Privacy

The following gives an overview of when and how we handle your personal data.

Our members include companies from Switzerland, Europe and around the world. Our collection, processing and use of personal data is subject to the provisions that currently apply in Switzerland and, where applicable, in Europe.

Personal data is treated as strictly confidential and is neither sold nor passed on to third parties.

Basis for data processing

According to the provisions of European data protection law (Art. 6 para. 1(1) GDPR), processing of personal data is lawful when, among other things, one of the following conditions is met:

(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We collect personal data transparently, only to the extent needed for the specified purpose, to enable use of our website or to meet legislative requirements, in accordance with the principles of data avoidance and data economy. We take the protection of your personal data seriously and, when collecting and processing personal information, we strictly comply with applicable statutory provisions and this privacy policy. Collected data will be blocked or deleted when it is no longer needed or when the statutory retention period is over.

Our website can be used without disclosing personal data. In cases where we use processors for data processing, we will have entered into a corresponding data processing agreement with them. If a processor is located in a third country, we will do our best to ensure that the respective country has a recognised, appropriate level of protection.

Use of our website

Scope and purpose of data collection

The following data is stored in log files when you access our website: your IP address, the date, time, browser request and general information transmitted about your operating system or browser. The collection of this data allows us to ensure that the website works properly and to create a foundation for anonymous statistical analyses that help identify trends that we can use to improve our services.

SSL encryption

Our website uses SSL encryption to transmit data securely and confidentially. This prevents third parties from viewing content.

Server log files

Server log files are anonymised data that we collect when you access our website. This information cannot be used to identify you personally, but it is needed for technical reasons to deliver and present our content. It also helps with statistics and regular improvements to our content. Log files typically include the date and time of your visit, the volume of data, the browser and version you used to access the site, your operating system, the domain name of your provider, the site that sent you to our site (referrer URL) and your IP address. Log files also enable us to systematically review visitors to our site when we suspect someone has used it illegally.

Cookies

Our website uses cookies. These are small text files that our server stores on your computer. They help display our website and make it easier for you to use. Cookies collect data about your IP address, your browser, your operating system and your internet connection. We do not tie this information to your personal data and we do not share it with third parties. We never use cookies to install malware or spyware on your computer. You can use our website without using cookies, but this might prevent some graphics and functions from working as intended. If you wish to deactivate cookies, you can set your browser to reject them. Use the Help menu in your browser to find out which settings to change. You can manage online advertising cookies via the following links:

http://www.aboutads.info/choices for the USA
http://www.youronlinechoices.com/uk/your-ad-choices for Europe

Objection to advertising emails

We are legally required to publish our contact details in our legal notice. Third parties sometimes use these details to send us unrequested advertising and information. We hereby object to receiving any type of advertising material that we have not expressly authorised. Furthermore, we expressly reserve the right to take legal action against anyone who sends us advertising material that we have not requested. Please note that sending us advertising material without our permission may constitute an offence under competition law, civil law and criminal law.

Association services

Overview

We offer a variety of services to our members. In addition, we manage online platforms for the industry solution for occupational health and safety protection and a not-for-profit take-back system for scrapped waste electrical and electronic equipment. We also organise various events and take part in events.

Use of member extranet

Personal data that has been collected for members is only visible to Swico employees. You can change or delete your details in the dashboard at any time or contact Swico or the Data Protection Officer mentioned at the end of this privacy policy. When a member ends their membership with Swico, their profile and personal data is deleted as well.

Use of our services

Swico must collect and process personal data so that it can meet its contractual obligations with the services it offers (Art. 6 para. 1(d) GDPR).

Events

We take photos and videos at events. We use the image material to internally document the event, in newsletters, on our website and social media channels, to compile reports and, where appropriate, to inform our members about the event using a photo gallery or short film. If an event takes place on a regular basis, data may be processed for a later event. The photos are stored on https://www.zonerama.com/ for the purpose of creating photo galleries. This is a service that is provided by Tatra Banka Bratislava, a.s. from Bratislava. The provisions of the Data Processing Agreement apply to the processing of data. This can be downloaded at: http://mailing.zoner.eu/zpracovatelske-smlouvy-nemazat/text-EN.html

Processing is based on safeguarding our legitimate interest in generating publicity for association events. Participants have the opportunity to tell us that they do not want to appear in our image material before and after we record or take photos.

