Updated: June, 09 2021
We at Obsidian AG respect your concerns about privacy. This Online Privacy Notice describes how we process the Personal Data:
- that we collect on obsidianfinance.ch
- where you visit our premises;
- where you are a contact at one of our suppliers or other business partners; and
- through other data collection points or notices that reference this Online Privacy Notice.
We provide information on the types of Personal Data we collect, how we use the information, with whom we may share it and the choices available to you regarding our use of the information. We also describe the measures we take to protect the security of the information and how you can contact us about our privacy practices. “Personal Data” is any information that relates to, describes, identifies or can be used, directly or indirectly, to identify an individual, such as name, address, date of birth, personal identification numbers, sensitive personal information, and economic information).
Information that you give us
The types of information we collect concerning individuals includes:
- business and personal contact information (such as name, postal and email addresses, and telephone number);
- other information you provide to us (such as information provided by registering for email alerts, filling in forms, and online registration details); and
- information we may need in order to identify you and complete necessary security checks, where you visit one of our buildings (such as a form of ID, and your image for closed-circuit television (CCTV) purposes).
In connection with a job inquiry or application on our careers pages, you may provide: login credentials; information regarding your work authorization status, education history, current or past job/employment history and professional designations; performance evaluations; and other information about your background and qualifications. In addition, where legally permissible, you may provide information regarding your gender, race/ethnicity, and your veteran and disability status. Obsidian AG will not consider either this information or your choice to decline to provide it in evaluating your qualifications for employment with us. This information will be used only for legal and compliance purposes.
Depending on the nature of our relationship with you, in the past 12 months we may have collected Personal Data concerning you in the following categories:
- Identifiers (e.g., real name, postal address, email address, government ID, financial information);
- Sensitive/protected characteristic information (e.g., age, race, citizenship, gender);
- Commercial information (e.g., products or services purchased, obtained, or considered, personal information disclosed in a sale or acquisition process);
- Internet or other network activity (e.g. browsing or search history, information regarding interaction with an internet website, application, or advertisement);
- Geolocation data (e.g. physical location);
- Professional or employment-related information (e.g. job history, performance evaluations);
- Non-public education information (e.g. education records); and
- Inferences drawn from other personal information (e.g. profiles reflecting preferences and trends).
In connection with electronic interactions you have with us or our service providers (including by email, phone or other forms of electronic communication), we may record and monitor details of those interactions, including their content, to the extent permitted or required by applicable law.
We may also collect some information from other sources, including:
- if we have a business relationship with the organization that you represent, your colleagues or other business contacts may give us information about you such as your contact details or details of your role in the relationship; and
- information from third party data providers or publicly available sources for anti-money laundering, background checking and similar purposes, and to protect our business and comply with our legal and regulatory obligations.
If you provide information to us about another person, you should ensure that you comply with any legal obligations that may apply to your provision of the information to us.
We may use third-party web analytics services on our Sites, such as those of Google Analytics. These service providers help us analyze how visitors use the Sites. The information obtained for this purpose (including your IP address and other information collected by automated means) may be disclosed to or collected directly by these service providers. To learn about opting out of Google Analytics, please click here.
The providers of third-party plugins and widgets on our Sites, such as embedded videos and social media sharing tools, may use automated means to collect information regarding your use of the Sites and your interactions with the plugins and widgets. This information is subject to the privacy policies or notices of the providers of the plugins and widgets.
How We Use the Information We Obtain
We may use, disclose or otherwise handle the information described in this Online Privacy Notice for the following purposes to:
- operate, evaluate, develop, promote, and improve our business (including developing new products and services; enhancing, improving and analyzing our products and services; managing our communications; managing our premises; and performing accounting, auditing and other internal functions);
- create and manage your account;
- manage your investments;
- comply with and enforce applicable legal requirements, relevant industry standards and our policies
- protect against, identify and prevent fraud, money-laundering, breach of confidence, cyber attack, theft of proprietary materials, financial or business crimes, and other unlawful activity;
- in some cases, in order to operate, administer and improve the user’s experience of the Sites;
- provide our products and services to you, such as market commentary and email alerts;
- send you (or produce) promotional materials, newsletters and other communications, including in visual and audio form (such as videos, podcasts and online seminars);
- communicate with you about, and administer your participation in, special events, programs, promotions, offers, surveys and market research;
- respond to your inquiries;
- manage your employment application, assess your qualifications and manage your employment with us – please see our Career Page Privacy Notice for full information about how and why we use your Personal Data in this context;
- verify your information;
- perform data analyses (including market and consumer research, demographic analyses and anonymization and aggregation of information);
- operate, schedule and facilitate online meetings, webinars and (video) conferences (for example, using Zoom and other online meeting platforms); and
- record audio and video content (for example, of our in-person or online events, training, and meetings where permitted by, and collected in accordance with, applicable data protection law).
