Data Privacy Notice

General information

Based on Article 13 of the Swiss Federal Constitution and federal data protection regulations (Federal Act on Data Protection – FADP), every person has the right to protection of their privacy and protection against misuse of their personal data. RMB Group AG takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
By using this website, you declare that you consent to the collection, processing and use of data as described below. In principle, this website can be visited without registering. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data directly being connected to you personally. If personal data is collected on our pages (such as name, address or email addresses), this is always done, where possible, on a voluntary basis. This data is not passed on to third parties without your express consent.
The following Privacy Policy contains information on your rights and those responsible for your processing your data, in addition to the purposes of processing, recipients, legal bases and storage periods. This Privacy Policy refers exclusively to our website www.rmb.ch. If you are taken to other pages via links on our pages, please find out how they deal with your data there.
Please note that the transfer of data on the internet (e.g. via email communication) may be liable to security flaws. Watertight protection of data from third-party access is not possible.
 

Responsible for the processing of personal data

RMB Group AG
Werftestrasse 3
6005 Lucerne
Switzerland
info@rmb.ch
+41 58 911 66 00

Data privacy officer:

Barbara Raimondi
+41 58 911 67 78
barbara.raimondi@rmb.ch
 

Processing personal data

Personal data is all information that refers to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing involves any handling of personal data, irrespective of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, safekeeping, amendment, destruction and use of personal data.

We process personal data in compliance with Swiss data protection law (Federal Act on Data Protection – FADP). If and insofar as the EU General Data Protection Regulation (GDPR) is applicable, we also process personal data on the following legal bases in conjunction with Article 6(1) EU GDPR:
a) Processing of personal data with the consent of the data subject.
b) Processing of personal data for the purposes of performing a contract with the data subject and carrying out corresponding steps prior to entering into a contract.
c) Processing of personal data to comply with a legal obligation to which we are subject under applicable EU law or under the applicable law of a country in which the GDPR applies in whole or in part.
d) Processing of personal data to protect the vital interests of the data subject or another natural person.
f) Processing of personal data to protect the legitimate interests of ourselves or third parties, unless the fundamental freedoms and rights and interests of the data subject override these. Legitimate interests include, in particular, our commercial interest in being able to provide our website, information security, enforcement of our own legal claims, and adherence to Swiss law.

We process personal data for the duration that is necessary for the relevant purpose(s). In the event of longer-term retention obligations based on legal and other obligations to which we are subject, we restrict processing accordingly.
 

Visiting the website

When you access our website, a cookie will automatically collect information of a general nature. Among other things, this information (server log files) includes the web browser used, your operating system and the name of our internet service provider. None of this information can be traced back to you personally.
This information is required from a technical standpoint in order to correctly deliver the content you request from websites and is mandatory when using the internet. Specifically, this information is used for the following purposes:

• To facilitate the establishment of a connection with the website
• To ensure the smooth use of our website
• Evaluation of the system’s security and stability
• Other administrative purposes

Our using your personal information is justified by our legitimate interest in collecting data as described above. We do not use your data to draw conclusions about you as an individual. The sole recipients of your data are the responsible body and, if applicable, data processors.
We might statistically evaluate anonymised information of this kind to optimise our internet presence and the underlying technology.
 

Cookies

Like many other websites, we use so-called cookies. Cookies are small text files transmitted from a web server to your hard drive. In doing so, we automatically collect certain information such as, for example, your IP address, browser used, operating system and internet connection.
Cookies cannot be used to execute applications or to transmit a virus onto your computer. Based on the information contained in the cookies, we can facilitate the navigation and correct display of our website.
Under no circumstances will we share the information collected with third parties or link to personal data without your permission.
You can, of course, visit our website without accepting cookies. Internet browsers are generally set to accepting cookies by default. In most cases, you can deactivate cookies in the settings of your browser. Please use your browser’s help feature to learn how to change these settings. Please note that certain features of this website might not work if you deactivate cookies.
 

SSL/TLS encryption

For security reasons and to protect the transfer of confidential content, such as queries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognise an encrypted connection from the fact that the browser URL switches from ‘http://’ to ‘https://’ and from the padlock symbol in your browser bar.

If SSL or TLS encryption is enabled, the data you send us cannot be read by third parties.

Data subject’s rights

Right of confirmation

Every data subject has the right to request confirmation from the website operator as to whether personal data concerning them is processed. If you wish to exercise this right of confirmation, you may consult our data privacy officer at any time.

