Privacy policy
of Allane SE
I. Preamble
II. Responsible person & data protection officer
III. Definition of personal data
IV. Legal bases of the processing
V. Categories of personal data
VI. Data processing at Allane SE
VII. Allane SE Group data processing
VIII. Allane Fleet data processing
IX. Allane Mobility Consulting data processing
X. Links
XI. Transfer to third countries
XII. Recipients or categories of recipients
XIII. Duration of storage
XIV. Profiling and automated processing
XV. Cookies
XVI. Rights
We take the protection of personal data and thus of your privacy very seriously. We would like to take this opportunity to explain how the companies belonging to the Allane Mobility Group (hereinafter also referred to as "Allane companies" or "Allane") protect personal data and what it means when the Allane companies use personal data. In order to ensure the greatest possible protection of the privacy of the persons concerned, it is a matter of course for Allane to comply with all legal provisions on the subject of data protection.
The responsible party and service provider for the websites and services is the company of the Allane Mobility Group named in each case.
Data subjects can contact the data protection officer of the Allane Mobility Group companies at [email protected] .
Before we start, however, we would like to provide some general information on data protection at the Allane Mobility Group.
Personal data is protected. This is information that identifies individual natural persons, such as your name, or information that makes you identifiable, such as your address, telephone number or the IP address used to identify computers on the Internet.
Personal data is only collected and used by the Allane companies to the extent that this is necessary to operate the websites listed, including their content, and to provide the services of the Allane companies.
The Allane Mobility Group only lawfully processes personal data on the basis of the following legal grounds:
Art. 6 para. 1 of the Data Protection Act (DSG): According to this provision, processing of personal data is permitted if the personal data is processed lawfully.
Art. 6 para. 2 FADP: According to this provision, the processing of personal data is permissible if the processing of the personal data is carried out in good faith and is proportionate.
Art. 6 para. 3 FADP: According to this provision, processing of personal data is lawful if it is necessary for the performance of a contract to which the data subjects are party or for the implementation of pre-contractual measures (e.g. enquiries about the conclusion of a leasing contract) made at the request of the data subject.
Art. 6 para. 6 FADP: According to this provision, processing of personal data is permissible if the data subjects have given their consent to the processing.
Depending on the website and the offer, the following categories of personal data may be processed:
Master data: This includes, for example, the first name, last name, gender, date of birth, address (private and/or business, if applicable), user name for online accounts, a password chosen by the user and the customer number.
Communication data: These are telephone numbers communicated by data subjects (including mobile phone numbers), fax numbers if applicable, the e-mail address (private and/or business if applicable), third party communication data if applicable as well as communication content (e.g. e-mails) and possibly the IP address.
Contract data: Contract data includes all data processed within the framework of a contract concluded with one of the Allane companies, e.g. the data of a leased vehicle or the vehicles managed within the framework of fleet management (e.g. contract number, vehicle identification number, official registration number).
Financial data: The financial data processed are account details provided in the context of the performance of the respective contracts concluded, insofar as the account details can be attributed to natural persons. In addition, within the scope of the financial data, information is processed which is communicated within the scope of the self-disclosure, including information on the creditworthiness of the persons concerned (e.g. on the basis of enquiries with the Central Office for Credit Information (ZEK) and with the Consumer Credit Information Office (IKO)).
Employee data: In connection with leasing contracts to major customers and fleet management, data of customers' employees is also processed. This includes surname, first name and, if applicable, communication data (telephone number, mo-bile telephone number, e-mail address).
Voluntary information: If data subjects voluntarily provide the Allane companies responsible for processing (cf. → F: Purposes of processing) with information that is related to the processing purposes described below, this data is also processed.
Log data: In connection with the use of the websites, log data is processed which may contain personal data, such as IP addresses.
The data processing is divided into three parts
- Data processing in the group
- Data processing in the Allane Fleet
- Data processing in Allane Mobility Consulting (AMC)
a) Responsible party
The person responsible is Allane Schweiz AG, Grossmattstrasse 9, CH-8902 Urdorf.
b) Purposes of processing
| Service | Purpose | Processed Data | Legal basis |
|---|---|---|---|
| Contact form | You can send us a question on various topics via our contact form. Your data will be processed to handle these enquiries. |
|
The legal basis is Art. 6 para. 3 DSG. We process your contact details in order to process your enquiry or to be able to reply to you. If you have questions about your contract or would like to conclude a contract, the legal basis for the processing is Art. 6 para. 6 DSG. |
| reCAPTCHA |
On our website, we use the reCAPTCHA service of Google Ireland Ltd, ("Google") to protect your submissions and orders via internet submission and order forms. The query is used to distinguish whether the submission is made by a person or improperly by automated machine processing. The query includes the transmission of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there.
