Privacy of our website

Why this Notice?

This information is provided pursuant to Articles 6 and 19 of the Federal Act on Data Protection (FADP) and pursuant to the Ordinance on Data Protection (OP). It informs you about how we collect, use, share and store the personal data provided and/or collected through the Site as described below.

This is information provided by BSA Swiss SA as Data Controller.

What information do we collect, for what purposes, what are the legal bases and how long do we keep your data?

Purpose of browsing the site

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
Such data, necessary for the use of web services, are also processed for the purpose of:

• obtain statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• check the correct functioning of the services offered.

Types of data processed

• IP addresses or domain names of computers and terminals used by users,
• the addresses in URI/URL ( Uniform Resource Identifier /Locator) notation of the requested resources,
• the time of the request,
• the method used in submitting the request to the server,
• the size of the file obtained in response,
• the numeric code indicating the status of the response given by the server (successful, error, etc.)
• other parameters related to the user’s operating system and computer environment

Justifying reasons

• the processing is necessary for the overriding private interest of the Data Controller (Art. 31 cpv.. 1 and 2 lett. a LPD) to guarantee the security and usability of the website;
• processing is necessary for compliance with a legal obligation to which the Data Controller is subject (Art. 31 cpv. 1 LPD).

Storage times

Browsing data does not persist for longer than the duration of the browsing session.

Registration Purposes Reserved Area for Users

The User’s personal data will be processed by BSA Swiss SA to allow him/her to complete his/her registration in the reserved area of the site and to create a personal space to monitor the status of the orders/purchases made.

Types of data processed

• E-mail address;
• Password;
• Company Name;
• Name and surname.
• Role

Justifying reasons

The processing is justified by the overriding private interest of the controller in performing a contract with the data subject/user (Art. 31 cpv. 2 lett. a LPD).

Storage times

The data processed for the purposes of account registration will be retained until the user requests to revoke his/her registration on the site.

Purpose of managing requests

We will process the personal data you provide by filling in the forms on the site ( Do you want to know more? and Do you have a question or need information? ), with the aim of providing feedback to the requests forwarded.

Types of data processed

• Name and surname;
• Agency;
• Role in the company;
• E-mail address;
• Data provided spontaneously via the “Message” area.

Justifying reasons

The data will be processed exclusively to process the requests forwarded by the user. The processing is justified by the overriding private interest of the owner to provide a response to a direct request from the interested party (Art. 31 cpv. 2 lett. a LPD)

Storage times

The data processed as reported in this paragraph will be retained for the period strictly necessary to provide a response to the requests of the interested parties and, in any case, not exceeding one year. The possibility of extending the aforementioned period remains in the event that this is necessary to fulfill legal obligations to which it is subject or to protect a right before a competent authority.

Purpose of enrollment in training courses or information events

We will process the personal data you provide by filling in the forms Register in the Training and Events area to register for free training courses, events or workshops promoted by BSA Swiss SA, and download information sheets/information related to the course and/or event.

Types of data processed

• Name and surname;
• Role in the company;
• E-mail address;
• Company Name;
• VAT no.

Justifying reasons

• Art. 31 cpv. 2 lett. a LPD: execution of pre-contractual measures at the request of the interested party;
• Art. 31 cpv. 1 LPD: predominant private interest in the correct organization and management of the training activity

Storage times

6 months from the date of conclusion of the event, unless justified defensive requests.

Purpose of staff selection

The data is also processed for the purpose of personnel research and selection by BSA Swiss SA

Types of data processed

• Name and Surname
• Company Name
• Role
• E-mail
• CV
• Cover letter

Justifying reasons

• The processing is justified by the overriding private interest of the Data Controller, pursuant to art. 31 cpv. 2 lett. a LPD, to evaluate the professional skills of the interested party for the establishment of a potential employment relationship.
• Personal data worthy of special protection will be processed exclusively if indispensable to fulfill legal obligations (Labour and/or Equality Law).

