Data protection

1. General

We thank you very much for your interest in our services. This privacy policy informs you how we process personal data (i.e. information relating to an identified or identifiable person; hereinafter "personal data" or "data") at AMiGAS Sandals.

2. Responsible body and contact

Responsible for data processing is:
AMiGAS Sandals, Manuela Murschetz, Langgrütstrasse 139, 8047 Zurich

Contact for data protection questions: Manuela Murschetz, Langgrütstrasse 139, 8047 Zurich

Phone +41 76 481 69 67

Mail: info@amigas-sandals.ch

3. Overview of the purposes for which we process personal data

We process personal data in particular in the following categories of processing. A detailed description of the personal data processed and further information can be found under section 5 of this data protection declaration:
• If you are our customer and we provide or have provided services to you
• If we did not receive your personal data directly from you when providing the service, but from our customer.
• When you visit our website .
• If you attend one of our events.
• When we communicate with you or inform you about our services and advertise.
• If you have any other contractual relationship with us, e.g. as a supplier, service provider or consultant.
• When you apply to us.
• If we are required to do so for legal or regulatory reasons.
• When we exercise our due diligence obligations or other legitimate interests, e.g. to avoid conflicts of interest, to prevent money laundering or other risks, to ensure data accuracy, to check creditworthiness, to ensure security or to enforce our rights.

4. What categories of personal data we collect

Which personal data we process depends on your relationship with us and the purpose for which we process it (see section 3). In addition to your contact details, we also process other information about you or about people who are in a relationship with you. This information may also be particularly sensitive personal data.

We collect the following categories of personal data, depending on the purpose for which we process it:
• Contact information (e.g. name, first name, address, telephone number, email, including peripheral data and any records and image and video recordings)
• Customer information (e.g. date of birth, nationality, marital status, profession, title, job title, passport / ID number, AHV number)
• Risk management data (e.g. credit information, commercial register data, WorldCheck information
• Financial information (e.g. bank details)
• Mandate data, depending on the order (e.g. tax information, business data (statutes, minutes, projects, contracts), employee data (e.g. wages, social insurance), accounting data, beneficial owners, ownership structures
• Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
• Application data (e.g. CV, employment references)
• Marketing information (e.g. newsletter registration)

More detailed information can be found in the description of the respective categories of processing (see section 5).
We usually collect this data directly from you. It may also happen that we receive information from our customers about people who are not directly related to us, but who are related to the customer (e.g. data about the customer's employees). We collect certain data from public or official sources, such as the commercial or debt collection register (see section 5.2). We may also collect data from third parties, such as credit agencies or providers of information for risk assessment, and share data with them.

5. The personal data we process

5.1. If you use our services

We collect the personal data from our customers that we need to provide our contractually agreed services, to protect our interests or due to a legal or other binding regulation. When we fulfill a contract with you, we collect other personal data depending on the service involved and whether you are a natural or legal person.

The personal data of our customers includes in particular the following information:
• Contact information (e.g. name, first name, address, telephone number, email, other contact information)
• Personal information (e.g. date of birth, nationality, marital status, occupation, title, job title, passport / ID number, AHV number, family circumstances, etc.)
• Risk management data (e.g. credit information, commercial register data, sanctions lists, specialised databases, data or the Internet)
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the order, e.g. tax information, business data (statutes, minutes, projects), employee data (e.g. wages, social insurance), accounting data, etc.
• Personal data requiring particular protection: This personal data may also include personal data requiring particular protection, such as data concerning health, religious views or social assistance measures, particularly if we provide services in the area of ​​payroll processing or accounting.

We process this personal data for the purposes described based on the following legal bases:
• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (e.g. consulting, trust)

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, ensure security, manage risks, enforce our rights, defend ourselves against claims or to examine possible conflicts of interest)
• Consent (e.g. to send you marketing information).

5.2 If we do not receive information directly from our customers

When we provide services to our customers, we may also process personal data that we have not collected directly from the data subjects or personal data of third parties. These third parties are usually employees, contact persons, family members or people who have a relationship with the customers or the data subjects for other reasons. We need this personal data to fulfill contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose are informed by our customers that we process their data. Our customers can refer to this privacy policy for this purpose.

The personal data of the people who have a relationship with our customers includes in particular the following information:
• Contact information (e.g. name, first name, address, telephone number, email, other contact information, marketing data)
• Personal information (e.g. date of birth, nationality, marital status, occupation, title, job title, passport / ID number, AHV number, family circumstances, etc.)
• Financial information (e.g. data on bank details, investments or shareholdings)
• Mandate data, depending on the order, e.g. tax information, business data (statutes, minutes, projects), employee data (e.g. wages, social insurance), accounting data
• Personal data requiring particular protection: This personal data may also include personal data requiring particular protection, such as data concerning health, religious views or social assistance measures, particularly if we provide services in the area of ​​payroll processing or accounting.