However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by ReCAPTCHA from your browser will not be merged with other data from Google. For more information about Google's privacy policy, please visit: reCAPTCHA_provacy_policy |
IP-Adress | The legal basis for the processing of your data through the use of this service is based on Art. 6 para. 3 DSG, as we as website operators have a legitimate interest in protecting our website offerings from abusive automated queries and spam. |
| Logfiles | Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorised access or for the purpose of tracking unauthorised access. The log files may contain personal data. However, the data is not stored together with other personal data. |
|
The legal basis for the processing, insofar as personal data are concerned, is Art. 6 (3) DSG. Our legitimate interest lies in the fact that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorised access. |
a) Responsible party
The data controller is Allane Schweiz AG, Grossmattstrasse 9, CH-8902 Urdorf.
b) Purposes of processing
| Service | Purpose | Processed Data | Legal Basis |
|---|---|---|---|
| Conclusion and performance of contracts | If you enter into a contract with us (e.g. for leased motor vehicles), we process the personal data required for the performance of the respective contract. |
|
The legal basis for this data processing is Art. 6 para. 3 DSG. |
| Credit assessment and risk analysis | For the purpose of reducing the risk of non-payment, a credit check is carried out before a leasing contract is concluded. We transmit personal data collected for the conclusion of the leasing contract to the Zentralstelle für Kreditinformation (ZEK) & Informationsstelle für Konsumkredit, Zurich. This involves information on the application, execution and termination of the contractual relationship as well as, if applicable, data on behaviour not in accordance with the contract or fraudulent behaviour. |
|
The legal basis for these transfers is Art. 6 para. 3 DSG. Our legitimate interest in processing your personal data for credit assessment is that we need to protect ourselves against payment default |
| Customer service | We use your data in connection with the performance of the contract, including for customer service, e.g. in the event of queries on your part or ours regarding the content of the contract. As part of our customer service, we also use master data to send you congratulations by post on your birthday or similar occasions. |
|
The ZEK / IKO stores the data received and makes it available to you members in Switzerland. More detailed information on the activities of ZEK / IKO can be found online at ZEK_privacy and IKO_privacy. |
| Provision of replacement vehicle | If a replacement vehicle is required for a leased vehicle, we process your personal data in order to provide a replacement vehicle. |
|
The legal basis for this processing is Art. 6 para. 3 DSG, insofar as the customer service is necessary for the fulfilment of our contractual obligations. Furthermore, the legal basis for this processing is Art. 6 para. 6 DSG, because it is in our legitimate interest to ensure customer satisfaction. |
| Fuel cards/mineral oil companies | Ordering service or fuel cards. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Breakdown service providers | Offer of roadside assistance as part of the customer service. |
|
The legal basis for the processing is Art. 6 para. 3 DSG |
| Tyre service | Offering the use of tyre services via our cooperation partners (e.g. exchange of summer/winter tyres). |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Insurance | Arranging motor vehicle insurance |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Maintenance services and repairs at partner workshops | Provision of a hotline to have a repair or maintenance carried out at our partner workshops. If such a repair or maintenance is to be carried out, the hotline will name suitable partner workshops. We process the personal data listed for the purpose of carrying out this maintenance or repair and for preparing cost estimates. In these cases, the workshop settles with us. The customer will be charged for the service. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Workshops | If the customer wishes to have repairs or maintenance carried out himself/herself and contacts a workshop directly for this purpose, this workshop will transmit personal data to us for the purpose of invoicing the workshop. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Surveyors | At the end of a leasing contract and in the event that a leased vehicle has bodywork and paintwork damage or that repairs are required due to a case of damage, we commission external experts to check any defects, damage or necessary repairs. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Collection companies | If necessary, e.g. in cases of default or non-payment of leasing instalments, we commission collection agencies for the purpose of debt collection and also pass on personal data to the collection agency in the course of this |
|
The legal basis for this processing is Art. 6 para. 3 DSG. Our legitimate interest in disclosing the aforementioned data to a debt collection agency is to enforce our contractually justified claims. |
| Contact forms, telephone as well as e-mail and postal enquiries/contact | If you have questions about our services and products or regarding certain situations (e.g. notification of a claim), you can contact us either by post, telephone, e-mail or via our website. In these cases, you provide us with certain data or enter this data in a designated input mask when sending us an e-mail or using the contact form, via which your data is transmitted to us and stored. We use this data to get in touch with you or to be able to assign and process your request as quickly as possible. The enquiries can be pre-contractual enquiries as well as enquiries in connection with an already concluded contract. Depending on the situation, we process the personal data listed opposite. If you have already concluded a contract with us, we also process contract data and, if applicable, financial data and voluntary information provided to us in the case of enquiries about the contract. |
