Data protection

General

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. Below we inform you about the handling of your personal data when using our website www.gs1.ch, when contacting us, when establishing, implementing and terminating an association membership or a contract or when organizing an event with us.

Personal data

Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes in particular information such as surname, first name, address (including e-mail), telephone number and date of birth. This privacy policy is based on the EU General Data Protection Regulation (DSGVO). Although the DSGVO is a regulation of the European Union (EU), it is relevant to us. Swiss data protection law (DPA) is heavily influenced by EU law, and companies outside the European Union or the European Economic Area (EEA) must comply with the DPA under certain circumstances. Therefore, we have aligned this Privacy Policy with their standard.

I. Responsibility

The responsible legal entity within the meaning of the applicable data protection provisions is:

GS1 Switzerland Association
Monbijoustrasse 68
CH-3007 Bern

T: +41 58 800 70 00
F: +41 58 800 70 99
E-mail: datenschutz@gs1.ch
Website: www.gs1.ch

II. purposes and legal bases of data processing

1. informational use of the website

You can visit our website without providing any personal information. If you use our website for informational purposes only, i.e. do not log in, register, place an order or otherwise provide us with personal information, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us in the context of cookies used for statistical analysis of the use of our website.

a. Technical provision of the website

i. Purpose

For the purpose of the technical provision of the website, it is necessary that we process certain automatically transmitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time you visit our website and stored in our server log files. This information relates to the computer system of the calling computer. The following information is collected:

• Host
• IP address of the user
• (if applicable) auth name
• Date and time of accessMethod of access (Get/Post)
• Request
• Protocol (e.g. http)
• status (e.g. error messages)
• retrieved amount of data
• referrer
• Browser and operating system of the user

Furthermore, we use cookies to make our website available to you for use. Cookies are text files that are stored on your computer system in the Internet browser or by the Internet browser when you call up a website. A cookie contains a characteristic string of characters that makes it possible to uniquely identify the browser when the website is called up again. We use these cookies exclusively to provide you with our website and its technical functions. Some functions of our website cannot be offered without the use of cookies. Except for purposes of statistical analysis of the use of our website, we only use session cookies. These session cookies are deleted when you leave the website. This does not apply to log-in cookies, which store your access authorization. These are automatically deleted after a period of 24 hours.

ii. Legal basis

We process your personal data for the technical provision of our website on the basis of the following legal grounds:

• for the performance of a contract (conclusion or execution) or for the implementation of pre-contractual measures, insofar as you visit our website to obtain information about an association membership, our products or services and our events; and
• to protect our legitimate interests in order to be able to make the website technically available to you. Our legitimate interest in this respect is to be able to provide you with an attractive, technically functioning and user-friendly website, as well as to take measures to protect our website against cyber risks and to prevent cyber risks to third parties from our website.

b. Statistical analysis of the use of the website and increase in reach.

i. Purpose

For the purpose of statistical analysis of the use of our website, we use Google Analytics and thus cookies that allow an analysis of your browsing behavior. This allows us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimize our offer.

The information obtained as part of the statistical analysis of our website is not merged with your other data collected as part of the website.

2. Contacts, conclusion of contracts and registration for events on the website.

In addition to the purely informational use of our website, you can also use our website to register and become an association member, order one of our products or services, register for an event, register for our newsletter or to contact us. In addition to the processing of your personal data described above for purely informational use, we will then also process other personal data from you that we need to process your association membership, order or to process and respond to your inquiry.

a. Contact requests

In order to be able to process and respond to your inquiries to us, e.g. via the contact form or to our e-mail address, we process the personal data from you that you provide in this context. In any case, this includes your name and e-mail address in order to send you a reply, as well as the other information you send us as part of your communication.

We process your personal data to respond to user requests based on the following legal grounds:

• To protect our legitimate interests; our legitimate interest is to respond appropriately to contact requests.

b. Conclusion of contract

If you apply to join an association or order one of our paid or free products or services on our website, we process your personal data in order to accept and process the application or order and to provide you with the ordered products or services. In doing so, we process the information evident from the respective input forms (voluntary information is marked with the suffix "*."):

• E-mail address
• Salutation
• Position
• First and last name
• Company
• Branch
• Street/House number
• Postal code
• City
• Country
• Phone

We process your personal data for the establishment, implementation and termination on the basis of the following legal grounds:

• For the performance of a contract (conclusion or execution) or for the implementation of pre-contractual measures.

c. Registration for events

If you register for a paid or free event on our website, we process your personal data in order to accept the registration. In doing so, we process the information apparent from or requested in the respective input forms (voluntary information is marked with the suffix "*."):

Company details:

• Company
• Street
• P.O. Box
• Postal code
• City
• Country
• Branch, if applicable

Details of the participant:

• Salutation
• Department
• Position
• First and last name
• Title, if applicable
• Telephone
• E-mail

