Legal notice - This German version of the privacy policy applies to all data relationships, including those in other languages. The English version of the privacy policy is provided for information purposes only. In the event of any objection, the German version of the privacy policy takes precedence.
1. General information
Thank you for your interest in our services. With this privacy policy, we inform you how we process personal data (i.e. information relating to an identified or identifiable person; hereinafter “personal data” or “data”) at REWISCO Holding AG, REWISCO AG and REWISCO Treuhand AG (hereinafter “REWISCO”, “us” or “we”).
2. Responsible body and contact
Responsible for data processing is:
REWISCO AG
Rigistrasse 18c
6331 Hünenberg
Contact for data protection issues:
REWISCO AG
Rigistrasse 18c
6331 Hünenberg
Tel: 044 364 16 70
Mail: contact(@)rewisco.com
3. Overview of the purposes for which we process personal data
We process personal data in the following categories of processing in particular. A detailed description of the personal data processed and further information can be found in section 5 of this privacy policy:
• If you are our customer and we provide or have provided services for you
• If we have not received your personal data directly from you when providing the service, but from our customer
• When you visit our website
• If you take part in one of our events
• When we communicate with you or inform you about our services and advertise
• If you have any other contractual relationship with us, e.g. as a supplier, service provider or consultant
• When you apply to us
• If we are obliged to do so for legal or regulatory reasons
• When we exercise our due diligence or other legitimate interests, e.g. to avoid conflicts of interest, prevent money laundering or other risks, ensure data accuracy, check creditworthiness, ensure security or enforce our rights
4. Which categories of personal data we collect
The personal data we process depends on your relationship with us and the purpose for which we process it (see section 3). In addition to your contact details, we also process other information about you or about people who have a relationship with you. Under certain circumstances, this information may also be particularly sensitive personal data.
We collect the following categories of personal data, depending on the purpose for which we process it:
• Contact information (e.g. surname, first name, address, telephone number, e-mail, incl. marginal data for communication (e.g. IP address, duration of communication, communication channel) and any recordings as well as image and video recordings)
• Customer information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, (social insurance) AHV number)
• Risk management data (e.g. credit rating information, commercial register data, WorldCheck information, data from the REWISCO network)
• Financial information (e.g. data on bank details)
• Mandate data, depending on the mandate (e.g. tax information, business data (articles of association, minutes, projects, contracts), employee data (e.g. salary, social insurance), accounting data, beneficial owners, ownership structure)
• Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
• Application data (e.g. curriculum vitae, references)
• Marketing information (e.g. event registration)
More detailed information can be found in the description of the respective categories of processing (see section 5).
As a rule, we collect this data directly from you. We may also receive information from our customers about persons who are not directly related to us but to the customer (e.g. data about the customer's employees). We collect certain data from public or official sources, such as the commercial or debt collection register (see section 5.2). We may also collect data from companies in the REWISCO network and third parties, such as credit agencies or providers of risk assessment information, and share data with them.
5. The personal data that we process
5.1 When you make use of our services
We collect the personal data from our customers that we need to provide our contractually agreed services, to protect our interests or on the basis of a legal or other binding regulation. When we fulfill a contract with you, we collect other personal data depending on the service involved and whether you are a natural or legal person.
The personal data of our customers includes the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information)
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, (social insurance) AHV number, family circumstances, etc.).
• Risk management data (e.g. creditworthiness information, commercial register data, sanctions lists, specialized databases, data from the REWISCO network or the Internet)
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the mandate, e.g. tax information, business data (articles of association, minutes, projects), employee data (e.g. salary, social insurance), accounting data, etc.
• Particularly sensitive personal data: This personal data may also include particularly sensitive personal data, such as data relating to health, religious beliefs or social assistance measures, especially if we provide payroll processing or accounting services
We process this personal data for the purposes described on the basis of the following legal bases:
• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, including contract initiation and any enforcement (e.g. consulting, fiduciary services)
• Fulfillment of a legal obligation (e.g. if we perform our duties as auditors or are obliged to disclose information)
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, ensure security, manage risk, enforce our rights, defend ourselves against claims or to check for potential conflicts of interest)
• Consent (e.g. to send you marketing information)
5.2 If we do not receive information directly from our customers
When we provide services for our customers, we may also process personal data that we have not collected directly from the data subjects or personal data of third parties. These third parties are usually employees, contact persons, family members or persons who have a relationship with the customers or the data subjects for other reasons. We require this personal data in order to fulfill contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose are informed by our customers that we are processing their data. Our customers can refer to this privacy policy for this purpose.
The personal data of persons who have a relationship with our customers includes the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail, other contact information, marketing data)
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, AHV number, family circumstances, etc.).