|
In the case of enquiries that are not directed to us in connection with a current or pending contractual relationship, the legal basis for the processing is Art. 6 (3) DSG; because it is in our legitimate interest to answer enquiries. In all other respects, the legal basis for the aforementioned processing is Art. 6 para. 3 DSG. |
| Customer satisfaction surveys | At regular intervals, we conduct customer satisfaction surveys by e-mail or telephone for the purpose of analysing and optimising our processes. However, this only takes place if corresponding express consents to contact us by telephone or e-mail for this purpose have been obtained in advance or the requirements of Art. 3 para. 1 lit. u UWG are fulfilled. Provided that corresponding consents have been obtained, we also send rating invitations by e-mail to advertise our services for public display on Google, Trustpilot (https://de.trustpilot.com) and → Trusted Shops. When you submit a rating on Google, Google Ireland Limited may collect personal data from you. Details can be found in Google's google_privacy_policy_products. The same applies to Trustpilot A/S, Denmark, whose data protection declaration can be found at trustpilot_privacy and Momentive Europe UC (Surveymonkey), Ireland, whose data protection declaration can be found at surveymonkey_privacy |
|
The legal basis for this data processing is Art. 6 para. 6 DSG, if applicable Art. 6 para. 3 DSG in conjunction with. Art. 3 para. 1 lit. u UWG, whereby the legitimate interest is to conduct direct advertising. |
| Enrichment with further data | We also use the data available to us to make personally tailored offers, if necessary. In doing so, we process the data we have collected within the framework of the existing contractual relationships as well as the data voluntarily provided to us (e.g. positive/negative experiences, wishes, the use of our website, etc.). In addition, we use the data stored with us for the purpose of risk analysis (see also → Credit assessment and risk analyses) as well as evaluating the success of projects and campaigns. The use of personal data stored by third parties, including our group companies and subsidiaries, for the purpose of creating personalised advertising only takes place if the explicit consent of the persons concerned has been obtained. This also applies to the transfer of your data to third parties for advertising purposes. In addition, we use the data in pseudonymised or anonymised form to conduct competitive or market analyses as well as for predictions using artificial intelligence (AI). |
|
The legal basis for this data processing is Article 6 (3) of the Data Protection Act, because it is in our legitimate interest to send data for the purpose of submitting personalised offers or to assess the risks of, for example, payment defaults and to conduct competition or market analyses. The legal basis for data processing with the consent of the data subject is Art. 6 para. 6 DSG. |
| Digital signature | We offer the possibility to sign documents electronically via an online service. The provider and operator of this service is DocuSign GmbH, which acts on behalf of Allane SE. A corresponding contract on order processing has been concluded with DocuSign GmbH. With the help of DocuSign, you can sign documents electronically in a legally secure and evidential manner. In connection with the digital signature, the personal data listed in the documents to be signed are processed. The service provider DocuSign stores your data for a further 14 days after the signature has been executed before it is finally deleted. The data required for the history is stored for a further 180 days, after which it is permanently deleted. You can view the data protection information of DocuSign GmbH via the following link: docusign_datenschutz |
|
The legal basis for processing is Art. 6 para. 3 DSG. |
| Contact form | You can send us a question on various topics via our contact form. Your data will be processed to handle these enquiries. |
|
The legal basis is Art. 6 para. 3 DSG. Our legitimate interest is to answer the questions addressed to us. Data processing in connection with questions about your contract or the conclusion of a contract is lawful under Art. 6 (1) DSG. |
| Damage report | By entering your data in an input mask, you have the option of reporting damage to us, which we can then settle. |
|
The legal basis for the processing is Art. 6 para. 3 DSG. |
| Workshop search | By entering your data, we can provide you with an overview of the nearest partners/workshops. |
|
The legal basis for the processing is Art. 6 para. 3 DSG. |
| Log files | Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorised access or for the purpose of tracking unauthorised access. The log files may contain personal data. However, the data is not stored together with other personal data. |
|
The legal basis for the processing, insofar as personal data are concerned, is Art. 6 para. 3 DSG. Our legitimate interest lies in the fact that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorised access. |
Credit check
In order to check the creditworthiness of commercial customers, information is requested from CRIF in the system. We do not transmit any data for this purpose (CRIF may see that we have requested the information on the report).