Storage times

Your data will not be shared with third parties and will be stored in our databases for the period of time necessary to manage and monitor the search and selection process and in any case not exceeding 12 months.

Cookie

The site’s Cookie Policy is accessible: https://www.bsaswiss.ch/cookie-policy-ue/

Treatment methods

The processing of personal data will be carried out mainly by electronic or automated means, in compliance with the principles of security, proportionality and good faith provided for by Article 6 of the Federal Law on Data Protection (LPD).

In accordance with Articles 7 and 8 of the FAPD and Articles 1 and 3 of the Data Protection Ordinance (OPDa), appropriate technical and organizational measures will be taken to protect the data from unauthorized access, loss, unlawful use or unauthorized disclosure.

The information collected will be relevant, proportionate and limited to the purpose for which they are processed and will be stored in protected environments, accessible only to authorized personnel and subject to control.

Who do we share personal data with?

Without prejudice to all communications required by law or necessary for the fulfillment of contractual obligations, the personal data collected may be communicated exclusively for the purposes indicated in this information notice, by way of example, to:

• Employees and collaborators of the Data Controller, authorised to process personal data as part of their duties and subject to the security and access control measures provided for by art. 3 of the Data Protection Ordinance (OPDa);
• Natural or legal persons who process data on behalf of the Data Controller (Data Processors pursuant to art. 9 LPD), such as IT service providers, hosting, website maintenance, who process data according to documented instructions and on the basis of a written agreement;
• Employees and collaborators of the Data Controllers, if authorised and trained in accordance with the contractually agreed provisions, as subjects operating under the responsibility of the Controller;
• authorities within the limits established by law or by official provisions, if such communication is necessary to fulfill a legal obligation pursuant to art. 31 LPD.

Personal data will not be disclosed, except in aggregate or anonymized form for statistical or research purposes, so as not to make the interested parties identifiable.

Identity and contact details of the Data Controllers

The complete list of data controllers is accessible by contacting us at dpo@bsaswiss.ch

Transfer of data to third countries

BSA Swiss SA uses only providers that are established in Switzerland or (exceptionally) in the European Union and process personal data in Switzerland or (exceptionally) in the European Union. Therefore, communications of personal data to countries that do not protect data adequately with respect to Swiss law and European law are excluded, except for any communications based on the prior and express consent of the interested party or by virtue of a legal obligation.

Your rights and how to contact us

In accordance with the Federal Act on Data Protection (LPD; RS 235.1) and the related Ordinance ( OPDa; RS 235.11), the data subject may exercise the following rights:

• Right of access: obtain confirmation of the possible existence of a processing of personal data concerning you and receive information on the data processed and on the methods of processing, as provided for by art. 25 LPD and art. 16 OPDa ;
• Right to rectification: request the correction or updating of inaccurate or no longer current personal data (art. 32 LPD);
• Right to erasure: request the destruction of personal data, if they are no longer necessary for the purposes for which they were collected or if the processing does not comply with the LPD (art. 32 LPD);
• Right to data portability: obtain the personal data provided in a structured electronic format of common use, or request direct transmission to another owner, within the limits of art. 28 LPD and arts. 20 and 21 OPDa ;
• Right to object: to object to the processing of your personal data when it results in legal consequences or significant disadvantages, in accordance with Art. 30 cpv. 2 LPD.

Requests should be forwarded to privacy@bsaswiss.ch

Right to complain

If you believe that the processing of your personal data is in violation of the Federal Act on Data Protection (LPD; RS 235.1), you have the right to contact the Federal Data Protection and Information Commissioner (IFPDT), who carries out supervisory and advisory activities in accordance with Articles 49 et seq. of the LPD.

Furthermore, the right to appeal to the competent judicial authorities, in accordance with the provisions of the law, remains intact.

Changes

The owner reserves the right to modify, update, add or remove portions of this privacy policy at its discretion and at any time. Before using the Site or related resources (e-mail, telephone), it is therefore up to the user to verify the content of the current information. In order to facilitate such verification, the information will contain the date of update.

Last updated: April 15, 2025