Privacy statement
We respect your privacy and attach great importance to data protection. This privacy statement informs our customers and website users of the nature, scope and purpose of personal data collection and use in compliance with Swiss and EU data protection law. We keep you transparently informed at all times of the purpose for which we require your data and as to whether or for how long we store such data.
We have taken technical and organisational measures to make sure that data protection regulations are respected both by us and by our external service providers. Personal data must be processed lawfully, in good faith and in a way which the person concerned is able to understand.
We act in compliance with the principles of the FADP (Swiss Federal Act on Data Protection), i.e. in the light of transparency, use for the intended purpose, fairness, data minimization, limited storage periods, data accuracy, data security, privacy by design and privacy by default.
Important: this privacy statement may be amended. Please keep up to date with the latest information by consulting this website.
1. Purpose of this privacy statement
Data protection is a matter of trust. We set great store by your trust. This privacy statement lets you know how your personal data is collected, processed and used.
This privacy statement gives you the following main information:
- Which personal data do we collect and process?
- For which purposes do we use your personal data?
- Who has access to your personal data?
- How do you benefit from our data processing?
- For how long do we process and store your personal data?
- What are your rights in respect of your personal data?
- and our contact addresses.
This privacy statement is valid both under the Swiss Federal Act on Data Protection (FADP) and under the European General Data Protection Regulation (GDPR).
2. Definitions
2.1. Personal data
The term personal data means all information that relates to a particular person, can be associated with such a person or identifies a particular person (e.g. names, addresses, IP addresses, email addresses). A natural person is regarded as identifiable if that person can be directly or indirectly identified, in particular by association with a designation such as a name, an identification number, location data, an online identifier or one or more special features that are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
We process different categories of such personal data, including master data, contract data, communication data, conduct and transaction data, data on preferences, technical data, audio and video recordings etc.
The designation, name or classification of the data is not relevant to data protection. The only important fact is that all of this data may be personal within the meaning of the FADP in that it enables a particular person to be identified.
2.2. Processing
“Processing” means any handling of personal data, regardless of the means and procedures used, in particular the procurement, storage, retention, use, modification, disclosure, archiving, deletion or destruction of data.
2.3. Persons concerned/Children
Our offer is intended essentially for adults. Persons under the age of 18 should not transfer any personal data to us without the consent of their parent or legal guardian.
2.4. Controller
The controller is the person who determines the purpose and means of processing, i.e. who decides that personal data may be processed at all, and which main conditions apply to such processing.
2.5. Order processor
The order processor is the person who arranges third party data processing. The order processor admittedly decides himself that he operates his business and processes the controller’s data, but the decision as to whether this processing takes place at all remains a matter for the controller. The controller is entitled to give instructions to the order processor.
3. Data processing controller
Under data protection law, the controller responsible for any specific data processing is the enterprise - primarily the contracting party - which determines the purpose and scope.
For the purposes of this privacy statement, the data processing controller is:
Inter-Translations SA
Pavillonweg 14
3012 Bern, Switzerland
email: mail@itsa.ch
Other enterprises may be responsible for certain processing operations. Where applicable, this is explained below in the particular description of the processing.
4. Addressees of this privacy statement
This privacy statement concerns all persons whose data we process, regardless of the way in which they contact us, e.g. online, by telephone or by post.
It applies both to the processing of personal data that has already been collected and to such personal data as may be collected in future.
You will find further information in the relevant contract documents. These may contain further details of the intended data processing operations.
5. Collecting personal data
5.1. Data made available
You often disclose personal data to us yourself, e.g. by communicating with us and in doing so transferring data and making it available. This is done, e.g. when making an enquiry or placing an order, in particular when closing a contract.
In the first instance, personal data is made available to us voluntarily. To perform the contract we must, however, collect and process some personal data. There are also legal storage requirements. Otherwise, we cannot close, perform or continue the contract. In principle, the processing of personal data is permitted for contract performance purposes.
If you transfer data about other persons (friends or family members) to us, we may assume that you are entitled to do so and that such data is correct. You further give an assurance that these other persons have been informed of this privacy statement.
5.2. Collected data
Personal data may also be collected automatically, for example online. In such cases, conduct and transaction data as well as technical data (time of website consultation, payment practices etc.) may often be involved.
5.3. Received data
We may also obtain personal data from other enterprises. Similarly, we may receive personal data from other contracting parties, provided that you consent to its transfer to us. We may likewise procure personal data about you from public sources.
6. Purposes of processing
6.1. Communication
We wish to remain in contact with you and determine your individual requirements. To that end we process personal data for communication with you.
