Privacy statement of MOUNT10 AG

The following Privacy Policy applies to the use of our website as well as the services we offer and our other contracts. This Privacy Policy informs you, as a contractual partner, employee or visitor to our website (hereinafter referred to as “you”), about the collection of personal data when you use our website and our contractual services. By using this website, you agree to the processing of your personal data in accordance with this Privacy Policy.

In principle, we offer our services in Switzerland, and they are aimed at people living in Switzerland.

Contact details

Your data will be processed by us. The contact person (jointly responsible person) for matters relating to the purpose and means of processing on our part is:

MOUNT10 AG
Haldenstrasse 5
6340 Baar Switzerland
Phone: +41 41 726 03 20
Email: info@mount10.ch
Contact person for data protection issues: Thomas Liechti

Please submit your enquiries in writing or by email to the relevant address above.

Collection of data

Personal data is collected that you provide to us or that we receive from third parties about you (e.g., contractual partners, extracts from registers, etc.).
Certain types of personal data are considered “sensitive” under data protection law, e.g., health data. Depending on the situation, other mentioned categories of personal data may also include personal data of this nature that is particularly worthy of protection (e.g., information about religious affiliation in the master data). As a rule, we only process personal data that is particularly worthy of protection if it is necessary in order to provide a service, you have disclosed this data to us of your own accord, or you have given us your consent to process it. We assume your consent has been provided when we receive data from contractual partners. In addition, we may process personal data that is particularly worthy of protection if this is necessary in order to comply with the law or adhere to domestic or foreign legal provisions, if the relevant data has obviously been disclosed publicly by the data subject, or if the applicable law otherwise permits its processing.
Each time the website is accessed, data is collected that is technically necessary or useful. For example, data may be collected about the browser types used, the operating system used, the date and time of access, the Internet protocol address (IP address), and the name and URL of the retrieved file. If you have subscribed to our newsletter, we will use your email and name to send it – if necessary, also through a specialised company. You can unsubscribe from the newsletter at any time (a link is provided in each newsletter).

Purposes of data processing

Your data is processed for the purposes of us performing our services. There are other purposes in addition:

• For the purpose of communicating with you, e.g., answering enquiries, or the customer relationship
• To negotiate contracts and possibly conclude a contract
• To process contractual relationships (including employment)
• For the functioning of our infrastructure, websites, newsletters, accounting, etc.
• For marketing purposes (e.g., newsletters, invitations, relationship management, etc.)
• To analyse market developments, for planning, to develop our offer, for research and development
• For contractual relationships with employees
• In order to act in accordance with the law, industry standards, etc.
• For legal proceedings or investigations
• To ensure safety/security
• For administrative actions and management of the business
• For instructions, training and further training for employees

Duration of storage

Your data will be kept for as long as required by law, a contract or special situations (e.g., legal proceedings or imminent proceedings). It is then deleted or pseudonymised.

Transfer of data

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”, and from the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Disclosure of data to third parties and commissioned data processors

Insofar as is necessary to operate our services, we pass on data to the companies we commission to operate and process the services. When your data is processed, it may be disclosed to the following third parties:

• Group companies and their employees
• Service providers (some of whom process your data on our behalf, such as IT/web providers or support companies, and some on their own responsibility, such as lawyers in the event of legal questions, insurance companies)
• Authorities in Switzerland and abroad on the basis of legal obligations
• Business partners, such as suppliers
• Customers, marketing partners and project partners
• Credit agencies that store this data for their own credit reports
• Third parties who collect data about you via the website/app (see list on the website)

The service providers in question are bound to our data protection standards by legal provisions, by a contract for data processing, or on the basis of contractual provisions, or are entitled to process personal data through the use of standard contractual clauses recognised by the FDPIC.

Disclosure of data abroad

Your customer data (the data that you store with us on the basis of the agreement) is stored exclusively in Switzerland. As part of its handling under the law or under a contract (e.g., IT support, online services, etc.), personal data and other data may be transmitted to countries in the EEA, where it may be processed and stored, and, in exceptional cases, to any country in the world. We ensure that the country in question has sufficient data protection. If your data is transferred to, processed in and stored in a country without sufficient data protection, this is carried out on the basis of contractual guarantees, which are reported to the FDPIC. However, standard contractual clauses created or recognised by the FDPIC are used, which is why the reporting obligation is usually waived.

Withdrawal or restriction of your consent, data corrections and data downloads, deletions

You have the right to withdraw or restrict your consent. Any such change is valid if it is made in writing (not by email) and will apply to the processing of data in the future, from the time the change is received. Such withdrawal of consent shall not affect any rights not based on consent (e.g., statutory or contractual rights).
You can review your data online at any time. For further rights, such as a right to erasure, please contact us.

Cookies and other service offerings

We may use cookies on the website. Cookies contain a so-called cookie ID, a unique identifier of the cookie, which assigns websites and servers to a specific Internet browser. A particular internet browser can be recognised and identified by this unique cookie ID. If you do not want this, you should set your Internet browser to reject the acceptance cookies.
We may also use third-party services to analyse (e.g., Google Analytics) and improve our website. We will be happy to provide you with a detailed list upon written request.

Data security

In order to ensure your rights, your data is protected against unauthorised access, changes and loss. We use technical and organisational measures for this purpose (e.g., encryption, firewalls, access restrictions, backups, etc.). The technical and organisational measures selected are generally based on the risk involved. The requirements for data security under the Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (DSV) are observed.
You acknowledge and consent to us exchanging data with you via email, SMS or other digital applications without encryption.

Applicable law and place of jurisdiction
This Privacy Policy and the contracts concluded on the basis of or in connection with this Privacy Policy are subject to Swiss law, to the exclusion of any conflict of laws rules. The place of jurisdiction is our registered office.

Final provisions

Should any individual parts of this Privacy Policy be invalid, this shall not affect the validity of the remainder of this Privacy Policy. We may modify this Privacy Policy at any time without prior notice. The current version published on our website always applies.