Privacy & Data Protection

Responsible Body

The responsible body within the meaning of the applicable data protection laws — in particular the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) — is:

General Notice

Based on Article 13 of the Swiss Federal Constitution and the federal data protection regulations (Data Protection Act, FADP), every person is entitled to the protection of their privacy and to protection against the misuse of their personal data. We comply with these provisions. Personal data is treated as strictly confidential and is neither sold nor passed on to third parties.

In close cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or falsification. When you access our website, the following data is stored in log files: IP address, date, time, browser request and general transmitted information about the operating system or browser. This usage data forms the basis for statistical, anonymous evaluations, so that trends can be identified, which we can use to improve our offerings accordingly.

Legal Basis for Data Processing

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (OFADP). Furthermore, if and to the extent that the EU GDPR is applicable, we process personal data on the following legal bases in connection with Art. 6 (1) GDPR:

• lit. a) Processing of personal data with the consent of the data subject.
• lit. b) Processing of personal data for the fulfillment of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
• lit. c) Processing of personal data to fulfill a legal obligation to which we are subject under any applicable law of the EU or of a country in which the GDPR applies in whole or in part.
• lit. d) Processing of personal data in order to protect the vital interests of the data subject or another natural person.
• lit. f) Processing of personal data to protect our legitimate interests or those of third parties, unless the fundamental freedoms, rights and interests of the data subject prevail.

Security

We use appropriate technical and organizational security measures to protect your stored personal data against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Transmission of Personal Data

In the context of our business activities and in line with the purposes of the data processing, we may transfer personal data to third parties, insofar as this is permitted and we deem it appropriate. In particular, the following categories of recipients may be involved:

• Service providers (such as IT providers, hosting providers, support services)
• Dealers, suppliers, subcontractors and other business partners
• Customers
• Domestic and foreign authorities, official bodies or courts

Data Processing in Third Countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation), or if this is done in the context of the use of third-party services or disclosure or transmission of data to other persons or companies, this is only done to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have data processed in a third country if the special requirements of Art. 44 ff. GDPR are met.

Server Log Files

The provider of this website automatically collects and stores information in server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address. The basis for data processing is Art. 6 (1) lit. f GDPR.

Contact & Inquiry Forms

If you send us inquiries via a contact or inquiry form on this website, your details from the form will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The processing is based on your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time by sending an e-mail to info@ctowertech.com.

Your Rights as a Data Subject

As a data subject, you are entitled to the following rights under the GDPR and Swiss data protection law:

Note on Data Transfer to the USA

Our website may use tools from companies based in the USA (for example content delivery networks and web fonts). When these tools are active, your personal data may be transferred to US servers. We would like to point out that the USA is not considered a safe third country within the meaning of EU data protection law.

Changes to this Privacy Policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. The current version can be found on this website.

Questions on Data Protection

If you have any questions about data protection, please contact the person responsible for data protection in our organization: