In this privacy policy, we, Fineva AG (hereinafter referred to as “we” or “us”), explain how we collect and process personal data. This is not an exhaustive description; other privacy policies, general terms and conditions, participation conditions and similar documents may govern specific matters. Personal data includes any information relating to an identified or identifiable individual.
If you provide us with personal data of other individuals (e.g., family members, colleagues), please ensure that these individuals are aware of this privacy policy and share their personal data with us only if you are authorized to do so and if this data is correct.
This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“FADP”) and the revised Swiss Data Protection Act (“revFADP”). However, the applicability of these laws depends on the specific circumstances.
1. Controller / Data protection officer / Representative
The controller responsible for the data processing described here is Fineva AG, Matthofstrand 8, CH-6005 Lucerne, unless otherwise stated in individual cases. If you have any data protection concerns, you can contact us at: contact@fineva.com.
Our data protection officer, as per Art. 37 and Art. 27 of the GDPR, can also be reached at contact@fineva.com.
2. Collection and processing of personal data
We primarily process personal data that we receive in the course of our business relationship with clients and other business partners, as well as data collected from users of our websites, apps and other applications.
Where permitted, we also obtain data from publicly accessible sources (e.g., debt registers, land registers, commercial registers, media, internet) or from third parties, including other companies, authorities and additional individuals. The categories of personal data obtained from these sources include:
3. Purposes of data processing and legal basis
We primarily use personal data to fulfill our contracts with clients and business partners, as well as to comply with legal obligations domestically and abroad. If you act on behalf of a client or business partner, your personal data may also be processed in this context.
Additionally, where permitted and appropriate, we process personal data for the following purposes:
If you have provided consent for specific processing activities, we process your personal data based on this consent, unless another legal basis applies. Consent may be withdrawn at any time but will not affect processing already carried out.
4. Cookies / Tracking and other technologies on our website
We use cookies and similar technologies on our website to identify browsers or devices. Cookies may be session-based (deleted after the session) or persistent (stored for a longer duration). You can configure your browser to reject or delete cookies.
By using our websites and agreeing to receive newsletters or marketing emails, you consent to the use of these technologies. If you do not consent, adjust your browser or email settings accordingly.
We may use tools like Google Analytics to measure website usage. These tools use cookies to provide insights but do not share personal data with us.
Our website may also include social media plugins (e.g., Facebook, Instagram). Activating these plugins allows the respective social media provider to process your data according to their policies.
5. Data sharing and transfers abroad
We may share personal data with third parties as necessary for our business purposes. These parties include:
Recipients may be located abroad, including in countries without adequate data protection laws. In such cases, we ensure compliance through contracts or other safeguards.
6. Retention of personal data
We retain personal data as long as necessary to fulfill contractual and legal obligations or as required for our business purposes. Once no longer needed, data is deleted or anonymized, except where legal retention periods apply.
7. Data security
We implement appropriate technical and organizational measures to protect personal data from unauthorized access or misuse. This includes access controls, encryption and secure IT solutions.
8. Obligation to provide personal data
In the context of our business relationship, you must provide the personal data necessary for the initiation and execution of the relationship. Without this data, we may be unable to enter into or fulfill contracts.
9. Profiling
We may use profiling to evaluate personal aspects (e.g., for targeted marketing). This enables us to tailor communication and offers to individual needs.
10. Rights of data subjects
Subject to applicable laws, you have the right to access, correct, delete, restrict processing and object to data processing. You may also request data portability. Any costs incurred will be communicated in advance.
To exercise these rights, contact us at the address provided in Section 1.
You also have the right to file a complaint with the relevant data protection authority, such as the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).
11. Changes
We may update this privacy policy at any time. The latest version published on our website applies. If the policy is part of an agreement, changes will be communicated appropriately.