PRIVACY NOTICE

EIZO AG (hereinafter also referred to as ‘we’ and ‘us’) collects and processes personal data concerning you or other persons (so-called ‘third parties’). We use the term ‘data’ here synonymously with ‘personal data’.

In this Privacy Notice we describe what we do with your data when you use www.eizo.ch (hereinafter referred to as ‘website’), purchase our services or products, otherwise engage with us within the scope of a contract, communicate with us or otherwise have dealings with us. Where necessary, we will inform you in writing in good time of any additional processing activities not specified in this Privacy Policy. In addition, we may notify you separately about the processing of your data, for example, in consent forms, terms of contract, supplemental privacy notices, forms and notices.

If you transmit or disclose data to us concerning other persons, for example, family members, colleagues at work, etc., we assume that you are authorised to do so and that this data is accurate. You affirm this by transmitting data about third parties. Please also ensure that these third parties have been informed of this Privacy Notice.

This Privacy Notice is designed to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (Datenschutzgesetz – DSG). Whether and to what extent these laws are applicable, however, varies from case to case.

EIZO AG, Moosacherstrasse 6, Au, 8820 Wädenswil ZH (‘Eizo’), is responsible under data protection law for the processing of data described in this Privacy Notice, unless otherwise communicated in individual cases, for example, in other privacy notices, on forms or in contracts.

You can contact us as follows regarding your data protection concerns and to exercise your rights under the terms of Section 11:

EIZO AG
Moosacherstrasse 6, Au
8820 Wädenswil (ZH)
Switzerland
info.ch@eizo.com

We process various categories of data concerning you. The most important categories are as follows:

• Technical data: When you use our website or other electronic services, we collect the IP address of your end device and other technical data to ensure the functionality and security of these services. This data also includes logs in which the use of our systems is recorded. We typically store technical data for a period of six months. To ensure the proper functioning of these services, we may also assign you or your end device an individual code (for example, in the form of a cookie; see Section 12). The technical data itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, it may be linked to other categories of data (and thus potentially to your person).
• Registration data: Certain products and services (for example, the login areas on our website, newsletter dispatch, support requests, etc.) can only be used with a user account or after having registered, which can be done with us or via our external login service providers. When registering, you are required to provide us with certain data and we collect data about the use of the product or service. Registration data may be collected as part of carrying out access control in connection with certain systems; depending on the access control system, biometric data may also be collected. We typically retain registration data for 12 months after use of the service ends or after the user account is closed.
• Communication data: If you contact us via the contact form, by e-mail, by phone, by letter or by other means of communication, we collect the data exchanged between you and us, including your contact details and the communications metadata. If we record or monitor phone conversations or video conferences, e.g., for training and quality control purposes, we will inform you that this is taking place. Such recordings may only be made and used in accordance with our internal guidelines. You will be informed if and when such recordings take place, for example, by information to this effect being displayed during the relevant video conference. If you do not wish to be recorded, please let us know or end the call or leave the video conference. If we seek to or need to establish your identity, we collect data in order to identify you (for example, a copy of an ID). As a general rule, we store this data for a period of 12 months from the last interaction with you. The data may be stored for longer than 12 months if necessary for reasons of proof or to comply with legal or contractual requirements or on technical grounds. E-mails in personal inboxes and written correspondence are generally stored for a minimum of ten years. Recordings of (video) conferences are generally kept for 24 months.
• Master data: We define master data as the basic data we require in addition to the contract details (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information, for example, concerning your role and position, your bank details, your date of birth, customer history, powers of attorney, signature authorisations and declarations of consent. We process your master data if you are a customer or other business contact or are working for such a person (for example, as a contact person of the business partner), or because we wish to contact you for our own purposes or for the purposes of a contractual partner (for example, in the context of marketing and advertising, in connection with newsletters, etc.). We receive master data from you (when you make a purchase or register, for example), from organisations for which you work or from third parties, such as our contractual partners, associations and list brokers, and from sources available to the public such as public registers or the Internet (websites, social media, etc.). As a general rule, we store this data for ten years from the last interaction with you, at minimum, however, from the time that the contract ends. The data may be stored for longer than ten years if necessary for reasons of proof or to comply with legal or contractual requirements or on technical grounds. In the case of pure marketing and advertising contacts, the retention period is generally much shorter, typically no longer than two years since the last contact.
• Contract data: This is data produced in connection with the conclusion or processing of a contract, e.g., information on contracts and the services provided or to be provided, as well as data generated in the run-up to the conclusion of a contract, the information required or used for processing and information on responses (for example, complaints or data on user satisfaction, etc.). As a rule, we collect this data from you, from contractual partners and from third parties involved in the fulfilment of the contract, but also from third-party sources (e.g., companies providing creditworthiness data) and from publicly available sources. As a general rule, we store this data for ten years from the last contractual activity, at minimum, however, from the time that the contract ends. The data may be stored for longer than ten years if necessary for reasons of proof or to comply with legal or contractual requirements or on technical grounds.
• Behavioural and preference data: Depending on our relationship with you, we try to get to know you and tailor our products, services and offerings to you. To this end, we collect and use data concerning your behaviour and preferences. We do this by evaluating data on your behaviour in our area, and we may also augment this with information from third parties, including from publicly available sources. Based on this data and information, we can determine the likelihood that you will make use of specific services or behave in a certain way. Some of the data processed for this purpose is already known to us (when you use our services, for example), or we obtain it by recording your activities (how you navigate our website, for example). We anonymise or delete this data after 24 months if it is no longer relevant for the purposes pursued. The data may be deleted or anonymised at a later date after the 24-month period has expired if necessary for reasons of proof or to comply with legal or contractual requirements or on technical grounds. We describe how tracking works on our website in Section 12.
• Other data: We also collect data from you in other situations. Data is collected, for example, in connection with official or court proceedings (such as files, evidence, etc.) that may also relate to you. We may also collect data in order to protect human health (for example, as part of protection concepts). We may receive or make photos, videos and audio recordings in which you may be identifiable (for example, at events, recordings taken by security cameras, etc.). We may also collect data about who enters certain buildings or has corresponding access rights and when (including, in the case of access controls, based on registration data or visitor lists, etc.), who takes part in events or campaigns (competitions, for example) and when, or who uses our infrastructure and systems and when. The retention period for this data varies based on the purpose and is limited to what is necessary. This is a few days for many security cameras, a few weeks in most cases for contact tracing data, three months as is typically the case with the storage of visitor data and several years or more as is permitted with regards to reports on events containing photos.

You provide us with much of the data specified in this Section 3 yourself (for example, via forms, in the context of communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, except in individual cases, for example, under binding protection concepts (legal obligations). If you wish to conclude contracts with us or make use of services, you will also be required to provide us with data as part of your contractual obligation under the relevant agreement, in particular master data, contract data and registration data. The processing of technical data is unavoidable when our website is used. If you wish to access certain systems or buildings, you are required to provide us with registration data. In the case of behavioural and preference data, however, you generally have the option to object or not give your consent.

Insofar as this is not inadmissible, we also obtain data from publicly available sources (for example, debt collection registers, land registers, commercial registers, the media or the Internet, including social media platforms), or receive data from other companies within our group, from authorities and from other third parties (such as credit agencies, address brokers, associations, contractual partners, Internet analytics services, etc.).

We process your data for the purposes outlined below. Further information for the online domain can be found in Sections 12 and 13. These purposes and the objectives underlying them constitute legitimate interests of us and, where applicable, of third parties. You can find further information on the legal basis of our processing in Section 5.

We process your data for purposes related to communication with you, in particular to respond to enquiries and requests to assert your rights (Section 11) and to contact you in the event of queries. In particular, we use communication data and master data for this purpose and, in connection with products and services used by you, registration data as well. We store this data in order to document our communications with you, for training purposes, for quality control and for enquiries.

We process data in order to establish, manage and carry out contractual relations.

We process data for marketing purposes and to maintain relationships in order, for example, to send our customers and other contractual partners personalised advertising about our products and services. This may take the form of newsletters and other regular communications (electronically, by post, by phone), via other channels for which we have contact details from you, but also as part of individual marketing campaigns (events, competitions, etc.), and may also include free services (invitations, vouchers, etc.). You can decline such communication at any time (see end of this Section 4) or refuse to grant or revoke your consent to be contacted for advertising purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see Section 12).

We continue to process your data for market research, to improve our services and operations and for product development purposes.

