Thank you for your interest in our website and our online services. Protecting customers/visitors/users’ data and using it only in the way our customers/visitors/users expect from us is our highest priority. Thus, the following policy is designed to inform you about the processing of your personal data and your rights regarding this processing according to the General Data Protection Regulation (“GDPR”) and other data protection laws.
We, Rivia SA are the controller according to the GDPR and therefore responsible for the data processing explained herein.
Data Protection Officer
You can contact our Data Protection Officer at any time by using the following contact details: Rivia SA, e-mail: DPO@rivia.ch
Processing of Personal Data
Your visit to our website and/or use of our online services will be logged. The IP address currently used by your device, date and time, the browser type and operating system of your device, and the pages accessed may be recorded. This data is collected for the purposes of optimizing and improving our website as well as our online services. The processing is legally based on legitimate interest as it is in our legitimate interest to protect our website and to improve the quality of our services. Additionally, your personal data is only stored if you provide it to us on your own account, e.g., as part of a registration, a survey, an online application or for online purchase (performance of a contract). We have taken appropriate measures to ensure that the data provided to us during the registration is adequately protected. These measures include, but are not limited to, encryption, access control, segregation of duties, internal audit etc.
Customer/User Account Registration
If you wish, you can create a customer account by sending a written access request to email@example.com . If you create a customer account, you will not have to send us your personal data every time you are using our website or when you try to access information/materials intended only for registered customers. The personal data that you provided in the registration form will only be processed for creating and maintaining your customer account. Your personal data will only be stored until you delete your account. If you delete your account, your personal data will be deleted without undue delay except where we are legally obliged by law to further store your data. Please note that you will not be able to use your customer account anymore, after it has been deleted.
We may use third party service providers to process your personal data. These service providers may be located in countries within and outside the European Union (EU) and the European Economic Area (EEA). We ensure that these service providers process personal data in accordance with European data protection legislation to guarantee an adequate data protection level, even if personal data are transferred into a country outside the EEA for which no adequacy decision of the EU Commission exists. Transfers of personal data to other recipients is not performed, except where we are obliged to do so by law. For more information about appropriate safeguards for the international data transfer or a copy of them, please contact our Data Protection Officer.
Personal data provided to us via our website will only be stored until the purpose for which they were processed has been fulfilled. Insofar as retention periods under commercial and tax law must be observed, the storage period for certain data can be up to seven years. However, storage periods may also be amended due to our legitimate interest (e.g., to guarantee data security, to prevent misuse or to prosecute criminal offenders).
As a data subject, you can contact our Data Protection Officer at any time with a notification under the contact information mentioned above under Section 1 to make use of your rights. These rights are the following: