Privacy Policy
Table of Content
July 29, 2024
What is this privacy policy about?
Thank you for visiting our website and for your interest in our company.
BNC AG, headquartered in Urtenen-Schönbühl (hereinafter “BNC” or “we”), is the operator of the website www.bnc.ch (hereinafter “website”) and the services offered on it. When you visit this website or contact us via email and other collaboration services (e.g. MS Teams, support page) and in the course of the rest of the collaboration between you and BNC (e.g. in the case of an ongoing contractual relationship), you provide us with personal data (hereinafter “data”). This data is also processed by BNC with the help of external services. These services listed in the privacy policy are hereinafter referred to as “data systems”.
Your data and the proper handling thereof are very important to us. We use your data in compliance with the applicable data protection regulations. All data processing is carried out in accordance with Swiss law and (if applicable to the relevant data processing) the EU General Data Protection Regulation (hereinafter GDPR).
In this privacy policy, we inform you transparently about how we use your data in connection with the data systems listed and explain, among other things, what data we collect, how we use it and what rights you have vis-à-vis us with regard to the use of your data.
This Privacy Policy may be provided in multiple languages for convenience. However, in the event of any conflict or inconsistency between the German version and any translated version, the German version shall prevail and be the legally binding version.
Who is responsible for processing your data?
The controller is the person who alone or jointly with others determines the purposes and means of the processing of personal data. For the data processing mentioned in this privacy policy, the controller is
BNC AG
Bahnhofstrasse 5
CH-3322 Urtenen-Schönbühl
Mail: sales@bnc.ch
Tel.: +41 31 858 58 58
We are therefore responsible for the collection, processing and use (hereinafter referred to as processing) of your personal data on our website.
Who is the contact person for your data protection concerns?
If you have any questions about data protection or wish to exercise your data protection rights, please contact our contact person for data protection law by sending an e-mail to marketing@bnc.ch.
For any data protection concerns in connection with processing for applications, please contact hr@bnc.ch.
We would like to point out that in the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring confidentiality.
-
When visiting our website
When you visit our website, our servers temporarily store every access in a log file. The following technical data is recorded without any action on your part and stored by us until it is automatically deleted after twelve months at the latest:
- the IP address of the requesting computer
- the name of the owner of the IP address range (usually your Internet access provider)
- the date and time of access
- the website from which the access was made (referrer URL), if applicable with the search term used
- Websites and resources (images, files, other page content) that were accessed on our website
- the name and URL of the retrieved file
the status code (e.g. server/client error) - the operating system of your computer
- the browser you are using (type, version and language) and
- the transmission protocol used (e.g. HTTP/1.1)
This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes.
When you visit our website, we also use cookies and applications that are based on the use of cookies. You can find more information on this in the “Cookies” section of this privacy policy. -
When using our contact form
You have the option of using a contact form to get in touch with us. The data you enter in the form fields will be used by us to fulfill the purposes stated in this section. The contact forms are used on a voluntary basis. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must enter the following personal data:
- Title, gender
- First name and surname
- e-mail address
- Job title
- Free text field or other free fields to select
We use this and other voluntarily entered data (such as telephone number) primarily to answer your contact request in the best possible and personalized way. However, the data can also be used within the HubSpot software. Please refer to the section “Use of HubSpot”.
The entries in the contact form are communicated to us via the Microsoft e-mail service. See the section “Use of Microsoft M365”. -
When using the support page
Existing customers have the option of logging in to the BNC support page, where they can receive help from us for various problems. The use of this service is voluntary. The data collected and voluntarily entered by you will be used by us to answer your support request in the best possible way.
If support cases have to be escalated, it cannot be ruled out that personal data (e.g. e-mail addresses, IP addresses) from debug data (e.g. log files, configuration data) may also have to be passed on to the respective manufacturer for the purpose of finding a solution. If you do not wish this data to be passed on to the manufacturer, you can make an explicit note of this in the relevant support ticket. -
When downloading content
If you wish to download content such as eBooks, videos etc. from our website and/or portal, you must first complete the form shown. Downloading and entering the required information in the form is voluntary. You are not obliged to download the relevant content. However, if you wish to do so, you must enter the following personal data:
- Salutation, gender
- First name and surname
- e-mail address
- Job title
We use this and other voluntarily entered data (such as telephone number) primarily to enable your download. However, the data can also be used within the HubSpot software. Please refer to the section “Use of HubSpot”.
