Imprint

Information on the implementation of the data protection provisions of the Swiss Data Protection Act (DSG) and Articles 12 to 14 of the European General Data Protection Regulation (GDPR)

Ascaion AG processes your personal data within the legal framework to fulfill its tasks. Personal data consist of, for example, personal information such as name and address as well as communication data (telephone and e-mail) as well as facts that are related to your person in the context of our business relationship. During processing, we observe the highest demands to ensure the security of your data. The following will provide you with information on the processing of your personal data in accordance with the General Data Protection Regulation (DSG/DSGVO).

Contents

• 1. Who is responsible for data processing?
• 2. Contact details for Ascaion AG‘s data protection officer
• 3. Purpose and legal basis for the processing of data
• 4. How is your data processed?
• 5. Which types of personal data are processed?
• 6. Who are the data disclosed to?
• 7. How long is personal information stored?
• 8. Your rights as an affected person with respect to Ascaion AG
• 9. Right to appeal
• 10. Are you required to provide your personal information?
• 11. Special notes on data protection
• 12. Legal bases

1. Who is responsible for data processing?

Those at Ascaion AG responsible for the processing of personal data collected by you can be contacted at:

Ascaion AG
Laubisrütistrasse 42
CH-8712 Stäfa
E-Mail: info@ascaion.com
Tel: +41 43 433 10 00

2. Contact details for Ascaion AG‘s data protection officer

For any questions about the processing of your personal data and to exercise your rights in this regard in accordance with the General Data Protection Regulation, Ascaion AG‘s data protection officer is at your disposal. His contact details are as follows:

Mr. Marko Feistkorn

Tel.: +41 433 43 10 15
E-Mail: datenschutzbeauftragter@ascaion.com

The data protection officer is solely responsible for data protection issues. He is not authorised to give you information on the content of your request, or to provide legal advice.

3. Purpose and legal basis for the processing of data

Ascaion AG processes personal data for the client (Confederation, cantons, federal states, municipalities) in accordance with Art. 4 No. 2 and Art. 28 DS-GVO / § 4 DSG on the basis of a data processing contract. Your personal data will only be processed if this is necessary for Ascaion AG to carry out its responsibilities, or if you have given your express consent (§ 4 DSG / § 3 BDSG).

The legal basis of the data processing operations comprise Article 6 (1) (c) and (e) and Article 9 (2) (f) DSGVO / Article 4 DSG and the relevant provisions of the corresponding Rules of Procedure.

Even after completing a process, the data may be further processed to fulfill other legal obligations, such as to comply with legal retention requirements. Then the regulations of the DSG, the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) apply.

4. How is your data processed?

To carry out its work, Ascaion AG uses IT-supported procedures where your data is entered. We use technical and organisational security measures to protect your data against unintentional or unlawful destruction, loss or alteration, and unauthorised disclosure or access.

5. Which types of personal data are processed?

With regard to data processing procedures, only those personal data listed and required in any given context (education and eGovernment) are processed (e.g. address data and possibly financial data in the context of promotional measures).

With respect to the role of special categories of personal data (e.g. health data in special schools) in the processes, these are only processed in so far as they are necessary for the work of the schools within the framework of the legally required activity. The legal basis for this is specified by the relevant school laws and regulations, or the respective legal framework conditions of the contracting authority responsible for order data processing (authorities, schools, etc.).

Beyond the contract data processing procedures, the personal data of the following categories of data are processed:

• personal identification and communication information, e.g. first and last name, address, e-mail address, telephone number, where these are directly related to the Ascaion AG and their products (interested parties, existing customers, existing customers‘ event participants, Ascaion AG’s or German subsidiary Ascaion GmbH’s event participants).
• Information required to process your request, in particular a keyword-like description of your request.
• data from the clients determining the processes to be carried out

6. Who are the data disclosed to?

The recipient

Within Ascaion AG, only those, who are entrusted with the execution of order data processing, in which your data is process-relevant and not encrypted (as a rule) gain access to your personal data. Specifically, these are the production process experts responsible for the corresponding process, as well as other employees of each computer centre.

