Privacy Policy

Name and contact details of the person in charge:

The controller within the meaning of the Swiss Federal Act on Data Protection (FADP), the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:

Triviso AG
Hauptbahnhofstrasse 8
CH – 4500 Solothurn

Tel:     +41 32 628 20 80
E-mail: info@triviso.ch

On behalf of:

• Stefan Cotting
• Mathieu Fellay
• Patrick Gafner
• Walter Reusser

Representatives within the EU  

Triviso GmbH
Gerberau 44
D - 79098 Freiburg im Breisgau

Contact details of the Data Protection Officer (valid within the EU)
E-mail: datenschutz@triviso.de

By post: To the above address, adding „c/o Data Protection Officer“

Collection and storage of personal data, and the nature and purpose of their use

• Website
• Contact
• Business partner
• Trade fair appearances
• Site visits
• Applications
• Social media
• Newsletter

Data processing on the website

Below is information about what data is collected during your visit

https://www.triviso.ch/ captured and how these are used.

When you access our website, your browser automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted, usually after one week:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• browser used and, if applicable, your computer's operating system, as well as the name of your access provider

Purposes (Business purposes) for processing:

• Provision of a functional website for, among other things, the following purposes:
• Online presence / Presentation of our company
• Provision of information about our company, services, and products
• Building brand image
• Evaluation of system security and stability
• Defence and detection of any abusive side accesses (DoS/DDoS attacks or similar) and for further administrative purposes
• Communication with customers, prospective customers, and business partners, interested parties or applicants

Legality / Legal bases for processing:

• Consent – the data subject has given their consent for the processing of their personal data for one or more specific purposes.
• Contract performance and pre-contractual inquiries – processing is necessary for the performance of a contract to which the data subject is party or to carry out pre-contractual measures at their request.
• Legal obligation – processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate interests – our legitimate interest follows from the purposes for data collection listed above. As a general rule, we do not use the data collected to draw conclusions about your identity. We reserve the right to do so only in cases where it becomes necessary to investigate abusive website access.

Place of processing – Transfer to a third country or to an international organisation, reference to appropriate safeguards:

The location of data processing in connection with our business and website operations is Switzerland. This processing also includes a possible transfer to third parties and, if applicable, to so-called third countries outside of Switzerland, outside of the European Union (EU) and the European Economic Area (EEA). Where this occurs, it will only be in accordance with legal requirements.

Sharing with other companies or third parties: Recipients or categories of recipients of personal data, order processing agreement

The recipients of the personal data are IT service providers (in particular providers or hosting companies) with whom we have concluded a corresponding contract for order processing. If service providers are used in third countries, they are obliged, in addition to written instructions, to comply with the standard contractual clauses of the EU or to provide appropriate guarantees for adherence to the level of data protection in the European Union and Switzerland.

Storage duration or deadline for deletion of personal data:

Once consent to processing is withdrawn or other permissions expire, data will be deleted in accordance with legal requirements. If data is not deleted because it is required for other legally permissible purposes, its processing will be restricted to those purposes. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person. Further information on data retention and deletion can be found in our privacy notices, which apply specifically to the respective processing activities, as well as in the Cookie Consent Management.

Existing rights / claims – Right of access, rectification, erasure, restriction of processing, data portability and right to object:

In accordance with the applicable data protection laws, you have various rights:

• Right of access – You have the right to request information about the processing carried out and about your personal data, as well as further information and a copy of the data in accordance with legal requirements.
• Right to rectification In accordance with statutory provisions, you have the right to demand the immediate correction of inaccurate or completion of your personal data stored with us.
• Right to erasure and restriction of processing You have the right to demand the erasure or restriction of processing of your personal data, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
• Right to data portability – You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another controller.
• Right of withdrawal for consents – You have the right to withdraw your consent at any time. This means we may no longer process data based on that consent in the future.
• Right of objection – if your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will implement without specifying a particular situation. This also applies to profiling, insofar as it is related to such direct marketing.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@triviso.ch

The existence of a right of complaint to a supervisory authority:

You have a general right to complain to the data protection supervisory authority responsible for you.

For Triviso AG:
Federal Data Protection and Information Commissioner
Feldeggweg 1
CH – 3003 Bern
https://www.edoeb.admin.ch/edoeb/de/home.html

The authority responsible for Triviso GmbH in Germany is the „State Commissioner for Data Protection and Freedom of Information Baden-Württemberg“, Lautenschlagerstraße 20, D-70173 Stuttgart, Telephone +49 0711/61 55 41 0, E-mail poststelle@lfdi.bwl.de.

