Menu
Privacy Policy Statement
This notice is provided in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data and Article 19 of the Swiss Federal Data Protection Act of September 25, 2020. The data processed will be those of web users.
The Data Controller is:
APTAC | Risk Management Services
Via Cantonale 89 6596 Riazzino CH
info@aptac.ch
VAT ID: CHE-335.870.931
Nature of data provision
The provision of data is optional. Refusal to provide the data will result in the impossibility of being contacted for the purposes stated below. Providing data for marketing purposes is optional and will not prevent being contacted for other purposes.
Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers.
Purpose of processing and legal basis
Personal data is processed for the following purposes:
The personal data provided by users may be used for us to contact you following a request made in the contact form;
fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;
Regarding purposes sub a) and b), please note that the processing and communication of your personal data by the Data Controller do not require your consent as it is necessary for the execution of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract, as well as to comply with legal obligations.
Legitimate interest
The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.
Data processing methods
The collected data will be processed using computer tools.
Appropriate security measures are observed to prevent data loss, illicit or inappropriate use and unauthorized access.
Who processes your data
The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).
Data transfer
The data will only be transferred only within the EU. Some data may be transferred to the USA to those companies that are certified under the Data Privacy Framework.
Under the Swiss Federal Data Protection Act of September 25, 2020, data will be transferred only to those states approved by the Swiss Federal Council, which can be found on the website https://www.bj.admin.ch/bj/en/home/staat/datenschutz/internationales/anerkennung-staaten.html The inclusion of the third country in the mentioned list allows the free transfer of personal data to that state by both private entities and federal bodies.
Data conservation period
The retention time of the user’s choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.
Data subject rights pursuant to art. 15 eu 2016/679 and ART. 25 Swiss data protection act
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation, ART. 25 Swiss Data Protection Act). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
Right to complain
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
As stipulated by the LPD, the IFPDT initiates an official or reported investigation against a federal body or a private individual if there is sufficient evidence that a data processing operation may violate data protection regulations. Here is the link: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/contact/reporting.html
