Data protection declaration
c/o Kaufhaus Schubiger
Im Dorf 18
Should you have any questions or require further information, you can reach us at the following email address email@example.com .
JCI Switzerland takes the protection of your personal data very seriously. Below, we explain to you what data we collect and for what purposes it is used. We employ the appropriate technical and organisational measures to afford the maximum possible protection to your personal data. JCI Switzerland reserves the right to modify this data protection declaration. The respective update date for the declaration can be found at the beginning of this statement. All personal data is processed in accordance with the Swiss Data Protection Act and the European General Data Protection Regulation (GDPR), as well as all other relevant legal provisions. Unless otherwise stated, the terminology used corresponds to the terms also used by law. For simplicity, the masculine form also encompasses the feminine, and vice vesa.
Definition of personal data
Personal data is any information relating to an identified or identifiable natural person (e.g. name, address, or date of birth). In principle, you can use the website without providing any personal data. Should the collection of personal data be necessary, this data protection declaration will provide you with the necessary transparency.
When is personal data acquired?
It is important to us that our customers and website visitors understand what types of personal data we process from them. Data acquisition may take place at the following points:
- Website, in general: Personal data is processed and collected via log files, cookies, analysis tools and plug-ins from social media and other providers;
- Newsletter and SMS services: A subscription to our newsletter or SMS services is based on your consent at the time of registration;
- Contact form: Personal data is processed when contact is made with us (e.g. questions and suggestions);
- Account on the website: Personal data based on your registration is collected during the account creation process;
- User-generated content: Participation in the forum or similar may require the processing of personal data;
- Web shop: We collect your IP address, information about the products ordered and prices, the order number, site-specific content, an email address, your name, shipping and billing address, a phone number, the order currency, delivery method and payment details;
- Competitions: The provision of personal data is required for participation in competitions;
- General course of business: Personal data that is necessary for the general course of business is collected.
As far as permitted, we also take personal data from publicly available sources (e.g. internet, commercial register, debt collection register and from the press).
Purposes of data processing and legal basis
First and foremost, personal data is only processed for purposes within the scope of our business activities (e.g. the conclusion and execution of contracts, and the general course of business). Where we obtain consent for data processing, this serves as the legal basis (e.g. for the newsletter). Furthermore, processing takes place for the fulfilment of legal obligations. In addition, personal data may be processed for the following purposes, which are in line with our legitimate interests:
- Provision of our website, apps and other platforms as well as online offerings for users (incl. enlargement and further development);
- Maintaining business operations (e.g. IT environment, websites and apps). This also includes security measures such as visitor checks and internal accounting;
- Website optimisation, reach measurement, market research;
- Distribution of newsletters and / or advertising if no objection has been made;
- Offering of SMS services;
- To contact us (i.e comments and queries, media and applications);
- Personalisation of our online offerings and customer acquisition;
- Conducting of competitions;
- For data security reasons (this includes internal investigations);
- Enquiries and communication with third parties (e.g. job applications, media inquiries);
- Assertion and defence of legal claims (including proceedings before and with authorities).
Disclosure of personal data
In principle, personal data is only passed on to third parties with your consent, or based on our legitimate interest. Such a transfer usually occurs where certain services are provided by third parties (e.g. business partners, our service providers or similar). Furthermore, data may be passed on internally or given over to authorities. All of our partners take the protection of your personal data as seriously as we do. JCI Switzerland consequently only selects trustworthy partners who are able to guarantee the adequate protection of your data. Such cooperation will only take place on the basis of our specific instructions and no personal data will be sold for marketing purposes. A data transfer to third parties may take place in the context of official or judicial orders, which we are obliged to comply with. In principle, data may be transferred to countries in which we or our service providers (e.g. server provision, etc.) operate. Where there is an insufficient degree of data protection in the destination country, we safeguard ourselves with appropriate agreements, and the exceptions specified in the law (e.g. with your consent).
