Name and contact details of the person responsible:

The controller within the meaning of the Swiss Data Protection Act (DSG), the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

Triviso AG
Hauptbahnhofstrasse 8
CH - 4500 Solothurn

Tel:     +41 32 628 20 80
Email: info@triviso.ch

Represented by:

• Stefan Cotting
• Mathieu Fellay
• Patrick Gafner
• Walter Reusser

representatives within the EU:  

Triviso GmbH
Gerberau 44
D - 79098 Freiburg im Breisgau

Contact details of the data protection officer (valid within the EU)
Email: datenschutz@triviso.de

By post: At the above address with the addition „For the attention of the Data Protection Officer“

Collection and storage of personal data and the nature and purpose of their use

• Website
• Contact us
• Business partner
• Trade fair appearances
• Site visits
• Applications
• Social media
• Newsletter

1. data processing on the website

Below you will find information on what data is collected during your visit to

https://www.triviso.ch/ and how they are used.

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted, usually after one week:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access is made (referrer URL)
• the browser used and, if applicable, the operating system of your computer and the name of your access provider

Purposes (business purposes) for the processing:

• Provision of a functional website for the following purposes, among others:
• Online presence / presentation of our company
• Provision of information about our company, services and products
• Building the brand image
• Evaluation of system security and stability
• Defence against and investigation of any abusive page access (DoS/DDoS attacks or similar) and for other administrative purposes
• Communication with customers, potential customers and business partners, interested parties or applicants

Lawfulness / legal basis for processing:

• Consent - the data subject has given their consent to the processing of their personal data for one or more specific purposes.
• Contract fulfilment and pre-contractual enquiries - processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation - processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate interests - our legitimate interest follows from the data collection purposes listed above. As a rule, we do not use the data collected for the purpose of drawing conclusions about your person. At most, we reserve the right to do so in the event that this becomes necessary in order to clarify abusive page accesses.

Place of processing - transfer to a third country or an international organisation, reference to appropriate safeguards:

The place of data processing in connection with our business and website operations is Switzerland. This processing also includes a possible transfer to third parties and, if necessary, to so-called third countries outside Switzerland, outside the European Union (EU) and the European Economic Area (EEA). If this happens, it will only take place in accordance with the legal requirements.

Disclosure to other companies or third parties: recipients or categories of recipients of personal data, DP relationship:

The recipients of the personal data are IT service providers (in particular providers or hosters) with whom we have concluded a corresponding contract for order processing. If service providers in third countries are used, they are obliged, in addition to written instructions, to comply with the level of data protection in the European Union and Switzerland by agreeing the EU standard contractual clauses or by providing appropriate guarantees.

Duration of storage or deadline for deletion of personal data:

As soon as consent for processing is revoked or other authorisations cease to apply, the data will be deleted in accordance with the legal requirements. If the data is not deleted because it is required for other legally permissible purposes, its processing is restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person. Further information on the storage and deletion of data can be found in our data protection notices, which apply specifically to the respective processing operations, as well as in Cookie Consent Management.

Existing rights / claims - right of access, rectification, erasure, restriction of processing, data portability and right to object:

You have various rights in accordance with the applicable data protection laws:

• Right of access - You have the right to request information about the processing that has taken place and about your personal data, as well as further information and a copy of the data in accordance with the legal requirements.
• Right to rectification In accordance with the legal requirements, you have the right to demand the immediate rectification of incorrect or incomplete personal data stored by us.
• Right to erasure and restriction of processing You have the right to request the erasure or restriction of processing of your personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
• Right to data portability - You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
• Right to withdraw consent - You have the right to withdraw your consent from us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future.
• Right to object - if your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. This also applies to profiling insofar as it is associated with such direct advertising.

If you would like to exercise your right of cancellation or objection, simply send an e-mail to info@triviso.ch

The existence of a right of appeal to a supervisory authority:

You have a general right to lodge a complaint with the data protection supervisory authority responsible for you.

For Triviso AG:
Federal Data Protection and Information Commissioner
Feldeggweg 1
CH - 3003 Berne
https://www.edoeb.admin.ch/edoeb/de/home.html

The authority responsible for Triviso GmbH in Germany is the „Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden- Württemberg“, Lautenschlagerstrasse 20, D-70173 Stuttgart, Telephone +49 0711/61 55 41 0, e-mail poststelle@lfdi.bwl.de.

