Source: https://infront-web-prod.corebine.com/en/gdpr-transparency-statement
Timestamp: 2020-03-29 18:27:03
Document Index: 287518776

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 15', 'Art. 8', 'Art. 16', 'Art. 5', 'Art. 17', 'Art. 5', 'Art. 18', 'Art. 12', 'Art. 21', 'Art. 4', 'Art. 20', 'Art. 77', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 14', 'Art. 77', 'Art. 22']

Infront Group has issued below Privacy Statement in the light of the enactment of GDPR, the new data protection and privacy regulation of the European Union (EU), and the upcoming revision of the Swiss Data Protection Act.
Phone: +41-41-723 15 15
4.1. We process personal data that we obtain from our business clients and suppliers in the context of business relationships. We also process – insofar as necessary to provide our services and organize our procurement of services – personal data that we obtain from publicly accessible sources, (e.g. debt registers, commercial and association registers, press, internet) or that is legitimately transferred between Infront group entities[1] or from other third parties (e.g. event organizations).
4.2. Relevant data is personal information of contact persons from our clients and suppliers (e.g. name, address and other contact details, date and place of birth, and nationality), and identification data (e.g. ID card details). Furthermore, this can also be order data (e.g. payment order), data from the fulfillment of our contractual obligations (e.g. sales and order data in payment transactions), marketing and sales data, documentation data (e.g. meeting protocols), and other data similar to the categories mentioned.
a) For fulfillment of contractual obligations (Art. 6 para. 1 lit. b of the GDPR)
b) In the context of balancing interests (Art. 6 para. 1 lit. f of the GDPR)
Risk control in Infront Group
c) As a result of your consent (Art. 6 para. 1 lit. a of the GDPR)
d) Due to statutory provisions (Art. 6 para. 1 lit. c of the GDPR) or in the public interest (Art. 6 para. 1 lit. e of the GDPR)
Furthermore, as a worldwide acting group of companies, we are subject to various legal and statutory requirements (e.g. tax laws). Purposes of processing include fulfilling control and reporting obligations under fiscal laws etc.
6.1. Within Infront Group, every unit that requires your data to fulfill our contractual and legal obligations will have access to it. Service providers and vicarious agents appointed by us can also receive access to data for the purposes given, if they maintain confidentiality. These are companies in the categories of banking services, IT services, logistics, printing services, telecommunications, collection, advice and consulting, and sales and marketing.
6.2. We may pass on information about you only if legal provisions demand it, or if you have given your consent (e.g. to process a financial transaction).
7.1. Your data may be shared with Infront group companies and/or specialized IT service providers. As such, your data may be transferred to countries outside Switzerland or the European Economic Area (EEA). Personal data is transferred outside the EEA on the basis of declarations of adequacy or other appropriate safeguards, in particular standard data protection clauses adopted by the European Commission.
7.2. Please contact us if you would like to request to see a copy of the specific safeguards applied to the export of your information (Art. 13 para. 1 lit. f of the GDPR).
8.1. We will process and store your personal data for as long as it is necessary in order to fulfill our contractual and statutory obligations. It should be noted here that our business relationship is a long-term obligation, which is set up on the basis of periods of years.
8.2. If the data is no longer required in order to fulfill contractual or statutory obligations, it is deleted, unless its further processing is required – for a limited time – for the following purposes:
9. What Data Privacy Rights Do I Have?
9.1. Every data subject has the right to access according to Art. 15 GDPR (Art. 8 FADP), the right to rectification according to Art. 16 GDPR (Art. 5 FADP), the right to erasure according to Art. 17 GDPR (Art. 5 FADP), the right to restrict processing according to Art. 18 GDPR (Art. 12, 13, 15 FADP), the right of object according to Art. 21 GDPR (Art. 4 FADP), and if applicable – the right to data portability according to Art. 20 GDPR. Furthermore, if applicable on you, there is also a right to lodge a complaint with an appropriate data privacy regulatory authority (Art. 77 GDPR).
9.2. On grounds relating to your particular situation, you shall have the right of objection, at any time to processing of your personal data which is based on Art. 6 para. 1 lit. e of the GDPR (data processing in the public interest) and Art. 6 para. 1 lit. f of the GDPR (data processing based on balancing interests). If you submit an objection, we will no longer process your personal data unless we can give evidence of mandatory, legitimate reasons for processing, which outweigh your interests, rights, and freedoms, or processing serves the enforcement, exercise, or defense of interests. Please note, that in such cases we will not be able to provide services and maintain a business relation.
9.3. You can withdraw consent granted to us for the processing of personal data at any time. This also applies to withdrawing declarations of consent that were made to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the withdrawal only applies to the future. Processing that was carried out before the withdrawal is not affected by it.
9.4. The objection or withdrawal does not need to be made in a particular form and should ideally be addressed to the contact details given above.
10. Right to lodge a complaint with a supervisory authority (Article 13 para. 2 lit. d, Article 14 para. 2 lit. e, Article 77 para. 1 GDPR)
10.1. As the controller, we are obliged to notify the data subject of the right to lodge a complaint with a supervisory authority, Art. 13 para. 2 lit. d and Art. 14 para. 2 lit. e of the GDPR. The right to lodge a complaint with a supervisory authority is regulated by Art. 77 para. 1 of the GDPR. According to this provision, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR. The right to lodge a complaint with a supervisory authority was only limited by the law of the Union in such way, that it can only be exercised before a single supervisory authority (Recital 141 Sentence 1 GDPR). This rule is intended to avoid double complaints of the same data subject in the same matter. If a data subject wants to lodge a complaint about us, we therefore ask to contact only a single supervisory authority.
In establishing and carrying out a business relationship, we generally do not use any automated decision-making nor any Profiling pursuant to Art. 22 GDPR. If we use this procedure in individual cases, we will inform you of this separately, as long as this is a legal requirement.
[1] This includes companies outside Switzerland and the EEA