Data will be stored for as long as required for the set purpose. It will be erased when this is requested by the data subject.

Contact form

If you use our contact form, we will store the details you provide there for as long as is required for the respective purpose or in accordance with legal retention periods in order to process your request.

We sometimes refer to third-party events. If you follow the links to their registration forms, their data protection provisions apply.

Third-party plugins and tools

Privacy policy for ActiveCampaign

We send newsletters using the email marketing platform ActiveCampaign, LLC, 150 N. Michigan Ave, Suite 1230, Chicago, IL, USA. We send newsletters to share news about our association’s activities. Newsletters are sent on the basis of existing customer relationships, contractual relationships or business relationships. Each newsletter includes information on how to unsubscribe. The email addresses of our newsletter recipients are stored on ActiveCampaign’s servers in the United States. The service uses this information to send and analyse newsletters on our behalf. ActiveCampaign does not use this personal data and does not share it with third parties. We have entered into a data processing agreement with ActiveCampaign to protect personal data. The service is certified under the US-EU Privacy Shield and the Swiss-US Privacy Shield, which means it has agreed to comply with EU data protection requirements.

Your data is processed on the basis of your consent (Art. 6 para. 1 (a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. Data stored on ActiveCampaign’s servers will be deleted after you unsubscribe from the newsletter.

For more information, see ActiveCampaign’s privacy policy at https://www.activecampaign.com/privacy-policy/.

Privacy policy for MyFonts

MyFonts is a web service by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. This service offers fonts that are incorporated on our website. Your IP address will be transmitted to MyFonts for licence verification purposes, and deleted after 30 days. MyFonts justifies this on the basis of its legitimate interest (Art. 6 para. 1(f) GDPR).

Privacy information can be found at: https://www.monotype.com/legal/privacy-policy/website-use-privacy-policy

Privacy policy for use of Twitter

Twitter is a microblogging service headquartered in San Francisco, CA, USA. We have not embedded this service on our website but we do maintain a corresponding Twitter account.

To learn more about how Twitter handles personal data, see the latest version of their privacy policy at http://twitter.com/privacy.

Privacy policy for use of WhatsApp

This messaging service is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. When you use WhatsApp, you are subject to the WhatsApp Terms of Service and the WhatsApp Privacy Policy.

Please note that as the site provider, we have no knowledge of what data is transmitted to WhatsApp Inc. or how it uses that data. Given that WhatsApp regularly updates its privacy policy, you are advised to read the latest version at https://www.whatsapp.com/legal?eea=0#privacy-policy.

You can adjust your privacy settings in WhatsApp by selecting Settings > Account. You can contact WhatsApp’s Data Protection Officer in Ireland here. People who reside outside Europe should use this link: https://www.whatsapp.com/contact/?subject=privacy&eea;=0

Privacy policy for Google Ads

We use Google Ads on our website. This online advertising program is provided by Google Inc., a subsidiary of Alphabet Inc., which is headquartered in the United States. We also use this service’s conversion tracking tool. Google Ads uses this tool to store a cookie on your computer if a Google Ad refers you to our website. This cookie expires after 30 days. It cannot be linked to your personal information. The data that conversion cookies collects is used to create conversion statistics for Google Ads customers. It tells us the total number of users that have responded to our ad by clicking on a link that took them to a page with a conversion tracking tag. We do not receive any information that we could use to personally identify you as a user during this process. If you wish to opt out of tracking, you can disable the cookie used for Google conversion tracking in your internet browser. You can use the Help menu in your browser if you need more information. To learn more about Google’s privacy policy, go to http://www.google.de/policies/privacy/.

Privacy policy for use of Google Analytics

Google Analytics is a web analytics service by Google Inc., a subsidiary of Alphabet Inc., which is headquartered in the United States.

The service works with our website to create pseudonymised user profiles and store small text files on your computer. The data it logs is then stored along with a randomly generated user ID.

The following information is collected for new and repeat visitors:

The navigation trail that you follow on the website
The amount of time you spend on each page you visit on the website
The subpage from which you leave the website
The country, region or city from which you are accessing the website
The end device (type, version, colour depth, resolution, width and height of browser window)
Returning or new visitor.
This information is used to analyse and optimise website use.

