IDQ Privacy Statement (Privacy Statement) explains how IDQ uses personal data collected by us. Personal data is information that relates to you and may identify you as an individual. This Privacy Statement applies to ID Quantique SA and its affiliated companies (collectively, “IDQ”, “we”, “us”, “our”), where we are acting as a data controller; in other words, where we determine the purposes and means of the personal data processing.

We do not have to receive your acceptance of this Privacy Statement, but if we need to receive your consent before using your personal data, we will explain the purpose of such use and invite you to agree to or refuse it. You can withdraw your consent at any time by contacting us (see section 1 below).

This Privacy Statement applies to our website (https://www.idquantique.com/), applications, services, and products. Our website may contain links to websites or services not controlled by us (third-party services). Such third-party services are provided by other persons (third parties), and their personal data processing practices may differ from ours; we encourage you to read privacy notices of such third parties to be aware of how they use personal data.

This Privacy Statement is based on the terms used by the Swiss Federal Act on Data Protection (revFADP) and the European General Data Protection Regulation (GDPR).

If you have any questions or concerns about our use of your personal data, feel free to contact us.

1. Who we are and how you can contact us or relevant authorities

Who we are:

We are ID Quantique SA, a Swiss company with our principal place of business at Rue Eugène-Marziano 25,1227 Les Acacias, Switzerland.

How to contact us:

You can contact us by email at info@idquantique.com or by mail to Rue Eugène-Marziano 25,1227 Les Acacias, Switzerland.

If you have questions about ID Quantique’s privacy policy or privacy practices you can contact us at dataprotect@idquantique.com.

If we do not satisfactorily answer your questions or concerns, you may also contact the following for advice, support, or complaints:

the Federal Data Protection and Information Commissioner (FDPIC); or your national data protection authority.

2. Information we may collect about you

2.1 Information you give us

This is information about you that you give us by filling in forms on our website or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register on our website, subscribe to our newsletters, making inquiries about our products or services, participate in discussion boards or other interactive functions on our website, report a problem, or otherwise liaise with us. The information you give us may include your name, address, e-mail address and phone number; your employer’s name and address and your job title; billing and shipping addresses, payment methods.

Please, note that if you choose not to provide us with certain information about you, you may not be able to use all or a part of our services.

2.2 Information we collect about you automatically

2.2.1 Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

2.2.2 Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.

2.2.3 Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our website. For detailed information on the cookies that we use and the purposes for which we use them, see our Cookie Notice.

2.3 Information we receive from other sources

This is information we receive about you from various third parties, including our service providers, business partners, or social media platforms. We may also collect information about you from publicly available sources.

3. Purposes of processing and legal bases

Below you can see the purposes for which we may process personal data. Specific data protection laws, for example, the GDPR, require us to have a justification (so-called legal basis) to process personal information. For individuals residing the countries of the European Union, United Kingdom, or European Economic Area, we specified legal bases for the processing of their personal information.

3.1 Transactions

We may process your personal information for the purposes of the processing and fulfilment of orders, supplying our goods or services, generating invoices or other payment-related documents, and to allow you to participate in interactive features of our service. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.

3.2 Business operations

We may process your personal information for the purposes of operating our website, improving our services and products, credit control, record keeping, providing you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about, notifying you about changes to our products and services, internal operations, including troubleshooting, data analysis, testing, for security and fraud prevention, obtaining or maintaining insurance coverage, managing risks and/or obtaining professional advice, for research and statistical purposes, and where necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interest, namely the proper administration and improvement of our website, services, and business.

3.3 Legal compliance

We may process your personal information for the purposes of for compliance with a legal obligation to which we are subject.

3.4 Direct marketing

We may process your personal information for the purposes of creating, targeting, and sending direct marketing communications. If we are obliged to obtain your written consent before approaching you with our sending direct marketing communications, we will ask you to provide us with such consent.

3.5 Automated decision-making and profiling

We do not use your personal information for automated decision-making or profiling purposes.

4. Providing your personal information to third parties

4.1 We may share your personal information with third parties to achieve above purposes. We share personal information with service providers (processors) that act as our agents to perform tasks on our behalf and under our instructions. Such service providers may include payment processing providers, shipping companies, hosting services providers.

4.2 If certain cookies are enabled on your device, then we may also share cookie-related information with related service providers, such as analytics. We use Google Analytics on our website. You can read more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

4.3 We may also share your personal information:

4.3.1 within the family of companies controlled by IDQ for internal reasons, primarily for business and operational purposes;

4.3.2 if we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of our assets, your personal data will likely be among the assets transferred; and/or

4.3.3 when legally required to do so (e.g., to cooperate with law enforcement investigations or other legal proceedings).

5. International transfers of your personal information

To provide you with our products or services, we may need to transfer your personal information to locations outside the jurisdiction in which you provide it. We will take appropriate steps to ensure that your personal information is treated securely and in accordance with this Privacy Statement as well as applicable data protection laws.

6. How we store your personal data

6.1 Place. All information you provide to us is stored on our secure servers in Switzerland and Germany.

6.2 Duration. We retain your personal data only as long as reasonably necessary to provide you our services and as required by applicable laws and regulations. If you opt for deletion of your personal data, we may keep minimal necessary data about you for the period of time required for us to comply with legal obligations, resolve disputes or enforce our agreements.

6.3 Security. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to help prevent unauthorised access. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

7. Your data protection rights

Under data protection laws, you may have specific rights in relation to our processing of your person data such as the right to access, rectification, right to object, to complaint, erasure, and blockage. You are not required to pay any charge for exercising your rights. If you make a request, generally, we have one month to respond to you. Please contact us (see section 1 above) if you wish to make a request in relation to:

a. Your right of access – you have the right to ask us for copies of your personal information;

b. Your right to rectification – you have the right to ask us to correct personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

c. Your right to erasure – you have the right to ask us to delete your personal information;

d. Your right to restriction of processing – you have the right to ask us to restrict the processing of your personal information;

e. Your right to object to processing – you have the right to object to the processing of your personal information;

f. Your right to data portability – you have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

8. Children and sensitive information

None of our services are intentionally directed at children under 16. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have unknowingly collected personal information from a child under the age of 16, we will make reasonable efforts to delete such information from our records.

We do not collect or receive any sensitive/special categories of personal information.

9. Changes to our Privacy Statement

9.1 We may change our Privacy Statement from time to time. Any changes we make to our Privacy Statement in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Statement.

Last update: 21/11/2023