Data protection declaration

1. Introduction

In this document, we also inform you about the duration of the processing of your data, the legal basis for such processing (insofar as such a basis should prove necessary) and the rights you may assert against us in connection with the processing of your data. This data protection declaration applies to all your data that we are already aware of or will receive in the future. Please note that we may amend this data protection declaration at any time. The current version published on our website is authoritative.

Personal data is any information relating to an identified or identifiable person (hereinafter referred to as « personal data »). This includes information such as name, address, e-mail address and, where applicable, IP addresses and device IDs. The generic term « data » as used in this Data Protection Declaration covers both personal data and anonymized or non-personal data. The term « processing », on the other hand, refers to any treatment of data, in particular the collection, recording, use, transformation, distribution, storage or deletion of data, regardless of the means or process used (hereinafter referred to as « Processing »).

Before you make personal data available to us, please ensure that you have read this Data Protection Statement, and only provide us with your personal data if you are entitled to do so under the applicable data protection legislation.

2. Name and address of data controller

The party responsible for processing data in accordance with this Data Protection Declaration is :

Kamber SA

Chemin des Champs-Courbes 19 / 1024 Ecublens

+41 21 691 69 51 / info@kambersa.ch

3. Categories of data processed

When you visit our website, use our services or contact us, we collect certain data. In principle, we collect this data directly from you. The personal data we process may include :

data obtained or disclosed when you visit our website or use our services; This includes IP and MAC addresses or the ID of the device used, cookies, the web pages you have visited and the search terms you have entered, entries in dialog boxes, ratings, the date, time and duration of consultations, clicks, referrers/exit URLs, information on the date and time of use, the type of browser and device, the operating system and the Internet service provider, or the amount of data transferred;

data exchanged during or in connection with contact with us, e.g. communication by post, telephone, e-mail, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, job title, photo, employees, language, payment details);

data provided when subscribing to a newsletter or downloading files (e.g. software) (in particular e-mail address and name);

data communicated as part of the comment function (in particular e-mail address, user name chosen by you, if you do not post anonymously, as well as your IP address);

data you provide for the purpose of taking part in competitions, surveys or similar operations.

The above-mentioned data is not always personal data. As a general rule, unless a registration is made (e.g. for a newsletter or an online store), we are unable to link the data generated when using our services to a specific person. However, in individual cases, such a link may be possible if this data is combined with other data.

We would like to draw your attention to the fact that the information you provide when using the contact form or comment function may include sensitive data (such as health-related data) and that you have voluntarily made this available to us.

4. Purposes of processing

To the extent permitted by law, we will process personal data in particular for the following purposes:

preparation, conclusion, performance and processing of contracts;

offering, developing and improving our services, developing new services, operating, maintaining, optimizing and ensuring the security of our services and infrastructures;

management of users of our services, identity checks, logins and other authentications;

maintenance, management and development of our customer relations, communication with customers and third parties, promotions, advertising and marketing, offering personalized services and relevant content;

quality control and statistics;

compliance with legal or regulatory obligations and internal rules, application of the law, civil, criminal or administrative proceedings, complaints, combating abuse, investigations and responding to requests from authorities or official services.

5. Legal basis

Insofar as a legal basis is required by applicable data protection legislation, we use personal data for the above-mentioned purposes on the following legal bases:

performance of a contract

compliance with legal obligations;

consent obtained by « Kamber SA

or by a third party;

legitimate interests of « Kamber SA » or third parties, in particular

offer and provision of services;

advertising and marketing;

maintenance of relations and communication with users;

user management, identity checks, connections;

compliance with legal or regulatory obligations, application of the law, civil, criminal or administrative proceedings, complaints, investigations and responses to requests from the authorities.

6. Publication and transmission of data

We may publish and transmit data in accordance with the following provisions

Data processors

We may commission third parties to provide certain services (IT services, application operation, administration, dispatch, etc.) or to process and store data (hereinafter referred to as « Data Processors »). Data Processors may have access to personal data and process it within the scope of the mandate we have given them. We contractually oblige Data Processors to comply with data protection legislation and to process data in the same way as we do. Data Processors who may receive personal data may be based in any country, including Switzerland, France, Germany and the USA.

