Privacy
1. Introduction
This Privacy Policy tells you which personal data we process, how, for what purpose and where. It applies in particular to our website bureau-k.ch and our other services. At the same time, we provide information about the rights of individuals whose data we process.
Our offering is subject to Swiss data protection legislation and applicable foreign data protection legislation, in particular the General Data Protection Regulation (GDPR) of the European Union.
2. Responsibility for data protection and data protection officer
The responsibility for processing personal data lies with bureau K. SA, 3073 Gümligen, bureau-k.ch.
3. Processing personal data
3.1 Legal
“Personal data” mean any information relating to a specific or identifiable person. A “data subject” is a person about whom personal data are processed. Processing includes any handling of personal data, regardless of the means and processes used. Processing refers in particular to collecting, gathering, using, disclosing, storing, retaining, modifying and deleting personal data.
We process personal data in accordance with, in particular, the Federal Act on Data Protection (FADP) and the related Ordinance to the Federal Act on Data Protection (OFADP). Where the General Data Protection Regulation (GDPR) is applicable, we process personal data in accordance with at least one of the following legal bases: Article 6, paragraph 1, points (a), (b), (c), (d), (e) and/or (f) of the GDPR.
3.2 Nature, scope and purpose
We process personal data that are necessary in order to be able to provide our services permanently, reliably, securely and in a user-friendly manner. This may include personal data from the following categories: basic data, contact data, browser data, device data, content data, usage data, metadata, location data, contract data, sales data and payment data.
We process personal data for the duration required for the respective purpose or required by law. Personal data that no longer need to be processed are deleted or anonymised. In principle, we process personal data only with the consent of the data subject, unless the processing is permissible for other legal reasons (e.g. to perform a contract with the data subject, for pre-contractual measures, because the processing is evident from the circumstances, to protect our overriding legitimate interests or following prior notification). Persons whose data we process generally have the right to erasure.
In particular, we process information that data subjects voluntarily and themselves provide to us when contacting us. We may store such data in a suitable tool (address book, CRM system, etc.). If you transmit personal data to us concerning third parties, you are obliged to guarantee privacy to these third parties and to ensure the accuracy of such personal data.
We also process personal data that we obtain from publicly accessible sources, receive from third parties or gather when providing our offer, if and to the extent that such processing is legally permissible.
We process personal data from job applications only to the extent necessary to assess suitability for employment or draw up an employment contract. We do not retain any personal data from job applications.
3.3 Processing of personal data by third parties
We may have personal data processed by commissioned third parties or process them jointly with third parties or transfer them to third parties. In particular, these are providers whose services we make use of. We also guarantee appropriate data protection when such third parties are used. Such third parties are generally located in Switzerland, but may also be in other countries if their data protection legislation ensures adequate data protection in the assessment of the Swiss Federal Data Protection Commissioner and, if the GDPR is applicable, the European Commission, or if appropriate data protection is ensured for other reasons (e.g. contractual agreement, standard contractual clauses, corresponding certification).
3.4 The rights of data subjects
Data subjects whose personal data we process have the rights under Swiss data protection legislation. These include the right to information and the right to rectification, blocking or deletion of personal data processed.
If and to the extent that the GDPR is applicable, data subjects may request confirmation as to whether we process their personal data and, if so, request information about this, have the processing of their personal data restricted, exercise their right to data portability and have their personal data rectified, completed, blocked or erased.
If and to the extent that the GDPR is applicable, data subjects may object to the processing of their personal data at any time and revoke their consent at any time.
Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority (the FDPIC in Switzerland).
4. Data security
We take suitable and appropriate technical and organisational measures to ensure data protection and data security. However, despite such measures, the processing of personal data on the internet can always involve security vulnerabilities. We are therefore unable to guarantee absolute data security.
Access to our online offering is provided using transport encryption (SSL/TLS, in particular with HTTPS = Hypertext Transfer Protocol Secure). As is generally the case with all internet use, access is subject to mass surveillance and other monitoring by security authorities (in Switzerland, the EU, the USA and other countries). We are unable to influence the corresponding processing of personal data by security authorities.
5. Cookies
Our website uses cookies in several places. Cookies are small text files that are stored on your computer and by your browser. They serve to make our website more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser and offer you services. Cookies do not contain any personal data. However, in some circumstances it is possible in that a cookie can be assigned to a specific user data record.
Our website uses cookies solely in automated form. We do not trace cookies back to user profiles in order to derive benefits for the user or gain insights into an individual beyond the benefits mentioned.
You have the option of rejecting cookies or setting your browser to notify you each time our website tries to set a cookie. However, this may mean that certain services on our website cannot be used or can only be used to a limited extent.
For more information about cookies (including instructions on how to block them), see for example http://www.allaboutcookies.org/ge/.
6. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files saved on your computer to enable your website use to be analysed. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. However, if IP anonymisation is activated on this website, your IP address will be shortened first by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and Internet use to the website operator. The IP address sent by your browser as part of Google Analytics will not be combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) for Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
7. Digital infrastructure
We use third-party services to be able to use the required digital infrastructure for our online offering. In particular, these include hosting and storage services from specialised providers. These providers process the data required to operate this infrastructure. In particular, this includes your IP address. We also guarantee appropriate data protection from such providers.
8. Audio and video conferences
We use audio and video conferencing services to communicate with our customers and others. In doing so, we only use services that guarantee appropriate data protection. In addition to our Privacy Policy, all terms and conditions (terms of use, privacy policies, etc.) for the relevant services apply.
9. Google Ads
We use Google Ads in order to be able to advertise our offer on the Google search engine and elsewhere on the internet, for example on other websites, including on the basis of search queries. Information about the nature, scope and purpose of data processing can be found in the principles of data protection and security, the Google Privacy Policy and the information about cookies at Google. Google also offers the option of objecting to personalised advertising.
10. Final provisions
We may amend and/or supplement this Privacy Policy at any time. We will inform you of these changes by publishing the current Privacy Policy on our website.