Right of access

Every person who is the subject of the processing of personal data has the right to access information on the personal data stored about them and to obtain a copy of this information from the operator of this website; this right may be exercised at any time and free of charge. In addition, information may be provided about the following:

• The purposes of the processing
• The categories of the personal data processed
• The recipients to whom the personal data has been or will be disclosed
• Where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period
• The existence of a right to request that the controller rectify or erase personal data concerning them or restrict processing, and the right to object to such processing
• The existence of a right to lodge a complaint with a supervisory authority
• If the personal data is not collected from the data subject: all information available on the source of the data
• The data subject is also entitled to be informed as to whether personal data has been transmitted to a third country or to an international organisation. In that event, the data subject is also entitled to access information on the suitable guarantees associated with the transmission.

If you wish to exercise this right of access, you may consult our data privacy officer at any time.

Right to rectification

Every data subject affected by the processing of personal data has the right to request that incorrect personal data concerning them be rectified without undue delay. Taking into account the purposes of the processing, the data subject is also entitled to have incomplete personal data completed – including by means of providing a supplementary statement. If you wish to exercise this right to rectification, you may consult our data privacy officer at any time.

Right to erasure

Every data subject affected by the processing of personal data has the right to request that the controller of this website immediately erase of personal data concerning them, providing that one of the following grounds applies and processing is no longer necessary:

• The personal data was collected for purposes or processed in another way for which it is no longer required.
• The data subject withdraws consent on which the processing was based and there is no other legal basis for the processing
• The data subject objects to the processing for reasons arising from their specific situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the context of direct advertising and associated profiling
• The personal data has been unlawfully processed
• The personal data must be erased to comply with a legal obligation according to Union law or Member State law to which the controller is subject
• The personal data has been collected in relation to information society services aimed directly at a child

If one of the above grounds applies and you wish to initiate the erasure of personal data stored by the operator of this website, you may consult our data privacy officer at any time. This website’s data privacy officer shall ensure that the request for erasure is dealt with without undue delay.

Right to restriction of processing

Every data subject affected by the processing of personal data has the right to request that the controller of this website restrict processing where one of the following conditions is met:

• The accuracy of the personal data is disputed by the data subject; restriction for a period enabling the controller to verify the accuracy of the personal data
• The processing is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of its use instead
• The controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for establishing rights. The data subject has, for reasons arising from their specific situation, objected to processing, pending verification as to whether the legitimate interests of the controller override those of the data subject

If one of the above conditions is present, you can consult our data privacy officer at any time to request the that the operator of this website restrict the processing of personal data. This website’s data privacy officer shall have the processing restricted.
 

Right to data portability

Every data subject affected by the processing of personal data has the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format. The data subject is also entitled to have this personal data transmitted straight from one controller to another, where this is technically feasible and providing that this does not adversely affect the rights and freedoms of other persons.
To assert your right to data portability, you may consult the data privacy officer appointed by the operator of this website at any time.

Right to object

Every data subject affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.
In the event of objection, the operator of this website shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or processing serves the purpose of the establishment, exercise or defence of legal claims.
To exercise your right to object, you may consult the data privacy officer for this website directly.

Right to withdraw consent under data protection law

Every data subject affected by the processing of personal data has the right to withdraw consent given to the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you may consult our data privacy officer at any time.
 

Google Maps

This website uses the Google Maps service. This allows us to display interactive maps directly on the website and enable convenient use of the maps function. When you visit the website, Google is informed that you have accessed the corresponding sub-page of our website. This occurs irrespective of whether Google provides a user account with which you have logged in or if there is no user account. If you are logged into Google, your data is directly assigned to your account. If you do not wish this data to be assigned to your Google profile, you must log out before activating the button. Google saves your data as usage profiles and uses it for the purposes of advertising, market research and/or tailored design of our website. Such evaluation takes place in particular (including for users who are not logged in) to provide tailored advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google. More details on the purpose and scope of data collection and processing by Google and further information on your rights in this regard and setting options to protect your privacy can be found at: https://policies.google.com/privacy?hl=en-GB.
 

Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited. If the controller for this website is outside of the European Economic Area or Switzerland, data processing for the purposes of Google Analytics shall be performed by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as ‘Google’.
The statistics obtained allow us to improve our offering and make it more appealing to you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google account, you can deactivate cross-device analysis of your usage in the settings under ‘My data’, ‘Personal data’.
The IP address transmitted by your browser in the framework of Google Analytics will never be merged with other Google data. Please note that Google Analytics has been expanded on this website to guarantee anonymised recording of IP addresses. This means that IP addresses are processed in truncated form so that they cannot be linked to a specific person. If it is possible to assign the data collected about you to a person, this is ruled out immediately and the personal data is erased without delay. In exceptional cases the full IP address will be transmitted to a Google server in the USA and truncated there. Google has been commissioned by the owner of this website to use the information collected to evaluate your use of this website, to compile reports on website activities and to provide other services associated with the use of this website and of the internet to the website’s owner. In the exceptional cases where personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield (Data Privacy Framework Programme), www.privacyshield.gov/EU-US-Framework.
Google Analytics uses cookies. The information generated using the cookie on your use of this website is generally transferred to a Google server in the USA and stored there. You can prevent the placement of cookies by adjusting the relevant setting in your browser software. However, we would like to point out that this might result in your not being able to use certain features of this website as intended. In addition, you can prevent the transmission of the data reflecting your use of the website collected by the cookie (including your IP address) to Google and their processing of this data by downloading and installing the browser plugin from this link: Deactivate Google Analytics.
You can also prevent the use of Google Analytics. This means that what is known as an opt-out cookie is stored on your data carrier. This prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, then these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you still want to prevent this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be activated separately for each browser, computer or other device.
 

Instagram

Functions of the Instagram service are embedded in our website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to assign your visit to our pages to your user account. Please note that as operators of the web pages, we have no knowledge of the content of the data transferred or its use by Instagram. More information can be found in Instagram’s privacy notices: http://instagram.com/about/legal/privacy/
 

LinkedIn

As part of our online offering, we use the marketing services of the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
These services use cookies (text files that are stored on your computer). This allows us to analyse your use of the website. This enables us to do things like measure the success of our advertising and show users products in which they previously expressed an interest. Accordingly, data is collected such as information on the operating system, browser, previously visited website (referrer URL), website visited, offerings clicked and the date and time of your visit to our website. The information generated using the cookie on your use of this website is transferred in pseudonymised form to a LinkedIn server in the USA and stored there. LinkedIn therefore does not store the name or email address of the relevant user. Instead, the above data is only assigned to the individual for whom the cookie was created. This does not apply if the user has allowed LinkedIn to perform processing without pseudonymisation or has a LinkedIn account.
You may refuse to consent to the use of cookies by adjusting your browser settings accordingly. However, please note that you may then be unable to use all of the functions of this website. You can also object to the use of your data directly on LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
 

YouTube

Functions of the YouTube service are embedded in this website. YouTube is owned by Google Ireland Limited, a company founded and operated according to Irish law with headquarters in Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland. Your legal agreement with YouTube consists of terms and conditions that can be found at this link: www.youtube.com/static.
These terms and conditions constitute a legally binding agreement between you and YouTube with regard to your use of the services. Google’s privacy notices explain how YouTube handles and protects your personal data when you use the service.
If you have disabled the storage of cookies for the Google Ads program, you will not encounter such cookies when watching YouTube videos either. However, YouTube also places non-personal usage information in other cookies. If you would like to prevent that, you must block the storage of cookies in your browser.
More information on privacy on YouTube can be found in the operator’s Privacy Policy at: www.google.ch (Privacy).
 

WhatsApp

We use the WhatsApp service as a means of communicating with some of our customers. WhatsApp is a service operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc. headquartered at 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as ‘WhatsApp’. Some user data is processed on WhatsApp servers in the USA. However, thanks to certification according to the EU-US Privacy Shield, WhatsApp guarantees that EU data protection requirements are also adhered to when processing data in the USA. WhatsApp also provides more information on privacy.
When communicating via WhatsApp, the mobile phone number you provided on registration is processed by WhatsApp. Your IP address and date and time of registration are also stored.
 

Audio and video conferencing

We use audio and video conferencing services to communicate with our users and others. In particular, we may use such services to hold audio and video conferences, virtual meetings and training sessions. We only use services for which an appropriate level of data protection is guaranteed. In addition to this Privacy Policy, the terms and conditions of the services used, such as terms of use or privacy policies, also apply.

In particular, we use Microsoft Teams, a service from the American software manufacturer Microsoft Corp., Redmond, USA with its Swiss branch Microsoft Schweiz GmbH, The Circle, 8058 Zürich-Flughafen. Microsoft also grants rights to users in Switzerland in accordance with the EU GDPR. Additional information on the nature, scope and purpose of data processing can be found in the privacy guidelines and on Microsoft’s ‘Legal information and privacy’ page.
 