a) Responsible party
The data controller is Allane Schweiz AG, Grossmattstrasse 9, CH-8902 Urdorf.
b) Purposes of processing
| Service | Purpose | Processed Data | Legal basis |
|---|---|---|---|
| Conclusion and performance of contracts | If you enter into a contract with us (e.g. for leased motor vehicles), we process the personal data required for the performance of the respective contract. |
|
The legal basis for this data processing is Art. 6 para. 3 DSG. |
| Credit assessment and risk analysis | For the purpose of reducing the risk of non-payment, a credit check is carried out before a leasing contract is concluded. We transmit personal data collected for the conclusion of the leasing contract to the Zentralstelle für Kreditinformation (ZEK) & Informationsstelle für Konsumkredit, Zurich. This involves information on the application, execution and termination of the contractual relationship as well as, if applicable, data on behaviour not in accordance with the contract or fraudulent behaviour. |
|
The legal basis for these transfers is Art. 6 para. 3 DSG. Our legitimate interest in processing your personal data for credit assessment is that we need to protect ourselves against payment defaults. |
| Customer service | We use your data in connection with the performance of the contract, including for customer service, e.g. in the event of queries on your part or ours regarding the content of the contract. As part of our customer service, we also use master data to send you congratulations by post on your birthday or similar occasions. |
|
The ZEK / IKO stores the data received and makes it available to you members in Switzerland. More detailed information on the activities of ZEK / IKO can be found online at https://www.zek.ch/de-ch/kredit-leasingnehmer/datenschutz and www.iko-info.ch/de-ch/kredit-leasingnehmer/datenschutz. |
| Provision of replacement vehicle | If a replacement vehicle is required for a leased vehicle, we process your personal data in order to provide a replacement vehicle. |
|
The legal basis for this processing is Art. 6 para. 3 DSG, insofar as the customer service is necessary for the fulfilment of our contractual obligations. Furthermore, the legal basis for this processing is Art. 6 para. 6 DSG, because it is in our legitimate interest to ensure customer satisfaction. |
| Fuel cards/mineral oil companies | Ordering service or fuel cards. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Breakdown service providers | Offer of roadside assistance as part of the customer service. |
|
The legal basis for the processing is Art. 6 para. 3 DSG. |
| Tyre service | Offering the use of tyre services via our cooperation partners (e.g. exchange of summer/winter tyres). |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Insurance | Arranging motor vehicle insurance |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Maintenance services and repairs at partner workshops | Provision of a hotline to have a repair or maintenance carried out at our partner workshops. If such a repair or maintenance is to be carried out, the hotline will name suitable partner workshops. We process the personal data listed for the purpose of carrying out this maintenance or repair and for preparing cost estimates. In these cases, the workshop settles with us. The customer will be charged for the service. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Workshops | If the customer wishes to have repairs or maintenance carried out himself/herself and contacts a workshop directly for this purpose, this workshop will transmit personal data to us for the purpose of invoicing the workshop. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Surveyors | At the end of a leasing contract and in the event that a leased vehicle has bodywork and paintwork damage or that repairs are required due to a case of damage, we commission external experts to check any defects, damage or necessary repairs. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. |
| Collection companies | If necessary, e.g. in cases of default or non-payment of leasing instalments, we commission collection agencies for the purpose of debt collection and also pass on personal data to the collection agency in the course of this. |
|
The legal basis for this processing is Art. 6 para. 3 DSG. Our legitimate interest in disclosing the aforementioned data to a debt collection agency is to enforce our contractually justified claims. |
| Contact forms, telephone as well as e-mail and postal enquiries/contact | If you have questions about our services and products or regarding certain situations (e.g. notification of a claim), you can contact us either by post, telephone, e-mail or via our website. In these cases, you provide us with certain data or enter this data in a designated input mask when sending us an e-mail or using the contact form, via which your data is transmitted to us and stored. We use this data to get in touch with you or to be able to assign and process your request as quickly as possible. The enquiries can be pre-contractual enquiries as well as enquiries in connection with an already concluded contract. Depending on the situation, we process the personal data listed opposite. If you have already concluded a contract with us, we also process contract data and, if applicable, financial data and voluntary information provided to us in the case of enquiries about the contract. |
