Last modified 16 February 2021
This privacy notice informs you how we collect, use, share, retain and protect personal data received through our avaloq.one family of websites (“website”).
We may occasionally update this privacy notice. We encourage you to periodically review this privacy notice to be informed of how we use your information.
1. WHO WE ARE
We are the Avaloq Group AG (“we”, or “us”), a Swiss company registered at Schwerzistrasse 6, 8807 Freienbach, Switzerland. We are the data controller responsible for the processing of personal data through our online platform.
2. HOW WE OBTAIN PERSONAL DATA
We may collect and receive personal data through our online platform. Personal data means any information relating to an identified or identifiable natural person.
We collect personal data that you choose to voluntarily provide to us for your use of our online platform.
3. THE TYPES OF PERSONAL DATA WE MAY OBTAIN
We may collect and receive the following personal data from you:
- Name and contact details (such as name, address, email, username, phone numbers);
- Account details (such as username and password);
- Personal data included in your traffic data;
We may collect other types of personal data if required under applicable law or if necessary, for the purposes listed below.
4. PURPOSES AND LEGAL BASES FOR PROCESSING
We may collect and process your personal data for the purposes and on the legal bases identified in the following:
Providing our online platform and delivering the services you have requested:
We may process your personal data to perform our contract with you for the use of our online platform and to fulfil our obligations under the applicable terms and conditions; if we have not entered into a contract with you, we base the processing of your personal data on our legitimate interest to operate and administer our online platform and to provide you with content you access and request.
Managing account registrations:
If you have registered for an account with us, we process your personal data by managing your user account for the purpose of performing our contract with you according to the applicable terms and conditions.
Handling contact and user support requests:
If you fill out a “contact-us” form or request user support, or if you contact us by other means including via a phone call, we may process your personal data to perform our contract with you and to the extent, it is necessary for our legitimate interest in fulfilling your requests and communicating with you.
Developing and improving our online platform:
We may process your personal data to analyze trends and to track your usage of and interactions with our online platform to the extent it is necessary for our legitimate interest in developing and improving our online platform and providing our users with more relevant content and service offerings, or where we seek your valid consent.
Identifying customer opportunities:
We may process your personal data to assess new potential customer opportunities to the extent you have provided your prior consent.
Reviewing compliance with the applicable terms and conditions; ensuring the security of our business, preventing or detecting fraud or abuses of our online platform:
We may process your personal data by tracking the use of our online platform, verifying accounts and activity, investigating suspicious activity, and enforcing our terms and conditions to the extent it is necessary for our legitimate interest in promoting the safety and security of the online platform and in protecting our rights and the rights of others.
Complying with legal obligations:
We may process your personal data when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of personal data to protect our rights or is necessary for our legitimate interest in protecting against misuse or abuse of our online platform, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, respond to lawful requests, or for auditing purposes.
5. HOW WE MAY SHARE PERSONAL DATA
We may share the personal data we collect and receive on a need to know basis with the following parties:
- Other affiliates of the Avaloq group or its agents;
- Third-party providers that perform services for us;
- Event sponsors (only if you attend an event or webinar organized by us. Refer to section 4 “Managing your event registrations and attendance”);
- Other users of the online platform if you choose to share your messages;
- Competent public authorities or other third parties (if required by law or reasonably necessary to protect the rights, property and safety of ourselves or others).
We may also transfer your personal data in the event that we sell or transfer all or a portion of our business or assets on a need to know basis. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with applicable law and this privacy notice.
We do not sell, rent or trade your personal data.
6. DATA TRANSFERS OUTSIDE THE EEA
We may transfer the personal data we obtain to third parties in countries outside of Switzerland and the European Economic Area (EEA). The laws in those countries may not offer an adequate level of data protection. Personal data may be transferred to Singapore, the Philippines and the United States among others.
When we transfer your personal data outside of Switzerland or the EEA, we will protect your personal data as described in this privacy notice and in accordance with applicable laws, such as by entering into the European Commission’s Standard Contractual Clauses for the transfer of personal data to a processor located outside of Switzerland or the EEA.
Our online platform may contain links to other sites. We are not responsible for the content or privacy practices of such other sites. Pay attention when you leave our website and read the privacy notices of any other site that collects personal data. Your data protection and privacy rights under these third-party platforms will be governed by their respective privacy practices.
We collect certain personal data by using cookies and similar technologies when you visit the website.
Cookies are bits of text that are placed on your computer’s hard drive or mobile device when you visit the website. Cookies hold information that may be accessible by the party that places the cookie, which is either the website itself (first-party cookie) or a third party (see section 8.2 THIRD-PARTY COOKIES).
We use both session-based and persistent cookies on our website. Session-based cookies exist only during a single session and disappear from your device when you close your browser or turn off the device. Persistent cookies remain on your device after you close your browser or turn your device off.
8.1 THE PURPOSE OF SETTING THE COOKIES AND SIMILAR TECHNOLOGIES
We categorize our website cookies and similar technologies as follows:
- Strictly Necessary Cookies (Category 1)
These cookies are absolutely necessary for you to browse the website and use its features, such as accessing secure areas of the website.
- Performance Cookies (Category 2)
These cookies gather website statistical data to analyze how our users use the website, such as which pages are visited, how long pages were visited, and the paths taken by visitors to our website as they move from page to page.
- Functional Cookies (Category 3)
These cookies facilitate the operation and improve the functions of the website. For example, we store your language settings in functional cookies.
8.2 THIRD-PARTY COOKIES
We may use third-party technology to track and analyze usage information to provide enhanced interactions and more relevant communications and to track the performance of our advertisements.
Third-party Performance Cookies (Category 2):
We may use Google Analytics by Google, Inc (“Google”) and Conversational Relationship Platform (CRP) by Intercom, Inc. (“Intercom”) to the extent you have provided your prior consent:
Third-party Functional Cookies (Category 3):
We may use Liferay Portal by Liferay GmbH (“Liferay”) to store a limited number of user preferences, such as language to the extent you have provided your prior consent:
- Liferay is an enterprise portal technology we host our website on. The information generated by the cookie about your use of our website (such as your IP address, the URL visited, the date and time the page was viewed) will be transmitted and stored by Liferay on servers in Germany.
9. HOW WE PROTECT PERSONAL DATA
We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us or the personal information stored are absolutely secure. We will notify you of any data breach that is likely to have unfavourable consequences for your privacy in accordance with applicable law.
10. HOW LONG WE RETAIN PERSONAL DATA
We retain personal data for as long as necessary to fulfil the purposes for which we collect or receive the personal data, except if required otherwise by applicable law. Typically, we will retain most of the personal data for the duration of your use of the online platform, or until you have removed your account unless a longer applicable statutory retention period applies.
After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.
11. YOUR RIGHTS
You have the following rights in relation to your personal data:
- The right to obtain, at reasonable intervals and free of charge, information on whether your personal data are being processed and to receive the personal data that is being processed in an intelligible form;
- The right to have your personal data rectified, blocked or deleted if your personal data are incorrect, incomplete, inaccurate, irrelevant, outdated or processed unlawfully;
- The right to withdraw your consent at any time;
- The right to transfer your personal data to another controller, to the extent possible;
- The right to object on legitimate grounds to the processing of your personal data.
To exercise these rights, please contact us using our contact details set out below. We may request you to provide a copy of your ID card or otherwise evidence of your identity. We will respond to your request within the applicable statutory term.
12. HOW TO CONTACT US
If you have any comments or inquiries about the information in this privacy notice, if you would like us to update your personal data, or if you want to exercise your rights, please contact our Data Protection Officer by email at firstname.lastname@example.org.