Privacy pol

Data Protection Declaration of S & H Déménagement

1. What is covered by this data protection declaration?

S & H Déménagement (hereinafter also referred to as “we“, “our“) collects and processes personal data about you and other individuals (“third parties“). Here, we use the term “data” interchangeably with “personal data.”

In this data protection declaration, we describe what we do with your data when you use www.shdemenagement.ch, when you purchase our products and services, when you are in contact with us in connection with a contract, when you communicate with us, or engage with us in any other way. If necessary, we will inform you via a separate statement of any processing activities not covered by this data protection declaration. We may also inform you separately about the processing of your data, for example, in consent forms, terms and conditions, additional statements, forms, and other notices.

If you provide us with data or share data with us about other people, such as family members, colleagues, etc., we assume that you are authorized to do so and that the data is accurate. By sharing data with us about others, you confirm this. Please ensure that these individuals have been informed about this data protection declaration.

This data protection declaration is aligned with the EU General Data Protection Regulation (“GDPR“), the Federal Data Protection Act (“LPD“), and the new Federal Data Protection Act (“nLPD“). However, the actual application of these laws depends on the specific case.

2. Who is responsible for the processing of your data?

Our director, S. Horo, route de l’Epinay 4, 1762 Givisiez (“S & H Déménagement“) is the data controller for the processing of data at S & H Déménagement, Givisiez, under this data protection declaration, unless we indicate otherwise in a specific case.

You can contact us for questions regarding data protection and to exercise your rights under Section 11 as follows:

S & H Déménagement, Data Controller, route de l’Epinay 4, 1762 Givisiez.

infos@shdemenagement.ch

3. What data do we process?

We process different categories of data concerning you. The main categories are as follows:

• Technical Data: When you use our website or other online offerings, we collect the IP address of the device you are using (terminal) and other technical data to ensure the functionality and security of these offerings. This data includes usage logs of our systems. We generally retain technical data for 6 months. As such, technical data does not allow conclusions about your identity. However, technical data can be linked to other categories of data (and potentially to you) in the context of user accounts, records, access controls, or the execution of a contract.
• Registration Data: Certain services can only be used with a user account or after registration, which can be done directly with us or through our third-party connection service providers. In this context, you need to provide us with certain data, and we collect data on the use of the service or the access controls to certain facilities, which may require registration data and, depending on the control system, biometric data. We generally retain registration data for 12 months from the end of service use or account closure.
• Communication Data: When you contact us via the contact form, email, phone, postal mail, or any other communication method, we collect the data exchanged with us, including your contact details and the metadata of the communication. We also collect data that enables us to identify you (for example, a copy of an ID). We generally retain this data for 12 months from our last exchange with you. This period may be longer if necessary for evidence purposes, to comply with legal or contractual requirements, or for technical reasons. Emails in the personal inbox and written correspondence are generally retained for at least 10 years.
• Basic Data: By basic data, we mean the essential data needed, in addition to contractual data (see below), for the execution of our contractual and other business relationships or for marketing and promotional purposes, such as your name, contact details, role and function, bank details, date of birth, client history, powers of attorney, signature authorizations, and consent declarations. We process your basic data if you are a client or another business contact, or if you work for one of them (e.g., as a contact person for a business partner), or because we wish to contact you for our purposes or those of a contractual partner (e.g., for marketing and advertising purposes). We receive basic data from you (e.g., when you make a purchase or register), from people you work for, or from third parties such as business partners, associations, and address brokers, as well as from public sources like public registers or the internet (websites, etc.). We generally retain basic data for 10 years from our last exchange with you or the end of the contract. This period may be longer if necessary for evidence purposes, to comply with legal or contractual requirements, or for technical reasons. For contacts used solely for marketing and advertising purposes, the retention period is generally much shorter, typically no more than 2 years from the last contact.
• Basic Data: This includes information such as your name, address, email address, phone number, and other contact details, gender, date of birth, nationality, details of related persons, websites, photos and videos, copies of ID cards, as well as details of your relationship with us, your status, allowances, classifications, and mailing lists, the details of our interactions with you (where applicable, a history of these with the corresponding entries), reports (e.g., media) or official documents (e.g., commercial register extracts, permits, etc.) concerning you. As payment information, we collect your bank details, account number, and credit card data. Consent statements and information regarding unsubscribing from a service are also part of the basic data, as well as information concerning third parties.
• Regarding contact persons and representatives of our clients, suppliers, and partners, basic data includes, for example, the name and address, information about their role or function in the company, qualifications, and (if applicable) information about their superiors, colleagues, subordinates, and interactions with these people.
• Basic data is not exhaustively collected for all contacts. The data collected in an individual case mainly depends on the purpose of the processing.
• Contractual Data: These are data collected in the course of entering into or executing a contract, such as information on the contracts and services provided or to be provided, as well as data related to the period before the contract’s conclusion, information required or used for the execution of a contract, and customer feedback. We generally collect these data from you, contractual partners, and third parties involved in the contract’s execution, but also from third-party sources (e.g., credit information providers) and public sources. We generally retain this data for 10 years from the last contractual activity or the end of the contract. This period may be longer if necessary for evidence purposes, to comply with legal or contractual requirements, or for technical reasons.
• Other Data: We also collect data about you in other situations. For example, we process data that may concern you (such as records, evidence, etc.) in the context of administrative or judicial procedures. Most of the data mentioned in this Section 3 is provided directly by you. You are not obligated to provide us with data, except in certain cases, for example, as part of mandatory health protection concepts (legal obligations). If you wish to enter into contracts with us or use our services, you must also provide us with certain data, including basic data, contractual data, and registration data, as part of your contractual obligations under the relevant contract. Additionally, processing technical data when using our website is unavoidable. If you wish to access certain systems or buildings, you must also provide us with registration data.