Communication is effected for the following main purposes:
- to process enquiries and offers;
- to contact you if questions arise;
- for customer care;
- for communication in connection with contract performance or with problems arising in that connection;
- to keep you informed of the progress of work or status;
- for quality assurance and training.
6.2. Contract processing
We also aim to ensure that the contract is performed to your complete satisfaction. That is why we process personal data to perform the contract and all the activities connected either directly or indirectly with it, such as translation of the required documents, performance of interpreting, layout, graphic, web design, IT orders and other services. The purpose of contract processing includes in general everything necessary or expedient in order to close, perform and complete a contract. Contract processing may also include an agreed personalization of the services.
6.3. Information and marketing
We also process personal data in order to maintain relations and for marketing purposes, for example by sending written or electronic notifications. Such notifications may be personalized.
The following notifications may be involved:
- Newsletters
- Promotional emails
- In-app messages
- Electronic messages
- Information sent by post
- Advertising brochures, magazines and other printed matter
- Invitations to events, games of chance and competitions
You may decline contacts for marketing purposes at any time. In the case of newsletters and other electronic communications, you must in any case explicitly consent to receiving them.
6.4. Security and prevention
We wish to guarantee your and our security and prevent misuse. To assure your and our security and prevent misuse, we process personal data for security purposes, to safeguard IT security, to prevent theft, fraud and misuse and for evidential purposes.
We will therefore collect, evaluate and store your personal data for security purposes.
6.5. Legal obligations
We will comply with legal obligations, for instance in respect of storage or disclosure. Otherwise we will not disclose your personal data.
6.6. Protection of rights
We process your personal data to enforce our claims, for example to provide evidence or clarify the prospects of potential legal proceedings. On request, we will disclose your personal data to public authorities.
7. Legal bases for data processing
The legal basis for processing personal data depends on the purpose for which processing takes place. Data processing is permitted in Switzerland unless it is prohibited by law (FADP or GDPR).
Data processing is permitted in performance of a contract, regardless of, or even against, the wishes of the person concerned.
We are also allowed to process data to protect justified interests. Justified interests may be of a conceptual or economic nature. Direct advertising is for instance regarded as a recognized purpose. This includes contacting persons to provide promotional information, e.g. by telephone, email or letter.
Any kind of data processing that is either based on your consent or necessary in order to comply with domestic or foreign legal requirements is likewise permitted.
8. Sharing your personal data
8.1. Within our own business
We may share your personal data within our own business.
8.2. With third parties
We may also share your personal data with individuals and enterprises outside our own business if we make use of their services. These service providers primarily process your personal data on our behalf as order processors. On the basis of an order processing contract (OPC), we require our order processors to process your personal data solely on the basis of our instructions and to take suitable measures to assure data security.
Your consent is required to share your personal data with other third parties for their own purposes, unless there is a legal basis that requires us to share the information, such as:
- the transfer of claims to other enterprises
- the review or implementation of transactions under company law, such as enterprise purchases, sales and mergers
- the disclosure of personal data to courts and public authorities in Switzerland and abroad
- the processing of personal data in order to comply with a court ruling or an order made by a public authority
- the enforcement of legal claims
We are not subject to any professional obligation of secrecy (for example banking secrecy, professional secrecy of lawyers or physicians). If you are of the opinion that certain personal data is covered by an obligation of secrecy, please let us know.
9. Notification to other countries
9.1. Switzerland and the EU
We process and store personal data in Switzerland and in the European Union. The GDPR provides a level of data protection equivalent to that prevailing in Switzerland.
Personal data must not be transferred abroad (or be retrievable from abroad) without further measures unless the country concerned has a degree of protection which meets Swiss requirements.
Many of the countries concerned that are not EU Member States do not have laws that protect your personal data to the same extent as in Switzerland or in the EU. If we transfer your personal data to any such state (for instance Australia), we assure appropriate protection of your personal data. You will find a list of safe countries at www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html.
9.2. Transfer to third countries (such as USA or Australia)
Our website incorporates services of enterprises that are based in the USA or have relations with the USA. You must consent to any such data processing. In that case, unlimited access to your personal data by the US authorities cannot be ruled out. Legal action cannot be taken. The possibility that US authorities may access your personal data (US-CLOUD Act) cannot be excluded, even if such data is not stored in the USA. In that situation, we cannot assure adequate protection of your personal data, even by means of standard data protection clauses.
We use Google Analytics 4, but do not send any personal data to Google and IP addresses are neither recorded nor stored.
10. Data protection and security
We take reasonable security measures of a technical and organisational nature corresponding to the latest state of technical knowledge in order to safeguard the security of your personal data, protect you against unjustified or unlawful processing and prevent the risk of loss, unintended change, unwanted disclosure or unjustified access.
