Privacy policy.
Last update March 30, 2021
Introduction
Protecting your personality and privacy is a major concern for us. We guarantee that we will process your personal data in accordance with the applicable provisions of data protection law.
By accessing our Website (“Website”) or the Application Management Platform (“Platform”), you confirm to have taken note of this Privacy Policy and agree to our Terms and Conditions. This Privacy Policy describes what personal data we collect, store and process, how we process personal data and which processors are involved. The USM (“we” or “us”) is committed to protecting your personal data and privacy and to ensuring compliance with the applicable data protection regulations through appropriate technical and organisational measures. “Personal Data” means any information relating to an identified or identifiable natural person. “Processing” means any operation which is performed on Personal Data such as collection, retention, storage, adaption, usage, transfer, disclosure, etc.
Responsible Person
For data processing purposes, the USM is responsible for the Personal Data Processing described in this Privacy Policy, unless otherwise communicated.
You can contact us for any data protection issues and in order to exercise your rights as a data subject as follows:
USM U. Schärer Söhne AG
Thunstrasse 55
3110 Münsingen, Switzerland
Modifications
We may change this Privacy Policy due to changes on the Website or in the Platform or the laws that apply to you and us. We will notify you by revising the "Last update" date on top of this document and by sending you a notification, if this is possible without disproportionate effort. By accessing the Website or the Platform, you consent to the most recent revision of this Privacy Policy. In case we update the Privacy Policy and you do not agree with the changes, you must notify us and stop using the Website and/or Platform.
Collected Data
Data you provide
The application and selection process for our program requires you to provide us with Personal Data such as your name, surname and email address. By using the Website or Platform, you agree that you are responsible for all Personal Data you provide and that you have the right to provide such Personal Data. If Personal Data of third parties is involved, you provide and must ensure that all data subjects consented to provide such Personal Data and for all data Processing involved. You also must ensure that data subjects know this Privacy Policy and their rights in relation to applicable laws and regulations, including data protection laws.
Data we automatically collect
When using the Website and/or Platform, we automatically record information sent to us by your browser. This information may include your IP (Internet Protocol) address, browser type and language settings, referring or exit pages, information on how you interact with the Website and/or Platform or links on the Website and/or Platform, domain names, landing pages, mobile carrier, device type, your web request or other such information.
When accessing the Website or the Platform, we might send you small data files called "cookies". Cookies are small text files that are necessary for the functioning of the website or can be used by websites to make a user's experience more efficient. These files uniquely identify your browser session and help us run the Website and/or Platform. A cookie may transmit information about how you use the Website and/or Platform. Cookies may remain on your hard drive after closing your browser but can be removed by following your browser's instructions. You can change the settings in your browser in order to not allow cookies, this might however result in the Website and/or Platform not working properly. You can find more information on the help pages of your browser (usually with the keyword «Privacy»).
We have an interest in targeting advertising as precisely as possible. We may therefore use various techniques on the Website that allow us and certain third parties (e.g. Instagram and Facebook) to recognize you during your use of the Website, and possibly to track you across several visits as well as to record the content that has been accessed. In essence, we wish to distinguish access by you (through your system) from access by other users, so that we can ensure the functionality of the Website and carry out analysis and personalization. This allows us to display advertisements that we think will interest you on our Website, but also on other websites that display advertisements from us or our advertising partners. Such techniques used by us might contain tracking cookies and third-party cookies as well as web beacons and other storage technologies to track the online user patterns or track activities linked to emails sent to our users. If legally required, we will obtain your consent before using such tracking functions. You can also set your browser to block or deceive certain types of cookies or alternative technologies, or to delete existing cookies. You can also add software to your browser that blocks certain third-party tracking. You can find more information on the help pages of your browser (usually with the keyword «Privacy»), on the websites of Instagram or Facebook or on http://www.aboutads.info/choices.
We may also use so-called social plug-ins of social networks such as Instagram and Facebook on our Website. The social plug-ins are deactivated by default. As soon as you activate them (for example by clicking a button), their providers can determine that you are using our website. If you have an account with the provider, it can assign this information to you and thereby track your use of online offers. The providers process this Personal Data as separate controllers. The social plug-in remains active until you deactivate it or delete your cookies.
If you activate a social plug-in or visit our Website and consent to the use of marketing cookies, Personal Data may be transferred to providers in countries outside of Switzerland and the EU/EEA, that do not provide the same level of protection as Swiss and/or EU/EEA law. Please bear this in mind before visiting our Website and consenting to the use of marketing cookies, clicking on a link or activating a social plug-in and thereby triggering a transfer of your Personal Data.
Purpose of Processing
We process your Personal Data for purposes related to communication with you, in particular to respond to enquiries, assert your rights and to contact you in the event of queries.
We further process your Personal Data in order to facilitate the application, revision and selection process in the course of the competition as well as the administration of contractual relationships and for technical reasons in order to improve your experience on our website.
We further process Personal Data for marketing purposes and to maintain relationships, e.g. to provide you with personalised marketing content, if we have your consent, where legally required. You may refuse such contacts at any time or refuse or withdraw consent to be contacted for marketing purposes.
Some non-sensitive Personal Data you provide might be used on our website or other communication material with your consent.
We process Personal Data to comply with laws, directives and recommendations from authorities and internal regulations. We may disclose collected information if required by law or if we believe, at our sole discretion, that you are infringing law or not respecting our Terms and Conditions.
Data access and use
Personal Data access and its use is regulated and limited to what is necessary in relation to the purposes for which they are processed. Any Personal Data or information that is not publicly available will be kept strictly confidential.
