1. DEFINITIONS AND INTERPRETATION
In this Policy, the following terms shall have the following meanings:
“Personal data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to us via the Website, e.g. your name, address, e-mail address, IP address, etc. This definition shall, where applicable, incorporate the definitions provided in the Swiss Data Protection Act (as revised from time to time) (“DPA”) and/or the General Data Protection Regulation (“GDPR”);
and “we/us/our” means Niederer Kraft Frey AG, a company registered in Switzerland whose address is
Bahnhofstrasse 53, 8001 Zurich, Switzerland.
2. WHAT DOES THIS POLICY COVER?
This Policy applies only to your use of the Website. The Website may contain links to other websites.
Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
3. YOUR RIGHTS
3.1 As a data subject, you have the following rights under the DPA and/or GDPR:
3.1.1 The right to be informed about our collection and use of personal data;
3.1.2 The right of access to the personal data we hold about you (see section 4);
3.1.3 The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using the details in section 9);
3.1.4 The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you;
3.1.5 The right to restrict (i.e. prevent) the processing of your personal data;
3.1.6 The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation;
3.1.7 The right to object to us using your personal data for particular purposes; and
3.1.8 Rights with respect to automated decision making and profiling.
3.2 If you have any cause for complaint about our use of your personal data, please contact us using the details provided in section 8 and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Officer (“FDPIC”) and/or any competent EU supervisory authority (as the case may be).
4. WHAT DATA DO WE COLLECT?
4.2 If you send us an email, we may collect your name, your email address, and any other information which you choose to give us.
5. HOW DO WE USE YOUR DATA?
5.1 If we do collect any personal data, it will be processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the DPA and/or GDPR at all times. For more details on security see section 6.2, below.
5.2 As noted above, we do not generally collect any personal data. If you contact us and we obtain your personal details from your email, we may use them as follows:
5.2.1 To reply to your email;
5.2.2 To reply to any other request submitted by you.
5.3 In the event a consent was given, you have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
5.4 We will not share any of your data with any third parties for any purposes.
6. HOW AND WHERE DO WE STORE YOUR PERSONAL DATA?
6.1 We only keep your personal data for as long as we need to in order to use it as described above in
section 5, and/or for as long as we have your permission to keep it.
6.2 Your data will only be stored in Switzerland. Exceptionally, your Personal Data is stored on servers in the UK and USA, when we use tools from UK and US providers, such as Vuture and Zendesk, etc.. In such events NKF has implemented the necessary measures, i.e. has concluded the EU Standard Contractual Clauses and/or other appropriate measures.
6.3 Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure any data we hold about you (even if it is only your email address).
7. HOW CAN YOU ACCESS YOUR PERSONAL DATA?
You have the right to ask for a copy of any of your personal data held by us (where such data is held).
Please contact us for more details at firstname.lastname@example.org.
8. CONTACTING US
If you have any questions about the Website or this Policy, please contact us by email at email@example.com. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you. Our representative in the EU is: VGS Datenschutzpartner UG, Am Kaiserkai 69, 20457 Hamburg, Germany, firstname.lastname@example.org.
9. CHANGES TO OUR POLICY
We may change this Policy from time to time (for example, if the law changes). Any changes will be immediately posted on the Website and you will be deemed to have accepted the terms of the Policy on your first use of the Website following the alterations. We recommend that you check this page regularly to keep up-to-date.