1. PLEASE READ CAREFULLY
Welcome to the Privacy Notice of Indigita SA (thereafter Indigita, “we”, “our”, or “us”). Herein we refer to “you” (or “your”) as a client, a business partner, a prospect, user of our website, platforms, applications, and social media pages, or a job applicant of Indigita. We are dedicated to respecting your privacy and protecting your personal data.
This Privacy Notice is not intended to override the terms of any contract you have with us, nor any rights you may have under other applicable data privacy laws.
Prior to accessing or using our Sites, please read this notice and make sure you fully understand our practices in relation to processing your personal data. If you read and fully understand this Privacy Notice, and remain opposed to our practices, please refrain from using our Sites.
Here are a few terms we may use in this document:
“Personal data” is information relating to you as a living, identifiable individual.
“Processing” means collecting, recording, organising, using, disclosing, storing, and deleting your data.
We are “data controller” for the data that you share with us as a prospect, client, supplier, visitor of our events (offline and online), websites or platforms, or a candidate applying to a position within our company.
“Profiling” is any automated processing of personal data intended to evaluate, analyse, or predict an individual's behavior, preferences, interests, reliability, location, or movements.
2. CONTACT INFORMATION OF INDIGITA AND THE DATA PROTECTION ADVISOR
If you have any questions or concerns regarding this Privacy Notice, or if you wish to exercise your data protection rights, please contact us:
Data Protection Advisor
Rue de Lausanne 80
CH-1211 Geneva, Switzerland
3. WHICH PERSONAL DATA IS COLLECTED AND PROCESSED BY INDIGITA?
We collect and process personal data that we receive from you and/or that we generate as part of the business or prospecting relationship with you. Personal data includes data that directly identifies you as an individual (e.g., name, email address, telephone number) or that allows for identification when used in connection with other information (e.g., job title, demographic information such as gender, location, or technical information such as IP address).
In addition to personal data received directly from you, we may also collect and processes personal data about you from public sources (e.g., the Internet, social media) or data we receive from the BRP Group companies (the list of companies is available on the website www.brpsa.com) or third parties.
We process the following personal data in particular:
Personal and professional contact information – personal data arising from the preparation and performance of contracts (e.g., name, address, address, email address date of birth, company name and job title, correspondence, and inquiries);
Technical information - personal data that is transmitted and automatically collected during the use of the Sites and web analytics tools such as Google Analytics. This may include date and time of access, name of files downloaded, as well as the amount of data transmitted and the access result, your web browser, the browser language, and the requesting domain and IP address;
Marketing, advertising, and sales data – personal data arising from marketing, advertising, and sales efforts;
Publicly available data - social media contact details (e.g., username, name, contact details);
Jobs applicant information & HR data – personal data arising from your job applications, received through third parties (e.g., recruiters) or our HR-related efforts (e.g., candidate search).
Other personal data comparable to the categories outlined above.
4. FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE USE YOUR PERSONAL DATA?
We only collect personal information that is necessary for specific, lawful purposes.
1. To fulfil contractual obligations or take steps prior to entering a contract.
This is necessary to provide you with the contractually agreed services, to perform contracts with you, as well as to grant you access to our platform based on a subscription with your company or a demo access prior to potentially entering a contract.
2. To pursue and protect legitimate interests of Indigita
Communication with you in relation to your inquiries and your potential interests;
Initiation of a business relationship and contract;
Identification and analysis of your potential needs, and optimisation of the client contact;
Business development, advertising, marketing, market research, or surveys;
Safeguarding of Indigita’s IT security and IT operations;
Outsourcing of Indigita’s functions and services to the BRP Group companies, or to service providers and other agents appointed by Indigita;
3. On the basis of your consent
In particular cases, your consent is requested for the processing of your personal data. Provided your consent has been obtained, we may process personal data for the specific purposes where indicated. You may withdraw your consent at any time. Please note that the withdrawal of consent has no retroactive effect on the processing of your personal data.
4. Recording of electronic communication
We may record and archive electronic communication between Indigita and you with or without a prior announcement. The recordings may be used to comply with legal and regulatory obligations, for compliance or performance checks. We may also record and archive quotes, queries, complaints for training and quality assurance purposes.