In addition, we use information collected through cookies, web beacons, web server logs and other automated means for purposes such as (i) customizing our users’ visits to our Sites, (ii) delivering content tailored to our users’ interests and the manner in which our users browse our Sites, and (iii) managing our Sites and other aspects of our business.
CCTV operates in some of our buildings for security and safety purposes, in accordance with applicable data protection law. Where CCTV is not operated by us, the CCTV will be under the control of the relevant building landlord, manager or operator.
We may also use the information in other ways for which we provide specific notice at the time of collection.
We will only process your Personal Data as necessary so that we can pursue the purposes described above. Where we process your Personal Data for our legitimate interests as a business or those of a third party, we do so only where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest in pursuing those purposes.
When we collect Personal Data from you, unless indicated otherwise, if we ask you for information, we need it for our business or compliance purposes. In limited circumstances, we are required to collect Personal Data to comply with a legal obligation and/or might ask you to provide information which is purely voluntary; in either case, this will be indicated to you.
If you are a former employee, worker, contractor or member of Obsidian AG , we will continue to process your Personal Data for a reasonable period following the end of your employment or engagement for our legitimate business and/or our legal compliance purposes and/or for the establishment or defense of a legal claim. Further, in some instances, we may process your data to perform our obligations under the contract between us (e.g. to pay you your final salary payment after your termination date). We only carry out such processing where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interests in pursuing those purposes. Your data will be retained and deleted in accordance with our retention policies and procedures (as discussed further below).
Online Tracking and Interest-Based Advertising
We and third parties acting on our behalf (such as Facebook, Twitter and LinkedIn) may collect information about your online activities over time and across third-party websites to provide you with advertising about products and services tailored to your interests. Where required by applicable law, we will obtain your consent for the processing of your Personal Data for direct marketing purposes. If you do receive direct marketing communications from us (for example, by post, email, fax or telephone), you may opt-out by clicking the link in the relevant communication, completing the forms provided to you (where relevant), or by emailing email@example.com.
You may see our ads on other websites or mobile apps because we participate in advertising networks. Ad networks allow us to target our messaging to users by considering demographic data, users’ inferred interests and browsing context. These networks track users’ online activities over time by collecting information through automated means (such as by cookies, web server logs, web beacons and other similar technologies). The networks use this information to show ads that may be tailored to individuals’ interests, to track users’ browsers or devices across multiple websites or apps, and to build a profile of users’ online browsing activities. The information our ad networks may collect includes data about users’ visits to websites and apps that participate in the relevant ad networks, such as the pages or ads viewed and the actions taken on the websites or apps. This data collection takes place both on the Sites and on third-party websites and apps that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts.
The Sites are not designed to respond to “do not track” signals received from browsers. To learn how to opt out of ad network interest-based advertising, please visit www.aboutads.info/choices, http://www.networkadvertising.org/choices/ or http://www.youronlinechoices.eu/.
Information We Disclose to Others
We do not disclose Personal Data we obtain about you through the Sites or other channels covered by this Online Privacy Notice, except as described in this Online Privacy Notice. We may share your Personal Data with our affiliates and subsidiaries. Depending on the nature of our relationship with you, we also share Personal Data with service providers who perform services on our behalf, our financial and transaction counterparties, our professional advisors, and your agents and representatives. We do not authorize these persons to use or disclose the information except as necessary for the purposes for which it is provided or to comply with legal requirements.
We also may disclose information about you (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities, regulators and/or other government entities and/or other competent authorities based on a lawful disclosure request, or (iii) when we believe disclosure is necessary or appropriate to prevent harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity. We reserve the right to transfer Personal Data we have about you in the event that we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, spin-off, dissolution or liquidation).
In addition, we may share anonymous/aggregated information with third parties, such as service providers, in order to facilitate our business operations.
