Privacy Policy

1oc AG Privacy Policy

With this Privacy Policy, 1oc AG (hereafter "1oc") informs how personal data is obtained and processed. This Privacy Policy is not exhaustive, as further declarations by 1oc may regulate the data protection of specific circumstances (e.g. conditions of participation).

1. Scope

Personal data refers to all information relating to an identified or identifiable natural person. Processing means any handling of personal data, irrespective of the means and procedures used, in particular the collection, storage, use, revision, disclosure, archiving, deletion or destruction of data.

When processing personal data, 1oc is guided by the provisions of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Data Protection Act (DPA) and any other data protection provisions, insofar as they are applicable to the data processing referred to in this Policy.

2. Controller and contact

The person responsible for the data processing described here is 1oc AG, Oberrain 2, 6045 Meggen, Switzerland, connect@1oc.ch. The data subject may contact the controller using these contact details for any data protection concerns.

3. Origin and processing of personal data

1oc primarily processes personal data that it receives in the context of client relationships as well as contractual relationships with business partners from these or other persons involved. In addition, 1oc processes personal data that it collects from users in the course of operating 1oc's website. If personal data of other persons (e.g. family members, work colleagues or employees) is transferred to 1oc by the data subject, it must be ensured that the personal data provided is accurate and that these persons have been made aware of this Privacy Policy.

In addition to the data that is provided to 1oc by the data subject, 1oc also processes data that it receives from authorities or other third parties, publicly accessible data or data that it becomes aware of as a result of the use of a service. The categories of personal data that 1oc may obtain from third parties include, information from public registers, information in connection with administrative or judicial proceedings, information in connection with professional activities or functions of the data subject, information about the data subject from correspondence and meetings with her/him and/or with third parties, information about the data subject disclosed to 1oc by persons in the data subject's environment (e.g. family, accountant, attorney), information for compliance with legal requirements such as anti-money laundering and terrorist financing regulation or export restrictions, information from banks, insurance companies and other contracting partners of 1oc for the use or provision of services for the data subject and third parties, information in the media and internet and data in connection with the use of 1oc's website.

4. Purposes of data processing

1oc always processes personal data for a specific purpose. Primarily, this is the conclusion and fulfillment of contracts, in particular in the context of providing services to clients and purchasing products and services from suppliers, as well as in order to comply with 1oc's legal obligations. In addition, 1oc also processes personal data for the following purposes, which are in 1ocs legitimate interest:

Offering and further developing products, services and the website;
Communication with clients, business partners and third parties;
Client care and marketing (unless the use of data from data subject for the specific purpose has been explicitly objected to);
Assertion of legal claims and defense in the context of legal disputes and official proceedings;
Ensuring the 1oc's business operation, in particular of the IT and the website;
Compliance with applicable legal and professional regulations and contractual agreements;
Corporate transactions (merger, acquisition and sale of companies or transfer of assets).

If the data subject gives consent for the processing of his/her personal data for specific purposes (e.g. receiving newsletters), 1oc will process the personal data only within the scope of and based on this consent. The given consent can be revoked at any time.

5. Data transfer to third parties and data transfer abroad

The personal data processed by 1oc will be transferred to third parties, if necessary or useful from 1oc's point of view, for the provision of the services or fulfillment of other purposes defined in this Privacy Policy. These recipients of personal data may fall into the following categories:

Clients and their affiliates;
Suppliers, their subcontractors and other external service providers (e.g. banks, fund administrators, insurance companies, accounting) and order processors (e.g. IT providers);
Domestic and foreign authorities, official agencies and courts, conciliation boards and arbitration tribunals;
Parties or interested parties to corporate transactions;
Other parties to potential or actual legal proceedings.

The aforementioned recipients of personal data may be located in Switzerland, but also abroad. The data subject must accordingly expect his/her personal data to be processed in Switzerland but also transmitted to any other country in the world where service providers of 1oc are located. If a recipient is located in a country without adequate data protection, 1oc will contractually bind the recipient (e.g. by means of recognized standard contractual clauses) or will rely on an exemption provision, such as consent, the execution of the contract or an overriding public interest.

6. Data security

1oc takes appropriate technical and organizational security measures, to protect personal data of the data subject from unauthorized access and misuse.

