PRIVACY POLICY

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are HSS GROUP AG and process your data as data controller. This means that we are responsible for how we use and protect your personal data.

What do we use your data for? We use the data you have provided online or through any other means to respond to your queries and feedback, provide you with services or supply you with the requested products or monitor the comments made on our blog.

Why do we have them? We are entitled to process your data for different reasons. When you fill out a form or send an e-mail in which you ask us a question or give us feedback, we have a legitimate interest in answering it. We have a legal obligation to issue an invoice in which your data is collected, when the service is carried out.

With whom do we share your data? We will only share the data with those companies that collaborate with us to attend the requests received and provide our services or facilitate the products, banks and organizations required by law. In no case we sell your data to third parties.

What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to our use of data that you have previously authorized us to use, to transfer it and not to be subject to automated individualized decisions.

In processing your personal data, we apply the following principles to ensure the best protection for you:

Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
Principle of data minimization: We will only request data that is strictly necessary in relation to the purposes for which we require it. As little as possible.
Principle of limitation of the conservation period: the data will be kept for no longer than necessary for the purposes of processing, depending on the purpose, we will inform you of the corresponding retention period, in the case of subscriptions, we will periodically review our lists and delete those records inactive for a considerable time.
Principle of integrity and confidentiality: Your data will be treated in a way that ensures adequate security of personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users’ data by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all persons who maintain contact with us, regardless of the means they have used to communicate (online form, by telephone or e-mail, in person).

We like to be transparent about what we do with your personal data, that you understand the implications of the uses we carry out, or the rights you have in relation to your data. For this reason we keep our Privacy Policy, Legal Notice and Cookies Policy updated. You get these information on this website.

If you have any questions or would like more information about the privacy policy, please read on.

HSS GROUP AG, is committed to complying with the legislation in force at all times regarding the processing of personal data. Through the following privacy policy HSS GROUP AG, in accordance with the requirements of the GDPR and the LOPDGDDD, informs users and persons whose data is processed:

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The data controller is HSS GROUP AG:

Company HSS GROUP AG

Address Hohlstrasse 534, 8048 Zurich, Switzerland

Phone 41 (0)44 504 00 00

Web www.hssgroup.ch

E-mail info@hssgroup.ch

HSS GROUP AG informs the user that the data provided through browsing our website, the various data collection forms or sending emails, will be processed by HSS GROUP AG and that such treatment is included in the Register of Processing Activities managed by HSS GROUP AG in accordance with the provisions of the GDPR.

WHAT ARE YOUR PERSONAL DATA USED FOR?

At www.hssgroup.ch, we process data both from users of our website and from third parties who maintain relationships with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the basis of legitimacy according to the category of persons whose data we process. The persons whose data we process according to the type of relationship they have with HSS GROUP AG are classified below

Web users

What data do we collect from our website users?

Data of users who fill in any of the available forms: The personal data requested by HSS GROUP AG includes:
Identification data: name and e-mail address
Data related to the request
Data of users browsing our website: Data provided by cookies and Google Analytics.
Data of users who make comments on our blog

For what purposes will we process your personal data?

When the user accepts our privacy policy, he/she authorizes us to use the personal data provided for the following treatments:

To send you the information and provide you with the service you request through the various forms available on our website.
To manage your comments on our blog.
To send you commercial communications about offers, activities and promotions of HSS GROUP AG and the industry that may be of interest to you by conventional or electronic means when you have ticked the box that you wish to receive information.

How do we get your data?

We obtain your data through:

The form filled in by the web user for the purpose stated therein. The form is subject to the acceptance of this privacy policy by means of the indicated box.
The navigation data we obtain from the different cookies that the user accepts when accessing www.hssgroup.ch for the first time.

What is the legitimacy for the processing of your data?

The express consent of the user (Article 6.1.a. GDPR) expressed through the completion of the various forms, and participation in our blog is what legitimizes the treatment by HSS GROUP AG. The user may revoke the consent given at any time, although if the consent is revoked, this does not affect the data processing carried out prior to the revocation of consent.

Legitimate interest for the elaboration of browsing profiles and to detect preferences through the installation of cookies.

The execution of a contract or the adoption of pre-contractual measures when the customer makes a request through the various forms available to the user on our website or requests information on the services provided by HSS GROUP AG.

Suppliers

What data do we collect from our suppliers?

Supplier identification data: the personal data requested by HSS GROUP AG includes:

Identification data: name and surname, telephone, address and e-mail address
Employment and professional data
Activities and business

How do we get your data?

We obtain your data through:

The signature of the contract that binds us, the acceptance of the budget presented, the receipt of invoices from the supplier and the signature of the Data Processor contract if applicable for the service provided.

For what purposes will we process your personal data?

Manage the information related to the data of our suppliers of goods and services, as well as their representatives.

Maintenance of the contractual relationship with our suppliers.

Management of payments and collections related to the contracts that bind us.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided, not being possible its realization otherwise.

In the legitimate interest for the management of data relating to representatives of suppliers of HSS GROUP AG.

