minor version, platform minor version, screen resolution.
We have configured the service in such a way that your IP addresses are shortened by Google in Europe before being forwarded to the USA and therefore cannot be traced back. For this purpose, we have disabled the “Data transfer” and “Signals” settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about your identity from this data for its own purposes, create personal profiles and link this data to your Google accounts. If you have registered with the service provider yourself, they will also have a record of you. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its data protection provisions. The service provider only provides us with information about how our website is used (no information about you personally).
AMENDMENT RIGHT OF THIS DATA PROTECTION DECLARATION
We reserve the right to amend this data protection declaration at any time without prior notice. The current version available on our website shall apply.