|
In the case of enquiries that are not directed to us in connection with a current or pending contractual relationship, the legal basis for the processing is Art. 6 (3) DSG; because it is in our legitimate interest to answer enquiries. In all other respects, the legal basis for the aforementioned processing is Art. 6 para. 3 DSG. |
| Customer satisfaction surveys | At regular intervals, we conduct customer satisfaction surveys by e-mail or telephone for the purpose of analysing and optimising our processes. However, this only takes place if corresponding express consents to contact us by telephone or e-mail for this purpose have been obtained in advance or the requirements of Art. 3 para. 1 lit. u UWG are fulfilled. Provided that corresponding consents have been obtained, we also send rating invitations by e-mail to advertise our services for public display on Google, Trustpilot (https://de.trustpilot.com) and → Trusted Shops. When you submit a rating on Google, Google Ireland Limited may collect personal data from you. Details can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de#products. The same applies to Trustpilot A/S, Denmark, whose data protection declaration can be found at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms, and Momentive Europe UC (Surveymonkey), Ireland, whose data protection declaration can be found at https://www.surveymonkey.de/mp/legal/privacy/. |
|
The legal basis for this data processing is Art. 6 para. 6 DSG, if applicable Art. 6 para. 3 DSG in conjunction with. Art. 3 para. 1 lit. u UWG, whereby the legitimate interest is to conduct direct advertising. |
| Enrichment with further data | We also use the data available to us to make personally tailored offers, if necessary. In doing so, we process the data we have collected within the framework of the existing contractual relationships as well as the data voluntarily provided to us (e.g. positive/negative experiences, wishes, the use of our website, etc.). In addition, we use the data stored with us for the purpose of risk analysis (see also → Credit assessment and risk analyses) as well as evaluating the success of projects and campaigns. The use of personal data stored by third parties, including our group companies and subsidiaries, for the purpose of creating personalised advertising only takes place if the explicit consent of the persons concerned has been obtained. This also applies to the transfer of your data to third parties for advertising purposes. In addition, we use the data in pseudonymised or anonymised form to conduct competitive or market analyses as well as for predictions using artificial intelligence (AI). |
|
The legal basis for this data processing is Article 6 (3) of the Data Protection Act, because it is in our legitimate interest to send data for the purpose of submitting personalised offers or to assess the risks of, for example, payment defaults and to conduct competition or market analyses. The legal basis for data processing with the consent of the data subject is Art. 6 para. 6 DSG. |
| Digital signature | We offer the possibility to sign documents electronically via an online service. The provider and operator of this service is DocuSign GmbH, which acts on behalf of Allane SE. A corresponding contract on order processing has been concluded with DocuSign GmbH. With the help of DocuSign, you can sign documents electronically in a legally secure and evidential manner. In connection with the digital signature, the personal data listed in the documents to be signed are processed. The service provider DocuSign stores your data for a further 14 days after the signature has been executed before it is finally deleted. The data required for the history is stored for a further 180 days, after which it is permanently deleted. You can view the data protection information of DocuSign GmbH via the following link: docusign_privacy |
|
The legal basis for processing is Art. 6 para. 3 DSG. |
| Contact form | You can send us a question on various topics via our contact form. Your data will be processed to handle these enquiries. |
|
The legal basis is Art. 6 para. 3 DSG. Our legitimate interest is to answer the questions addressed to us. Data processing in connection with questions about your contract or the conclusion of a contract is lawful under Art. 6 (1) DSG. |
| Damage report | By entering your data in an input mask, you have the option of reporting damage to us, which we can then settle. |
|
The legal basis for the processing is Art. 6 para. 3 DSG. |
| Workshop search | By entering your data, we can provide you with an overview of the nearest partners/workshops. |
|
The legal basis for the processing is Art. 6 para. 3 DSG. |
| Log files | Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorised access or for the purpose of tracking unauthorised access. The log files may contain personal data. However, the data is not stored together with other personal data. |
|
The legal basis for the processing, insofar as personal data are concerned, is Art. 6 para. 3 DSG. Our legitimate interest lies in the fact that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorised access. |
Credit check
In order to check the creditworthiness of commercial customers, information is requested from CRIF in the system. We do not transmit any data for this purpose (CRIF may see that we have requested the information on the report).