-
When registering for our updates by e-mail
By registering for our updates by e-mail on our website, we will receive the e-mail address you enter in the registration field and, if applicable, other contact details, provided you give us these via the registration form.
The data entered in the registration form will be used by us to send you our updates by e-mail, in which we inform you about our services and news.
If you would like to receive our updates by e-mail, you must complete the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The information on updates by e-mail is necessary in order to make use of this offer. They are used exclusively for sending our updates by e-mail.We measure the success of our updates by e-mail. Technical information is collected, such as information about the browser, your system, your IP address and the time of retrieval. This information is used to improve our services. This also includes determining whether and when the e-mails are opened and which links are clicked. For technical reasons, this information can be assigned to individual e-mail recipients. However, it is neither our intention nor that of the mailing service provider to observe individual users. Rather, we use the evaluations to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
We use HubSpot software and Microsoft e-mail services to send updates by e-mail and measure their success. See the sections “Use of HubSpot” and “Use of Microsoft M365”. -
For applications via our online portal
If you apply for a position that is advertised on the website, BNC processes your personal data for the purpose of handling the application process. In this context, we use a portal of our service provider Ostendis.
In order to process your application, BNC processes application data that you enter in the form fields and, if necessary, upload, such as your CV, references, details of your training, letter of motivation, contact details, reference details and other information, and which you provide to us in order to check your suitability for the respective position.
You are not obliged to provide us with your personal data for the above-mentioned purposes. However, it is not possible to process an application without us collecting and processing personal data in the manner described.
Please refer to the section “Use of Ostendis”. -
Participation in surveys
We give you the opportunity to participate in surveys that are offered via the software solution “involve.me” from Stereosense GmbH, based in Vienna AUT. You will be asked for your surname, first name and e-mail address and will be asked questions about our events, our services and your customer satisfaction, among other things.
Participation in surveys is voluntary.
The data you provide in the surveys will be processed by us in HubSpot (see the section “Using HubSpot”), Stereosense (see the section “Using Stereosense Involve.me”) and Confluence (see the section “Using Atlassian Confluence”). The survey results are communicated to us via Microsoft's e-mail service (for more information on Microsoft, see the section “Using Microsoft M365”)
The data is used to offer survey participants the most relevant products tailored to their needs. -
Participation in events
We organize events for which interested parties can register. Naturally, this data is also treated in strict confidence. The information received from the participant will not be passed on to third parties and will only be used for the organization of the event (including the list of participants with name, company and location).
By agreeing to this privacy policy, the participant agrees that BNC may use this data for its own advertising purposes or pass it on to sponsors and supporters at their request for one-off use in connection with the sponsored event. If the participating person expressly does not wish this, he or she must inform BNC in writing immediately after registration.
The participating person is aware that pictures and/or statements may be taken of him or her at the event and, by participating in the event or making the statement, agrees that BNC may use this material for its own documentation and for sending relevant information about BNC to the participating person. -
Visit to BNC office locations
When you meet us in our offices, we use the “Sign in App” tool to register visitors and inform them about behavior and confidentiality. We also use the Roomz tool to reserve meeting rooms.
For more information, see the sections “Use of Sign in App” and “Use of Roomz”. -
Processing requests for quotations
We offer customized solutions as described on the website. In order to provide you with a quote, we process your contact and billing information. Your contact details may be passed on to the manufacturers whose products you are interested in in order to receive an offer from these manufacturers. The manufacturers' privacy policies can be viewed on their respective websites.
-
Signing of contracts
The Skribble service is used for the legally valid signing of contracts with an e-signature. Your e-mail address can be transmitted to the service provider for the signature invitation as well as personal data mentioned in the contract.
See the section “Use of Skribble”. -
Billing of expenses
The Yokoy service is used for the digital settlement of our employees' expenses. Your name can be transmitted in connection with a consumption if this has been paid for by BNC. This is necessary to prevent corruption.
Please refer to the section “Use of Yokoy”. -
During order processing
For the implementation of customized solutions, contact details of your employees are shared with the project team to ensure successful implementation together with you. All our employees are subject to a confidentiality agreement. Depending on the nature of the project, people in the project team may have access to other personal data. It is the customer's responsibility to take appropriate measures to protect this data and to instruct the employees in the project team accordingly.
Your contact details are processed in the accounting department for the billing of the services provided and the products offered. This data may be disclosed to a trustee as part of the statutory audit. Otherwise, we do not share the data with external service providers. -
Cookies
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies help in many ways to make your visit to our website easier, more pleasant and more useful. Cookies are small text files that your web browser automatically saves on your access device when you visit our website or portal. These text files contain a characteristic character string that uniquely identifies the browser so that we can recognize you when you visit our website or portal again (even if we do not know who you are). Cookies can be set both by the website itself and by external web services. Cookies neither damage your computer's hard disk nor can they record other data stored on your hard disk.
In addition to cookies that are only used during a session and are deleted after your website visit (“session cookies”), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) (“permanent cookies”). Most Internet browsers accept cookies automatically. However, you can set your browser so that it rejects cookies, only stores them for one session, deletes them prematurely or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in the most common browsers:
-
Google Ads
We use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website and portal. Google Ads conversion tracking uses a cookie to determine the effectiveness of web campaigns, which is stored on your computer for up to 30 days after you have clicked on a Google Ads ad. Your data is transmitted to Google for analysis. The information is generally limited to the total number of users who first clicked on an ad and were then redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
Google may also use your data for the needs-based design of websites and for advertising. You can find more information about Google and Google's privacy policy at: www.google.com/privacy/ads/.You can prevent the installation of cookies by selecting the appropriate settings in your browser (see section “Cookies”). However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
-
Use of HubSpot
On our website we use HubSpot, a software from HubSpot Inc, USA. The company also has a registered office in Ireland at 1 Sir John Rogerson's Quay, Dublin 2, Ireland. This software is used in the so-called area of inbound marketing and helps us to better coordinate and optimize our marketing strategy by means of statistical analyses and evaluation of logged user behavior, among other things. This involves the use of so-called “web beacons” and also “cookies”, which are stored on your computer and enable us to analyze your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages accessed) on behalf of BNC in order to generate reports on the visit and the BNC pages visited.
If you fill out a form to download a document, we can also use HubSpot to record your visits to the website and the portal page using your additional personal details (in particular your name/email address) and, if necessary, provide you with targeted information on your preferred topics.
HubSpot informs us with push emails via the Microsoft Outlook email service (for more information on Microsoft Outlook, see the section “When using our contact form”)For more information about how HubSpot works, please refer to the HubSpot Inc. privacy policy, available at: https://legal.hubspot.com/privacy-policy.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your browser settings (see section “Cookies”).
-
Use of Stereosense invove.me
The tool Involve.me is used for surveys. The operator Stereosense GmbH, Gußhausstraße 15/8, 1040 Vienna, Austria stores the data within the European Union.
You can find more information about Stereosense GmbH and the privacy policy of involve.me at: https://www.involve.me/data-processing, https://www.involve.me/privacy. -
Use of Kontainer
The Kontainer tool is used to store and manage images and videos. The operator Kontainer S/A with offices in Munich, Germany and Copenhagen, Denmark stores the data within the European Union in certified data centers in accordance with GDPR requirements.
You can find more information about Kontainer S/A and Kontainer's privacy policy at: https://kontainer.com/security-and-backup -
Use of Microsoft M365
For efficient data exchange with our customers, we use the Defacto standard from Microsoft Office on Windows end devices. This software has been optimized with regard to data protection settings. The Microsoft M365 services are used for collaboration, including Teams, Exchange online, OneDrive and others. Your data may be stored at Microsoft (based in Redmond, USA) in Switzerland. A transfer to the USA and third countries cannot be ruled out. You can find further information at: https://privacy.microsoft.com/en-GB/privacystatement
-
Use of Sign in App
The Sign in App tool is used to provide information to visitors and to track the presence of guests in our offices. The operator Sign In App Ltd, based at 4 Waterside Way, Northampton, England, NN4 7XD, stores the data in the United Kingdom.
You can find more information about Sign In App Ltd and the Sign in App privacy policy at: https://signinapp.com/legal -
Nutzung von Roomz
The Roomz tool is used to efficiently manage and display the occupancy of meeting rooms. The operator ROOMZ SA, Passage du Cardinal 5, 1700 Fribourg, Switzerland does not store any personal data of BNC visitors but ensures the data transfer between the booking calendar and the room occupancy screens.
You can find more information about ROOMZ SA and Roomz's privacy policy at https://roomz.io/privacy-policy/ -
Use of Atlassian Confluence
For the efficient storage and processing of your data, we use, among other things, the “Confluence” service from Atlassian. Pty Ltd, based in Sydney, AUS.
Atlassian is an international company that maintains servers worldwide. If Atlassian processes your data internally in unsafe third countries, they use the standard contractual clauses of the European Commission, which are also approved by the FDPIC.
Atlassian may also use your data for the needs-based design of websites and for advertising. You can find more information about Atlassian and Atlassian's privacy policy at: https://www.atlassian.com/legal/privacy-policy#what-this-policy-covers -
Use of Ostendis
For your applications for open positions at BNC, we use the service provider Ostendis AG, Seetalstrasse 35, 5706 Boniswil, Switzerland, for the efficient storage and processing of your data.
The data is processed exclusively in Switzerland and only disclosed to persons who are directly involved in the application process.
You can find more information about Ostendis AG and the Ostendis privacy policy at: https://www.ostendis.com/en/privacy -
Use of Skribble
The digital, legally valid signature of the service provider Skribble AG, Förrlibuckstrasse 190, 8005 Zurich, Switzerland, is used for the efficient processing of documents to be signed.
The data is processed confidentially at all times and in compliance with the applicable law, in particular the Swiss Data Protection Act (DSG) and the General Data Protection Regulation of the European Union (EU-GDPR), as well as in accordance with these data protection provisions.
You can find more information about Skribble AG and Skribble's privacy policy at: https://www.skribble.com/en-eu/privacy/ -
Use of Yokoy
The service provider Yokoy Schweiz AG, Förrlibuckstrasse 181, 8005 Zurich, Switzerland, is used for the efficient processing of expense receipts.
The data is processed in accordance with Swiss (Federal Act on Data Protection; FADP and the associated ordinance) and European data protection regulations (in particular the General Data Protection Regulation GDPR).
You can find more information about Yokoy Schweiz AG and Yokoy's privacy policy at: https://yokoy.io/legal-security-compliance/privacy-policy/ -
Use of IT security services
For the purpose of security and the protection of systems and data, we use external service providers who check content for security problems (SPAM, malware, etc.). Exactly which data is collected and stored naturally depends on the service in question. However, we always endeavor to only use service providers that collect data very sparingly or only store data that is necessary for the fulfillment of the service offered and process the data in compliance with the applicable laws. In principle, the service provider may store data such as name, address, IP address, e-mail address and technical data such as browser type or browser version. If you would like more information on this, please contact our contact person for data protection law (see the relevant section above).
For our own protection, we do not disclose the list of service providers in the security environment and refer to Art. 20 para. 3 letter b and/or c of the Swiss Data Protection Act.
Basis for Data Processing
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
Disclosure of Your Data
We only disclose your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from a contractual relationship. In addition, we will pass on your data to external service providers (e.g. for online applications, see the relevant section above) if this is necessary to process the contract. In particular, it is possible that our external IT service providers may gain access to your data for a limited period of time if this is necessary to solve IT problems.
These service providers use your data exclusively for order processing and not for any other purposes.
As part of the application process, we share the information we receive from you with all decision-makers involved in the application process (usually HR, potential supervisors). For individual positions, we have an assessment carried out with the consent of the candidate. To ensure that this is neutral, we have it carried out externally and forward the personal data to our external partner. We may also process personal data for the purpose of conducting statistical evaluations (e.g. time of application), but this is done on an aggregated basis.
-
General
We store your personal data for as long as is necessary for the purposes stated in this privacy policy. We may also retain personal data for as long as necessary to comply with legal requirements or if we have a legitimate interest in storing it, e.g. for documentation and evidence preservation purposes and for the protection and defense of legal claims.