We process this personal data for the purposes described based on the following legal bases:
• Conclusion or performance of a contract with the data subject or for the benefit of the data subject (e.g. when we perform our contractual obligations)

• Safeguarding legitimate interests, in particular our interest in providing optimal service to our customers.

5.3 When you visit our websites or receive a newsletter

You can visit our websites without having to provide personal data. However, when you visit our website, we may collect personal data that we need to operate our website and ensure security. We also collect data to analyze user behavior on our website or when receiving the newsletter and to use this information for communication and improving our products (see also Section 6, How we use cookies and the Cookie Policy).

We also collect the necessary information when you register on the website to receive the newsletter or register for an event, take part in a survey or fill out the contact form. For special applications or logins, special information on data protection is available where necessary.

This includes in particular the following information:
• Contact information (e.g. name, first name, address, telephone number, email)
• Personal information (e.g. profession, function, title, employer company)
• Other information you send to us via the website
• Marketing information (e.g. newsletter dispatch)
• Technical information automatically transmitted to us or our service providers, information on user behavior or website settings (e.g. IP address, UDI, device type, browser, number of clicks on the page, opening of the newsletter, clicking on links, etc. see section 6).

We process this personal data for the purposes described based on the following legal bases:
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services)
• Consent (e.g. to the use of cookies or the newsletter).

5.4. If you attend an AMiGAS Sandals event

If you attend an event organized by us, we collect personal data in order to organize and hold the event and, if necessary, to send you additional information afterwards. We also use your information to inform you about other events. We may photograph or film you at these events and publish these images internally or externally.

This includes in particular the following information:
• Contact information (e.g. name, first name, address, telephone number, email)
• Personal information (e.g. profession, function, title, employer company, eating habits)
• Pictures or videos
• Payment information (e.g. bank details).

We process this personal data for the purposes described based on the following legal bases:
• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (enabling participation in the event)
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organization)
• Consent (e.g. to send you marketing information or create images).

5.5 When we communicate with you or you visit us

If you contact us (e.g. by phone, email or chat) or we contact you, we may process the personal data necessary for this purpose. We may also process this personal data if you visit our office. In this case, you may be required to leave your contact details before your visit or at reception. We will keep these for a certain period of time in order to protect our infrastructure and our information.

In particular, we process the following information:
• Contact information (e.g. name, first name, address, telephone number, email)
• Communication data (e.g. IP address, duration of communication, communication channel)
• Recordings of conversations, e.g. during video conferences
• Personal information (e.g. profession, function, title, employer company)
• Time and reason for the visit.

We process this personal data for the purposes described based on the following legal bases:
• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (provision of a service)
• Protection of legitimate interests (e.g. security, traceability and processing and administration of customer relationships).

5.6. If you apply to AMiGAS Sandals online

From people who apply online for one of our advertised positions or send us a spontaneous application, we collect all information that is voluntarily provided by the applicant.

5.7. If you provide a contractual service in another capacity (e.g. suppliers, service providers, other contractual partners)

If we enter into a contract with you so that you can provide a service for us, we will process personal data from you or your employees. We need this to communicate with you and to use your services.

In particular, we process the following information:
• Contact information (e.g. name, first name, address, telephone number, email).
• Personal information (e.g. profession, function, title, employer company).
• Financial information (e.g. bank details).

We process this personal data for the purposes described based on the following legal bases:
• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement
• Protection of legitimate interests (e.g. avoiding conflicts of interest, protecting the company, enforcing legal claims).

6. How we use tracking technologies

Cookies, pixels, tags and other tracking technologies may be used on the AMiGAS Sandals website and in the newsletter (hereinafter referred to as "cookies"). Cookies are small files that are stored on your computer or mobile device when you visit our website or receive the newsletter. We use cookies to enable various functions and to offer you an optimal surfing experience, for example by saving your settings.

6.1. Web analysis, newsletter analysis and tracking technologies

In order to obtain information about the use of our website and to improve our internet offering, we may use the following web analysis tools and retargeting technologies: Google Analytics, Facebook Pixel, Squarespace Analytics.

These tools are provided by third parties. The information collected for this purpose on the use of a website is usually transmitted to the third-party provider's server through the use of cookies or similar technologies. Depending on the third-party provider, these servers are located abroad.

The data is normally transmitted with the IP addresses shortened, which prevents the identification of individual end devices. This information is only transmitted by third parties based on legal regulations or as part of order data processing.