Definitions (personal data, data subject, processing, restriction of processing)

• Personal data is any information relating to an identified or identifiable natural person (hereinafter the „data subject“). A natural person is considered identifiable who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• A data subject is any identified or identifiable natural person whose personal data are processed by the controller.
• Processing means any operation or set of operations carried out with or without the help of automated procedures in connection with personal data, such as the collection, recording, organisation, arrangement, storage, adaptation or modification, retrieval, querying, use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, erasure or destruction.
• Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.
• Profiling comprises any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
• The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with the Union or Member State law shall not be regarded as recipients. the processing of those data by those authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
• A 'third party' is a natural or legal person, authority, agency, or other body, other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorised to process personal data.
• Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies his or her agreement to the processing of personal data relating to him or her.
• A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.1. Embedded Services

1.1.1. CookieScript

Our homepage has the CookieScript Consent Management Tool installed in order to obtain, manage, and log your consent for the storage of cookies and the use of certain technologies.

Function, intended uses, types and categories of data processed
CookieScript stores information about cookie categories and user consent in an opt-in cookie to associate it with a user or device. Together with a pseudonymous user identifier, details are stored regarding the time and scope of consent, the browser, system, and device used. Details about the cookies used are listed in the user interface of the Consent Management Tool.

Recipient of data, duration of storage
The provider is Objectis Ltd., Vilnius, Lithuania. Cookie data will be stored until you request its deletion or delete the cookie yourself. Consent will be stored for up to 13 months. Statutory retention periods remain unaffected.

Legal basis
The use is for obtaining legally required consents in accordance with Article 6(1)(c) GDPR to comply with our legal proof obligations under Article 7(1) GDPR.

1.1.2. Google Analytics

• Your consent to setting the cookie or
• The browser add-on to disable Google Analytics HERE Download and install.

1.1.3. Google Tag Manager

1.1.4. hCaptcha

1.1.5. CDN jQuery

1.1.6. Use of cookies

1.2. Links to other websites

Our offer includes links to external websites of third parties, over whose content we have no influence. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the linked pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal infringements at the time of linking. No unlawful content was apparent at the time of linking. However, permanent monitoring of the content of the linked pages without concrete indications of a legal infringement is not feasible. If we become aware of legal infringements, we will remove such links immediately. Please note the privacy policies of the third parties whose pages are linked.

1.3. Data Security

We use the widely known SSL (Secure Socket Layer) procedure within website visits, in conjunction with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we will revert to 128-bit v3 technology instead. You can tell if an individual page of our website is being transmitted in encrypted form by looking for a closed padlock or key icon in the lower status bar of your browser.

We also employ suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological advancements.
 

2. Contacting us, contact forms on our websites

Should you have any questions, we offer you the opportunity to contact us by telephone or email. We also offer you the opportunity to contact us via a form provided on the website.
The following data is processed in our online contact form:

• Method of contact
• Name
• Company
• Email address
• Your comment

Data processing for the purpose of contacting us is carried out on the basis of your freely given consent or in the case of (pre-)contractual enquiries (e.g. with regard to a future business relationship). The data collected and processed in the course of your contacting us will be deleted by us after the enquiry has been processed and, if applicable, after the expiry of statutory retention periods.
 

3. Processing of data from business partners, customers or suppliers

Customer and supplier data are processed in our merchandise management and contact management system within the scope of business relationships or to initiate them, for order processing and related procedures, for the purpose of buying and selling products and/or services, and for mapping the history of business processes and documenting business transactions (within the framework of quality management) and marketing. Furthermore, purchasing behaviour is analysed for market analyses and the sale of new developments within the product portfolio. Automated profiling or scoring of a data subject does not take place in the context of market analyses.

The following data of the respective contact persons are processed from customers and suppliers:

• Salutation
• Title
• Name
• Contact details
• Email address
• Telephone (Landline, Mobile number)
• Company address
• Area of responsibility, role in the company, department

Your data will be used or processed within our company by Sales, Purchasing, Production, Engineering, Shipping, Marketing, Controlling, Financial Accounting, and Project Management. Data may be passed on to sales agents – insofar as this is necessary for the fulfilment of contractual obligations.

A transfer outside Switzerland, to non-EU countries/third countries, does not take place.

Documents subject to proof and retention within the scope of business relationships are stored or retained by us in accordance with statutory retention periods, in order to comply with tax and other legal requirements. Thereafter, in the case of paper documents, they are destroyed, unless there are further retention obligations for individual documents, e.g. in the context of guarantees.

We process your data only to the extent necessary to safeguard our legitimate interests or those of third parties. Our legitimate interest particularly exists for management and control measures, marketing purposes, to improve our business relationship, for the assertion and defence of legal claims in legal disputes.
 

