We process your data for the purposes set out below. Further information can be found at section 12 and 13 for online services. These purposes and their objectives serve our inte-rests and, where applicable, those of third parties. Further information on the legal basis for our processing can be found at section 5.
We process your data for the purposes of communicating with you, in particular to res-pond to your requests and exercise your rights (section 11 ) and to enable us to contact you if we have any questions. For this purpose, we use in particular communication and basic data as well as registration data in connection with the offers and services you use. We store this data to document our communication with you, for training purposes, quality assurance and to follow up enquiries.
The above includes all the purposes for which we communicate with you, whether in connection with customer service or advice, authentication when using the website, and for training and quality assurance (e.g. in connection with customer service). We also process communication data to enable us to communicate with you by e-mail and telephone, as well as through messa-ging services, chat rooms, social networks, letters and faxes. Our communication with you gene-rally takes place in connection with other processing purposes, for example so that we can pro-vide services or respond to an access request. Our processing also serves to document the communication and its content.
We process data for the conclusion, administration and performance of contractual rela-tionships.
We enter into various contracts with our business and private customers, suppliers, subcontrac-tors and other parties, such as project partners or parties to legal proceedings. In particular, we process basic data, contractual data and communication data and, depending on the cir-cumstances, registration data relating to the customer or the persons for whose benefit the customer has received a service. This includes, for example, recipients of our products or ser-vices who receive vouchers and related invitations from our own customers and may become our customers when they redeem them. In this case, we process the data in order to perform the contract with these recipients, but also with the contractual partners who have invited them.
In the course of establishing a business relationship, personal data - in particular basic data, contractual data and communication data - is collected from potential customers or other con-tractual partners (e.g. in an order form or a contract) or is obtained in the course of communica-tion. When concluding a contract, we process data in order to assess a person's creditworthiness and to enter into a customer relationship. In some cases, this information is examined in order to comply with legal requirements.
As part of the performance of the contractual relationship, we process data for the administra-tion of the customer relationship, for the provision and enforcement of contractual services (which includes the involvement of third parties, such as logistics companies, security service providers, advertising service providers, banks, insurance companies or credit information provi-ders, who may in turn provide us with data), for advisory services and for customer support. Services also include the enforcement of legal claims arising from contracts (debt collection, legal proceedings, etc.), accounting, termination of contracts and public communication.
We process data for marketing and relationship management purposes, for example to send our customers and other contractual partners personalised advertisements for pro-ducts and services offered by us or by third parties (e.g. advertising partners). This may take the form of newsletters and other regular contacts (by electronic means, e-mail or telephone), through other channels for which we have your contact details, but also as part of marketing campaigns (e.g. events, competitions, etc.) and may also include free services (e.g. invitations, vouchers, etc.). You may object to such contact at any time (see the end of this section 4 ) or refuse or withdraw your consent for us to contact you for mar-keting purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see section 12 ). Finally, we also wish to allow our contractual partners to contact our customers and other contractual partners for marketing purposes (see section 7).
For example, with your consent, we may send you information, advertising and product offers from us and from third parties within and outside the Group (e.g. advertising partners), in the form of printed material, electronically or by telephone. We process communication and registra-tion data in particular for this purpose. Like most companies, we personalise communications so that we can provide you with tailored information and offers that meet your needs and interests. We therefore combine the data we process about you and collect preference data and use this data as the basis for personalisation (see section 3). We also process data in the context of com-petitions, contests and similar events.
Relationship management includes addressing existing customers and their contacts, possibly in a personalised manner based on behavioural and preference data. As part of relationship mana-gement, we may also operate a customer relationship management ("CRM") system in which we store data from customers, suppliers and other business partners necessary to manage the relationship, e.g. data on contact persons, relationship history (e.g. information on products and services purchased or provided, interactions, etc.), interests, marketing measures (newsletters, invitations to events, etc.) and other information.
All of these processing activities are important to us, not only to promote our offerings as effecti-vely as possible, but also to make our relationships with customers and other third parties more personal and positive, to focus on the most important relationships and to use our resources as efficiently as possible.
We also process your data for market research purposes, to improve our services and business activities, and for product development.
We aim to continually improve our products and services (including our website) and to respond quickly to changing needs. To this end, we analyse, for example, how you navigate our website or which products are used by which groups of people and in what way, and how new products and services can be designed (for more details, see section 12). This helps us to understand market acceptance of existing products and services and the market potential of new products and ser-vices. To this end, we process, among other things, basic data, behavioural data and preference data, but also communication data and information from customer surveys, polls and studies, as well as other information from, for example, the media, social networks, the internet and other public sources. Wherever possible, we use pseudonymised or anonymised data for these pur-poses. We may also use media monitoring services or carry out media monitoring ourselves and process personal data in order to carry out media monitoring or to understand and react to cur-rent developments and trends.
We use anonymised location data, for example to provide our contractual partners with recom-mendations for avoiding peak traffic times. With your prior consent, we use non-anonymised location data to alert you to interesting offers and products in your vicinity (based on your loca-tion), to determine your interests from location data (dwell time) and to inform you about pro-ducts and services that other contractual partners with similar interests have used.
We may also process your data for security and access control purposes.
We constantly review and improve the security of our IT and other infrastructures (e.g. buil-dings). Like any business, we cannot rule out data security breaches with absolute certainty, but we do our best to reduce the risks. For example, we process data for the purposes of monitoring, inspecting, analysing and testing our IT networks and infrastructure, for system and error checks, for documentation purposes and as part of back-ups. Access controls include electronic access controls to systems (e.g. login to user accounts), as well as physical access controls (e.g. access to buildings). For security purposes (to prevent and investigate incidents) we also keep access logs and visitor lists and use surveillance systems (e.g. security cameras). We will inform you of surveillance systems at relevant locations by means of appropriate signage.
We process personal data in order to comply with the laws, directives and recommenda-tions of the authorities and internal regulations ("compliance with legal requirements").
This includes, for example, the implementation of health safety concepts or the regulated fight against money laundering and the financing of terrorism. In certain cases, we may also be requi-red to carry out certain clarifications on our customers ("Know Your Customer") or to make declarations to the authorities. Obligations to provide information or make declarations, for example in the context of control and tax obligations, also require or entail the processing of da-ta, for example archiving obligations and the prevention, detection and investigation of criminal offences and other violations. This also includes receiving and processing complaints and other reports, monitoring communications, conducting internal investigations or providing documents to an authority if we have sufficient grounds to do so or are legally obliged to do so. We may also process your personal data in the context of external investigations, for example by a law enfor-cement or supervisory authority or by a private entity commissioned for this purpose. In addi-tion, we process data in order to serve our shareholders and other investors and to comply with our obligations in this respect. For these purposes, we process in particular basic data, contrac-tual data and communication data and, in certain circumstances, behavioural data and data in the category "other data". Legal obligations may arise from Swiss law, but also from foreign regu-lations to which we are subject, as well as self-regulations, industry standards, our own corpo-rate governance and instructions and requests from the authorities.
We also process data as part of our risk management and corporate governance, inclu-ding business organisation and development.
For these purposes, we process basic data, contractual data, registration data and technical data, as well as behavioural and communication data. For example, as part of our financial mana-gement, we need to monitor our customer and supplier accounts, and we need to avoid falling victim to crime and abuse, which may lead us to analyse data to find relevant patterns of such activity. We may also carry out profiling and create and process profiles for these purposes and to protect you and us from criminal or abusive activities (see also section 6) In planning our re-sources and organising our business activities, we may need to evaluate and process data rela-ting to the use of our services and other offerings or share this information with others (e.g. sub-contracting partners), which may also include your data. The same applies to services pro-vided to us by third parties. As part of the development of our business, we may sell businesses, parts of businesses or companies to third parties or acquire them from third parties or enter into partnerships, which may also involve the exchange and processing of data (including about you, for example as a customer, supplier or supplier's representative).
We may process your data for other purposes, for example as part of our internal pro-cesses and administration or for quality assurance and training purposes.
These other purposes include, for example, training and educational purposes, administrative purposes (such as basic data management, accounting and data archiving, as well as the tes-ting, management and continuous improvement of IT infrastructure), the protection of our rights (e.g. to assert claims in court or out of court, and before the authorities in Switzerland and abroad, or to defend ourselves against claims made against us, for example by preserving evidence, carrying out legal analyses and participating in judicial or administrative proceedings), evaluation and improvement of internal processes. We may use recordings of (video) conferences for quality assurance and training purposes. These other purposes also include safeguarding other legitimate interests which cannot be named exhaustively.