Our website may contain links to and from partner websites. Please note that if you click on the link to access a third party website, they will publish their own privacy policies and we do not accept any responsibility or liability for those policies.
As a matter of principle, your personal data will not be transferred to third countries. Any transfers to a third country are made on the basis of an adequacy decision by the European Commission. If there is no adequacy decision of the European Commission for the respective third country, the transfer to a third country takes place on the basis of suitable guarantees in the sense of Art. 16 and Art. 17 DSG. Third countries are all countries outside the European Economic Area.
The Allane companies commission external service providers to fulfil their contractual and legal obligations. These include, for example, car dealers to whom the data of data subjects are transmitted for the purpose of delivering leased vehicles, or repair workshops, e.g. in the context of key account management. The companies of the Allane Mobility Group also work with dealers and service providers to whom the data is passed on for the purpose of fulfilling orders for additional products such as winter tyres or the use of additional services such as maintenance work.
Other service providers are those who, on behalf of Allane, for example, carry out the registration of leased vehicles with the competent authorities, logistics companies or forwarding agents that Allane commissions for the purpose of delivery, or service providers that envelope postal items and make them ready for dispatch.
In addition, personal data may be transferred to other recipients for the purposes stated in each case, such as to authorities, e.g. in connection with the registration of leased vehicles, as well as to workshops, fuel card service providers, petroleum companies or insurance companies.
If service providers process personal data on behalf of the Allane companies, the Allane companies have concluded the legally required contracts with them on commissioned processing pursuant to Art. 9 of the Data Protection Act.
Personal data will be stored until the respective purpose underlying the processing has ceased to exist. If the Allane companies mentioned are legally obliged to store personal data, the data will be stored for the duration of the legal obligation. Depending on the legal obligation, this may be up to twenty years. In addition, there may be retention periods according to tax law (10 years according to Art. 958f OR) and commercial law (10 years according to Art. 958f OR). If necessary, personal data will be blocked during this period, provided there is no other purpose for the processing.
Automated decision-making does not take place.
"Cookies" are small text files that are copied from a web server to the hard drive of those who use a website. Cookies contain information that can later be read by a web server in the domain where the cookie was issued to the website users. Cookies cannot execute programs or place viruses on the computer. The cookies used by Allane are technically necessary cookies.
When you visit the Allane websites, only a technically necessary cookie is set. This is the _cf_bm cookie from Cloudflare, Inc, 101 Townsend Street, San Francisco, CA/USA. The cookie is used to protect the websites of Allane from harmful bots. Cloudflare places the __cf_bm cookie on end-user devices that access Allane websites protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for these bot solutions to function properly. This cookie expires after 30 minutes of continuous inactivity by the end user. The information in the cookie (with the exception of time-related information) is encrypted and can only be decrypted by Cloudflare. For further details, please refer to https://developers.cloudflare.com/fundamentals/get-started/reference/cloudflare-cookies/.
In accordance with Art. 45c lit. b of the Telecommunications Act (TCA), consent is not required for the setting of technically necessary cookies. If personal data is processed by technically required cookies, the legal basis for this processing is Art. 6 para. 3 FADP. The legitimate interest according to Art. 6 para. 3 FADP is to offer the websites. Technically necessary coo-kies cannot be deactivated manually by the user. However, the users of the websites have the option of specifying in their browser settings that cookies should generally be rejected. However, this may mean that the websites cannot be used.
