Data protection is a matter of trust and your trust is important to us. We respect your privacy and personal sphere. The responsible and legally compliant handling of personal data is a key concern to cablex AG, Tannackerstrasse 7, 3073 Gümligen (hereinafter referred to as "cablex" or "we").
2 We may also be jointly responsible with other Swisscom Group companies for specific data processing, should they be involved in deciding on the form or purposes of the relevant data processing. Information on companies belonging to the Swisscom Group can be found in the latest applicable Swisscom AG business report.
2 Our data processing may affect the following categories of individuals in particular, insofar as we process personal data in this context:
1 "Personal data" is information that can be linked to a specific person. We process different categories of such personal data. You will find the most important categories as a guide below. However, in individual cases, we may also process additional personal data.
2 You can find out more about the origin of this data in No. 5 and the purposes for which we use said data in No. 6.
1 Personal details
2 Contact and identification data
3 Communications to cablex
4 Contractual data
1 If you use our website or other electronic services, we collect certain technical data, such as your IP address or a device ID. The technical data also includes the logs in which we record the use of our systems (log data). In some cases, we may also assign a unique identifier (an ID) to your end device (tablet, PC, smartphone, etc.), e.g. using cookies or similar technologies, so that we can recognise it again. You can find more details regarding this in our cookie information.
2 Technical data includes
3 Please also note our cookie information with regard to the processing of technical data.
1 We make photos, videos and sound recordings in which you may appear, e.g. when you attend an event or when you are in contact with our customer service. We also make video recordings on our premises for security and evidence purposes. The use of video surveillance systems is locally limited and indicated.
2 Image and sound recordings include, for instance:
1 You frequently disclose personal data to us yourself, e.g. when you send us data or communicate with us. In particular, you usually provide us with master, contractual and communication data yourself.
2 For instance, you supply us with your personal data in the following circumstances:
3 The provision of personal data is usually voluntary, i.e. you are usually not obliged to disclose personal data to us. However, we must collect and process the personal data that is necessary for the implementation of a contractual relationship and for the fulfilment of associated obligations or that is required by law, e.g. mandatory master and contract data. Otherwise we cannot conclude or continue the relevant contract.
1 We may also collect your personal data ourselves or automatically, e.g. when you use our services. This frequently involves technical data (e.g. the date and time at which you access our website or use applications).
2 We collect personal data regarding you independently in the following circumstances, for instance:
1 We may also obtain personal data from the Swisscom Group. You can find more details on this under No. 7. However, we may also obtain details regarding you from other third parties, e.g. from companies we work with, from people who communicate with us or from public sources.
2 We may obtain details about you from the following third parties, for instance:
1 We would like to stay in contact with you and address your specific concerns. We therefore process personal data for the purposes of communicating with you, for instance, to respond to enquiries and for customer care purposes. For this purpose we use in particular master data and, insofar as the communication relates to a contract, contractual data, too. We may also personalise the content and the delivery time of messages based on contractual and master data or technical data.
2 The purposes of communication include, in particular:
1 We would like to offer you the best possible service. We therefore process personal data in conjunction with the initiation, management and implementation of contractual relationships, e.g. for the purposes of providing a service. Contract implementation may also include any agreed personalisation of services, where applicable. For this purpose, we use master data, contractual data and communication data in particular.
2 The purpose of contract implementation generally includes everything that is required or appropriate to conclude, perform and, where applicable, enforce a contract.
3 This includes processing for the following purposes:
1 We wish to ensure your and our security and prevent abuses. We therefore also process personal data for security purposes, to ensure IT security and for evidence purposes. This may affect all personal data categories mentioned in No. 3, particularly also technical data. We may record, evaluate and store this data for the purposes mentioned.
2 The purposes of security include, for instance:
1 We would like to create the conditions for compliance with legal requirements. We therefore also process personal data in order to comply with legal obligations and to prevent and detect breaches. This includes, for instance, the receipt and processing of complaints and other reports, compliance with orders of a court or an authority, and measures for the detection and clarification of abuses. This may concern all personal data categories mentioned in No. 3.
2 Compliance with legal requirements includes, in particular:
3 In all cases, this may involve Swiss law, but also foreign regulations to which we are subject, as well as self-regulation, industry and other standards, our own corporate governance or official instructions.