Clients

What data do we collect from our clients?

Data of customers who fill in any of the forms available at www.hssgroup.ch as well as in the physical store of HSS GROUP AG.
Identification data: name and e-mail address
Data related to the request
Data of the clients that have been attended in our store in person:
Identification data: Name and surname, postal and e-mail address, telephone number, billing address
Customer data obtained from our contracts and quotations

How do we get your data?

If you are an online customer, we obtain your data through:

the form that the user fills out to request information and / or a quotation. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
the navigation data we obtain from the different cookies that the customer accepts when accessing www.hssgroup.ch for the first time.

If you are an in-person customer, we obtain your data through:

The customer registration form.
Acceptance of the quotation provided.
The signed contract.

For what purposes will we process your personal data?

To generate and manage the documentation associated with your requests.
To provide you with information about offers, products and services.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided or the product supplied, not being possible otherwise.

In the user’s consent to being able to manage our blog. The user can revoke at any time the consent given.

Job Applicants and Candidates.

What data do we collect from applicants?

Candidate data requested in the ‘work with us’ form by HSS GROUP AG:
Identification data: nombre y apellidos, teléfono, dirección postal y electrónica
Academic and employment data
Data included by the candidate himself/herself as attached academic and employment documents

How do we get your data?

We obtain your data through:

The delivery of a resume at our facilities or by filling out the ‘Work with us’ form on our website.

For what purposes will we process your personal data?

The personal data provided by the candidates are used only for the selection processes that are open or will be carried out in the event that the data provided are for our employment exchange.

What is the legitimacy for the processing of your data?

In the consent of the user through the incorporation of their data and curriculum on the website of HSS GROUP AG to participate in the selection processes that are active as well as in future processes that may be carried out as long as they do not object to the processing of their data.

Social Network Contacts

What data do we collect?

Identification data in the Social Network: HSS GROUP AG will not ask you for any data beyond what you have entered in your user profile.

For what purposes will we process your personal data?

To answer and manage your inquiries, requests or petitions.

To interact with you as long as you are part of our community of followers.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract binding you to the relevant social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

www.hssgroup.ch also collects information from web users not provided directly by them through cookies. The data collected through cookies and other devices will be used for statistical studies and profile analysis in order to provide a better service through our website, for which the GOOGLE ANALYTICS application will be used, which is a Google tool to help analyze website owners how their visitors interact with their properties. You can obtain more information on their privacy policy at https://www.google.es/intl/es_ALL/analytics/learn/privacy.html

Google, including all its tools, carries an international transfer of data, as they are hosted in the USA. Therefore, and given that the EU-US Privacy Shield Framework has been deemed unlawful since the judgment of the Court of Justice of the European Union in case C-311/18 23 July 2020, appropriate safeguards under Article 46 of the GDPR used to transfer data from the EEA to any third country must be adopted.

www.hssgroup.ch will always try to establish appropriate mechanisms to obtain the consent of the user for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing of the existence of cookies and that if you continue browsing our site you consent to the installation of cookies. The acceptance of the installation of cookies entails the acceptance of the conservation of the IP address in the records of www.hssgroup.ch, along with the date of acceptance, for a period of one year, in order to demonstrate the consent given. You can obtain more information in our “Cookies Policy”.

HOW LONG DO WE KEEP YOUR DATA?

Web users

Data that are processed on the basis of the web user’s consent will be kept as long as they are relevant for the purpose for which they were collected, and the consent is not revoked.

Those data that are processed based on legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Those data that are processed on the basis of the execution of a contract or the adoption of pre-contractual measures, the retention period will be that in which the contractual relationship remains in force as well as the subsequent time that by legal obligation must be retained.

The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user’s consent.

Regarding the period of conservation of cookies, you can obtain more information on our website in the section “Cookies policy”.

Suppliers

Those data that are processed on the basis of legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Those data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The data will be kept for the duration of the contractual relationship, or in the event that the data is processed on the basis of a legal obligation, for which the data cannot be revoked by the data subject, except in the case of the legally stipulated blocking of the data.

Clients

Data that is processed on the basis of the customer’s consent will be retained for as long as it is relevant to the purpose for which it was collected, and the consent is not revoked.

Data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The data will be kept for the duration of the contractual relationship, in the event that the data is processed on the basis of a legal obligation, and the data cannot be revoked by the data subject, except in the case of the legally stipulated blocking of the data.

Job applicants and candidates

Those data that are processed based on the consent of the job applicant and candidate will be kept as long as the selection process to which he/she applied is still open. In the event that the application is not for a specific selection process and is for future applications, the period of conservation will be a maximum of one year, at which time we will proceed to the deletion and destruction of your CV, unless the person concerned expresses its willingness to conservation and the same is updated.

Social Network Contacts

The data processed for social network contacts will be maintained for as long as the user and HSS GROUP AG maintain a relationship in the social network. As the processing of the data does not depend directly on HSS GROUP AG, we will only be able to consult or delete your data in a restricted manner. We will process your data for as long as the user of the social network is linked to HSS GROUP AG as ‘friends’, ‘like’, ‘follow’ or similar buttons.

