Privacy Policy
Table of Content
July 11, 2025
What is this privacy policy about?
Thank you for visiting our website and for your interest in our company.
We are pleased that you are visiting our website and interested in our company.
When visiting our website, personal data may be collected. This data is processed by VINCI Energies Switzerland AG and its Axians-branded companies (Axians Schweiz AG, Axians IT Services AG, Axians Amanox AG, Axians Infoma Schweiz AG, Axians müllerchur AG, fernao somnitec AG, BNC AG, and 1stQuad Solutions AG), which are responsible for data processing in accordance with the Swiss Federal Act on Data Protection (FADP) and Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
VINCI Energies Switzerland AG, headquartered in Zurich (hereinafter referred to as “VINCI Energies Switzerland” or “we”), operates the website www.bnc.ch (hereinafter referred to as the “website”) and the services offered on it. When you visit this website or contact us via email and other collaboration tools (such as MS Teams, support site), as well as during any further collaboration between you and BNC (e.g., during an ongoing contractual relationship), you provide us with personal data (hereinafter referred to as “data”). This data is also processed by BNC with the help of external services. The services listed in this privacy policy are referred to hereinafter as “data systems.”
Your data and its proper handling are very important to us. We process your data in compliance with applicable data protection laws. All data processing is carried out in accordance with Swiss law and, where applicable, the European Union’s General Data Protection Regulation (GDPR).
In this privacy policy, we transparently inform you about how we use your data in connection with the mentioned data systems and explain, among other things, which data we collect, how we use it, and what rights you have regarding the use of your data.
For convenience, this privacy policy may be made available in multiple languages. However, in the event of any conflict or discrepancy between the German version and a translated version, the German version shall prevail and be legally binding.
Who is responsible for processing your data?
The controller is the person who alone or jointly with others determines the purposes and means of the processing of personal data. For the data processing mentioned in this privacy policy, the controller is
VINCI Energies Schweiz AG
Datenschutzteam
Pfingstweidstrasse 106
8021 Zürich
We are therefore responsible for the collection, processing and use (hereinafter referred to as processing) of your personal data on our website.
Who is the contact person for your data protection concerns?
If you have any questions regarding data protection, wish to exercise your data protection rights, or have any concerns related to the processing of personal data in connection with job applications, please contact our data protection representative by sending an email to datenschutz@vinci-energies.ch.
Please note that when communicating via unencrypted email, we cannot guarantee the complete security of data during transmission to our IT systems. Therefore, for confidential information, we recommend using encrypted communication or postal mail.
-
When visiting our website
When you visit our website, our servers temporarily store every access in a log file. The following technical data is recorded without any action on your part and stored by us until it is automatically deleted after twelve months at the latest:
- the IP address of the requesting computer
- the name of the owner of the IP address range (usually your Internet access provider)
- the date and time of access
- the website from which the access was made (referrer URL), if applicable with the search term used
- Websites and resources (images, files, other page content) that were accessed on our website
- the name and URL of the retrieved file
the status code (e.g. server/client error) - the operating system of your computer
- the browser you are using (type, version and language) and
- the transmission protocol used (e.g. HTTP/1.1)
This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes.
When you visit our website, we also use cookies and applications that are based on the use of cookies. You can find more information on this in the “Cookies” section of this privacy policy. -
When using our contact form
You have the option of using a contact form to get in touch with us. The data you enter in the form fields will be used by us to fulfill the purposes stated in this section. The contact forms are used on a voluntary basis. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must enter the following personal data:
- Title, gender
- First name and surname
- e-mail address
- Job title
- Free text field or other free fields to select
We use this and other voluntarily entered data (such as telephone number) primarily to answer your contact request in the best possible and personalized way. However, the data can also be used within the HubSpot software. Please refer to the section “Use of HubSpot”.
The entries in the contact form are communicated to us via the Microsoft e-mail service. See the section “Use of Microsoft M365”. -
When using the support page
Existing customers have the option of logging in to the BNC support page, where they can receive help from us for various problems. The use of this service is voluntary. The data collected and voluntarily entered by you will be used by us to answer your support request in the best possible way.
If support cases have to be escalated, it cannot be ruled out that personal data (e.g. e-mail addresses, IP addresses) from debug data (e.g. log files, configuration data) may also have to be passed on to the respective manufacturer for the purpose of finding a solution. If you do not wish this data to be passed on to the manufacturer, you can make an explicit note of this in the relevant support ticket. -
When downloading content
If you wish to download content such as eBooks, videos etc. from our website and/or portal, you must first complete the form shown. Downloading and entering the required information in the form is voluntary. You are not obliged to download the relevant content. However, if you wish to do so, you must enter the following personal data:
- Salutation, gender
- First name and surname
- e-mail address
- Job title
We use this and other voluntarily entered data (such as telephone number) primarily to enable your download. However, the data can also be used within the HubSpot software. Please refer to the section “Use of HubSpot”.