Information collected through third-party plug-ins and widgets on the Sites (such as information relating to your use of a social media sharing tool) is collected directly by the providers of the plug-ins and widgets. This information is subject to the privacy policies of the providers of the plug-ins and widgets, and Obsidian AG is not responsible for those providers’ information practices.
For California Residents, in the preceding 12 months, we may have disclosed Personal Data listed in any of the categories in the “Information We Obtain” section above for business purposes (in particular, as described in this section).
We have not sold Personal Data in the 12 months preceding the date of this Online Privacy Notice.
We may transfer the Personal Data we collect about you to recipients in countries other than the country in which the information was originally collected. Where you are based in the UK, the EU, or another country which imposes data transfer restrictions outside of its territory, this includes transfers outside of the UK and the European Economic Area (“EEA“) or that geographical area, including to those countries in which our affiliates, group members, service providers and business partners operate. Those countries may not have the same data protection laws as the country in which you initially provided the information. Where we transfer Personal Data outside of the UK, the EEA, or other territories subject to data transfer restrictions to other members of the Obsidian AG group or our service providers, we will ensure that our arrangements with them are governed by data transfer agreements or safeguards, designed to ensure that your Personal Data is protected as required under applicable data protection law (including, where appropriate, under an agreement on terms approved for this purpose by the European Commission or by obtaining your consent).
Retention and Deletion of your Information
We intend to keep your Personal Data accurate and up-to-date. We will delete the information that we hold about you when we no longer need it. We retain your Personal Data for as long as it is required by us for our legitimate purposes, to perform our contractual obligations, or where longer, such longer period as is required or permitted by law or regulatory obligations which apply to us.
We will retain your information in line with our retention policies and, in any event, for no longer than is necessary given the purpose for which it was collected, after which it will be deleted or anonymized.
Note that we may retain some limited information about you (even when we know that you have left the organization that you represent) so that we can maintain a continuous relationship with you if and when we are in contact with you again.
Your Rights and Choices
We offer you certain choices in connection with the Personal Data we collect from you. To update your preferences or submit a request, please contact us as indicated in the “How to Contact Us” section of this Online Privacy Notice. To the extent provided by the law of your jurisdiction or otherwise applicable to our processing of your information, you may request access to the Personal Data we maintain about you or request that we correct, amend, delete or block the information by contacting us as indicated below. Where provided by law, you may withdraw any consent you previously provided to us or object at any time on legitimate grounds to the processing of your Personal Data, and we will apply your preferences going forward. You can also lodge a complaint about our processing of your Personal Data with the body regulating data protection in your country.
These rights, subject to certain limitations, may include:
Rights of access, correction and deletion. You may have a right of access to the Personal Data that we hold about you, and to some related information, including the purpose for processing the Personal Data, the categories of recipients of that Personal Data to the extent it has been transferred internationally, and, where the Personal Data has not been collated directly from you, the source (the “category information“). You may also have the right to require any inaccurate Personal Data to be corrected or deleted.
Right to object, and portability. You can object to our use of your Personal Data for direct marketing purposes at any time and you may have the right to object to our processing of some or all of your Personal Data (and require it to be deleted) in some other circumstances. In some circumstances, you may also have a “data portability” right to require us to transfer your personal data to you or a third party, in a data portable format.
California residents may also request certain information about our disclosure of Personal Data during the
prior year, including category information (as defined above).
We review and verify requests to protect your Personal Data, and will action data protection requests fairly and in accordance with applicable data protection laws and principles.
If you wish to exercise any of these rights, please contact us as set out below.
Complaints. You can also lodge a complaint about our processing of your Personal Data with the body regulating data protection in your country.
How We Protect Personal Data
We maintain administrative, technical and physical safeguards designed to protect Personal Data we obtain through the Sites against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
Links To Other Websites
Our Sites may provide links to other websites for your convenience and information. These websites may operate independently from us. Linked websites may have their own privacy notices or policies, which we strongly suggest you review. To the extent any linked websites are not owned or controlled by us, we are not responsible for their content, any use of the websites, or the privacy practices of the websites.
Updates To Our Online Privacy Notice
This Online Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our Personal Data practices. We will post the updated version on the Sites and indicate at the top of the Notice when it was most recently updated. Please check for any updates regularly.
How To Contact Us
code 6340, Baar, Switzerland