We may also process your data on security grounds and for access control purposes.

We process personal data to comply with laws, instructions and recommendations from authorities and internal regulations (‘compliance’).

We also process data for the purposes of risk management at our company and in the context of prudent corporate governance, including business organisation and corporate development.

We may process your data for other purposes, for example, as part of our internal workflows and administration or for training and quality control purposes.

Should we request your consent for certain processing operations (for example, for the processing of highly sensitive personal data, for marketing mailings, for the creation of personalised movement profiles and for advertising management and behaviour analysis on the website), we will inform you separately about the corresponding purposes of the processing. You can withdraw your consent at any time with effect for the future by sending us a written message (by post) or, unless otherwise indicated or agreed, by e-mail; you can find our contact details in Section 2. To withdraw your consent to online tracking, see Section 12. If you have a user account, you can also withdraw your consent or contact us via the relevant website or other service. Once you notify us that you are withdrawing your consent, we will no longer process your data for the purposes to which you originally gave your consent, unless we have another legal basis for doing so. Withdrawal of your consent does not affect the lawfulness of processing based on consent prior to you withdrawing your consent.

Where we do not request your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or fulfilment of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in it, in particular in order to pursue the purposes and associated objectives described above under Section 4 and to be able to carry out corresponding activities. Our legitimate interests also include compliance with statutory provisions, unless this is already recognised as a legal basis under the applicable data protection law (for example, the laws in the EEA and Switzerland with regards to the GDPR). However, this also includes the marketing of our products and services, the interest in better understanding our markets as well as the reliable and efficient management and further development of our company, including its business operations.

If we receive sensitive data (for example, health data, information on political, religious or ideological views or biometric data for identification purposes), we may also process your data on the basis of other legal grounds, for example, in the event of disputes arising from the necessity of processing for any legal proceedings or the enforcement of or defence against legal claims. In individual cases, other legal grounds may apply, which we will communicate to you separately if necessary.

We may use your data (Section 3) to automatically evaluate certain personal characteristics of yours for the purposes specified in Section 4 (‘profiling’) when we seek to obtain preference data, but also to identify risks of misuse and security risks, to carry out statistical analyses or for operational planning purposes. For the same purposes, we can also create profiles, that is, we can combine behavioural and preference data, but also master and contract data as well as technical data attributed to you in order to better understand you as a person with your various interests and other characteristics.

In both cases, we ensure the proportionality and reliability of the results and take measures to prevent misuse of these profiles or profiling. If these can have legal consequences or significant disadvantages for you, we always provide for a manual review.

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to safeguard our legitimate interests and the other purposes listed in Section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:

• Service providers: We work together with service providers domestically and abroad who process data concerning you on our behalf or in joint responsibility with us or who receive data concerning you from us under their own responsibility (for example, IT providers, shipping companies, advertising service providers, login service providers, cleaning companies, security companies, banks, insurance companies, debt collection agencies, credit agencies or address verifiers). This may also include health data. For information on the service providers engaged for the website, refer to Section 12. Our central service providers are Microsoft for IT and Worldline AG for debt collection.
• Contractual partners (including customers): This initially refers to our customers (for example, service recipients) and our other contractual partners of ours, as this transmission of data is done on the basis of these contracts. If you work for such a contractual partner yourself, we may also transmit data concerning you to them in this context.
• Public authorities: We may disclose personal data to government agencies, courts and other authorities both domestically and abroad if we are legally obliged or authorised to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us under their own responsibility.
• Other persons: This refers to other cases where the involvement of third parties arises out of the purposes pursuant to Section 4, for example, service recipients, the media and associations in which we are involved or if you are part of one of our publications. 

All of these categories of recipients may in turn involve third parties, so that your data may also be accessible to them. We can restrict processing by some third parties (for example, IT providers), but not by others (for example, authorities, banks, etc.).

We also allow certain third parties to collect personal data from you on our website and at our events (for example, press photographers, providers of tools that we have embedded on our website, etc.). Where we are not significantly involved in the collection of this data, these third parties shall have sole responsibility for it. If you have any concerns and wish to assert your data protection rights, please contact these third parties directly. See Section 12 for the website.