-
When registering for our updates by e-mail
By registering for our updates by e-mail on our website, we will receive the e-mail address you enter in the registration field and, if applicable, other contact details, provided you give us these via the registration form.
The data entered in the registration form will be used by us to send you our updates by e-mail, in which we inform you about our services and news.
If you would like to receive our updates by e-mail, you must complete the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The information on updates by e-mail is necessary in order to make use of this offer. They are used exclusively for sending our updates by e-mail.We measure the success of our updates by e-mail. Technical information is collected, such as information about the browser, your system, your IP address and the time of retrieval. This information is used to improve our services. This also includes determining whether and when the e-mails are opened and which links are clicked. For technical reasons, this information can be assigned to individual e-mail recipients. However, it is neither our intention nor that of the mailing service provider to observe individual users. Rather, we use the evaluations to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
We use HubSpot software and Microsoft e-mail services to send updates by e-mail and measure their success. See the sections “Use of HubSpot” and “Use of Microsoft M365”. -
For applications via our online portal
If you apply for a position that is advertised on the website, BNC processes your personal data for the purpose of handling the application process. In this context, we use a portal of our service provider Ostendis.
In order to process your application, BNC processes application data that you enter in the form fields and, if necessary, upload, such as your CV, references, details of your training, letter of motivation, contact details, reference details and other information, and which you provide to us in order to check your suitability for the respective position.
You are not obliged to provide us with your personal data for the above-mentioned purposes. However, it is not possible to process an application without us collecting and processing personal data in the manner described.
Please refer to the section “Use of Ostendis”. -
Participation in surveys
We give you the opportunity to participate in surveys that are offered via the software solution “involve.me” from Stereosense GmbH, based in Vienna AUT. You will be asked for your surname, first name and e-mail address and will be asked questions about our events, our services and your customer satisfaction, among other things.
Participation in surveys is voluntary.
The data you provide in the surveys will be processed by us in HubSpot (see the section “Using HubSpot”), Stereosense (see the section “Using Stereosense Involve.me”) and Confluence (see the section “Using Atlassian Confluence”). The survey results are communicated to us via Microsoft's e-mail service (for more information on Microsoft, see the section “Using Microsoft M365”)
The data is used to offer survey participants the most relevant products tailored to their needs. -
Participation in events
We organize events for which interested parties can register. Naturally, this data is also treated in strict confidence. The information received from the participant will not be passed on to third parties and will only be used for the organization of the event (including the list of participants with name, company and location).
By agreeing to this privacy policy, the participant agrees that BNC may use this data for its own advertising purposes or pass it on to sponsors and supporters at their request for one-off use in connection with the sponsored event. If the participating person expressly does not wish this, he or she must inform BNC in writing immediately after registration.
The participating person is aware that pictures and/or statements may be taken of him or her at the event and, by participating in the event or making the statement, agrees that BNC may use this material for its own documentation and for sending relevant information about BNC to the participating person. -
Visit to BNC office locations
When you meet us in our offices, we use the “Sign in App” tool to register visitors and inform them about behavior and confidentiality. We also use the Roomz tool to reserve meeting rooms.
For more information, see the sections “Use of Sign in App” and “Use of Roomz”. -
Processing requests for quotations
We offer customized solutions as described on the website. In order to provide you with a quote, we process your contact and billing information. Your contact details may be passed on to the manufacturers whose products you are interested in in order to receive an offer from these manufacturers. The manufacturers' privacy policies can be viewed on their respective websites.
-
Signing of contracts
The Skribble service is used for the legally valid signing of contracts with an e-signature. Your e-mail address can be transmitted to the service provider for the signature invitation as well as personal data mentioned in the contract.
See the section “Use of Skribble”. -
Billing of expenses
The Yokoy service is used for the digital settlement of our employees' expenses. Your name can be transmitted in connection with a consumption if this has been paid for by BNC. This is necessary to prevent corruption.
Please refer to the section “Use of Yokoy”. -
During order processing
For the implementation of customized solutions, contact details of your employees are shared with the project team to ensure successful implementation together with you. All our employees are subject to a confidentiality agreement. Depending on the nature of the project, people in the project team may have access to other personal data. It is the customer's responsibility to take appropriate measures to protect this data and to instruct the employees in the project team accordingly.
