GDPR Compliance

Last updated: January 2024

1. Our Commitment to GDPR

Swiss Ceramics is committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR). Although Switzerland is not a member of the European Union, we voluntarily comply with GDPR standards for all users, regardless of location, as we believe in the highest standards of data protection.

2. Data Controller

Swiss Ceramics acts as the data controller for personal data collected through this website. Our contact details are:

Swiss Ceramics
Keramikweg 12
8001 Zurich, Switzerland
[email protected]

3. Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: Where you have provided clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.

4. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to obtain confirmation as to whether your personal data is being processed and, where that is the case, access to the personal data and information about how it is processed.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

Right to Erasure (Article 17)

You have the right to have your personal data erased in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restriction (Article 18)

You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5. How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex or we receive many requests, we may extend this period by a further two months, and we will inform you if this is the case.

We may need to verify your identity before processing your request. We will not charge a fee for responding to your request unless it is manifestly unfounded or excessive.

6. Data Protection Impact Assessments

Where processing is likely to result in a high risk to your rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise data protection risks.

7. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

8. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with an adequacy decision.

9. Data Protection Officer

Given the scale and nature of our data processing activities, we have not appointed a Data Protection Officer. However, all data protection enquiries can be directed to [email protected].

10. Supervisory Authority

If you are unsatisfied with our response to any data protection concern, you have the right to lodge a complaint with your local supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

11. Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated revision date.