Your data will be disclosed to third parties only on the basis of legal regulations, other legal bases or, if your explicit consent is given.

Ascaion AG transmits personal data in individual cases

• Only by written instruction of the client of the respective order data processing contract insofar as this is admissible as per the legal conditions;
• to authorities, such as security authorities, for the statutory performance of the duties as far as Ascaion AG is legally obliged to do so;

7. How long is personal information stored?

Personal data collected as part of a process will be encoded in electronic dossiers. The storage period for the electronic files are determined by the stipulations regarding the retention periods of the respective process procedures. The storage of personal data that Ascaion AG has received in connection with submissions and inquiries—in particular from interested parties, support enquiries or other administrative matters—takes place in accordance with the relevant statutory retention periods and destruction of files in the context of general archive management.

8. Your rights as an affected person with respect to Ascaion AG

In order to effectively protect your personal data, the data protection law grants you a number of rights that you can invoke with respect to Ascaion AG:

• Information on processing (Article 15 GDPR)
• Correction of incorrect data (Article 16 GDPR)
• Deletion of data that is no longer needed (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Opposition to processing (Article 21 GDPR)

These also apply analogously to the Swiss legal area and insofar as the DSG provides for this analogously.

• Art.25 FADP Right to information
• Art.28 FADP Right to disclosure or transfer of data
• Art.32 FADP Right to rectification of inaccurate personal data, deletion
• Art. 37 FADP Right to object to the disclosure of personal data

Here you can assert your rights.

9. Right to appeal

Ascaion AG takes the protection of your personal data seriously. You can contact Ascaion AG at any time with any concerns concerning your personal data processed by us. You are free to lodge a complaint with the relevant supervisory authority of the respective federal state.

10. Are you required to provide your personal information?

In principle, you need only provide the data necessary for the proper conduct of the respective proceedings or for the handling of your request, or for the collection of which we are obliged under other laws.

If, according to the relevant legal basis, there is an obligation to provide your personal data, the legal consequences of a breach of this obligation are governed by its provisions.

11. Special notes on data protection

• We have taken technical and organisational measures to ensure that both our data protection rules and those of the external service providers are respected.
• When requesting content from our internet pages, security data is temporarily stored for access (prevention of DOS Attacks or similar attacks). We record the date and time of the visit for a limited period, as well as the web pages accessed. These data serve as a basis for the further development of our website.
• If you contact us via a contact form or directly by email, the email text and your email address will be used exclusively for correspondence with you.
• When you sign up for release notes and newsletters, personal data is entered on a voluntary basis. Your data will be used exclusively by the newsletter administrative staff.
• In the case of orders, the personal information you provide will only be used to send the requested access to the licensed products. With respect to carrying out invoicing procedures, the documents required for this purpose are kept in accordance with the applicable Ascaion AG registration guidelines or their statutory requirements, and then destroyed. Payments to Ascaion AG are made via payment links, which are transmitted by us via invoice data and which must be processed according to the specifications for the payment monitoring procedure. Furthermore, no personal data is disclosed to third parties.
• We reserve the right, in the event of serious violations of our terms of use, or in the event of unauthorised access or attempts to access our servers, to access personal data.
• Our online offer contains links to third party websites. We have no control over their compliance with the privacy policy.

12. Legal bases

Swiss Data Protection Act DSG dated 19th June 1992 (updated 1 January 2014)

Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27th April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46 / EC - General Data Protection Regulation (GDPR), OJ , EU 2016, L 119, p. 1

Federal Data Protection Act (BDSG) dated 30th June 2017, Federal Law Gazette I 2017, p. 2097

Federal Law on the Use and Securing of Federal Archives Records (BArchG) dated 10th March 2017, BGBl. I 2017, p. 410


Last updated: May 2018