We process your personal data for the establishment, implementation and termination of the event on the basis of the following legal grounds:

• For the fulfillment of a contract (conclusion or settlement) or for the implementation of pre-contractual measures.

d. Credit check

If we make advance payments, we reserve the right to obtain credit information based on mathematical-statistical methods from the following company or companies in order to protect our legitimate interests:

Creditreform Egeli Basel AG
Credit reports, debt collection
Münchensteinerstrasse 127
4053 Basel

For this purpose, we transmit the personal data required for a credit assessment and use the information received about the statistical probability of a payment default. The creditworthiness information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods. A large number of characteristics, such as income, address data, occupation, marital status and previous payment behavior, are used to draw conclusions about the customer's future risk of non-payment. The result is expressed in the form of a payment score. The information obtained in this way forms the basis for our decision on the establishment, implementation or termination of the contractual relationship. However, the choice of one of the payment methods offered is not dependent on such information.

We process your personal data for the establishment, execution and termination of the contract on the basis of the following legal grounds:

• to protect our legitimate interests. Our legitimate interest lies in the financial protection of our advance performance, to avoid fraud as well as to establish identity. Furthermore, the legitimate interests of third parties consist in the protection of non-payment and the prevention of fraud.

e. Newsletter and promotional emails

Data processing when subscribing to the e-mail newsletter

If you subscribe to one or more of our newsletters, we process the data required for this purpose or separately provided by you in order to send you our e-mail newsletter(s) on a regular basis.

Data use for e-mail advertising

If we receive your e-mail address in connection with joining the association, concluding a contract and providing our products or services or attending an event, and you have not objected to this, we reserve the right to regularly send you offers for similar products or services (incl. events), from our range by e-mail. You can object to this use of your e-mail address at any time by sending a message to the contact option provided above or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

We process your personal data for sending our newsletter and advertising emails on the basis of the following legal grounds:

• for the sending of the newsletter based on your consent to the processing of personal data given by double opt-in procedure;
• for e-mail advertising in the aforementioned cases to protect our legitimate interests; our legitimate interest is direct advertising for our products and services.

3. Contacts, contracting and registration for events outside the website.

If you submit a contact request to us, conclude a contract or register for a free or paid event and these are not made via our website but via other communication channels (e.g. e-mail, telephone, by mail, in person), we process your personal data that you provide to us, among other things, as part of the conclusion of the contract or registration and that are required for the conclusion of the contract and the provision of our products or services, for the purpose of establishing, implementing and, if applicable, terminating our contracts/events with you, as set out below.

a. Contact Requests

In order to process and respond to your inquiries to us, e.g. by e-mail, telephone, mail, in person, we process the personal data from you provided in this context. In any case, this includes your name and address information, such as e-mail address, postal address, or, if applicable, a fax number, in order to send you a reply, as well as the other information you send us as part of your communication.

We process your personal data to respond to your inquiry on the basis of the following legal grounds:

• To protect our legitimate interests; our legitimate interest is to respond appropriately to contact requests.

b. Conclusion of contract

If you apply for membership of the association by telephone, e-mail or in person, or order one of our products or services for which a fee is charged or free of charge, we process your personal data in order to receive and process the application or order and to be able to provide you with the ordered products or services. In doing so, we process the information evident from the respective input forms (voluntary information is marked with the suffix "*."):

• E-mail address
• Salutation
• Position
• First and last name
• Company
• Branch
• Street/House number
• Postal code
• City
• Country
• Phone

We process your personal data for the establishment, implementation and termination on the basis of the following legal grounds:

• For the performance of a contract (conclusion or execution) or for the implementation of pre-contractual measures.

c. Registration for events

If you register for a paid or free event by telephone, e-mail or in person, among other things, we process your personal data in order to accept the registration. In doing so, we process the personal data requested from the respective. This usually includes the data already listed above.

We process your personal data to establish, implement and terminate the event on the basis of the following legal grounds:

• For the fulfillment of a contract (conclusion or settlement) or for the implementation of pre-contractual measures.

d. Credit assessment

Insofar as we provide advance services, we reserve the right to obtain credit information based on mathematical-statistical methods from the following company or companies in order to protect our legitimate interests:

Creditreform Egeli Basel AG
Credit reports, debt collection
Münchensteinerstrasse 127
4053 Basel

For this purpose, we transmit the personal data required for a credit assessment and use the information received about the statistical probability of a payment default. The creditworthiness information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods. A large number of characteristics, such as income, address data, occupation, marital status and previous payment behavior, are used to draw conclusions about the customer's future risk of non-payment. The result is expressed in the form of a payment score. The information obtained in this way forms the basis for our decision on the establishment, implementation or termination of the contractual relationship. However, the choice of one of the payment methods offered is not dependent on such information.