6.2. Google Analytics

We use Google Analytics, the web analysis service of Google LLC, Mountain View, California, USA, on our websites. Google Limited Ireland ("Google") is responsible for Europe. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address, which is however anonymized using the method so that it can no longer be assigned to a connection) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law or where third parties process the data on Google's behalf. Google may associate your IP address with other Google data. For data transfers to the USA, Google has committed to signing and complying with the EU standard contractual clauses. If we evaluate your visit to our website based on your consent, you can revoke your consent here for the future if you no longer wish this.

6.3. Google Maps

On our website we use Google Maps (API) from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Limited Ireland, "Google" is responsible for Europe). Google Maps is a web service for displaying interactive (land) maps in order to visually display geographical information. Using this service will show you our location and make it easier to get there. As soon as you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transferred to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

For data transfers to the USA, Google has committed to signing and complying with the EU standard contractual clauses. If you do not agree to the future transmission of your data to Google as part of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot then be used. The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html . Detailed information on data protection in connection with the use of Google Maps can be found at http://www.google.de/intl/de/policies/privacy/ .

6.4. Social Media Plug-ins

So-called social media plugins («plugins») from third parties can be used on our website. The plugins can be identified by the logo of the respective social network. We use the plugins to offer you the opportunity to interact with the social networks and other users. We use the following plugins on our website: Facebook, Twitter, LinkedIn, YouTube. When you visit our website, your browser establishes a direct connection to the servers of the third-party provider. The content of the plugin (e.g. YouTube videos) is transmitted by the respective third-party provider directly to Transmitted to your browser and integrated into the page.

The data transfer for the display of content (e.g. publications on Twitter) occurs regardless of whether you have an account with a third-party provider and are logged in there. If you are logged in with the third-party provider, the data we collect will also be assigned directly to your existing account with the third-party provider. If you activate the plugins, the information will also be published in the social network and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by the third-party providers as well as your related rights and setting options to protect your privacy can be found in the third-party providers' data protection information. The third-party provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is also carried out in particular for users who are not logged in in order to display needs-based advertising and to inform other users of the social network about your activities on our website. If you want to prevent the third-party providers from assigning the data collected via our website to your personal profile in the respective social network, you must log out of the relevant social network before visiting our website. You can also completely prevent the loading of the plugins with specialized add-ons for your browser such as «Ghostery» (https://www.ghostery.com/ ) or «NoScript» ( http://noscript.net/ ).

7. Who we may share data with

We only pass on your data to third parties if this is necessary to provide our services, if these third parties provide a service for us, if we are legally or officially obliged to do so, or if we have an overriding interest in passing on the personal data. We will also pass on personal data to third parties if you have given your consent or have asked us to do so.

The following categories of recipients may receive personal data from us:
• Branches and subsidiaries of AMiGAS Sandals worldwide, as well as subsidiaries or affiliated companies by AMiGAS Sandals
• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants, lawyers, insurance companies, credit agencies).
• Third parties within the scope of our legal or contractual obligations, authorities, government institutions, courts.

We conclude contracts with service providers who process personal data on our behalf, which oblige them to guarantee data protection. The majority of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA (e.g. Google Analytics data) or, in exceptional cases, to other countries worldwide. If it is necessary to transfer data to other countries that do not have an adequate level of data protection, this will be done on the basis of the EU standard contractual clauses (e.g. in the case of Google) or other suitable instruments (e.g. Binding Corporate Rules for transfers within the global AMiGAS Sandals network).

8. How long we keep the data

We retain personal data for as long as necessary to achieve the purpose for which we collected it. If there are legal or regulatory obligations or overriding interests in longer retention, we retain the personal data. This period is usually at least ten years, e.g. to meet archiving obligations under tax law and accounting regulations or to ensure the enforcement of claims. Web analysis data is only retained for a short period of time. After the retention period has expired, the personal data is deleted or anonymized.

9. Data security

We have taken appropriate, state-of-the-art measures to ensure data security and the confidentiality of personal data. These include, for example, encryption of data transmission and restriction of access rights. We regularly review these measures and adapt them if necessary. Employees and service providers are also obliged to comply with data protection and confidentiality at all times.

10. Your rights

You have the following rights in connection with our processing of personal data:
• Right to information about the personal data we have stored about you, the purpose of processing, the origin and the recipients or categories of recipients to whom the personal data is passed on.
• Right to rectification if your data is incorrect or incomplete.
• Right to restrict the processing of your personal data.
• Right to request the erasure of personal data processed.
• Right to data portability.
• Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons.
• Right to lodge a complaint with a competent supervisory authority, where provided for by law.

To exercise these rights, please contact the address provided under section 2.

11. Changes to the Privacy Policy

We expressly reserve the right to change this privacy policy at any time.
Last modified: January 2024