Storage period and retention periods
In principle, personal data is only stored by us for as long as is necessary to fulfil the respective purpose of storage. Exceptions to this are the company's own legitimate interests in storing data for a longer period (e.g. for tax reasons or because legal proceedings are imminent), or a statutory retention period which obliges us to store data. Once the purpose of data storage has been fulfilled and there are no further reasons for storage, your personal data will be deleted or anonymised immediately.
Rights of data subjects
The following data subject rights are granted to you:
- Right to information: You can request confirmation at any time about what personal data we process about you and whether it is transferred to a third country;
- Right of rectification: You may immediately request the correction of incorrect or incomplete personal data stored by us;
- Right of deletion: You can request the deletion of your personal data if it is no longer necessary for the related purposes, or if other legal standards do not prevent its deletion;
- Right to restrict processing: The right to restrict processing insofar as (i) the accuracy of the data is disputed by you, (ii) the processing is unlawful, but you object to its deletion, (iii) we no longer require the data but you need it to assert, exercise or defend legal claims or (iv) you have objected to the processing;
- Withdrawal of consent: You have the right to revoke a given consent for one or more specific purposes at any time, provided that the processing is based on your explicit consent. This applies in particular to cases of direct advertising. Data processing carried out up to the time of revocation shall not be affected by this. If you wish to exercise your right to object, simply send an email to firstname.lastname@example.org;
- Right to object: You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation;
- Right to data portability: You have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller.
Only those persons who are clearly identified may exercise such rights. If your identity is not clear, we reserve the right to take steps to identify you (e.g. requesting a copy of your ID).
You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority for your usual place of residence, your place of work or the place of the alleged infringement for this purpose. The Federal Data Protection and Information Commissioner (FDPIC) is responsible for Switzerland.
Obligation to provide personal data
There is no obligation to provide personal data. Please note that certain parts of the website cannot be used if you refuse to provide personal data.
Profiling and automated decision making
Within the scope of our technical analyses, some of your personal data will be processed automatically (profiling). Such automated decisions are made solely for evaluation purposes and are used for market research, or for the personalisation of offers (e.g. personal advertising). No fully automated decisions are made in the ordinary course of business.
Our use of the tracking measures listed below is aimed at ensuring that our website design continues to be needs based and is able to be continually optimised. Secondly, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These purposes are considered to be legitimate interests. The website www.jci4jobs.ch uses various services of Google Inc. based in the USA. These include Google Analytics, Google Adwords, Google Tag Manager, Google Fonts and Google Maps. The respective data processing purposes and data categories can be found in the corresponding tracking tools. For the purposes of a needs-based design and the ongoing optimisation of our website pages, we specifically use Google Analytics, a web analytics service provided by Google, Inc. (hereinafter "Google"; www.google.com) or comparable services. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the internet for the purposes of market research and the design of these internet pages in line with requirements. Cookies from Google are used in this context. In no case will your personal data be transmitted. We only receive user and statistical data. The IP addresses are anonymised so that any assignment is not possible (IP masking). However, Google may use the data for its own purposes and may link it to other web pages that are also tracked. Google will only be able to establish identity once you have logged yourself in. Any processing of personal data will therefore take place outside the responsibility of JCI Switzerland and in accordance with the respective data protection provisions of the provider.
Social media plug-ins
Social media plug-ins are used on our homepage (Facebook, Youtube or Instagram, etc.). This enables the respective operator to receive information that the corresponding page of our website was visited by the respective visitor. In each case, we only receive anonymous user and statistical data without any personal identification. Any processing of personal data will therefore take place outside the responsibility of JCI Switzerland and in accordance with the respective data protection provisions of the provider.
Encryption and safety
Our website uses an SSL certificate to encrypt the data to be transmitted (channel encryption). By integrating these encryption certificates, we can enable so-called transport encryption. This protects the communication from unauthorised access by third parties. Passwords and other sensitive data are additionally protected from external access. JCI Switzerland is committed to ensuring data security. However, please note that there is no such thing as absolute protection.
Issue date of data protection declaration: March 2021