In this privacy policy, we, INTEGRA Sitek AG, as a group company of INTEGRA Holding AG (hereinafter ISAG), explain how we collect and otherwise process personal data. This is not an exhaustive description; specific matters may be governed by other privacy policies or general terms and conditions, participation conditions, and similar documents.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”) and the Swiss Data Protection Act (“DPA”). However, the applicability of these laws depends on the individual case.Lorem ipsum However, the applicability of these laws depends on the individual case.

Data controller / data protection officer / representative
Responsible for the data processing described here is INTEGRA Sitek AG, unless otherwise stated in individual cases. If you have privacy concerns, you can notify us at the following contact address:

INTEGRA Sitek AG
Neckarsulmstrasse 24
CH-2540 Grenchen
Phone: +41 32 645 29 29

E-Mail: info@integra-sitek.ch

Collection and processing of personal data
We primarily process the personal data that we receive from our customers and other business partners from these and other persons involved, or that we collect from users when operating our websites and other applications.

To the extent permitted, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registers, commercial registers, press, internet) or receive such data from other companies within the INTEGRA group, authorities, and other third parties

Purposes of data processing and legal bases
We use the personal data we collect primarily to conclude and process contracts with our customers and business partners and to fulfill our legal obligations at home and abroad. If you are acting for such a customer or business partner, you may also be affected by the processing of your personal data in this capacity.

Furthermore, we process personal data from you and other persons, as permitted and appropriate, for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

• Offering and developing our offerings, services, and websites and other platforms on which we are present;
• Communication with third parties and processing of their inquiries (e.g., applications, media inquiries);
• Advertising and marketing (including organizing events), unless you have objected to the use of your data (if we send you advertising as an existing customer, you can object at any time, and we will then put you on a blacklist against further advertising);
• To assert legal claims and defense in case of any legal disputes and official proceedings;
• Ensuring the operation of our business, in particular, IT, our websites, and other platforms;
• Measures for IT, building, and system security;
• Corporate transactions and related transfers of personal data as well as measures for business management and to comply with legal and regulatory obligations as well as internal regulations.

If you have given us consent to process your personal data for specific purposes (e.g., when registering to receive newsletters), we will process your personal data within the framework of and based on this consent, provided we do not have another legal basis and we need one. Consent given can be revoked at any time, but this has no effect on data processing that has already taken place.

Cookies / Tracking and other technologies related to the use of our website
We typically use “cookies” and similar techniques on our websites to identify your browser or device. When you revisit this website, we can recognize you, even if we do not know who you are. In addition to cookies used only during a session and deleted after your website visit (“session cookies”), cookies can also be used to store user settings and other information for a certain period (e.g., two years) (“persistent cookies”). However, you can set your browser to reject cookies, only store them for a session, or delete them prematurely. If you block cookies, certain functionalities may no longer work

We sometimes use Google Analytics or similar services on our websites. This is a third-party service that may be located anywhere in the world (in the case of Google Analytics, it is Google Ireland (based in Ireland). Google Ireland relies on Google LLC (based in the USA) as a data processor (both “Google”), www.google.com), with which we can measure and evaluate the use of the website (not personally identifiable). For this purpose, permanent cookies are also used, which are set by the service provider. We have configured the service so that the IP addresses of visitors to Google in Europe are shortened before being forwarded to the USA and thus cannot be traced back. We have disabled the “Data Sharing” and “Signals” settings. Although we may assume that the information we share with Google is not personal data for Google, it is possible that Google could draw conclusions about the identity of visitors from this data, create personal profiles, and link this data to the Google accounts of these individuals. If you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its data protection regulations. The service provider only informs us about how our respective website is used (no information about you personally).

Data forwarding and data transfer abroad
In the context of our business activities and for the purposes in accordance with section 3, we also disclose data to third parties, as far as permitted and appropriate, either because they process it for us or because they wish to use it for their own purposes. This concerns in particular the following entities:

• Service providers of ours (within the INTEGRA group as well as externally), including data processors (such as IT providers);
• Dealers, suppliers, subcontractors, and other business partners;
• Customers;
• Domestic and foreign authorities, agencies, or courts;
• Media;
• The public, including visitors to websites and social media;
• Competitors, industry organizations, associations, institutions, and other bodies;
• Other parties in possible or actual legal proceedings;
• Other companies of the INTEGRA group;

all collectively referred to as “Recipients”.

These recipients are partly domestic, but can also be abroad. In particular, you must expect your data to be transferred to all countries in which the INTEGRA group is represented by group companies, branches, or other offices, as well as to other European countries and the USA, where the service providers we use are located (such as Microsoft, SAP, etc.).

If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with applicable data protection (for this purpose, we use the revised standard contractual clauses of the European Commission, which can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? accessed), unless it is already subject to a legally recognized framework for ensuring data protection and we cannot rely on an exemption provision. An exception may apply, in particular, in foreign legal proceedings, but also in cases of overriding public interests or if contract processing requires such disclosure, if you have consented, or if it concerns data made generally accessible by you, to the processing of which you have not objected.

Duration of storage of personal data
We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations or for the purposes pursued with the processing, i.e., for the duration of the entire business relationship (from initiation, execution to termination of a contract), and beyond that according to legal retention and documentation obligations. In this context, personal data may be retained for the period during which claims can be asserted against our company and to the extent that we are otherwise legally obligated or have legitimate business interests to do so (e.g., for evidentiary and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymized as far as possible.

Data security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse. This includes issuing directives, providing training, implementing IT and network security solutions, access controls and restrictions, and encryption of data carriers and transmissions, among others.

Obligation to provide personal data
Within the scope of our business relationship, you are required to provide the personal data necessary for initiating, conducting, and fulfilling the contractual obligations associated with the business relationship. Generally, you do not have a legal obligation to provide us with data. Without this data, we will generally not be able to enter into or process a contract with you (or the entity or person you represent).

Rights of the person concerned
You have the right, under the applicable data protection laws and as provided therein (such as in the case of the GDPR), to information, correction, deletion, restriction of data processing, and to object to our data processing, particularly for purposes of direct marketing, profiling conducted for direct advertising, and other legitimate interests in processing, as well as the right to receive certain personal data for transfer to another entity (so-called data portability). Please note, however, that we reserve the right to enforce the limitations imposed by law, such as when we are obliged to retain or process certain data, have an overriding interest in doing so (as far as  may invoke it), or require the data to assert claims. In the event that costs are incurred for you, we will inform you in advance. We have already informed you about the option to revoke your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and may result in consequences such as premature contract termination or cost implications. In this case, we will inform you in advance, where this is not already contractually regulated. The exercise of such rights generally requires that you clearly prove your identity (e.g., by means of a copy of an identity document, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address provided in section 1.

The exercise of such rights generally requires that you clearly prove your identity (e.g., by means of a copy of an identity document, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address provided in section 1. 1 angegebenen Adresse kontaktieren.

Additionally, every affected individual has the right to enforce their claims in court or to file a complaint with the relevant data protection authority. The responsible data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Changes
We may modify this Privacy Policy at any time without notice. The current version published on our website always applies. If the privacy policy is part of an agreement with you, we will notify you of the change in the event of an update by email or other appropriate means.

Based on dsat.ch