Trade fair contacts

In the context of our trade fair appearances, we process personal data for the following purposes, analogous to Section 3, „Processing of business partners“, customers', or suppliers' data":

• Handling specific visitor requests at the trade fair, providing informational materials
• Capture of visitor forms, documentation and processing of specific enquiries

During personal consultations at the Triviso trade fair stand, a contact form will be created to log the conversation. This data will be stored internally and used for further project processing.
 

5. Upon visiting our sites

The processing of visitor data is governed by the relevant contractual documents and contract contents, or by the circumstances of your visit to us on-site.
We process your data to safeguard our legitimate interests or those of third parties, only to the extent necessary. Our legitimate interests include, in particular, management and control measures, marketing purposes, improving our business relationship, asserting legal claims, defending legal disputes, ensuring the safety of our visitors and employees, and protecting our assets and facilities.
The nature and purposes of the data processing are generally:

• Recording your visit in our visitor books and calendars
• Provision of Wi-Fi access
• Surveillance of individual, marked areas using video technology

6. Processing of application data

As part of your application, we will collect and process the following personal application data from you:

• Salutation
• Surname, Forename
• Address
• Telefonnummer/Mobilnummer
• e-mail
• Application documents (cover letter, CV, certificates, diplomas, etc.)

If your application contains special categories of personal data (e.g., marital status which can provide information about your sex life or sexual orientation; health data; a photograph which may allow conclusions to be drawn about ethnic origin and/or religion and, if applicable, eyesight; similarly sensitive data or special categories), we will assume your consent to process it. This consent is solely for the purpose of being able to consider the application in its current form at all. The information will not be taken into account in the application process, unless – in particular in the case of severely disabled persons – there is a legal obligation to do so. Your data will not be passed on to third parties.
You may also submit an application with the special categories of personal data removed, which will not affect your chances in the application process.

Your personal application data will be collected and processed solely for the purpose of filling vacancies within our company. Your data will essentially only be forwarded to the internal departments and specialist departments responsible for the specific application process, unless you give us your explicit consent for further use.
Please note that the data you submit may be used to compile statistics about the application process. These statistics will be compiled solely for our own purposes and will not be personalised in any way; they will be anonymised.

The collection/processing of your data is carried out in accordance with Section 26 of the German Federal Data Protection Act (BDSG), or with your consent in accordance with Article 6(1)(a) of the GDPR.

Your personal application data will generally be deleted a maximum of six months after the conclusion of the application process. This does not apply if legal provisions preclude deletion, further storage is necessary for the purpose of providing evidence, or you have expressly consented to longer storage.
Should we not have any vacancies to offer you at present, but believe your profile might be of interest for future job opportunities, we will store your personal application data for a maximum of 2 years, provided you expressly consent to such storage and use. With your consent, we will compare your documents with our job offers and contact you should a suitable opportunity arise.

When recruiting staff for our company, we may use recruiting products from the professional and social network XING. If you wish to obtain information about data held by XING, you can access this independently in the settings section of your XING profile. The Xing Talent Manager privacy policy can be found here: https://www.xing.com/legal/privacy_policy_talentmanager.
 

7. Social Media Platforms

We use so-called social plugins from various social networks in our online offering; these are described individually in this section.

When using plug-ins on our websites, your internet browser establishes a direct connection to the servers of the respective social network. This allows the provider to receive information that your internet browser has accessed the corresponding page of our online offering, even if you do not have an account with the provider or are not currently logged in. Log files (including the IP address) will be transmitted directly by your internet browser to a server of the respective provider and may be stored there. The provider or its server may be located outside the EU or EEA (e.g., in the USA).

7.1. Facebook

We have a presence on the social network Facebook, Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA (hereinafter referred to as „Facebook“) by operating a fan page. This page provides you with the opportunity to contact us directly and receive information about current events from our company.
Through this page, we, as operators, receive data from Facebook, which also includes personal data. We use and process these so-called „Facebook Insights“ as described below, based on our legitimate interests in accordance with Article 6(1)(f) of the GDPR. We can retrieve statistical data from Facebook in various categories, such as:

• Number of page views
• „Likes
• Page activity
• Video views
• Contribution range
• Comments
• Shared Content
• Male/female share
• Origin related to country and city
• Language
• Calls
• Clicks

We use this data to optimise our own posts. For example, we learn which types of posts are not successful with the desired target groups and can continuously dispense with them. Furthermore, we use the evaluation of „Likes“ in relation to posts to invite the respective individuals to our page („Like“ for the fan page as a whole).