As described in Section 7, we also provide data to other organisations. These are also located outside of Switzerland. Your data may therefore be processed both in Europe and in Japan; in exceptional cases, however, this may take place in any country in the world.

If a recipient is located in a country that lacks adequate statutory data protection rules, we contractually oblige the recipient to comply with the applicable data protection rules (we use the revised standard contractual clauses of the European Commission, which you can find here: eur-lex.europa.eu/eli/dec_impl/2021/914/oj, unless the recipient is already subject to legally recognised rules to ensure data protection and we cannot rely on an exemption. An exemption may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the fulfilment of a contract requires such disclosure, if you have given your consent or if the data in question has been made generally available by you and you have not objected to its processing.

Please also note that data exchanged over the Internet is often routed via third countries. Your data may therefore be sent to a foreign country even if the sender and recipient are in the same country.

We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for purposes of documentation and proof require it or storage is technically necessary. Further information on the relevant storage and processing periods can be found for the individual categories of data in Section 3 and for the individual categories of cookies in Section 12. If there are no legal or contractual obligations to the contrary, we will delete or anonymise your data after the storage or processing period has expired as part of our normal processes.

We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorised or unlawful processing and to counteract the risks of loss, unintentional modification, unwanted disclosure or unauthorised access.

To make it easier for you to control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

• the right to request information from us as to whether and which of your data we process;
• the right to have us rectify data if it is incorrect;
• the right to request the erasure of data;
• the right to obtain from us the personal data concerning you in a commonly used electronic format or to transmit this data to another controller;
• the right to withdraw consent where our processing is based on your consent;
• the right to obtain, upon request, further information necessary for the exercise of these rights;

If you would like to exercise the above rights against us, please contact us in writing, at our premises or, unless otherwise indicated or agreed, by e-mail; our contact details can be found in Section 2. In order for us to be able to prevent misuse, we need to identify you (for example, by means of a copy of your ID, if this is not otherwise possible).

You also have these rights vis-à-vis other organisations that work with us on their own responsibility; please contact them directly if you wish to exercise rights in connection with their processing. Information on our main cooperation partners and service providers can be found in Section 7; see Section 12 for more information.

Please note that these rights are subject to conditions, exceptions or restrictions under the applicable data protection law (to protect third parties or business secrets, for example). We will notify you accordingly if necessary.

If you do not agree with how we deal with your rights or our data protection practices, please notify us or our data protection officer (Section 2). In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority in your country. A list of the authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_de. You can contact the supervisory authority of the United Kingdom here: https://ico.org.uk/global/contact-us/. You can contact the Swiss supervisory authority here: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html.

We use various technologies on our website with which we and third parties engaged by us can recognise you when you use our website and, under certain circumstances, track you over several visits. We will provide you with information about this in this section.

In essence, this is done in order for us to be able to distinguish between when you access the website (via your system) and when other users access it so that we can ensure the functionality of the website and carry out analyses and personalisation. In doing so, we do not seek to establish your identity, even if we are able to do so, insofar as we or third parties engaged by us can identify you in combination with registration data. Even without registration data, however, the technologies employed are designed in such a way that you are recognised as an individual visitor each time you visit the site, such as, for example, by our server (or the servers of third parties) assigning you or your browser a specific identification number (a so-called ‘cookie’).

We use such technologies on our website and allow certain third parties to do so as well. However, depending on the purpose of these technologies, we may request your consent before using them. You can access your current settings here: https://www.consentmanager.net/privacy.php. You can set your browser to block certain cookies or alternative technologies, mimic them or delete existing cookies. You can also add software to your browser that blocks tracking by certain third parties. You can find further information on this on the help pages of your browser (which can typically be found under ‘Data protection’) or on the websites of the third parties listed below.
A distinction is made between the following cookies (technologies with similar functions such as fingerprinting are also included here):