Who we share your data with
Your Personal Data is accessed by our staff, external experts and jury members. Access to the Platform is regulated through personal user profiles (username and password). All Platform users sign a confidentiality and non-disclosure agreement.
Sub-processors
To improve the Platform’s functionality, Visible Solutions AG engages with selected sub-processors. Visible Solutions AG only engages with sub-processors which demonstrate high data security and privacy standards and implements appropriate measures to protect your Personal Data, for example by requiring the recipient to agree on standard contractual clauses. Detailed description of sub-processors, terms of use, security and privacy settings and policies, contractors and services used are available on the respective sub-processor’s website. By using the Platform, you agree to the terms and conditions and privacy policies of all sub-processors:
Data hosting: Hostpoint AG, Switzerland is used as the data and application hosting provider. More information is available on https://www.hostpoint.ch.
Email dispatch: If no specific SMTP server is provided by the client, Mailchimp Transactional Email (The Rocket Science Group LLC, USA d/b/a Mailchimp) is used as the Email sending gateway. More information is available on https://mailchimp.com.
IP security assessment: A threat assessment, based on the user’s IP address, is performed by Ipregistry upon user login. More information is available on https://ipregistry.co.
Video management: Cloudinary Ltd is used for storage, processing and delivery of uploaded videos. More information is available on https://cloudinary.com.
ReCATCHA: A security assessment is performed before applicant signup and / or user login. More information is available on https://www.google.com/recaptcha/about.
Countries we transfer Data to
We may transfer your Personal Data to recipients abroad (they may even be located outside the European Union), including countries that do not provide the same level of protection as Swiss and/or EU/EEA law. Before we do so we will implement appropriate measures to protect your Personal Data, for example by requiring the recipient to agree to data processing agreements. These agreements are usually based on the EU standard contractual clauses, which you can find under the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. We may also transfer Personal Data with your explicit consent and in certain other situations as permitted by applicable law.
On what basis we process Data
If we ask for your consent for certain processing, you can revoke your consent at any time with future effect by notifying us by sending us an Email.
Where we do not ask you for your consent for Processing, we base the Processing of your Personal Data on the fact that the Processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, in particular in order to pursue the purposes and related objectives described above and to be able to implement appropriate measures. This also includes compliance with legal regulations, insofar as their compliance is not already recognised as a legal basis by the respective applicable data protection law.
Data location and technical and organisational measures
The application Platform is hosted on a Visible Solutions AG’s dedicated server in a data center in Switzerland (Interxion, managed by Hostpoint AG, see section “Sub-processors”). The data center is ISO-27001 and FINMA (FINMA-RS-08/7 outsourcing banks) certified. Personal Data in-transit is encrypted with Secure Sockets Layer (SSL) encryption. Personal Data is regularly backed up to prevent data loss.
We protect Personal Data against common web attacks, host it in secure data centers and use firewalls and access restrictions on our servers to secure our network and protect your information. Despite our efforts, you acknowledge that no method for electronic transmission and storage is fully secure and we cannot ensure or warrant the absolute security of information stored on or transmitted through our Website and/or Platform. In the unlikely event that Personal Data is compromised as a result of a malicious attack or breach of security, we will notify those persons whose information has been compromised, if legally required, in according with the applicable data protection laws.
Your rights as data subject
By providing Personal Data, you consent to the collection, retention, storage, adaption, usage, transfer of your Personal Data for the described purposes. In case Personal Data of third parties is involved, you must ensure that they consented to the collection, retention, storage, adaption, usage, transfer of their Personal Data. If you are a data subject and we act as a data controller of your Personal Data, you have specific rights concerning your Personal Data. These include:
Access
You have the right to be informed about the Personal Data we collect and process about you and to receive a copy of your Personal Data. Please see this Privacy Policy for details or send us an Email if anything is unclear or if you require additional information.
Deletion or Restriction
You have the right to delete all your Personal Data or restrict our processing. If you decide to delete Personal Data, the process cannot be undone. You can delete Personal Data by using the functions provided within the Platform or by sending us an Email. As Personal Data is stored in backups, complete data deletion might take some time to be effective (see Terms and Conditions of the hosting provider).
Revocation of consent
You may choose to withdraw your consent by sending us an Email, if our processing is based on your consent. Once we have received notification of the withdrawal of your consent, we will no longer process your Personal Data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of consent does not affect the lawfulness of the Processing carried out on the basis of the consent until revoked.
Portability
You have the right to obtain a portable export file of all Personal Data you provided or to have transferred it to another data controller. You can request such file by sending us an Email.
Complaint
In the event of a violation of privacy, you have the right to lodge a complaint in relation to the Processing of Personal Data with the competent supervisory authority.
Rectification
We must ensure that the Personal Data provided is accurate. Therefore, please advise us of any changes by sending us an Email.
Data retention
We retain your Personal Data for the duration of your relation with us, which is defined from the beginning to the end of the competition or as long it is necessary for the outlined purposes. Furthermore, we process your Personal Data for as long as the legal retention periods and our legitimate interests in processing for documentation and evidence purposes require or storage is technically necessary. We actively delete or anonymise your Personal Data after the storage or processing period has expired or if you choose to delete Personal Data through functions provided within the Platform or if you instruct us to do so by sending us an Email.
Contact
If you want to get in touch or exercise you data subject rights, if anything is unclear or if you have any questions or concerns about data privacy or this Privacy Policy, please contact us by sending an Email to team.hueman-design@usm.com