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the mandate, e.g. tax information, business data (articles of association, minutes, projects), employee data (e.g. salary, social insurance), accounting data
• Particularly sensitive personal data: This personal data may also include particularly sensitive personal data, such as data relating to health, religious beliefs or social assistance measures, especially if we provide payroll processing or accounting services
We process this personal data for the purposes described on the basis of the following legal bases:
• Conclusion or performance of a contract with or for the benefit of the data subject (e.g. when we fulfill our contractual obligations)
• Fulfillment of a legal obligation (e.g. if we perform our duties as auditors or are obliged to disclose information)
• Safeguarding legitimate interests, in particular our interest in providing an optimal service to our customers
5.3 When you visit our website or receive a newsletter
You can visit our website without having to provide any personal data. However, when you visit our website, we automatically collect personal data that we need to operate our website and ensure its security. We also collect data in order to analyze user behavior on our website and use this information for communication purposes and to improve our products (see also section 6 ).
This includes the following information in particular:
• Technical information automatically transmitted to us or our service providers, information on user behavior or website settings (e.g. IP address, UDI, device type, browser, number of clicks on the page, opening the newsletter, clicking on links, etc. see section 6)
We process this personal data for the purposes described on the basis of the following legal bases:
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services)
• Consent (e.g. to the use of cookies)
5.4 If you take part in a REWISCO event
If you participate in an event organized by us, we collect personal data in order to organize and carry out the event and, if necessary, to send you additional information afterwards. We also use your information to inform you about other events. You may be photographed or filmed by us at these events and we may publish this image material internally or externally.
This includes the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, employer company, eating habits)
• Pictures or videos
• Payment information (e.g. bank details)
We process this personal data for the purposes described on the basis of the following legal bases:
• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (enabling participation in the event)
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organization)
• Consent (e.g. to send you marketing information or to create image material)
5.5 When we communicate with you or you visit us
When you contact us (e.g. by telephone, e-mail, chat, etc.) or we contact you, we process the personal data required for this. We also process this personal data when you visit our offices. In this case, you may have to leave your contact details before your visit or at reception. We store this data for a certain period of time in order to protect our infrastructure and our information.
We process the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Edge data for communication (e.g. IP address, duration of communication, communication channel)
• Recordings of conversations, e.g. during video conferences
• Personal information (e.g. profession, function, title, employer company)
• Time and reason for the visit
We process this personal data for the purposes described on the basis of the following legal bases:
• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (provision of a service)
• Safeguarding legitimate interests (e.g. security, traceability, processing and administration of customer relationships)
5.6 When you apply to REWISCO
You can submit your application for a position with us by post or via the e-mail address provided on our website. The application documents and all personal data disclosed to us will be treated confidentially, will not be disclosed to third parties and will only be processed for the purpose of processing your application for employment with us. Without your consent to the contrary, your application dossier will either be returned to you or deleted/destroyed after the application process has been completed, unless it is subject to a statutory retention obligation.
We process the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, employer company)
• Application documents (e.g. letter of motivation, certificates, diplomas, curriculum vitae)
• Assessment information (e.g. assessment of personnel consultants, reference information, assessments)
We process this personal data for the purposes described on the basis of the following legal bases:
• Safeguarding legitimate interests (e.g. hiring new employees)
• The fulfillment of the contract with you
• Consent
5.7 If you provide a contractual service in any other capacity (e.g. suppliers, service providers, other contractual partners)
When we enter into a contract with you to provide a service for us, we process personal data about you or your employees. We need this data in order to communicate with you and make use of your services. We may also process this personal data to check whether there could be a conflict of interest in connection with our activities as auditors and to ensure that we do not enter into any unwanted risks, e.g. with regard to money laundering or sanctions.
We process the following information in particular:
• Contact information (e.g. surname, first name, address, telephone number, e-mail)
• Personal information (e.g. profession, function, title, employer company)
• Financial information (e.g. data on bank details)
We process this personal data for the purposes described on the basis of the following legal bases:
• Conclusion or execution of a contract with the data subject or in favor of the data subject, including contract initiation and possible enforcement
• Fulfillment of a legal obligation (e.g. in the context of data processing)
• Protection of legitimate interests (e.g. avoidance of conflicts of interest, protection of the company, enforcement of legal claims).
6. Tracking technologies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.
Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again. These cookies are automatically deleted after a defined period of time.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
These cookies enable us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period of time.
The data processed by cookies is required for the purposes mentioned.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
6.1 Web analysis and tracking technologies
We use the following web analysis tools and re-targeting technologies from Google Analytics to obtain information about the use of our website, to improve our Internet offering and to be able to address you with advertising on third-party websites or on social media.
These tools are provided by third-party providers. As a rule, the information collected for this purpose about the use of a website is transmitted to the server of the third-party provider through the use of cookies or similar technologies. Depending on the third-party provider, these servers may be located abroad.
The data is normally transmitted by shortening the IP addresses, which prevents the identification of individual end devices. This information is only transmitted by third-party providers on the basis of legal regulations or as part of order data processing.