Definitions (personal data, data subjects, processing, restriction of processing)

• Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as „data subject“). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
• Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.
• Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
• The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients. the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
• Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
• Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.1 Embedded services

1.1.1 CookieScript

CookieScript's Consent Management Tool is installed on our website to obtain, manage and log your consent to the storage of cookies and the use of certain technologies.

Function, purposes of use, types and categories of processed data
CookieScript stores information about the categories of cookies and the consent given by users in an opt-in cookie in order to be able to assign them to a user or device. Together with a pseudonymised user identifier, details of the time and scope of consent, the browser, system and device used are stored. Details of the cookies used are listed in the user interface of the Consent Management Tool.

Recipients of the data, duration of storage
The provider is Objectis Ltd, Vilnius, Lithuania. The cookie data remains stored until you request its deletion or delete the cookie yourself. Consent is stored for up to 13 months. Statutory retention obligations remain unaffected.

Legal basis
The use is made to obtain the legally required consents in accordance with Art. 6 para. 1 lit. c GDPR in order to fulfil our legal obligations to provide evidence in accordance with Art. 7 para. 1 GDPR.

1.1.2 Google Analytics

• do not give your consent to the setting of the cookie or
• the browser add-on to deactivate Google Analytics HERE download and install.

1.1.3 Google Tag Manager

1.1.4. hCaptcha

1.1.5 CDN jQuery

1.1.6 Use of cookies

1.2 Links to other websites

Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, we will remove such links immediately. Please note the data protection declarations of the third parties to whose site the link is made.

1.3 Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
 

2. contacting us, contact forms on our websites

If you have any questions, you can contact us by telephone or e-mail. We also offer you the option of contacting us via a form provided on the website.
The following data is processed in our online contact form:

• Type of contact
• Name
• Company
• Email address
• Your comment

Data processing for the purpose of contacting us is based on your voluntarily given consent or in the case of (pre-)contractual enquiries (e.g. with regard to a future business relationship). The data collected and processed when you contact us will be deleted by us after the enquiry has been dealt with and, if applicable, after the statutory retention periods have expired.
 

3. data processing of business partners, customers or suppliers

Customer and supplier data is processed in our merchandise management and contact management system in the context of business relationships or for the initiation of these, order processing and the associated processes, for the purpose of purchasing and selling products and / or services and mapping the history of business processes and documenting business transactions (as part of quality management) and marketing. Furthermore, purchasing behaviour is evaluated for market analyses and the sale of new developments within the product portfolio. No automated profiling or scoring of a data subject takes place as part of market analyses.

The following data of the respective contact persons are processed by customers and suppliers:

• Salutation
• Title
• Name
• Contact details
• Email address
• Telephone (landline, mobile number)
• Company address
• Area of responsibility, function in the company, department

Your data is used and processed within our company by sales, purchasing, production, design, dispatch, marketing, controlling, financial accounting and project management. The necessary data may be passed on to sales representatives if this is necessary for the fulfilment of contractual obligations.

Data will not be transferred outside Switzerland to non-EU countries/third countries.

We store and retain documents that are subject to verification and retention requirements as part of the business relationship in accordance with statutory retention periods in order to fulfil tax and other legal requirements. Paper documents are then destroyed, unless there are further retention obligations for individual documents, e.g. as part of guarantees.

We only process your data to the extent necessary to protect our legitimate interests or those of third parties. Our legitimate interest is given in particular for management and control measures, marketing purposes, to improve our business relationship, assert legal claims and defence in legal disputes.
 

4. trade fair contacts

In the context of our trade fair appearances, we process personal data for the following purposes, analogous to section 3 „Data processing of business partners, customers or suppliers“:

• Processing of specific enquiries from trade fair visitors, provision of information material
• Recording of visitor forms, documentation and processing of specific enquiries

During the personal consultation at the Triviso trade fair stand, a contact form is created to record the conversation. This data is stored internally and is used for further processing of the project.
 

5. during a visit to our locations

The processing of visitor data is based on the respective contract documents and contract contents, or the circumstances of your visit to us on site.
We only process your data to the extent necessary to protect our legitimate interests or those of third parties. Our legitimate interest is given in particular for management and control measures, marketing purposes, to improve our business relationship, to assert legal claims, defence in legal disputes and to ensure the safety of our visitors and employees, as well as to protect the systems and facilities.
The type and purposes of data processing are generally:

• Recording your visit in our visitor books and calendars
• Provision of WLAN access
• Surveillance of individual, designated areas with video technology

6. processing of application data

In the course of your application, we will collect and process the personal application data listed below:

• Salutation
• Surname, first name
• Address
• Telefonnummer/Mobilnummer
• e-mail
• Application documents (letter of application, CV, references, certificates, etc.)

If your application contains special categories of personal data (e.g. information on marital status that may provide information about your sex life or sexual orientation; information on health; a photo that allows conclusions to be drawn about ethnic origin and/or religion and possibly eyesight; similarly sensitive data or special categories), we will assume that you have given your consent to processing. The sole purpose of this consent is to be able to consider the application in its present form. The information will not be taken into account in the application process unless there is a legal obligation to do so, particularly in the case of severely disabled persons. Your data will not be passed on to third parties.
You can also submit an application without the special categories of personal data without this affecting your chances in the application process.

Your personal application data is collected and processed exclusively for the purpose of filling vacancies within our company. Your data will only be forwarded to the internal offices and specialist departments responsible for the specific application process, unless you give us your express consent for further use.
Please note that the data you provide may be used to compile statistics on the application process. These statistics are compiled exclusively for our own purposes and are never personalised, but in anonymised form.

The collection/processing of your data takes place in accordance with § 26 BDSG, or with your consent in accordance with Art. 6 (1) lit a GDPR.

Your personal application data will generally be deleted a maximum of six months after completion of the application process. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage.
If we are unable to offer you a current vacancy but, based on your profile, believe that your application may be of interest for future vacancies, we will store your personal application data for a maximum of 2 years, provided that you expressly consent to such storage and use. With your consent, we will compare your documents with our job vacancies and contact you if we have a suitable offer.

When recruiting for our company, we may use recruiting products from the professional social network XING. If you would like information about the data held by XING, you can access it yourself in the settings area of your Xing profile. You can find the Xing Talent Manager privacy policy here: https://www.xing.com/legal/privacy_policy_talentmanager.
 

7. social media platforms

We use so-called social plugins from various social networks in our online offering; these are described individually in this section.

When using the plugins on our websites, your internet browser establishes a direct connection to the servers of the respective social network. As a result, the respective provider receives the information that your Internet browser has accessed the corresponding page of our online offering, even if you do not have a user account with the provider or are not currently logged into it. Log files (including the IP address) are transmitted directly from your Internet browser to a server of the respective provider and may be stored there. The provider or its server may be located outside the EU or the EEA (e.g. in the USA).

7.1 Facebook

We are represented on the social network Facebook, Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94304, USA (hereinafter referred to as „Facebook“) by operating a so-called fan page. This page gives you the opportunity to contact us directly and receive information about current events in our company.
Through this site, we as the operator receive data from Facebook, including personal data. We use and process these so-called „Facebook Insights“ - as described below - on the basis of our legitimate interests in accordance with Art. 6(1)(f) GDPR. We can retrieve statistical data of different categories from Facebook, such as

• Number of page views
• „Like“ information
• Page activities
• Video views
• Contribution range
• Comments
• Shared content
• Proportion male/female
• Origin in relation to country and city
• Language
• Calls
• Clicks

We use this data to optimise our own posts. For example, we find out which types of posts are not successful in the desired target groups and can continuously do without them. We also use the analysis of „Like“ information in relation to posts to invite the relevant people to our page („Like“ information for the fan page as a whole).