• Necessary cookies: Some cookies are necessary for the website to work as such or for certain functions. They ensure, for example, that you can switch between pages without losing information you previously entered in a form. They also make sure that you remain logged in. These cookies are only temporary (‘session cookies’). If you block them, the website may not work. Other cookies are necessary in order for the server to save decisions or entries made by you beyond one session (that is, one visit to the website) if you use this function (for example, language selected, consent given, the automatic login function, etc.). These cookies have an expiry date of up to 24 months.
• Performance cookies: We use cookies to log and analyse the use of our website – in some cases even beyond the session – in order to optimise our website and corresponding services and to better tailor them to the needs of users. We do this through the use of third-party analytics services. We have listed these for you below. Performance cookies have an expiry date of up to 24 months as well. For more information see the websites of the third-party providers.
• Marketing cookies: We and our contractual advertising partners have an interest in the pinpoint targeting of advertising, that is, only to display it to those users we seek to address. We have provided a list of our contractual advertising partners below. For this purpose, we and our contractual advertising partners – should you give your consent – also use cookies with which the content accessed or contracts concluded can be logged. This enables us and our contractual advertising partners to display advertisements that we believe will be of interest to you on our website as well as on other websites that display advertisements from us or our contractual advertising partners. Depending on the relevant situation, these cookies expire after between a few days and 12 months. If you consent to the use of these cookies, you will be shown appropriate advertising. If you do not consent to these cookies, you will not see fewer ads; instead, you will simply be shown other ones. 

We currently use services from the following service providers and contractual advertising partners (insofar as they use data from you or cookies set by you for advertising purposes):

• Google Analytics: Google Ireland (based in Ireland) is the provider of the Google Analytics service and serves as our processor. Google Ireland relies on Google LLC (based in the US) as its processor (both ‘Google’). Google uses performance cookies (see above) to track the behaviour of visitors to our website (duration, frequency of pages viewed, geographical origin of access, etc.) and compiles reports for us on the use of our website on this basis. We have configured the service so that the IP addresses of visitors are truncated by Google in Europe before being forwarded to the US and can therefore not be traced back. We have deactivated the ‘Data transfer’ and ‘Signals’ settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these individuals. If you agree to the use of Google Analytics, you explicitly consent to such processing, which also includes the transfer of personal data (in particular usage data for the website and app, device information and individual IDs) to the US and other countries. You can find information on data protection at Google Analytics here, and if you have a Google account, you can find further information on processing by Google here.
• Microsoft Analytics: Microsoft Analytics is a service for analysing user behaviour on our website provided by Microsoft Corporation. Microsoft Analytics collects anonymised data about the use of our website, such as pages visited, length of stay, clicks and interactions. This data does not contain any personally identifiable information such as names, addresses or other sensitive data. The data collected is used to analyse user behaviour on our website, identify trends and improve the user experience. We use this information to continuously optimise our website and our services and to adapt them to the needs of our users. We take the protection of your data seriously and adopt appropriate measures to ensure the security and confidentiality of the data collected by Microsoft Analytics. Microsoft undertakes to comply with the applicable data protection laws and regulations, including the data protection regulations of Switzerland. Microsoft Analytics uses cookies to collect information regarding your use of our website. Cookies are small files that are stored on your computer and collect anonymous data about your surfing behaviour. You can disable the use of cookies in your browser settings, though this may impair the functionality of our website.

We may operate pages and other sites (‘fan pages’, ‘channels’, ‘profiles’, etc.) on social media sites and other platforms operated by third parties and collect the data concerning you described in Section 3 and below. We receive this data from you and the platforms when you come into contact with us via our online site (for example, when you communicate with us, comment on our content or visit our site). At the same time, the platforms evaluate your use of our online sites and link this data with other data about you known to the platforms (about your behaviour and preferences, for instance). They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes (for example, to personalise advertising) and to operate their platforms (what content they show you, for instance).

We process this data for the purposes described in Section 4, in particular for communication, for marketing purposes (including advertising on these platforms; see Section 12) and for market research. Information on the relevant legal bases can be found in Section 5. We may redistribute content published by you (for example, comments on an announcement) ourselves (in our advertising on the platform or elsewhere, for instance). We or the operators of the platforms may also delete or restrict content from or about you in accordance with the use policies (for example, inappropriate comments).

Further information on processing by the platform operators can be found in the privacy notices of the platforms. There you can also find out in which countries they process your data, what rights of access, rights to erasure and other rights as a data subject you have and how you can exercise these rights or obtain further information. We currently use the following platforms: Meta, LinkedIn, YouTube und Twitter.

This Privacy Notice is not part of a contract with you. We can amend this Privacy Notice at any time. The version published on this website is the most up-to-date version.

Last updated: 1 April 2024