We process your data for the purposes listed below. More detailed information can be found in Sections 12 and 13 for online services. These purposes and their objectives serve our interests and, potentially, those of third parties. You can find more information on the legal basis for our processing in Section 5.

We process your data for the purpose of communication with you, particularly to respond to your requests and the exercise of your rights (Section 11), and to enable us to contact you in case of questions. For this purpose, we primarily use communication data and basic data. We retain these data to document our communication with you, for training, quality assurance, and follow-up of requests.

We process data for the conclusion, administration, and execution of contractual relationships.

We process data for marketing and relationship management purposes, for example, to send personalized advertisements for products and services that we offer or that third parties offer to our clients and other contractual partners.

We may also process your data for security and access control.

We process personal data to comply with laws, directives, and recommendations from authorities and internal regulations (“compliance with legal requirements“).

We also process data as part of our risk management and corporate governance, including the organization and development of business activities.

We may process your data for other purposes, for example, within our internal processes and administration.

4. On what basis do we process your data?

When we ask for your consent for certain processing activities, we will inform you separately about the purposes of the processing. You can withdraw your consent at any time with effect for the future; you will find our contact details in Section 2. Once we receive notification of the withdrawal of consent, we will no longer process your information for the purpose(s) to which you consented, unless we have another legal basis to do so. However, the withdrawal of consent does not affect the legality of the processing based on consent before the withdrawal.

When we do not request consent for processing, the processing of your personal data is based on the necessity of processing to initiate or perform a contract with you (or the entity you represent), or based on our legitimate interest or that of a third party in the processing in question, especially in pursuing the purposes and objectives outlined in Section 4 and implementing related measures. Our legitimate interests also include compliance with legal regulations, where this is not already recognized as a legal basis by applicable data protection legislation (e.g., in the case of the GDPR, laws within the EEA, and in the case of the Swiss DPA, Swiss law).

When we receive sensitive personal data (e.g., biometric data for identifying a person uniquely), we may process your data based on other legal grounds; for example, in the case of a dispute, for the needs of a potential dispute, or for the execution or defense of legal claims. In some cases, other legal bases may apply, and if necessary, we will inform you separately.

5. What rules apply in the case of profiling and automated individual decision-making?

We may automatically evaluate personal aspects concerning you (“profiling“) based on your data (Section 3) for the purposes outlined in Section 4, when we want to establish data to detect abuse and security risks, conduct statistical analyses, and plan business activities. We may also create profiles for these purposes, which means that we can combine behavioral and preference data, as well as basic data, contractual data, and technical data about you, to better understand you as a person – with your various interests and other characteristics.

In both cases, we ensure the proportionality and reliability of the results and take measures against the misuse of these profiles or profiling. If these automated individual decisions could have legal consequences for you or affect you significantly in another way, we generally ensure that the decision is reviewed by a human.

6. Who do we share your data with?

As part of our contracts, website, products and services, legal obligations, protection of our legitimate interests, and other purposes outlined in Section 4, we may share your personal data with third parties, including the following categories of recipients:

• Service providers: We work with service providers in Switzerland and abroad who process your data on our behalf or as joint controllers with us, or who receive data about you from us as independent data controllers.
• Contractual partners, including clients: These are clients and our other contractual partners, to the extent that the communication of data arises from these contracts. If you work for one of these contractual partners, we may also share data about you with them. These recipients also include contractual partners with whom we cooperate.
• Authorities: We may share personal data with agencies, courts, and other authorities in Switzerland and abroad if we are legally required or authorized to make such disclosures or if it seems necessary to protect our interests.
• Other parties: This refers to other cases where interactions with third parties are part of the purposes outlined in Section 4. All of these categories of recipients may involve third parties, so your data may also be shared with them. We may restrict processing by certain third parties (e.g., IT providers), but not by others (e.g., authorities, banks, etc.).