Google may also use your data for the needs-based design of websites and for advertising. You can find more information about Google and Google's privacy policy at: www.google.com/privacy/ads/.
You can prevent the installation of cookies by selecting the appropriate settings in your browser (see section “Cookies”). However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. -
Application procedure
As part of the application process, we generally store personal data for the duration of the application process. If the application does not result in an employment relationship, we generally delete the data after the application process has been completed, but at the latest after a period of 24 months. If the candidate gives us their consent to store the data for longer in order to be able to suggest other suitable positions, we will store it for a maximum period of 36 months. In this case, we may also forward the personal data to the respective location that has advertised the vacancy in question for the purpose of assessing suitability for the position in question. If the application procedure results in an employment relationship, the information in the application dossier will be transferred to the personnel dossier where necessary.
-
Newsletter
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you unsubscribe, provided that there are no statutory retention obligations. Your data will also be deleted by us immediately if your registration is not completed. We reserve the right to delete your data without giving reasons and without prior or subsequent information.
How Do We Protect Your Data?
We protect your personal data during collection, storage and processing by taking appropriate technical and organizational measures against loss, destruction and manipulation as well as against access, modification or dissemination by unauthorized persons.
We also take data protection within the company seriously. Our employees and the service companies commissioned by us have been sworn to secrecy and to comply with data protection regulations.
-
Right to information
You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have a right to information about which of your data we are processing. A request for information must be made in writing and must include proof of identity.
-
Correction and deletion requests
If necessary, you can have incorrect personal data corrected.
You also have the right to have us delete personal data about you if:- the data is either no longer required;
- the legal basis for the processing no longer applies due to the withdrawal of your consent
- there are no longer legitimate grounds for the processing;
- your data is processed unlawfully;
- a legal obligation requires this.
According to the relevant legal provisions, the right does not exist if :
- the processing is necessary for exercising the right of freedom of expression and information
- your data has been collected on the basis of a legal obligation;
- the processing is necessary for reasons of public interest
- the data is necessary for the establishment, exercise or defense of legal claims.
We would like to point out that if your data is deleted, you will not be able to use our services, or not to the full extent.
-
Revocation of consent
You can withdraw your consent to certain data processing at any time with effect for the future. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Please note that statutory retention periods apply to certain data. This data must be stored by us until the deadline expires. We block these files in our system and use them exclusively to fulfill our legal obligations. -
Right to object
You have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of a public interest, in the context of a legitimate interest or in the context of profiling. You only have this right if there are special circumstances against the storage and processing.
-
Right to data portability
You have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data can be sent either to you yourself or to a controller named by you.
-
How do you exercise your rights?
If you have any questions about data protection or wish to exercise your data protection rights, please contact our contact person for data protection law by sending an email to marketing@bnc.ch.
For any data protection concerns in connection with processing for applications, please contact hr@bnc.ch.
We would like to point out that in the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.
Reporting Security Incidents
If you are affected by or become aware of a security incident related to BNC, please contact our Security Incident Response Team at abuse@bnc.ch. Please forward any supporting evidence and provide a brief description of the incident. We will contact you using the contact details you have provided and inform you of the next steps.
Copyright
The content, information and material of the website http://www.bnc.ch/ und and the BNC portal site are protected by copyright. BNC authorizes the reproduction of the content, information and material on the website and portal page for personal, non-commercial use only. Otherwise, the reproduction, distribution, modification and forwarding of the content, information and material on this website and on the portal site are prohibited without the consent of BNC.
Disclaimer
BNC creates the website and the portal page and the information contained therein with the greatest possible care. All information on the BNC website and portal site is provided without any guarantee of accuracy. We accept no liability for the use of the website and the newsletter and the information contained therein.
BNC also accepts no liability for the content of other websites that you can visit via hyperlinks or from which reference is made to this website. These are external offers over whose content we have no influence and for which BNC is not responsible.
The information on this website and on the portal page is for information purposes only. The use of the information does not create a contractual relationship between BNC and the user.
Can This Privacy Policy Be Changed?
The version of the privacy policy published on this website, which you can access and print out at any time on our website at https://bnc.ch/en/privacy-policy, is the current version.
The privacy policy is not part of a contract with you. We can therefore amend it at any time and without prior notice.