Contractual partners

We may pass on data to our contractual partners (distribution partners, service providers, financial institutions, etc.). This takes place, for example, to fulfill contractual obligations, to offer certain services, for collection and marketing purposes, to analyze the use and operation of our services, systems and infrastructure, and for payment processing. Acquirers or parties interested in acquiring business units, companies or parts of companies are also potential recipients. Contractual partners may have access to personal data and process it for their own purposes (e.g. to fulfill their contracts or legal obligations). In doing so, they too are obliged to comply with applicable data protection legislation. Contractual partners who may receive personal data may be based in any country, including Switzerland, EU or EEA countries and the USA.

Transmission to authorities

In certain situations, we may communicate data to authorities, official services and other third parties. We do so when requested to do so by the authorities or when we consider ourselves obliged to do so.

7. Retention period

We retain personal data for as long as is necessary to fulfill the purpose for which it was collected. Some personal data is also subject to legal retention obligations of ten years or more, which we comply with. We may also retain personal data for at least the applicable limitation periods, which in many cases are five or ten years. As a general rule, however, we delete personal data that is generated in the course of

use of our services (protocols, logs, analyses, etc.) and which are not subject to such retention or limitation periods. Anonymized data may be stored for longer periods. Subject to any express contractual agreement, we are not obliged to retain data for a specific period.

8. Data security

We use appropriate organizational and technical security measures to protect your data against accidental or intentional manipulation, against total or partial loss or destruction, and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. Your rights (data subject’s rights)

All data subjects have the right to access their Personal Data. He or she also has the right to demand that we rectify or erase Personal Data concerning him or her, or restrict its processing and use, and may also object to such processing of Personal Data. As a general rule, however, the data subject must be able to clearly prove his or her identity in order to exercise these rights. If the data subject has consented to the Processing of Personal Data, he or she may revoke that consent at any time. In certain cases, the data subject has the right to receive the Data generated when using online services in a structured, commonly used and machine-readable format that allows the Data to be further used and transmitted. Requests relating to these rights should be addressed to the above address. We reserve the right to restrict the data subject’s rights to the extent permitted by law and, for example, not to provide complete information or delete Data. In addition, we draw your attention to the fact that, if your Personal Data is deleted, services or parts of services may no longer be available or usable.

Any person concerned has the right to lodge a complaint with the competent data protection authority. If the Data Controller is located in Switzerland, this will be the Swiss Federal Data Protection and Information Commissioner. If the Data Controller is located in the Principality of Liechtenstein, the competent authority is the Liechtenstein Data Protection Authority.

10. Cookies, web analysis and tracking tools

We use various common technologies to collect, store and analyze Data when you visit our website and use our services.

In particular, we use cookies to identify your browser or device. A cookie is a small file that is sent to your computer or saved automatically on your computer or mobile device by the browser you are using. When you access a service again, it can recognize your browser or device by means of cookies. Cookies can store a variety of information, such as user preferences. We use session cookies. They are necessary to perform the essential functions of the services and will be automatically deleted after one use of our services. We also use temporary and permanent cookies, which remain stored for longer periods on your computer or mobile device. The information gathered through cookies enables us to improve our website and services in line with customer wishes, and to provide you with tailor-made offers.

However, you can block the use of cookies or delete them in your browser settings. Please note, however, that if you block cookies, you may not be able to use the full functionality of a service. Similarly, if you delete cookies, any opt-out cookies you may have saved will also be deleted. You will then need to reactivate these opt-out cookies the next time you use the service concerned. Otherwise, you will be identified as a new user and will have to re-enter your Data.

In addition to cookies, we use web analytics and tracking tools to measure and evaluate the use of our website and services, personalize services and display tailored offers and advertising. Data processing carried out using such tools, which are generally provided by third parties, is subject to the use and data protection provisions of these third parties.

In accordance with the law, we may store cookies if they are absolutely necessary for the operation of this site. For all other types of cookies, we require the user’s permission. This site uses different types of cookies. Some cookies are placed by third parties who appear on our pages. Consent can be modified or withdrawn at any time on our site.

Your consent applies to the following areas: www.kambersa.ch/

Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

11. Integration of third-party offers

We integrate third-party services and content on our websites, which may enable you to interact with third parties (e.g. YouTube video or online payment via a payment service provider). Any Data you may have entered will either be passed on to these third parties for processing and execution of the service concerned, or processed directly by them.

Please note that these third parties process the Data in accordance with their own usage and data protection regulations.

Version 1.0.0 dated 01.06.2024