Your contact details are processed in the accounting department for the billing of the services provided and the products offered. This data may be disclosed to a trustee as part of the statutory audit. Otherwise, we do not share the data with external service providers. -
Cookies
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies help in many ways to make your visit to our website easier, more pleasant and more useful. Cookies are small text files that your web browser automatically saves on your access device when you visit our website or portal. These text files contain a characteristic character string that uniquely identifies the browser so that we can recognize you when you visit our website or portal again (even if we do not know who you are). Cookies can be set both by the website itself and by external web services. Cookies neither damage your computer's hard disk nor can they record other data stored on your hard disk.
In addition to cookies that are only used during a session and are deleted after your website visit (“session cookies”), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) (“permanent cookies”). Most Internet browsers accept cookies automatically. However, you can set your browser so that it rejects cookies, only stores them for one session, deletes them prematurely or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in the most common browsers:
-
Google Ads
We use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website and portal. Google Ads conversion tracking uses a cookie to determine the effectiveness of web campaigns, which is stored on your computer for up to 30 days after you have clicked on a Google Ads ad. Your data is transmitted to Google for analysis. The information is generally limited to the total number of users who first clicked on an ad and were then redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
Google may also use your data for the needs-based design of websites and for advertising. You can find more information about Google and Google's privacy policy at: www.google.com/privacy/ads/.You can prevent the installation of cookies by selecting the appropriate settings in your browser (see section “Cookies”). However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
-
Use of HubSpot
On our website we use HubSpot, a software from HubSpot Inc, USA. The company also has a registered office in Ireland at 1 Sir John Rogerson's Quay, Dublin 2, Ireland. This software is used in the so-called area of inbound marketing and helps us to better coordinate and optimize our marketing strategy by means of statistical analyses and evaluation of logged user behavior, among other things. This involves the use of so-called “web beacons” and also “cookies”, which are stored on your computer and enable us to analyze your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages accessed) on behalf of BNC in order to generate reports on the visit and the BNC pages visited.
If you fill out a form to download a document, we can also use HubSpot to record your visits to the website and the portal page using your additional personal details (in particular your name/email address) and, if necessary, provide you with targeted information on your preferred topics.
HubSpot informs us with push emails via the Microsoft Outlook email service (for more information on Microsoft Outlook, see the section “When using our contact form”)For more information about how HubSpot works, please refer to the HubSpot Inc. privacy policy, available at: https://legal.hubspot.com/privacy-policy.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your browser settings (see section “Cookies”).
-
Use of Stereosense invove.me
The tool Involve.me is used for surveys. The operator Stereosense GmbH, Gußhausstraße 15/8, 1040 Vienna, Austria stores the data within the European Union.
You can find more information about Stereosense GmbH and the privacy policy of involve.me at: https://www.involve.me/data-processing, https://www.involve.me/privacy. -
Use of Kontainer
The Kontainer tool is used to store and manage images and videos. The operator Kontainer S/A with offices in Munich, Germany and Copenhagen, Denmark stores the data within the European Union in certified data centers in accordance with GDPR requirements.
You can find more information about Kontainer S/A and Kontainer's privacy policy at: https://kontainer.com/security-and-backup -
Use of Microsoft M365
For efficient data exchange with our customers, we use the Defacto standard from Microsoft Office on Windows end devices. This software has been optimized with regard to data protection settings. The Microsoft M365 services are used for collaboration, including Teams, Exchange online, OneDrive and others. Your data may be stored at Microsoft (based in Redmond, USA) in Switzerland. A transfer to the USA and third countries cannot be ruled out. You can find further information at: https://privacy.microsoft.com/en-GB/privacystatement
-
Use of Sign in App
The Sign in App tool is used to provide information to visitors and to track the presence of guests in our offices. The operator Sign In App Ltd, based at 4 Waterside Way, Northampton, England, NN4 7XD, stores the data in the United Kingdom.
You can find more information about Sign In App Ltd and the Sign in App privacy policy at: https://signinapp.com/legal -
Nutzung von Roomz
The Roomz tool is used to efficiently manage and display the occupancy of meeting rooms. The operator ROOMZ SA, Passage du Cardinal 5, 1700 Fribourg, Switzerland does not store any personal data of BNC visitors but ensures the data transfer between the booking calendar and the room occupancy screens.
You can find more information about ROOMZ SA and Roomz's privacy policy at https://roomz.io/privacy-policy/ -
Use of Atlassian Confluence
For the efficient storage and processing of your data, we use, among other things, the “Confluence” service from Atlassian. Pty Ltd, based in Sydney, AUS.