We also require our order processors to take reasonable technical and organisational security measures.
Unfortunately, we too cannot prevent data security breaches with absolute certainty. We will inform you and FDPIC of any data loss or data leak in the cases stipulated by the legislator.
11. Duration of processing
Applying the principles of data minimization and transparency, we only process and store your personal data for the time necessary to achieve the agreed purpose (e.g. to perform the contract), in other words only for as long as we have a justified interest in storage or until payment has been made in full.
If there is a legal obligation to store data, we will only do so for the specified length of time.
We retain data to make contacts, to close a new contract, for direct advertising etc. only until revocation. Once payment has been made in full, you may ask for data to be deleted at any time.
12. Cookies and similar technologies
12.1. Purpose
We inform you as to how and for what purpose we collect, process, use and store personal and other data when our website and mobile apps are used, in particular in respect of cookies and similar technologies. The term website used below also includes mobile apps.
12.2. Log data
Whenever our website is used, some data is automatically stored temporarily for technical reasons in log files; this is known as log data. The following technical data is involved, among others:
- IP address of the consulting terminal device
- information about your internet service provider
- information about the operating system used by your terminal device (tablet, PC, smartphone etc.)
- details of the referring URL
- details of the browser that is being used
- date and time of access,
- and contents retrieved when visiting the website
This data is processed for the purpose of using our website, e.g. to establish the connection and safeguard functionality, system security and stability, optimize our internet offering and also for statistical purposes.
The IP address is also evaluated together with log data and other data for investigative and defensive purposes in the event of attacks on the IT infrastructure and possibility also in criminal and civil legal proceedings or to identify the persons concerned.
12.3. Cookies and similar technologies
Cookies are data files (small text data files) which your browser stores automatically on your terminal device when you visit our website. Cookies contain an unambiguous identity number (ID), to distinguish between visitors, as a rule without identifying them. Depending on the purpose for which they are used, cookies contain further information, e.g. pages visited, duration of the visit or location. We use session cookies which are deleted again when the browser is closed and also permanent cookies that are stored for a specific additional time after the browser has been closed (generally for between a few days and two years) and enable visitors to be recognized again on a subsequent visit.
12.4. Deactivation of cookies and similar technologies
You may configure your browser settings in such a way that particular cookies or similar technologies are blocked, or existing cookies and other data that have been stored in the browser deleted. You may also extend your browser with software (known as plug-ins) to prohibit tracking by certain third parties. You will find information on this subject on your browser’s help pages, often under the data protection heading.
However, if you block cookies and similar technologies, our website may no longer be able to function fully.
12.5. Google services
Our website uses services provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (Google).
When Google Analytics 4 is used, IP addresses are neither logged nor stored. No personal data within the meaning of the FADP is therefore transferred to Google (and hence to the USA).
13. Your rights to revocation, information, rectification, erasure etc.
13.1. Right to information
You are entitled to ask us to confirm whether or not we process your personal data. In that case, you have the right to ask for information about this personal data and for more detailed information. Please submit any such request for information accompanied by proof of your identity.
13.2. Right to rectification
You are entitled to ask us to rectify erroneous personal data about you without delay. Bearing in mind the purposes for which data is processed, this likewise includes the right to ask for incomplete personal data to be completed – if necessary, by means of a supplementary statement.
13.3. Right to erasure
You are entitled to ask for all personal data about you to be erased or anonymised without delay, unless legal or contractual provisions require us to keep such data.
13.4. Right to data portability and release
You are likewise entitled to receive the data which you have made available to us in a current data file format.
13.5. Withdrawal of consent
You may withdraw your consent at any time with effect for the future. Please note that the exercise of these rights may be incompatible with contractual agreements; this may for example have cost consequences.
13.6. Objection
You may object to data processing, in particular if we process your personal data on the basis of a justified interest and provided that other relevant conditions are satisfied.
13.7. Legal action
You may also enforce your rights in the courts or submit a report to the supervisory authority responsible. In Switzerland the responsible entity is the Swiss Federal Data Protection and Information Commissioner (FDPIC). You can find further information at: http://www.edoeb.admin.ch.
14. Contact data
For any questions and requests about data protection on our website, if you would like information about your own data or if you wish to ask for your data to be deleted, please contact our person responsible for data protection law at the following address (online or by post), and also if you have any questions about this privacy statement or about the processing of your own personal data.
Inter-Translations SA
Pavillonweg 14
3012 Bern, Switzerland
E-Mail: mail@itsa.ch
15. Amendments to this privacy statement
We reserve the right to amend this privacy statement at any time. We therefore advise you to check this declaration at regular intervals.