7. Is your personal data shared abroad?

As explained in Section 7, we share data with other parties. Not all of these parties are located in Switzerland. Therefore, your data may be processed both in Europe; in exceptional cases, in any country around the world.

If a recipient is located in a country without adequate legal data protection, we require that the recipient commits to complying with the applicable data protection laws (for this purpose, we use the updated standard contractual clauses of the European Commission, available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is already subject to a set of legally accepted rules ensuring data protection or unless we can invoke an exception. An exception applies, for example, in the case of a judicial proceeding abroad, in the case of a prevailing public interest, or when the performance of a contract requires the transfer of data, as well as if you have consented to the transfer of data or if the data has been made generally available by you directly and you have not objected to the processing.

8. How long do we process your data?

We process your data as long as our processing purposes, legal retention periods, and our legitimate interests in documentation and evidence retention require, or if retention is a technical necessity. You can find further details on the respective retention periods for different categories of data in Section 3, and for cookies in Section 12. In the absence of conflicting legal or contractual obligations, we will delete or anonymize your data once the retention period has expired or when processing stops in the course of our regular processes.

9. How do we protect your data?

We take appropriate security measures to ensure the necessary protection of your personal data and guarantee the confidentiality, integrity, and availability of your data, protect it from unauthorized or unlawful processing, and minimize the risk of accidental loss, alteration, disclosure, or unauthorized access.

10. What are your rights?

The applicable data protection laws give you the right to object to the processing of your data under certain circumstances, including processing for direct marketing purposes, profiling for direct marketing purposes, and other legitimate interests in processing.

To help you control the processing of your personal data, you have the following rights with respect to our processing of your data, in accordance with the applicable data protection legislation:

• The right to request information to know if we process data about you and, if so, which data;
• The right to request that we correct data if it is inaccurate;
• The right to request the erasure of data;
• The right to request that we provide certain personal data in a commonly used electronic format or that we transfer them to another data controller;
• The right to withdraw your consent when our processing is based on your consent;
• The right to receive, upon request, other useful information to exercise these rights;

If you wish to exercise the above rights with us, you can contact us in writing at our address or, unless otherwise indicated or agreed, by email; you will find our contact details in Section 2. To prevent abuse, we need to identify you (for example, by means of a copy of your ID card if identification is not possible otherwise).

Please note that conditions, exceptions, and restrictions may apply when exercising these rights in accordance with the applicable data protection laws (for example, to protect third parties or trade secrets). If applicable, we will inform you.

If you disagree with how we respond to the exercise of your rights or with our data protection practices, you can inform us (Section 2). If you are located in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with the relevant data protection supervisory authority in your country. Do we use online tracking techniques?

We use various techniques on our website that allow us – as well as third parties we engage – to recognize you when you use our website, and possibly track you across multiple visits. This section informs you about this.

Essentially, we want to distinguish between your access (via your system) and access by other users, so that we can ensure the website’s functionality and perform analyses and customizations. We do not intend to identify you, although it may be possible for us or third parties we engage to identify you by linking with registration data. However, even without registration data, the technologies we use are designed so that you are recognized as an individual visitor each time you access the website, for example, our server (or third-party servers) assigns a specific identification number to you or your browser (called a “cookie”).

We use these technologies on our website and may allow certain third parties to do so as well. You can also configure your browser to block or deceive certain types of cookies or alternative technologies, or to delete existing cookies. You can also add software to your browser to block certain third-party tracking. You will find more information on the help pages of your browser (typically under the keyword “data protection”) or on the websites of the third parties listed below.

We distinguish the following categories of “cookies” (including technologies that function similarly, such as fingerprinting):

• Necessary cookies: Some cookies are necessary for the operation of the website or for certain functionalities. For example, they ensure that you can navigate from one page to another without losing information entered in a form. They also ensure that you stay logged in. These cookies exist only temporarily (“session cookies”). If you block them, the website may not function correctly. Other cookies are necessary for the server to store options or information (that you have entered) beyond a session (i.e., a visit to the website) if you use that function (e.g., language settings, consents, auto-login functionality, etc.). These cookies have an expiration date of up to 24 hours.
• Performance cookies: To optimize our website and related offerings and better adapt them to users’ needs, we use cookies to record and analyze the use of our website, potentially beyond a session. We use third-party analytics services for this purpose. We have listed them below. Performance cookies also have an expiration date of up to 24 hours. You can find details on the websites of the third-party providers.

11. What data do we process on our social media pages? None.

None.

12. Can we update this data protection statement?

This data protection statement is not part of a contract with you. We may modify this data protection statement at any time. The version published on this website is the current version.

Last updated: October 28, 2024