Your full IP address will only be transmitted and stored to a Google server in the United States in exceptional cases. According to Google Inc., user IP addresses are never associated with other user data.

User data and event data will be deleted automatically after a 14-month retention period. The retention period for user identifiers will be reset after each new event.

Google is party to the Privacy Shield framework published by the US Department of Commerce between the EU and the United States on the collection, use and storage of personal data from EU member states. Google, including Google Inc. and its wholly owned subsidiaries in the United States, has certified that it will uphold relevant Privacy Shield principles. Google Analytics has also been independently certified under ISO 27001. This certification includes the systems through which Google Analytics is provided.

If you do not agree to have your data collected by Google Analytics, you can download a browser add-on to disable Google Analytics and install it in your browser. However, please note that this may prevent you from using all of the features that are available on our website.

By using this website, you agree to allow Google to process the data it has collected about you in the manner described above and for the purpose cited above.

For more information, see:

Privacy policy for Google Tag Manager

Google Tag Manager is a service by Google Inc., a subsidiary of Alphabet Inc., which is headquartered in the United States. We use Tag Manager to analyse and track ad performance; in particular, adding our own tags enables us to streamline website measurement, conversion tracking and remarketing products from Google. The service does not access any data in any way, especially not personal data.

You can find more information about this service here: https://marketingplatform.google.com/intl/en_uk/about/tag-manager/

Privacy policy for YouTube

YouTube is a service by Google Inc., a subsidiary of Alphabet Inc., which is headquartered in the United States. We have our own channel on the YouTube platform, where we provide videos, images and sound recordings (of events and interviews, for example) that we have prepared for the public. We justify this with a legitimate interest in generating publicity. Participants have the opportunity to tell us that they do not want to appear on our video or audio tracks before and after we record.

To learn more about Google’s privacy policy, go to http://www.google.de/policies/privacy/

Privacy policy for Instagram

Instagram is a service by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. We have an account at https://www.instagram.com/swico.ch/. We have not embedded a plugin on our website, and we do not use this service to collect personal data.

Privacy policy for Sentry Error Logging

We use the web analytics service Sentry. This service is provided by Functional Software Inc., 132 Hawthorne St, San Francisco, CA 94107. The service collects and stores data created from anonymised user profiles. This data is only used to analyse errors and monitor system stability. This is done using cookies. Cookies are small text files that are stored locally on your computer, enabling the system to recognise you when you return to the site. You can prospectively withdraw your consent to Sentry’s collection and storage of your data at any time by disabling cookies in your browser settings.

Sentry’s privacy policy can be found at https://sentry.io/privacy/. The service meets the requirements of the EU-US Privacy Shield: https://sentry.io/security/.

Privacy policy for Microsoft Teams

Microsoft Teams is a service that enables teamwork, provided by the Microsoft Corporation, Redmond, Washington, which we use for the purpose of communicating with our members and interested parties. The use of Microsoft Teams is subject to Microsoft’s privacy policy, which you accept before use. Data processing may also take place in countries without appropriate data protection. In these cases, Microsoft ensures that personal data is protected through standard contractual clauses. Microsoft is certified under the US-EU Privacy Shield and the Swiss-US Privacy Shield.

Your rights as a data subject must be asserted directly against Microsoft.

Your rights

You can obtain information about the personal data we have stored for you at any time, free of charge, as well as about the source and recipient of that data and the purpose for which we collect and process it. You also have the right to ask us to correct, block, delete or transfer your data. Data cannot be deleted if it must be retained to meet statutory requirements or to properly conduct business transactions. If your data is not subject to a legal obligation to archive it, we will delete it at your request. If we do have a legal obligation to archive it, we will block it.

In addition, you can exercise your rights in court or file a complaint with the responsible data protection authority.

Who is responsible

Data Protection Officer Swico

Ivette Djovona
Lagerstrasse 33
8004 Zurich

ivette.djovona@swico.ch
+41 44 446 90 90

Data protection authority for Switzerland

Federal Data Protection and Information Commissioner
Feldeggweg 1
3003 Bern

Data protection representative for the EU

VGS Datenschutzpartner UG (limited liability)
Am Kaiserkai 69
20457 Hamburg
Germany

info@datenschutzpartner.eu

Last update 21 July 2020