Job applications

The following contains information on how personal data is collected when a job application is submitted. We use the submitted personal data exclusively for the purposes of processing your job application documents for steps prior to entering into a contract based on a voluntary request. For the purposes of processing and giving feedback on decisions, we require personal details from you such as your surname, first name, place of residence, date of birth, email address and telephone number. Additional data is not collected. All personal data is processed in Switzerland. We use an applicant database known as BMD, a software tool from BMD Systemhaus Schweiz AG, Oststrasse 8, 8500 Frauenfeld, Switzerland.
If an application is not taken into consideration, the personal data is encrypted and erased from the system after ten days. In the event that an application is considered or an applicant is recruited, the application documents are stored in accordance with statutory retention obligations.
 

Contractual services

We process the data of our contractual partners and interested parties as well as other principals, customers, clients or contractual partners (uniformly referred to as ‘contractual partners’) in accordance with the statutory data protection provisions of the FADP and the EU GDPR in accordance with Article 6(1)(b) GDPR in order to provide you with our contractual or pre-contractual services. The data processed in this context, type, scope and purpose as well as the necessity of processing arise from the underlying contractual relationship. The data processed includes the master data of our contractual partners (e.g. names and addresses), contact data (e.g. email addresses and telephone numbers) as well as contract data (e.g. services used, contract contents, contract communication, names of contacts) and payment data. (In principle, we do not process special categories of personal data unless these are part of order or contract processing).
We process personal data that is necessary for the establishment and fulfilment of contractual services and indicate the necessity of passing it on unless this is clear to the contractual partner. Disclosure to external persons or companies only takes place if this is necessary in the context of a contract. When processing the personal data provided to us as part of an order, we act in accordance with the instructions of the principal and with statutory provisions.
Data shall be deleted when it is no longer required to fulfil contractual or legal due diligence obligations or process any warranty or comparable obligations; the necessity of storing the personal data is checked at irregular intervals. Otherwise, statutory retention obligations apply.
 

Retention and erasure of personal data

We process and store your personal data for as long as it is necessary to fulfil our contractual and legal obligations or for other purposes pursued by the processing, for instance for the duration of the entire business relationship (from initiation, processing to termination of a contract), as well as in accordance with the statutory retention and documentation obligations. It is possible for personal data to be retained for the period in which claims can be asserted against RMB Group AG and to the extent that we are otherwise legally obliged to do so or that this is required by legitimate commercial interests (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above purposes, in principle, it shall be erased or anonymised insofar as this is possible. For operating data (e.g. system reports, logs), shorter retention periods of twelve months or less usually apply.
 

Transmission of data to the USA

Tools from companies headquartered in the USA are among those built into our website. If these tools are active, your personal data may be transmitted to the relevant companies’ US servers. Please note that the USA is not a secure third country as defined by the Swiss Federal Act on Data Protection and EU data protection law. US companies are obliged to surrender personal data to security authorities without you as the data subject being able to legally contest this. It is therefore not possible to rule out the possibility that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data that is on US servers for monitoring purposes. We have no influence over these processing procedures.
 

Copyright

Copyright and all other rights to content, images, photos or other files on the website are the exclusive property of the operator of this website or the named rights holders. Written consent from the copyright holder must be obtained in advance for the reproduction of all files.
Anyone who commits a copyright infringement without the consent of the relevant copyright holder may be liable for prosecution. The copyright holder reserves the right to assert claims for damages.
 

Exclusion of liability

All information on our website is checked carefully. We make every effort to ensure that the information we provide is current, accurate and complete. However, the occurrence of errors cannot be ruled out completely, so we are unable to accept any liability for the completeness, accuracy and up-to-date nature of the information, including that of a journalistic or editorial nature. Liability claims relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect and incomplete information are fundamentally excluded.
The publisher may change or delete texts at its own discretion and without prior notice and is not obliged to update the contents of this website. The visitor uses or accesses this website at their own risk. The publisher, its customers or partners are not responsible for any damages, such as direct, indirect, incidental or consequential damages, alleged to have been caused by visiting this website, and therefore assume no liability for such damages.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be reached via external links from this website. The operators of the linked pages are exclusively responsible for the content thereof. The publisher therefore expressly distances itself from all third-party content that may be of significance under criminal or liability law or that violates common decency.
 

Changes

RMB Group AG may amend this Privacy Policy at any time without prior notice. The latest version published on our website is valid. If the Privacy Policy is part of an agreement with you, in the event that it is updated, we shall inform you of the change via email or in another suitable way.