Allane would like to inform you below about the rights of data subjects in relation to the processing of personal data. If data subjects have any questions about individual rights, they may contact Allane's data protection officer at [email protected] or by post at "Data Protection Officer at Allane Schweiz AG, Grossmattstrasse 9, CH-8902 Ur-dorf".
a. Revocation of consent
If data processing is based on the express consent of the data subject, consent may be revoked at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
b. Right to information (Art. 25 FADP)
Data subjects have the right to request confirmation from the controllers (cf. → F: Purposes of processing) as to whether personal data relating to them are being processed. If this is the case, the data subjects have the right to information about this personal data and to be provided with a copy. If personal data are transferred to a third country or an international organisation, data subjects also have the right to be informed of appropriate safeguards to ensure that the recipients comply with the provisions of the DPA.
c. Right to rectification (Art. 30 FADP)
Inaccurate data must be corrected without delay. Taking into account the purposes of the processing, data subjects also have the right to request that incomplete personal data be supplemented, including by means of a supplementary declaration.
d. Right to erasure or the "right to be forgotten" (Art. 6 para. 4 FADP)
The Allane companies responsible for processing (cf. → F: Purposes of processing) shall delete personal data if, in particular, one of the following reasons applies and the storage is not necessary for the assertion, exercise or defence of legal claims of the Allane companies:
- Data is no longer necessary for the purposes for which it was collected or otherwise processed,
- Consent to the processing of personal data is withdrawn and there is no other legal basis for the processing,
- The data subject objects to the processing on grounds relating to his or her particular situation and there are no compelling legitimate grounds for the processing,
- The data subject objects to processing for direct marketing purposes,
- The data have been processed unlawfully,
- The deletion of the data is necessary to comply with a legal obligation under European or German law,
e. Right to restrict processing (Art. 15 FADP)
According to Art. 15 FADP, personal data may only be processed in a restricted manner in the following cases:
- The data subject disputes the accuracy of his or her data until its accuracy can be verified.
- The processing is unlawful, but the data subject refuses to have his or her data erased and instead requests that the use of personal data be restricted.
- The Allane companies responsible for the processing no longer need the data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims.
- The data subject objects to the processing on grounds relating to his or her particular situation, unless it is clear that the legitimate interests of the data subject are overridden by the Allane Companies responsible for the processing.
Insofar as processing is restricted, this data may only be stored. In this case, further processing is only permitted with the consent of the data subjects or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
f. Obligation to notify (Art. 19 DSGVO)
In the event of the rectification or erasure of data of data subjects or a restriction of processing, all recipients to whom the data have been disclosed shall be informed accordingly. This does not apply if such information is impossible or would involve a disproportionate effort.
g. Right to data portability (Art. 28 FADP)
Data subjects have the right to receive the data relating to them that they have provided to the Allane companies responsible for processing (see → F: Purposes of processing) in a structured, commonly used and machine-readable format. In certain cases, data subjects have the right to have this data transferred to a third party. However, this right must not affect the rights and freedoms of other persons, including Allane companies. If this is the case, Allane is entitled to refuse to hand over or transfer the data.
h. Right of objection (Art. 21 DSGVO)
Where the Allane companies responsible for processing process personal data on the basis of a legitimate interest (Art. 6(3) DSG), data subjects have the right to object to such processing on grounds relating to their particular situation. This also applies to profiling based on these provisions.
In this case, the data may no longer be processed unless compelling legitimate grounds for the processing can be demonstrated. These must override the interests, rights and freedoms of the data subjects, or the processing serves to assert, exercise or defend legal claims.
Objections by data subjects to the use of personal data for direct marketing purposes shall be immediately observed by the responsible Allane companies.
i. No contractual obligation
Data subjects are under no contractual or legal obligation to provide Allane with their personal data. However, Allane points out that contracts may not be concluded if data required for the performance of the contract is not provided.
j. Right to complain to a supervisory authority
Data subjects have the right to complain to a supervisory authority. The supervisory authority responsible for the Allane Switzerland companies is the
Federal Data Protection and Information Commissioner
Feldeggweg 1
CH - 3003 Bern
www.edoeb.admin.ch
Status: May 2023
Questions, queries or comments?
If you’d like further information about our company, our brands or our services, please don’t hesitate to get in touch.