1. The Data Controller
ROTZINGER GROUP can be contacted via the following information:
ROTZINGER Group AG
Kaiseraugst CH-4303 Switzerland
2. Types of personal data collected
We collect and process your personal data, when you engage with us through various channels.
Some of the personal data we collect is necessary to provide our services to you or your company; other personal data you may choose to provide voluntarily. We will let you know, if and why our processing of your personal data is necessary.
ROTZINGER GROUPcollects and processes the following categories of “ordinary personal data” according to article 6 of the GDPR:
3. Purposes for processing your personal data
ROTZINGER GROUP collects and processes personal data for the following purposes:
4. Legal grounds for processing your personal data
ROTZINGER group will only process your personal data if one of the following applies:
ROTZINGER GROUP takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of your personal data.
In order to protect your personal data, we continuously assess the risks that may be associated with our processing activities. We have therefore adopted internal information security rules, which contain instructions and measures to protect your personal data from being destroyed, lost/altered and against any unauthorized disclosure or unintended access.
To avoid loss of personal data, we continuously backup our systems, and we make use of encryption or other security measures where necessary. Finally, we train our employees in handling personal data.
In the event of a data breach that involves a high risk to your rights, we will notify you of the breach as soon as possible under the given circumstances.
6. Disclosure of personal data
If necessary, ROTZINGER GROUP may disclose your personal data to external parties. Our disclosure of your personal data is always subject to the existence of an adequate level of data protection. ROTZINGER GROUP may disclose or make personal data available to third parties under the following circumstances:
If the recipient is located in a third country not ensuring an adequate level of data protection, ROTZINGER GROUP will only disclose your personal data to the third party following the execution of an agreement based on the EU Commission’s Standard Contractual Clauses.
7. ROTZINGER GROUP
ROTZINGER GROUP is part of an international organization, and the personal data we collect and process may be transferred internationally between entities in the ROTZINGER GROUP for the purposes for which the personal data was collected.
Concerning the ROTZINGER GROUP entities established in countries outside the EU/EEA that are not considered as safe third countries and therefore not ensuring an adequate level of data protection, agreements based on the EU Commission’s Standard Contractual Clauses are considered the legitimate basis for the transfer of your personal data.
An overview of the ROTZINGER GROUP organization and more information regarding the legitimate basis for the transfer of personal data to third countries can be obtained by submitting a request for such information to firstname.lastname@example.org.
To the extent that our processing activities are based on your consent, you will have the right to withdraw your consent at any time.
If you withdraw your consent, we will cease to process your personal data, unless and to the extent that continued processing is permitted or required according to the applicable personal data legislation or other applicable law.
If you withdraw your consent, it will not affect the lawfulness of processing prior to the withdrawal.
9. Retention period
The personal data ROTZINGER GROUP collects shall be processed and stored for as long as required by the purpose for which the personal data has been collected.
ROTZINGER GROUP may be allowed to retain your personal data for a longer period if you have given your consent to the processing activity. Furthermore, ROTZINGER GROUP may be obliged to retain your personal data for a longer period, whenever required to do so for the performance of a legal obligation or to establish, exercise or defend a legal claim.
Once the retention period expires, your personal data shall be deleted.
10. Your rights
When we process your personal data, you may exercise certain rights regarding our processing activities. In particular, you have the right to:
11. How to exercise your rights or file a complaint
You may also – at any time – file a complaint to your local data protection agency if you are dissatisfied with how we process your personal data.
Version 1.0, May 2020