Beyond this, the information provided also tells us what type of posts generate the most interactions, and at what time of day and day of the week this occurs. Based on this information, we optimise the times at which we publish our posts.
Article 26 GDPR governs the joint responsibility, which – in this case between Facebook and us – exists with regard to the protection of your personal data. Facebook has published a corresponding agreement that regulates the described joint responsibility. The company calls this agreement the „Page Controller Addendum“. You can read the exact content here: https://www.facebook.com/legal/terms/page_controller_addendum

7.2. Instagram

We have set up a company profile on Instagram to give you authentic and visual insights into our company. Instagram is a company within the Facebook group.
The company's European headquarters are located in Ireland:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Facebook Ireland Limited is a company registered under Irish law.
Company registration number: 462932
impressum@support.instagram.com

7.3. LinkedIn

Our websites contain programmes (plugins) from the social network LinkedIn.com. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA („LinkedIn“). You can find an overview of LinkedIn’s plugins and what they look like here: https://developer.linkedin.com/plugins

Information about data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

7.4. Xing

Our websites contain programs (plugins) from the social network xing.com. These are operated by Xing AG, Gänsemarkt 43, D-20354 Hamburg. The plugins are visible on our website via the Xing logo. When you visit our website, which includes such a plugin, your browser establishes a direct connection with Xing's servers, which in turn transmits the content of the plugin to your browser and integrates it into the displayed website. This forwards the information that you have visited our website to Xing. If you are logged into your personal Xing user account while visiting our website, Xing can associate the website visit with this account. By interacting with plugins, for example, by clicking the Xing button, the relevant information is transmitted directly from your browser to Xing and stored there.
For the purpose and scope of data collection, as well as further processing and use of **your** data by Xing, and **your** related rights and settings options for protecting **your** privacy, please refer to the Xing Data Protection Regulations:
https://www.xing.com/app/user?op=tandc&what=dp#

7.5. YouTube

We use the video platform YouTube on our websites, which is operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 in USA («YouTube«). YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. YouTube is a platform that enables the playback of audio and video files. YouTube is part of the Google group and refers to its privacy policies. When you access one of our websites, the YouTube player embedded there can establish a connection to YouTube to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transmitted to YouTube. We point out that we do not receive any information about the content of the transmitted data or its use by YouTube.
We use the so-called enhanced privacy mode when embedding YouTube videos. This setting ensures that YouTube only uses cookies once you actually click on the video itself – and not simply by visiting the website. Unfortunately, this does not apply to cookies set by DoubleClick. Please visit the YouTube / Google websites to find out how your data is handled by YouTube, and to learn about your rights and settings regarding privacy protection. https://www.google.com/policies/privacy/partners/?hl=de.
 

8. Newsletter Subscription

If you are interested in an informational newsletter about our companies and our products and services, we require you to complete the relevant online registration form, providing your email address. This ensures that you have given us the necessary consent to receive the newsletter.  
You can easily withdraw your consent to the storage of your email address and the data you have provided at any time via the contact/hyperlink provided in the newsletter email.
 

9. Online meetings, telephone conferences, online presentations and online seminars

When using so-called video conferencing or collaboration tools, personal data is processed. We use various applications as part of our internal and external communication, which in turn serves to maintain our business operations and stay in contact with you.

During the meeting, you have the option to post comments and questions, for example, in the chat. Audio and video signals are also processed for the transmission. You have the option to turn off your camera and microphone yourself at any time. You can also blur the background, depending on the application and dial-in settings, so that only you are visible, not the room you are in.

Please note that the services we offer are typically based in Europe, with the data processing centre also located in Europe. However, it is not impossible that diagnostic data may also be transferred to the parent companies, which are usually based in the USA. We have concluded contracts for order processing with the service providers and, where necessary, have obtained information on further guarantees for data exchange with so-called third countries.

The personal data being processed are:

User details: First name, Last name, Phone (optional), Email address, Password (if Single Sign-On is not used), Profile picture (optional), Department (optional)
Meeting metadata: Topic, Description (optional), Participant IP addresses, Device/hardware information
(Optional) Recordings: MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialling by telephone: Details of the incoming and outgoing telephone number, country name, start and end time. Additional connection data, such as the IP address of the device, may be stored if applicable.
Text, audio and video data: You may have the option to use the chat, questions or polling functions during an online meeting. In this respect, text inputs made by you will be processed in order to display them in the online meeting and, if necessary, to log them.

If it is necessary for the purpose of logging the results of an online meeting, we will log the chat content.
In the case of online presentations, we can also process questions asked by online seminar participants for the purposes of recording and follow-up of webinars.

Legal bases for data processing

The legal basis for data processing in the course of online meetings is the performance of a contract or pre-contractual measures, insofar as the meetings are conducted within the scope of contractual relationships.

Should no contractual relationship exist, the legal basis is our legitimate interest in the effective execution of online meetings.

Recipient / Transmission of Data

Personal data processed in connection with participation in online meetings will not generally be disclosed to third parties, unless it is intended for disclosure.

Further recipients: The provider will necessarily gain knowledge of the above-mentioned data, insofar as this is provided for within the scope of our contract processing agreement.