6.2 Google Analytics
We use Google Analytics on our websites, the web analysis service of Google LLC, Mountain View, California, USA, responsible for Europe is Google Limited Ireland (“Google”). To deactivate Google Analytics, Google provides at https://tools.google.com/dlpage/gaoptout?hl=de ein Browser-Plug-In zur Verfügung.
The data is normally transmitted by shortening the IP addresses, which prevents the identification of individual end devices. This information is only transmitted by third-party providers on the basis of legal regulations or as part of order data processing.
These enable Google to analyze the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transmitted to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure an anonymized collection of IP addresses (so-called IP masking).
If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may associate your IP address with other Google data. For data transfers to the USA, Google has undertaken to sign and comply with the EU standard contractual clauses.
6.3 Social Media Plugins
Social media plugins (“plugins”) from third-party providers are used on our website. The plugins can be recognized by the logo of the respective social network. We offer you the opportunity to interact with the social networks and other users via the plugins. We use the following plugins on our website: Facebook, X (formerly Twitter), LinkedIn, YouTube.
When you visit our website, your browser establishes a direct connection to the third-party provider's servers. The content of the plugin (e.g. YouTube videos) is transmitted directly to your browser by the respective third-party provider and integrated into the page.
The forwarding of data for the display of content (e.g. publications on X (vormals Twitter)) erfolgt unabhängig davon, ob Sie ein Konto bei Drittanbieter besitzen und dort eingeloggt sind.
If you are logged in with the third-party provider, your data collected by us will also be directly assigned to your existing account with the third-party provider.
If you activate the plugins, the information will also be published on the social network and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by the third-party providers as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of the third-party providers.
The third-party provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is also carried out in particular for users who are not logged in to display needs-based advertising and to inform other users of the social network about your activities on our website. If you wish to prevent the third-party providers from assigning the data collected via our website to your personal profile in the respective social network, you must log out of the respective social network before visiting our website. You can also prevent the plugins from loading with specialized add-ons for your browser, such as “Ghostery” (https://www.ghostery.com/ ) oder «NoScript» (http://noscript.net/ ) komplett verhindern.
7. To whom we may disclose data
We only pass on your data to third parties if this is necessary for the provision of our services, if these third parties provide a service for us, if we are legally or officially obliged to do so or if we have an overriding interest in passing on the personal data. We will also pass on personal data to third parties if you have given your consent or requested us to do so.
The following categories of recipients may receive personal data from us:
• Other REWISCO companies within the REWISCO network, subsidiaries or sister companies
• Partners in our networks (e.g. IECnet)
• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants, lawyers, insurance companies, credit agencies)
• Third parties within the scope of our legal or contractual obligations, authorities, state institutions, courts
We conclude contracts with service providers who process personal data on our behalf, obliging them to guarantee data protection. The majority of our service providers are located in Switzerland or in the EU/EEA.
Certain personal data may also be transferred to the USA (e.g. Google Analytics data) or, in exceptional cases, to other countries worldwide. If it is necessary to transfer data to other countries that do not have an adequate level of data protection, this is done on the basis of the EU standard contractual clauses (e.g. in the case of Google) or other suitable instruments.
8. How long we store the data
We store personal data for as long as is necessary to achieve the purpose for which we collected it. If there are legal or regulatory obligations or overriding interests in longer storage, we store the personal data for a correspondingly longer period. This period is usually at least ten years, e.g. to comply with archiving obligations under tax law and accounting regulations or to ensure the enforcement of claims. Web analysis data is only stored for a short period of time. After the retention period has expired, the personal data is deleted or anonymized.
9. Data security
We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization and controls.
10. Obligation to provide personal data
As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfillment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data). Without this data, we will generally not be able to conclude or execute a contract with you (or the entity or person you represent). The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.
11. Your rights
You have the following rights in connection with our processing of personal data:
• Right to information about the personal data stored about you, the purpose of processing, the origin, and, if applicable, the recipients or categories of recipients to whom the personal data is disclosed.
• Right to rectification if your data is incorrect or incomplete.
• Right to restriction of the processing of your personal data.
• Right to request the deletion of processed personal data.
• Right to data portability: The right to receive certain personal data for transfer to another entity (so-called data portability).
• Right to object to data processing or to withdraw consent for the processing of personal data at any time without providing reasons.
• Right to lodge a complaint with the competent supervisory authority, if legally provided.
To exercise these rights, please contact the address provided under section 2.
The exercise of such rights generally requires that you clearly verify your identity (e.g., by providing a copy of an identification document) if your identity is not otherwise evident or verifiable.
Please note, however, that we reserve the right to enforce legally prescribed restrictions, for example, if we are required to retain or process certain data, have an overriding interest in doing so (where legally permissible), or need the data to assert legal claims.
If any costs arise for you, we will inform you in advance.
Every affected person also has the right to enforce their claims through legal action or to file a complaint with the competent data protection authority.
12. Changes to the Privacy Policy
We expressly reserve the right to amend this privacy policy at any time. The current version published on our website shall apply.