To proceed to the rectification of your data, restriction of information or those publications that you share, HSS GROUP AG will not be responsible for making such rectifications, but it must be done by the user of the Social Network through the configuration of your profile in accordance with the privacy policy of the Social Network itself.

Regardless of the legitimacy that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing appropriate safeguards and respecting the rights and freedoms of data subjects.

ADDITIONAL INFORMATION ON DATA PROCESSING

Only those over 14 years old can provide data through our website and e-mail. If you are under this age you must have the consent of your parents or legal guardians.

The user guarantees that the data provided to HSS GROUP AG is authentic and up-to-date and declares that he/she is over 14 years of age, and shall be solely responsible for any false or inaccurate statements made.

In the case of making a reservation of a service or purchase on line, the interested party must be over 18 years of age, the age legally established in the civil code to acquire the age of majority and capacity to act.

The personal data processed by HSS GROUP AG may be mandatory or voluntary. In order to guarantee your privacy, you will not be asked for any special category data via the web forms. In the event that it is necessary to collect special category data in order to provide you with a service, you will be asked for such data by another means. The data that will be requested in the forms are:

Identification data: name and e-mail address.
Data related to the request.

Voluntary information is information that the user is not required to provide in order to contact us.

Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory, refusal to provide them will result in the impossibility to provide the service or fulfill your request.

In the event that you provide us with data of third parties, you declare that you have their consent and undertake to pass on the information provided to you in this clause, exempting HSS GROUP AG from any kind of obligation. However, HSS GROUP AG may carry out verifications to verify that the third party has been informed by adopting the diligence measures established in the data protection regulations.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

No data will be transferred to third parties unless required by law or in the event that it is necessary to fulfill your request.

Among the recipients to whom your data may be communicated are:

Public administrations and agencies when so required by tax, labor, Social Security or any other applicable regulations. Companies in charge of data processing (providers of fraud detection and prevention, technological services, customer services, advertising and marketing services, and, in general, third party providers that are necessary for the provision of the services offered by HSS GROUP AG such as courier and transport service providers, etc.).

International data transfers may also occur in connection with the above transfers/communications for which HSS GROUP AG will use the tools provided for in Article 46 and 49 of the GDPR to ensure that transfers are made to countries that do not have an adequacy decision from the European Commission.

In any case, third parties with whom certain personal data is shared will have previously accredited the adoption of appropriate technical and organizational measures for the proper protection of the same and will be carried out only with third countries when there is a binding legal instrument in accordance with articles 46 and following of the GDPR. By accepting this privacy policy you agree that an international transfer of data may occur in accordance with the guarantees indicated.

If the conditions set out in Article 46 are not met, the data subject may consent to the international transfer or a contract may be concluded in the interest of the data subject. Otherwise, the approval of the supervisory authority must be obtained.

We also inform you that some services provided by and for HSS GROUP AG may involve the transfer of personal data to a third country outside the EU as part of cloud services provided by some major international providers (e.g. Google, Microsoft). For these services, compliance with the above regulations is confirmed.

HSS GROUP AG does not sell customer data to third parties.

WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may assert the following rights against HSS GROUP AG:

Access your personal data
Rectify them when they are inaccurate or incomplete
Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Oppose treatment
Request the limitation of the processing of your data when any of the conditions provided for in the regulations are met.
Request the portability of your data in the cases foreseen in the regulations.
Prevent being subject to automated decisions
Revoke consents granted

In order to exercise their rights, users must send a written request indicating the right they wish to exercise and attach a document proving their identity and a postal or e-mail address for notification purposes. This request can be made either by post to: HSS GROUP AG Autopista Del Norte Tf5 Km 17, 11, Office 1, 38350 – TACORONTE (Santa Cruz De Tenerife), or at the following e-mail address: info@wekookmarketing.com.

HSS GROUP AG shall respond to the request to exercise rights within one month of receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receipt of the request, stating the reasons for the delay.

Likewise, the interested parties have the right to complain to the competent Control Authority (Spanish Data Protection Agency) when they consider that HSS GROUP AG has violated the rights that the data protection regulations acknowledge in www.aepd.es.

IS MY DATA SECURE?

HSS GROUP AG has a contract with the hosting company DNS for the hosting of its website. It is a company hosted in Switzerland but has the appropriate technical and organizational security measures in place for the proper protection of the data and the international transfer is carried out because there is a binding legal instrument in accordance with Articles 46 et seq. of the GDPR, namely Commission Decision 2000/518/EC of 26 July 2000.

In any case, HSS GROUP AG guarantees the adoption of appropriate measures to ensure the confidential treatment of your data in view of the confidential nature of the same and undertakes that such data will remain secret, treating them with the utmost reserve, and declares to have implemented in its information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.

LINKS TO OTHER WEBSITES

If you choose to leave our website via links to other websites not owned by us, HSS GROUP AG is not responsible for the privacy policies of those websites or the cookies they may store on your computer.

Date: June 2021

Version: V.1.0