1.4 Transfer to a third country
(Art. 13 para. 1 f) GDPR)
The controller will not intentionally disclose your personal data to third parties that are not processors
or sub-processors. However, please note that when using the service based on certain sub-
processors in third countries without an adequate level of data protection, there are risks in relation
to your personal data that cannot be reduced even by high technical and organisational measures,
as the same level of fundamental rights as in Switzerland and the EU may not be complied with in
such countries.
2. Information according to Art. 13 para. 2 GDPR
2.1 Period or criteria for the period of storage (Art. 13 para. 2 a) GDPR)
The first storage (start of the storage period) of the data takes place when the data subject’s
personal data are provided for the first time. The personal data shall be deleted after the expiry of the
statutory retention obligations unless the controller has a legitimate interest in further storage. In any
case, only those data will continue to be stored that are absolutely necessary to achieve the
corresponding purpose. If the consent is withdrawn, the personal data will be deleted without undue
delay unless the controller is otherwise obliged or entitled to retain such data.
2.2 Data subject rights
The data subject has the following rights:
Right of access (Art. 15 GDPR)
The controller shall provide the data subject, upon request, with information as to whether the
controller is processing data concerning him or her. The controller shall endeavour to process
requests for information promptly.
Right to rectification of inaccurate data (Art. 16 GDPR)
The data subject shall have the right to obtain from the controller without undue delay the
rectification of inaccurate personal data concerning him or her.
Right to erasure (Art. 17 GDPR)
The data subject shall have the right to obtain from the controller the erasure of personal data
concerning him or her without undue delay and the controller shall have the obligation to erase
personal data without undue delay where one of the grounds specified in Art. 17 para. 1 a) to f)
GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
The data subject shall have the right to obtain from the controller restriction of processing where one
of the conditions in Art. 18 para. 1 a) to d) GDPR applies.
Right to data portability (Art. 20 GDPR)
The data subject shall have the right to receive the personal data concerning him or her, which he or
she has provided to the controller, in a structured, commonly used and machine-readable format and
have the right to transmit those data to another controller without hindrance from the controller to
which the personal data have been provided, where the processing is based on consent pursuant to
Art. 6 para. 1 a) GDPR, Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR
and the processing is carried out by automated means.
Right to object to unreasonable data processing (Art. 21 GDPR)
The data subject shall have the right to object, on grounds relating to his or her particular situation, at
any time to processing of personal data concerning him or her which is based on Art. 6 para. 1 e) or
f) GDPR, including profiling based on those provisions. The controller shall no longer process the
personal data unless the controller demonstrates compelling legitimate grounds for the processing
which override the interests, rights and freedoms of the data subject or for the establishment,
exercise or defence of legal claims.