7. Cookies and tracking

1oc uses various techniques on the website that make it possible to recognize data subjects while they are using the website and possibly to track them over several visits.

1oc generally uses "cookies" and similar techniques on the website that allow identification of the data subject's browser or device. A cookie is a small text file that is sent to the computer and automatically stored by the web browser on the computer or mobile device when the website is visited. When the data subject visits the website again, the data subject can be recognized, even if the identity of the data subject is not known. In addition to cookies that are only used during a session and deleted after a visit to the website ("session cookies"), cookies may also be used to store user configurations and other information for a certain period of time (e.g. two years) ("permanent cookies").

1oc uses Google Analytics or similar services on the website. These are third-party services that may be based in any country in the world (in the case of Google Analytics, Google Ireland Ltd (based in Ireland), Google Ireland relies on Google LLC (based in the United States) as a sub-processor (both "Google"), www.google.com) and which enable 1oc to measure and analyze (on an anonymous basis) the use of the website. Permanent cookies set by the service provider are used for this purpose. Although 1oc can assume that the information passed on to Google is not personal data for Google, it is possible that Google can use the data collected to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these individuals for its own purposes. If the data subject has registered with the service provider, the service provider will also know his or her identity. In this case, the processing of personal data by the service provider will be in accordance with the service provider's privacy policy. The service provider only provides 1oc with data about the use of the respective website (but no personal information about the data subject).

1oc uses Wix and Hubspot (or similar services) to store email addresses and personal information that is provided by the data subject when accessing certain pages of the website, or when downloading materials from the website. These are third-party services that may be based in any country in the world (in the case of Wix.com Ltd. (based in Israel) and Hubspot Inc. (based in the United States)). 1oc ensures that these data processors comply with the applicable data protection provisions and only process the personal data of the data subjects to the extent authorised.

Whenever the data subject accesses a server (e.g. when calling up a website or because an e-mail contains a visible or invisible image), the visits can therefore be "tracked". By using 1oc's website and agreeing to receive newsletters and other marketing emails, the data subject consents to 1oc using such techniques. If the data subject does not agree to this, the browser or the e-mail program must be configured accordingly.

The data subject may also set his/her browser to block or override certain types of cookies or alternative technologies, or to delete existing cookies. The data subject can also add software to the browser that blocks third-party tracking.

8. Obligation to Provide Personal Data To Us

In the context of a business relationship with 1oc, the data subject must provide 1oc with all personal data required for the conclusion and performance of a business relationship and the fulfilment of contractual obligations. Without this information, 1oc will generally not be able to conclude or perform a contract. Furthermore, the website can only be used if certain information to enable data traffic (e.g. the IP address) is disclosed.

9. Retention Periods for your Personal Data

1oc processes and stores personal data for as long as it is necessary for the fulfilment of the contractual obligation and compliance with legal obligations or other purposes pursued with the processing, i.e. for the duration of the entire business relationship as well as beyond that in accordance with the statutory retention and documentation obligations. Personal data may be retained for the period during which claims may be asserted against 1oc, if otherwise required by law or if legitimate business interests require further retention (e.g. for evidence and documentation purposes). As soon as personal data is no longer required for the aforementioned purposes, it will be deleted or, as far as possible, anonymized.

10. Rights of the data subject

This Privacy Policy also serves to provide the data subject with the information required to enable him/her to assert the following rights to which he/she is entitled under the FADP:

Right to information on existing personal data;
Right to rectification of personal data;
Right to delete personal data;
Right to restrict the processing of personal data;
Right to raise an objection to the processing of personal data;
Right to revoke consent given in the future;
Right to receive personal data for the purpose of transfer.

The data subject also has the right to enforce his/her claims in court or to file a complaint with the competent data protection authority (in Switzerland: the Federal Data Protection and Information Commissioner). 1oc draws attention to the fact that 1oc reserves the right to enforce the restrictions provided for by law, such as legal obligations to retain or process data or the existence of an overriding interest in data processing. The assertion of rights due to the data subject may result in 1oc no longer being able to provide agreed services and may result in termination of the contract.

11. Changes

1oc reserves the right to change this Privacy Policy at any time without prior notice. The version published on 1oc's website is the current valid version.