Menu

Privacy policy of CONNEX AG

Version dated 30 November 2020

1. General

In this privacy policy we (CONNEX AG) explain how, to what extent and for what purpose we collect and process personal data on our website www.connexch.com.

CONNEX AG is subject to Swiss data protection law, in particular to the Swiss Federal Act on Data Protection (DSG) and its associated regulations (VDSG and VDSZ). Swiss data protection law is strongly influenced by EU law, and CONNEX AG as a company outside the European Union respectively EEA must comply with the GDPR under certain circumstances indirectly (due to contractual obligations). The EU recognises that Swiss data protection law guarantees adequate data protection.

As the Swiss DSG is currently being revised and is expected to enter into force in 2022, the following comments already refer to the revised DSG.

2. Controller

Connex AG is responsible for the data processing which we describe here. If you have data protection concerns, you can communicate these to us at the following contact address: 

CONNEX AG
Industriestrasse 15
CH-6260 Reiden
Switzerland

datenschutz@connexch.com

3. Processing of personal data

Processing basically includes any handling of personal data, regardless of the means and procedures used, in particular also the modification, use, disclosure, retention, storage, deletion and destruction of personal data.

Personal data are understood to be all information relating to an identified or identifiable person. A person is identifiable if her or his identity can be inferred on the basis of additional information.

If you provide us with personal data of other persons (e.g. data of work colleagues), please ensure that these persons are aware of this privacy policy and only provide us with their personal data if you are allowed to do so and if these personal data are correct.

We primarily process the personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved or which we collect from their users when operating our websites and other applications.

You can fill out a contact form on our website to get in touch with us. For this purpose, we process your name, the company name, the city or country of the company location, your e-mail address, telephone number and your request, which you can describe in the "Comment" field.

In this context, you can also choose whether we should inform you about our products by e-mail. If you do not wish to receive further information from Connex AG, you can let us know. For this purpose, we refer to our contact details in section 2 of this privacy policy. Each promotional e-mail also contains a link with which you can object to the further delivery of promotional e-mails.

Insofar as this is permitted, we also take certain data from publicly accessible sources (e.g. land registers, commercial registers, the press, the Internet, debt enforcement registers), from authorities and other third parties.

4. Categories of personal data

In addition to the data you provide us directly, the categories of personal data that we receive about you from third parties include in particular information from public registers, information obtained in connection with official and judicial proceedings, information relating to your professional functions and activities (so that, for example, with your help we can conclude and process business transactions with your employer), information about you in correspondence and meetings with third parties, information about you which persons from your environment (family, consultants, legal representatives, etc.) give us so that we can conclude or process contracts with you or with your involvement (e.g. references, your delivery address, powers of attorney, information on compliance with legal requirements such as money laundering prevention and export restrictions, information from banks, insurance companies, distribution and other contractual partners we have for the use or provision of services by you such as payments made, purchases made), information from the media and the Internet about you (insofar as this is appropriate in the specific case, e.g. in the context of a job application, press review, marketing/sales, etc.), your addresses and, if applicable, interests in our products. This list is not exhaustive.

5. Purpose of the data processing

We use your personal data primarily to conclude and process contracts with customers and business partners, in particular within the scope of communication services for our customers and the purchase of products and services from our suppliers and subcontractors, as well as to comply with our legal obligations at home and abroad. If you are working for such a customer or business partner, you and your personal data may of course also be affected from our data processing in this function.

In addition, we also process personal data of you and other persons, as far as permitted and as we consider it appropriate, for the following purposes in which we (and sometimes also third parties) have a legitimate interest corresponding to the purpose:

  • Our offers and further developments of those, as well as services, websites and other platforms on which we are present;
  • Communication with third parties and processing of their enquiries (e.g. applications);
  • Examination and optimisation of procedures for the analysis of requirements for the purpose of direct customer approach as well as collection of personal data from publicly accessible sources for the purpose of customer acquisition;
  • Advertising and marketing (including the organisation of events), provided that you have not objected to the use of your data (if we send you advertising as an existing customer of ours, you can object to this at any time; we will then put you on a block list so that you do not receive further advertising mailings);
  • Assertion of legal claims and defence in connection with legal disputes and official proceedings;
  • Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);
  • Guarantees of our operation, especially IT, our websites, apps and other platforms;
  • Video surveillance in order to uphold company rules and other measures for IT, building and plant security and protection of our employees and other persons and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners);
  • Acquisition and sale of business units, companies or parts of companies and other transactions under company law and the associated transfer of personal data as well as measures for business management and, to the extent necessary, for compliance with legal and regulatory obligations.