Atlassian is an international company that maintains servers worldwide. If Atlassian processes your data internally in unsafe third countries, they use the standard contractual clauses of the European Commission, which are also approved by the FDPIC.
Atlassian may also use your data for the needs-based design of websites and for advertising. You can find more information about Atlassian and Atlassian's privacy policy at: https://www.atlassian.com/legal/privacy-policy#what-this-policy-covers -
Use of Ostendis
For your applications for open positions at BNC, we use the service provider Ostendis AG, Seetalstrasse 35, 5706 Boniswil, Switzerland, for the efficient storage and processing of your data.
The data is processed exclusively in Switzerland and only disclosed to persons who are directly involved in the application process.
You can find more information about Ostendis AG and the Ostendis privacy policy at: https://www.ostendis.com/en/privacy -
Use of Skribble
The digital, legally valid signature of the service provider Skribble AG, Förrlibuckstrasse 190, 8005 Zurich, Switzerland, is used for the efficient processing of documents to be signed.
The data is processed confidentially at all times and in compliance with the applicable law, in particular the Swiss Data Protection Act (DSG) and the General Data Protection Regulation of the European Union (EU-GDPR), as well as in accordance with these data protection provisions.
You can find more information about Skribble AG and Skribble's privacy policy at: https://www.skribble.com/en-eu/privacy/ -
Use of Yokoy
The service provider Yokoy Schweiz AG, Förrlibuckstrasse 181, 8005 Zurich, Switzerland, is used for the efficient processing of expense receipts.
The data is processed in accordance with Swiss (Federal Act on Data Protection; FADP and the associated ordinance) and European data protection regulations (in particular the General Data Protection Regulation GDPR).
You can find more information about Yokoy Schweiz AG and Yokoy's privacy policy at: https://yokoy.io/legal-security-compliance/privacy-policy/ -
Use of IT security services
For the purpose of security and the protection of systems and data, we use external service providers who check content for security problems (SPAM, malware, etc.). Exactly which data is collected and stored naturally depends on the service in question. However, we always endeavor to only use service providers that collect data very sparingly or only store data that is necessary for the fulfillment of the service offered and process the data in compliance with the applicable laws. In principle, the service provider may store data such as name, address, IP address, e-mail address and technical data such as browser type or browser version. If you would like more information on this, please contact our contact person for data protection law (see the relevant section above).
For our own protection, we do not disclose the list of service providers in the security environment and refer to Art. 20 para. 3 letter b and/or c of the Swiss Data Protection Act.
Basis for Data Processing
Where we obtain the consent of the data subject for the processing of personal data, the legal basis is Art. 30 para. 2 lit. b of the Swiss Data Protection Act (FADP), or Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, the legal basis is Art. 31 para. 1 FADP, or Art. 6 para. 1 lit. b GDPR. This also applies to processing operations necessary for carrying out pre-contractual measures.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Art. 31 para. 1 FADP, or Art. 6 para. 1 lit. c GDPR.
In cases where the vital interests of the data subject or another natural person require the processing of personal data, the legal basis is Art. 31 para. 1 FADP, or Art. 6 para. 1 lit. d GDPR.
If the processing is necessary for the purposes of a legitimate interest pursued by our company or a third party, and such interest is not overridden by the interests, fundamental rights, and freedoms of the data subject, the legal basis is Art. 31 paras. 1 and 2 FADP, or Art. 6 para. 1 lit. f GDPR.
Disclosure of Your Data
We only disclose your personal data to third parties if you have expressly given your consent, if there is a legal obligation to do so, or if it is necessary for the enforcement of our rights, in particular for asserting claims arising from a contractual relationship. In addition, we share your data with external service providers (e.g., in the case of online applications—see relevant section above) to the extent necessary for contract execution. In particular, it is possible that our external IT service providers may temporarily access your data if required to resolve IT issues.
These service providers use your data exclusively for the purpose of fulfilling their contractual obligations and not for any other purposes.
As part of the application process, the information you provide will be shared with all decision-makers involved in the recruitment process (typically HR and potential supervisors). For certain positions, we may—subject to the candidate's consent—commission an external assessment. To ensure impartiality, this assessment is conducted externally, and personal data is shared with our external partner for this purpose. Furthermore, we may process personal data to conduct statistical evaluations (e.g., application timing), but such processing is carried out in an aggregated and anonymized form.
-
General
We store your personal data for as long as is necessary for the purposes stated in this privacy policy. We may also retain personal data for as long as necessary to comply with legal requirements or if we have a legitimate interest in storing it, e.g. for documentation and evidence preservation purposes and for the protection and defense of legal claims.
Google may also use your data for the needs-based design of websites and for advertising. You can find more information about Google and Google's privacy policy at: www.google.com/privacy/ads/.
You can prevent the installation of cookies by selecting the appropriate settings in your browser (see section “Cookies”). However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. -
Application procedure
As part of the application process, we generally store personal data for the duration of the application process. If the application does not result in an employment relationship, we generally delete the data after the application process has been completed, but at the latest after a period of 24 months. If the candidate gives us their consent to store the data for longer in order to be able to suggest other suitable positions, we will store it for a maximum period of 36 months. In this case, we may also forward the personal data to the respective location that has advertised the vacancy in question for the purpose of assessing suitability for the position in question. If the application procedure results in an employment relationship, the information in the application dossier will be transferred to the personnel dossier where necessary.
-
Newsletter
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you unsubscribe, provided that there are no statutory retention obligations. Your data will also be deleted by us immediately if your registration is not completed. We reserve the right to delete your data without giving reasons and without prior or subsequent information.
How Do We Protect Your Data?
We protect your personal data during collection, storage and processing by taking appropriate technical and organizational measures against loss, destruction and manipulation as well as against access, modification or dissemination by unauthorized persons.
We also take data protection within the company seriously. Our employees and the service companies commissioned by us have been sworn to secrecy and to comply with data protection regulations.
-
Right to information
You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have a right to information about which of your data we are processing. A request for information must be made in writing and must include proof of identity.
-
Correction and deletion requests
If necessary, you can have incorrect personal data corrected.
You also have the right to have us delete personal data about you if:- the data is either no longer required;
- the legal basis for the processing no longer applies due to the withdrawal of your consent
- there are no longer legitimate grounds for the processing;
- your data is processed unlawfully;
- a legal obligation requires this.
According to the relevant legal provisions, the right does not exist if :
- the processing is necessary for exercising the right of freedom of expression and information
- your data has been collected on the basis of a legal obligation;
- the processing is necessary for reasons of public interest
- the data is necessary for the establishment, exercise or defense of legal claims.
We would like to point out that if your data is deleted, you will not be able to use our services, or not to the full extent.
-
Revocation of consent
You can withdraw your consent to certain data processing at any time with effect for the future. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Please note that statutory retention periods apply to certain data. This data must be stored by us until the deadline expires. We block these files in our system and use them exclusively to fulfill our legal obligations. -
Right to object
You have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of a public interest, in the context of a legitimate interest or in the context of profiling. You only have this right if there are special circumstances against the storage and processing.
-
Right to data portability
You have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data can be sent either to you yourself or to a controller named by you.
-
How do you exercise your rights?
If you have any questions regarding data protection, wish to exercise your data protection rights, or have any concerns related to the processing of personal data in connection with job applications, please contact our data protection representative by sending an email to datenschutz@vinci-energies.ch.
Please note that when communicating via unencrypted email, we cannot guarantee the complete security of data during transmission to our IT systems. Therefore, for confidential information, we recommend using encrypted communication or postal mail.
Reporting Security Incidents
If you are affected by or become aware of a security incident related to BNC, please contact our Security Incident Response Team at abuse@bnc.ch. Please forward any supporting evidence and provide a brief description of the incident. We will contact you using the contact details you have provided and inform you of the next steps.
Copyright
The content, information and material of the website http://www.bnc.ch/ und and the BNC portal site are protected by copyright. VINCI Energies Switzerland authorizes the reproduction of the content, information and material on the website and portal page for personal, non-commercial use only. Otherwise, the reproduction, distribution, modification and forwarding of the content, information and material on this website and on the portal site are prohibited without the consent of VINCI Energies Switzerland.
Disclaimer
VINCI Energies Switzerlandcreates the website and the portal page and the information contained therein with the greatest possible care. All information on the BNC website and portal site is provided without any guarantee of accuracy. We accept no liability for the use of the website and the newsletter and the information contained therein.
VINCI Energies Switzerland also accepts no liability for the content of other websites that you can visit via hyperlinks or from which reference is made to this website. These are external offers over whose content we have no influence and for which VINCI Energies Switzerland is not responsible.
The information on this website and on the portal page is for information purposes only. The use of the information does not create a contractual relationship between VINCI Energies Switzerland and the user.
Can This Privacy Policy Be Changed?
The version of the privacy policy published on this website, which you can access and print out at any time on our website at https://bnc.ch/en/privacy-policy, is the current version.
The privacy policy is not part of a contract with you. We can therefore amend it at any time and without prior notice.