1 We would like to be able to enforce our claims and defend ourselves against claims by others. We therefore also process personal data for the purposes of legal protection, e.g. to enforce claims in court, pre-court or out of court and before authorities in Switzerland and abroad or to defend ourselves against claims. Depending on the situation, we process different personal data, e.g. contact details and information about processes that have given rise to or could give rise to a dispute.
2 The purpose of legal protection includes, in particular:
1 Depending on the purpose of data processing, we process personal data on various legal bases. We may therefore process personal data, in particular, if the processing:
2 In particular, we have a legitimate interest in processing for the purposes described above in No. 3 and in the disclosure of data in accordance with No. 7 and the associated objectives. Legitimate interests include our own interests and those of third parties.
3 These legitimate interests include, for instance, the interest in
1 We may disclose personal data that we obtain from you or third-party sources to other Swisscom Group companies. Disclosure may serve the purposes of internal group administration or assisting the group companies concerned and their own processing purposes (No. 5), for instance, when we assist in the development and improvement of services. If necessary, the personal data obtained may also be compared and linked with existing personal data by the companies concerned, where applicable.
2 This may involve, for instance, the following disclosures of data:
3 You can find more information on companies belonging to the Swisscom Group in No. 2.
1 We may disclose your personal data to companies outside the Swisscom Group if we make use of their services. These service providers usually process personal data on our behalf as "contractual processors". Our contractual processors are obliged to process personal data exclusively according to our instructions and to take suitable data security measures. Through the selection of service providers and suitable contractual agreements, we ensure that data protection is ensured throughout the entire processing of your personal data.
2 This involves services in the following areas, for instance:
3 We may also pass on personal data to other third parties for their own purposes, e.g. if you have given us your consent or if we are legally obliged or entitled to pass it on. In these circumstances, the recipient of the data is themselves a data controller under data protection law.
4 This includes the following circumstances, for instance:
You can change or revoke your consent at any time.
1 Your data may also be processed abroad, in particular if we involve service providers and sales partners for the fulfilment of our services, for the provision and maintenance of our products, and for sales and marketing. In principle, it is feasible that your data may be processed worldwide. However, processing of such data shall take place in countries in the European Economic Area and the US in particular.
1 Under data protection law, certain types of personal data are deemed "particularly sensitive", such as details regarding health and biometric characteristics. Depending on the situation, the personal data categories mentioned in No. 3 may also include such particularly sensitive personal data. However, we usually only process particularly sensitive personal data if this is required to provide a service, you have disclosed this data to us of your own accord, or you have consented to the processing. We may also process particularly sensitive personal data if this is required for legal protection or compliance with Swiss or overseas legal provisions, the relevant data appears to have been made public by the subject, or applicable law otherwise permits its processing.
2 We may process particularly sensitive personal data in the following circumstances, for instance:
1 To protect your data against unauthorised or unlawful processing and secure it against loss, unintentional modification, unwanted disclosure or unauthorised access, we shall take technical and organisational measures, such as
1 We use and store your data only for as long as is necessary or technically required to achieve the purposes, to comply with legal retention periods and our legitimate interests regarding documentation. It will then be erased or anonymised.
2 The following examples are included:
1 You have the right to obtain information about your personal data processed by us in writing and free of charge at any time. You may send us your request for information in writing, enclosing a copy of your identity card or passport, to our postal address.
2 In addition, you have the right to request the rectification of incorrect personal data. You also have the right to have your personal data erased, unless we are required or entitled to keep some of your personal data under applicable laws and regulations.
1 Depending on purpose, the use of your data has the following legal bases: Necessity for the conclusion or implementation of a contract, for the fulfilment of legal obligations or on the basis of a legitimate interest. We have a legitimate interest in particular in the use of the relevant data types for the stated purposes. This includes the provision of third-party services to you, the development and improvement of our products, the submission of offers and traffic flow analysis based on anonymised data. We also have a legitimate interest in passing on the data to the stated recipients in each case. If your rights are violated, you may either assert them by taking legal action at a competent court or submit a complaint to the competent data protection authority.
If you have any queries or concerns, you can contact us as follows:
1 We reserve the right to amend this Policy at any time. The version published on our website shall apply.
Last updated: August 2023.