5. To assess job applicants and to perform an employment contract with you
We need to review compatibility with a position we advertised on our Sites or third-party sites (information provided in CV, work experience, references, or compensation details, as well as publicly available information in public domain).
6. Use of identifiable photographs and comments
We may use your photos and comments, including personal stories that you share with us. In this case we will make a prior announcement.
7. On the basis of regulatory requirements and legal obligations
The activities of Indigita are subject to various Swiss and foreign laws and regulations. We may archive logs of user activity to comply with legal and regulatory obligations (e.g., anti-money laundering), compliance checks, as well as reporting, risk, dispute, and record management.
5. WHO CAN ACCESS YOUR PERSONAL DATA?
1. Disclosure to the BRP group companies
We may disclose personal data to the BRP Group companies, which may process such data to perform tasks and services relating to contracts and business relationships.
2. Disclosure to business partners and other third parties
The advertising, marketing and communication agencies delivering and analysing our campaigns; as well as for marketing and sales-related activities; reporting, logistics, printing services.
The data processing entities acting upon our instructions: recruitment agencies, hosting or security providers, IT developers;
3. Disclosure to authorities and regulatory bodies
Where required by law or regulation, or necessary to fulfill security, legal or fiscal obligations and to protect our legitimate rights and interests, we may disclose your personal data to third parties. This may, among others, include public bodies and institutions.
Where the third parties have access to your personal data, who may be based outside the country from which you have accessed the Sites, Indigita requires them to comply with appropriate confidentiality, data protection, and data security requirements.
6. DOES INDIGITA TRANSFER PERSONAL DATA ACROSS BORDERS?
We may disclose personal data to third parties outside of Switzerland, including to jurisdictions where the BRP Group companies are established or located or to other jurisdictions, including the EU/EEA member states and countries with an adequate level of data protection as specified by the European Commission, or other jurisdictions around the world where any of the third parties as outlined under section 5 above are located or where Indigita promotes and provides its services.
Individual countries to which we may transfer your personal data may potentially not have laws that afford the same degree of protection to personal data as in Switzerland and the EU. In these cases, we will generally ensure an adequate level of data protection by e.g., contractual, organisational, and technical measures. These include agreements that have been approved by the European Commission as well as the Swiss Federal Data Protection and Information Commissioner (FDPIC), known as standard contractual clauses (SCC). You can request an example of the data transfer agreement usually employed by Indigita by contacting the Data Protection Advisor (see section 1).
7. HOW DOES INDIGITA STORE, SECURE AND RETAIN DATA?
We take all reasonable technical and organisational measures to protect the personal data we hold against loss, unauthorised access or disclosure and against other misuse. Your personal data will not be sold or disclosed to any other third parties except as provided in the Privacy Notice.
When the personal data that we collect is no longer required for the given purpose, or for legal requirements, we destroy or delete it in a secure manner. In general, the following duration periods may apply:
Personal data of user’s account on our Sites: until the account is deleted; after this period, we will only store those data necessary for fulfilling security, legal, accounting or fiscal obligations.
Personal data or users requesting quotes, applying for jobs, sending communication, complaints or enquiries: until the final processing of user’s request/complaint and subsequently retained where necessary for pursuing our legitimate interest.
8. WHAT ARE YOUR RIGHTS UNDER DATA PROTECTION LAW?
The applicable data protection legislation grants you the following rights:
to request that information on personal data held on record by Indigita be shared with you;
to demand that information be rectified should it be incorrect;
to ask that your personal data be deleted if Indigita is not permitted or is not legally obliged to retain the personal data;
to demand that the processing of this personal data shall be restricted if you have disputed the accuracy of the personal data stored by Indigita and it has not yet completed its assessment,
you object to the deletion of your personal data although Indigita may lack a legal basis for processing your personal data;
to object to the processing by Indigita if Indigita only processes personal data based on its legitimate interests – in this case, we will cease the processing unless this is outweighed by Indigita’s interests or we need to process the data in order to exercise Indigita's rights, or the processing is based on your consent (e.g., for direct marketing) ;
to demand that your personal data which you have provided to us be transferred to a third party indicated by you in a generally useable, machine-readable, and conventional format;
to demand that an individual automated decision be reviewed by a natural person. You also have the right to state your view.
You also have a right of appeal (as far as this affects you) to the respective data protection supervisory authority (e.g., the FDPIC, mentioned in section 6).