We process your personal data to establish, execute and terminate the contract on the basis of the following legal grounds:

• To protect our legitimate interests. Our legitimate interest lies in the financial protection of our advance performance, to prevent fraud as well as to establish identity. Furthermore, the legitimate interests of third parties consist in the protection of non-payment and the prevention of fraud.

4. data processing during association membership and contract execution

During association membership and contract execution, we process your personal data as follows:

a. Service provision

Insofar as this is necessary within the framework of the association membership and fulfillment of the contract, we process your personal data for the provision of services, e.g. in order to contact you, to coordinate appointments, to clarify queries and to provide services.

We process your personal data when establishing, implementing and terminating the association membership or contract on the basis of the following legal grounds:

• For the fulfillment of a contract (conclusion or settlement) or for the implementation of pre-contractual measures.

b. Payment

We use payment service providers and banks to process payments.

We process your personal data for the establishment, implementation and termination of the association membership or contract on the basis of the following legal grounds:

• For the fulfillment of a contract (conclusion or settlement) or for the implementation of pre-contractual measures.

c. Compliance with legal requirements

We also process your personal data in order to comply with other legal obligations that affect us in connection with the processing of the association membership or execution of the contract. These include, in particular, retention periods under commercial, trade or tax law.

We process your personal data for the establishment, execution and termination of the association membership or the contract on the basis of the following legal grounds:

• For the fulfillment of a legal obligation to which we are subject, in connection with, in particular, the provisions of commercial, trade, or tax law.

d. Legal enforcement

We also process your personal data in order to be able to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences.

We process your personal data for law enforcement purposes, based on the following legal grounds:

• To protect our legitimate interests, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences.

III. Categories of recipients

Initially, only our employees receive knowledge of your personal data. In addition, we share your personal data, to the extent permitted or required by law, with other recipients who provide services for us in connection with our website. We limit the transfer of your personal data to what is necessary, in particular to process your membership or other orders. In some cases, our service providers receive your personal data as order processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with your data that we transmit to them.

Below we list the categories of recipients of your personal data:

• Payment service providers and banks, if applicable, when processing the payment;
• IT service providers in the administration and hosting of our website or the operation of our apps;
• Collection companies and legal advisors when asserting our claims.

IV. Third country transfer

In the context of using Google's tools, we transfer your shortened IP address to the USA. The data transfer is based on the Swiss-US Privacy Shield and the adequacy of protection provided by the Swiss-US Privacy Shield.

Unless otherwise agreed with you, we do not transfer your personal data to countries outside of Switzerland, the EU or the EEA, or to international organizations, unless the legal framework for this is met.

V. Duration of storage

1. informational use of the website

During the purely informational use of our website, we store your personal data on our servers for the duration of your visit to our website. After you have left our website, your personal data is deleted immediately. However, we store server log files for a period of 5 years.

Cookies installed by us are usually also deleted after you leave our website. However, this does not apply to log in cookies. These remain stored for a period of 24 hours. However, this does not apply to cookies set by the web analysis tool Google Analytics. These are stored on your device for up to 2 years. You have the option to delete installed cookies yourself at any time.

2. contact inquiries, conclusion of contracts and registration for events.

In the case of active use of our website as well as contact inquiries, contract conclusions and registrations for events outside of the website, we initially store your personal data for the duration of the response to your inquiry. If an association membership or a contract is concluded, we store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, we then store your personal data until the statute of limitations of any legal claims arising from the relationship with you, in order to use them as evidence if necessary. The limitation period is usually between 12 months and 10 years.

When the statute of limitations expires, we delete your personal data, unless there is a legal obligation to retain it, for example from the Code of Obligations (Art. 958f). These retention obligations can be up to ten years.

VI. Your rights as a data subject

You are entitled to the following rights as a data subject, which you can assert against us, subject to the legal requirements:

Right to information: you are entitled to request confirmation from us at any time as to whether we are processing personal data relating to you; if this is the case, you are also entitled to request information about this personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate safeguards).

Right to rectification: you have the right to request that we rectify the personal data we hold about you if it is inaccurate or incorrect.

Right to erasure: You have the right to request that we erase personal data relating to you. The right to erasure does not apply, inter alia, if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) compliance with a legal obligation to which we are subject (e.g. legal obligations to retain records) or (iii) the assertion, exercise or defense of legal claims.

Right to restrict processing: you have the right to request that we restrict the processing of your personal data.

Right to data portability: you have the right to request that we provide you or a third party designated by you with the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.

Right to object: you have the right to object to the processing of your personal data so that we must stop processing your personal data. The right to object exists only within the limits provided by law. In addition, our interests may conflict with the termination of processing, so that we are entitled to continue processing your personal data despite your objection.

Your requests about exercising your rights should, if possible, be addressed in writing to the above address.

VIII. Automated decision making / profiling

We do not currently use automated decision making or profiling (an automated analysis of your personal circumstances).