If you have given us your consent to process your personal data for further specific purposes (for example, when you register to receive newsletters or fill in the contact form), we will process your personal data within the scope of and based on this consent, unless we have another legal basis and we need such a basis. Consent that has been given can be revoked at any time, but this has no effect on data processing that has already taken place.

6. Cookies, tracking and other technologies related to the use of our website

We deliberately use only technically necessary cookies and refrain from using analytics tools of any kind to systematically evaluate visitors to our website.

In our marketing e-mails we also include, in part and to the extent permitted, visible and invisible image elements; when these are retrieved from our servers we can determine whether and when you have opened the e-mail (personalised). This serves as quality assurance and assists improvement of our web services. You can block this in your email program; most are preset to do so.

By using our websites and agreeing to receive newsletters and other marketing emails, you consent to the use of these techniques. If you do not consent to this, then you must set your browser or e-mail program accordingly. However, since these are exclusively technically necessary cookies, certain functionalities such as the contact form for example will no longer work.

Personal data transmitted via the contact form will only be processed for the purpose stated therein, i.e. for further information about our products or to order specific services.

7. Data transfer and data transmission abroad

As a matter of principle, we only use your personal data within our company. The data will be processed by employees of the sales office, technical sales or other administrative departments of Connex AG who are responsible for liaising with your company or informing you or your company about products or upcoming events. Only to the extent necessary, within the scope of our business activities and for the purposes set out in Section 3, do we pass on personal data to companies that we engage in connection with data processing, in compliance with data processing requirements.

In doing so, we contractually ensure that they take appropriate measures with regard to the security and protection of personal data and that they process the data only for the purposes for which we are permitted.

Our website is hosted by Metanet AG in Zurich via Megura AG in Baden, Switzerland

The other service providers we may use are located in the European Union (EU). In this context, we transfer personal data abroad. All of these countries have adequate data protection.

8. Duration of storage of personal data

We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued by the processing, i.e. for the duration of the entire business relationship (from the initiation and processing to the termination of a contract) and, in addition, in accordance with the legal retention and documentation obligations. For example, we are required by law to retain data that we store for accounting and financial reporting purposes for 10 years. It is possible that personal data may be retained for the time during which claims can be made against our company and insofar as we are otherwise legally obliged to do so or justified business interests require it (e.g. for evidence and documentation purposes). As soon as your personal data are no longer required for the above-mentioned purposes, they will be deleted or anonymised as far as possible.

9. Data security

We take appropriate technical and organisational security measures to protect your personal data from unauthorised access and misuse. Although we maintain modern protection mechanisms, complete protection against access by third parties cannot be guaranteed.

10. Rights of the data subject

As a person concerned, you have the right to request information about what data we process about you. You are also entitled to have incorrect and unnecessary data corrected, deleted or destroyed.

Please note, however, that we reserve the right to assert the restrictions stipulated by law, for example if we are obliged to store or process certain data, if we have an overriding interest in doing so (insofar as we are entitled to invoke this) or if we need these data for the assertion of claims. We will inform you in advance if there are any costs for you. We have already informed you about the possibility of revoking your consent in Section 3 and 5. Please note that the exercise of these rights may conflict with contractual agreements and may have consequences such as early termination of the contract or cost implications. In this case we will inform you in advance where this is not already contractually regulated.

The exercise of such rights generally requires that you clearly prove your identity, which is why we reserve the right to verify the identity of the requesting person and to request copies of substantiating documents (e.g. an official identity card). To assert your rights, you can contact us at the address given in Section 2.

Every data subject also has the right to pursue his or her claims through the courts or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

11. Changes

We may change this privacy policy at any time without notice. The applicable version is the current version published on our website.