In addition, this information provides us with information about what type of posts generate the most interactions at what time of day and on what day of the week. Based on this information, we optimise the times at which we place our posts.
Art. 26 GDPR regulates the joint responsibility that exists - in this case between Facebook and us - with regard to the protection of your personal data. Facebook has published a corresponding contract that regulates the joint responsibility described. The company calls this contract the „Page Controller Addendum“. You can read the exact content here: https://www.facebook.com/legal/terms/page_controller_addendum

7.2 Instagram

We have set up a company profile on Instagram to give you authentic and visual insights into our company. Instagram is a company of the Facebook group.
The company's European headquarters are located in Ireland:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Facebook Ireland Limited is a company registered under Irish law.
Commercial register number: 462932
impressum@support.instagram.com

7.3 LinkedIn

Our websites contain programmes (plugins) of the social network LinkedIn.com. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA („LinkedIn“). An overview of the LinkedIn plugins and their appearance can be found here: https://developer.linkedin.com/plugins

Information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

7.4 Xing

Our websites contain programmes (plugins) of the social network xing.com. These are operated by Xing AG, Gänsemarkt 43, D-20354 Hamburg. The plugins can be recognised on our website by the Xing logo. When you visit our websites that contain such a plugin, your browser establishes a direct connection with the Xing servers, which in turn transmits the content of the plugin to your browser and integrates it into the displayed website. As a result, the information that you have visited our website is forwarded to Xing. If you are logged in to Xing via your personal user account while visiting our website, Xing can assign the website visit to this account. By interacting with plugins, e.g. by clicking the Xing button, the corresponding information is transmitted directly from your browser to Xing and stored there.
The purpose and scope of the data collection and the further processing and use of the data by Xing as well as your rights in this regard and setting options to protect your privacy can be found in the Xing privacy policy:
https://www.xing.com/app/user?op=tandc&what=dp#

7.5 YouTube

We use the video platform YouTube on our websites, which is operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 in the USA, („YouTube „). YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA. YouTube is a platform that enables the playback of audio and video files. YouTube is part of the Google Group and refers to its privacy policy. When you access one of our web pages, the YouTube player integrated there can establish a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transmitted to YouTube. We would like to point out that we have no knowledge of the content of the transmitted data or its use by YouTube.
We use the so-called extended data protection mode when integrating YouTube. This setting on YouTube ensures that cookies are only used as soon as you actually click on the video itself - and not when you simply enter the website itself. Unfortunately, this does not apply to the setting of cookies by DoubleClick. Please visit the YouTube / Google website for information on how YouTube handles your data and your rights and settings options in this regard to protect your privacy. https://www.google.com/policies/privacy/partners/?hl=de.
 

8. newsletter subscription

If you are interested in receiving a newsletter for information purposes about our company and our products and services, we need you to enter your e-mail address in the corresponding online registration form. This ensures that you have given us the necessary consent to receive the newsletter.  
You can easily revoke your consent to the storage of your e-mail address and the data you have provided at any time via the contact / hyperlink provided in the newsletter e-mail.
 

9. online meetings, telephone conferences, online presentations and online seminars

Personal data is processed when using video conferencing or collaboration tools. We use various applications as part of internal and external communication, which in turn serves to maintain our business operations and stay in contact with you.

During the meeting, you have the option of submitting comments and questions in the chat, for example. Sound and image signals are also processed for transmission. You can switch off the camera and microphone yourself at any time. You can also blur the background depending on the application and dialling in so that only you and not the room you are in are visible.

Please note that the services we offer are generally based and the data processing data centre is located in Europe. However, it cannot be ruled out that diagnostic data may also be transferred to the parent companies, which are generally based in the USA. We have concluded contracts with the service providers for order processing and, if necessary, informed ourselves about further guarantees for data exchange with the so-called third country.

The subject of processing is the following personal data:

User details: first name, surname, telephone (optional), e-mail address, password (if „single sign-on“ is not used), profile picture (optional), department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialling in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an online meeting. In this respect, the text entries you make will be processed in order to display them in the online meeting and, if necessary, to log them.

If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content.
In the case of online presentations, we may also process the questions asked by online seminar participants for the purposes of recording and following up webinars.

Legal basis for data processing

The legal basis for data processing when conducting online meetings is the fulfilment of a contract or pre-contractual measures, insofar as the meetings are conducted within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is our legitimate interest in the effective organisation of online meetings.

Recipients / transfer of data

Personal data that is processed in connection with participation in online meetings is not passed on to third parties unless it is intended to be passed on.

Other recipients: The provider necessarily receives knowledge of the above-mentioned data insofar as this is provided for in our order processing contract.