9. WHAT PERSONAL DATA ARE YOU REQUIRED TO PROVIDE US?
Indigita requires you to provide some personal data necessary for the acceptance and execution of a business relationship and for the fulfilment of the associated contractual and/or legal obligations. Unless we obtain this data from you, we will most likely be unable to enter into a contractual relationship with you and/or provide the agreed services.
10. IS THE DECISION-MAKING AUTOMATED?
As a basic principle, we do not use automated decision-making for commencing and conducting business relationships. If we apply this procedure in exceptional cases, we will inform you accordingly where this is a statutory requirement.
11. IS YOUR DATA PROCESSED AUTOMATICALLY AND USED FOR PROFILING
Indigita may process your personal data automatically in certain areas with the aim of evaluating certain personal criteria. If we apply this procedure, we will inform you accordingly and ask for your consent. Profiling is any type of automated processing of personal data. This consists of using personal data to evaluate certain personal aspects relating to you, in particular to analyse or predict aspects concerning personal preferences, interests, reliability, behaviour, and location or change of location.
We may use, process, and combine publicly available data as well as third party data about you for this purpose. Profiling may take place, for example, to use assessment tools to provide you with relevant and appropriate information on our products and services. This enables us to carry out demand-based communication and advertising, including market and opinion research.
12. WHERE CAN YOU FIND THE CURRENT PRIVACY NOTICE?
You can find the applicable version at www.indigita.ch/privacy-notice
13. HOW CAN YOU CONTACT US?
If you have questions about your personal data treatment, please contact your relationship manager or Indigita’s Data Protection Advisor mentioned in section 2, who will be pleased to assist you.
1. WHAT ARE COOKIES?
Cookies are small pieces of information (text files) that websites place and store on your computer, mobile phone or any other device that can access the Internet when you visit a website. We use the term “cookies” for any technology that collects information from your device, such as information about your use of our apps and websites (Site), about your device such as the device ID, IP address and browser type, demographic data and if applicable the URL of the linking page. We also use web beacons or pixel tags to allow us to count visitors who have viewed our pages or read our promotional e-mail messages/newsletters. They are not used to access your personal information without your consent.
Cookies can remain on your computer or mobile device for various periods of time. Some cookies are stored temporarily on your computer or other device only while your browser is open. These are deleted automatically from your computer or other device once you close your browser. Other cookies remain on your computer or other device after you close your browser. They can be used by websites to recognise your computer when you open your browser and browse the Internet again.
Keeping you signed in;
Keeping your preferences;
To provide you with the service you chose to receive from us;
Understanding how you use our Sites;
To monitor and analyse the performance, operation, and effectiveness in order to improve the Sites;
To understand and improve the impact of our marketing campaigns;
For security needs and fraud-protection purposes and in order to identify and prevent cyber-attacks.
Cookies that are used by Indigita should be divided into two types:
“First-party Cookies” are cookies that are placed by Indigita;
“Third-party Cookies” are cookies that are placed and used by third-party companies which are Indigita partners.
It is important to note that we cannot access third-party cookies; nor can other third-party organisations access the data in the Cookies we use on our Sites. indigita does not allow third parties to use the Cookies for any purpose other than those described in the next sections.
Depending on their function, cookies may have different durations. There are session cookies and persistent cookies:
Session cookies only last for your online session. It means that the browser deletes these cookies once you close your browser.
Persistent cookies stay on your device after the browser has been closed and last for the period of time specified in the cookie.
The cookies used on our website fall into one of four categories:
Essential Cookies let you move around the Sites and use essential features like secure and private areas.
Analytic Cookies let us understand how you use our website (e.g., which pages you visit), to provide statistics on how our website is used, improve the website by identifying any errors, and performance issues.
Functional Cookies are cookies used to remember choices users make to improve their experience.
Marketing Cookies are used to collect information about the impact of our marketing campaigns performed in other websites on users and non-users.
5. ADDITIONAL INFORMATION
Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.
Please note that deleting our cookies, disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our Services, or may otherwise adversely affect your user experience.
To opt out from and prevent your data from being used by Google Analytics across all websites, check out the following instructions: https://tools.google.com/dlpage/gaoptout.
We reserve the right to make any changes and corrections to this Notice. Please refer to this page from time to time to review these and any new additional information presented.
Indigita SA 2023