RUAG Privacy Notice
Data protection is a matter of trust and your trust is a core value of the RUAG group and of all his legal entities it is composed of (“RUAG” and/or “we” and/or “us”).
This Privacy Notice applies to all legal entities of the RUAG group. Each RUAG company that processes personal data for its own business purposes acts as a data controller. For example, if you interact with a company about a matter concerning that company, it will be the controller for the personal data processed in relation with your request; or the company that invites you to participate in a customer event will be the controller of the data processed for the event. A list of the RUAG companies and their contact details is available at www.ruag.com.
If you have any questions or requests in relation to the processing of your personal data, you can contact the RUAG Data Protection Team at data.protection@ruag.com.
This Privacy Notice applies to any processing of personal data in connection with all our business activities in all our business areas. It is applicable to the processing of both historical and future personal data. Please note that we separate privacy notices may apply, for example for employees, applicants, and participants at trade fairs, job fairs and similar events. These policies are available at www.ruag.com/privacy.
We may process personal data in the following situations and for the following purposes:
We process personal data on the following grounds:
You are generally under no obligation to disclose personal data to us. However, we must collect and process certain data in order to be able to conclude and perform a contract and for other purposes.
Our employees have access to your personal data as far as it is necessary for the described purposes and the work of the employees concerned. They act in accordance with our instructions and are bound to confidentiality and secrecy when handling your personal data.
We may also transfer your personal data to other legal entities within RUAG for the purpose of internal group administration and for the various processing purposes described in this Privacy Notice. This means that your personal data can also be processed and combined with personal data originating from another RUAG legal entity for the respective purposes.
We may also disclose your personal data to third party service providers who perform certain business operations on our behalf („processors“), in particular:
There are other cases where we may disclose your personal data, for instance:
The recipients of your personal data (section 4) may be located abroad, including in countries even outside of Switzerland, the EU or the EEA which may not have laws that protect your personal data to the same extent as the laws in Switzerland, the EU or the EEA. If we disclose your personal data to a recipient in such a country, typically enter into a data transfer agreement to ensure adequate protection of your personal data, including contracts. Please contact the RUAG Data Protection Team (data.protection@ruag.com) should you need more information in this regard.
We apply appropriate technical and organisational security processes to safeguard the security of your personal data and to protect it against unauthorised or unlawful processing and to prevent the risk of loss, unintentional alteration, unintentional disclosure or unauthorised access.
We retain your personal data for no longer than this is necessary for the purposes for which the information is collected or to comply with legal retention obligations.
You have the following rights within the limits set forth in applicable law: You may inter alia request to access your personal data as processed by us, to ask us for correction or erasure, to request that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format.
You may also withdraw consent, if you have provided consent for RUAG to process your personal data. You also have the right to complain to a data protection authority about how we have used your personal data.
If you have any questions or would like to exercise your rights in relation to the processing of your personal data, please contact the RUAG Data Protection Team (data.protection@ruag.com).
Data protection is a matter of trust and your trust is a core value of the RUAG group and of all his legal entities it is composed of (“RUAG” and/or “we” and/or “us”). This privacy notice („Privacy Notice”) is based on the EU General Data Protection Regulation („GDPR“) to ensure a high level of protection for all individuals whose personal data is processed by RUAG in the frame of trade fairs and similar events and to ensure that RUAG companies outside of the EU shall also be GDPR compliant. We may process any information related to yourself (“Personal Data”) for our own purposes and we would therefore act as a Controller of your Personal Data. For additional information about how we process Personal Data, please refer to our RUAG Privacy Notice at www.ruag.com/privacy.
We may process your business contact details (e.g. name, position, business e-mail address, business telephone number, department, etc.), your business function, customer relation information such as your interest in our products and services, and any other personal information of yourself contained in communication sent by yourself or others to RUAG. We may process this Personal Data for the purposes of customer relationship management and business development with yourself and/or the company you work for. If the company you work for enters into an agreement with us, an additional privacy notice may apply. We may also use your e-mail address to send you marketing and information materials. You have the right to object at any time to processing of your Personal Data for such marketing.
Our processing of your Personal Data is permitted by law. If the EU General Data Protection Regulation EU 2016/679 (“GDPR”) applies to our processing, then the legal basis is article 6 para. 1 let. b, and let. f GDPR, permitting the processing of Personal Data for the purposes of entering into and carrying out a contract and for legitimate interests.
We may have obtained your Personal Data set out in Section 1.1 above from you and from your colleagues if we follow-up with you or your employer.
The retention periods for personal data depend on the purpose of the processing activities. We will retain your Personal Data set out under Sec. 1.1 above for as long as it is necessary for the respective purpose and/or required by applicable law.
Your Personal Data may be provided to third parties that perform services on our behalf related to the purposes described in this Privacy Notice, including data hosting providers.
In addition, we may disclose your Personal Data if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, when we believe disclosure is necessary or appropriate for our legitimate interest, for example in preventing harm or financial loss, in connection with an investigation of suspected or actual fraudulent or other illegal activity, and in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).
Third parties referred to in Section 2.1 to which we transfer your Personal Data may be located outside the European Union. There may not be an adequacy decision by the European Commission for such country. This means that the level of data protection in such country may not be comparable with the level of data protection in the European Union. The appropriate safeguard we use to secure your Personal Data in the context of such transfers are the so-called EU Model Clauses.
The provision of your Personal Data is not a statutory or contractual requirement. This means that you are not obliged to provide your Personal Data to us. The consequence if you do not provide your Personal Data to us is simply that we will not be able to communicate with you and may potentially not be able to proceed with our business relationship with you and with your employer.
Under applicable data protection laws, you have rights:
a) of access to, rectification of, and/or erasure of your Personal Data;
b) to restrict or object to its processing;
c) to tell us that you do not wish to receive marketing information; and
d) (in some circumstances) to require certain of your Personal Data to be transferred to yourself or to a third party, which you can exercise by contacting us at the details set out at the beginning of this Privacy Notice.
To the extent our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of our processing based on your consent before its withdrawal; and
To exercise your rights, you can contact the RUAG Data Protection Team (data.protection@ruag.com). You can also lodge a complaint about the processing of your Personal Data with a data protection authority.