
Data Privacy Notice
With this privacy notice, we provide information about the processing of personal data in connection with our activities and operations, including our www.axonactive.ch / www.axonactive.com website. In particular, we provide information on why, how, and where we process personal data. We also provide information about the rights of the people whose data we process.
Further data protection declarations or other information on data protection may apply to individuals or additional activities and operations.
We are subject to Swiss and Vietnamese data protection law as well as any applicable foreign data protection law, specifically of the European Union (EU) with the European General Data Protection Regulation (GDPR).
In its decision of 26 July 2000, the European Commission recognized that Swiss data protection law ensures adequate data protection. In a report dated January 15, 2024, the European Commission confirmed this adequacy decision.
1. Contact addresses
Responsibility for the processing of personal data in the various areas:
Axon Active Switzerland AG
Schönegg Castle
Wilhelmshöhe
16003 Lucerne
Switzerland privacy@axonactive.com
Axon Active Vietnam Co., Ltd.
10th Floor, Hai Au Building
39B Truong Son Street
Ward 4, Tan Binh District
Ho Chi Minh City, Vietnam
In individual cases, third parties may be responsible for processing personal data or can share joint responsibility with third parties.
Furthermore, unless explicitly stated otherwise, we would like to point out that this privacy notice applies to Axon Active Schweiz AG and to Axon Active Vietnam Co, Ltd.
Data protection representation in the European Economic Area (EEA) We have the following data protection representation in accordance with Art. 27 GDPR:
Am Kaiserkai 69
20457 Hamburg
Germany
The Data Protection Representation serves data subjects and authorities in the European Union (EU) and the rest of the European Economic Area (EEA) as an additional point of contact for inquiries in connection with the GDPR.
2. Terms and legal bases
2.1 Terms
Data subject: Natural person about whom we process personal data.
Personal data: Any information relating to an identified or identifiable natural person.
Particularly sensitive personal data: Data concerning trade union, political, religious, or philosophical opinions and activities, data concerning health, privacy, or membership of an ethnic or racial group, genetic data, biometric data uniquely identifying a natural person, data concerning criminal or administrative sanctions or prosecutions, and data concerning social assistance measures.
Processing: Any handling of personal data, regardless of the means and procedures used, such as the retrieval, comparison, adaptation, archiving, storage, reading, disclosure, procurement, collection, collection, deletion, disclosure, arrangement, organization, storage, modification, dissemination, linking, destruction and use of personal data.
European Economic Area (EEA): Member States of the European Union (EU) as well as the Principality of Liechtenstein, Iceland and Norway.
2.2 Legal basis
We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (Data Protection Act, DPA) and the Ordinance on Data Protection (Data Protection Ordinance, DPO), as well as the Vietnamese Data Protection Ordinance on the Protection of Personal Data (PDPD).
If and to the extent that the General Data Protection Regulation (GDPR) is applicable, we process personal data in accordance with at least one of the following legal bases:
Art. 6 para. 1 lit. b GDPR for the necessary processing of personal data for the performance of a contract with the data subject and for the implementation of pre-contractual measures.
Art. 6 para. 1 lit. f GDPR for the necessary processing of personal data in order to safeguard legitimate interests - including the legitimate interests of third parties - unless the fundamental freedoms and rights and interests of the data subject prevail. Such interests are the permanent, humane, secure, and reliable performance of our activities and operations, the guarantee of information security, protection against misuse, the enforcement of our own legal claims, and compliance with Swiss law.
Art. 6 para. 1 lit. c GDPR for the necessary processing of personal data to fulfill a legal obligation to which we are subject under any applicable law of member states in the European Economic Area (EEA).
Art. 6 para. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task carried out in the public interest.
Art. 6 para. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
Art. 6 para. 1 lit. d GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.
Art. 9 para. 2 ff. GDPR for the processing of special categories of personal data, with the consent of the data subjects.
The European General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal data and the processing of particularly sensitive personal data as the processing of special categories of personal data (Art. 9 GDPR).
3. Nature, scope, and purpose of the processing of personal data
We process the personal data required to carry out our activities and operations in a sustainable, people-friendly, secure, and reliable manner. The processed personal data may fall into the categories of browser and device data, content data, communication data, metadata, usage data, and master data including inventory and contact data, location data, transaction data, contract data, and payment data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect during our activities and operations, insofar as such processing is permitted for legal reasons.
Where necessary, we process personal data with the consent of the data subjects. In many cases, we may process personal data without consent, for example, to fulfill legal obligations or to protect overriding interests. We may also ask data subjects for their consent if their consent is not required.
We process personal data for the duration required for the respective purposes. We anonymize or delete personal data depending on statutory retention and limitation periods.
4. Disclosure of personal data
We may disclose personal data to third parties, have it processed by third parties, or process it jointly with third parties. Such third parties are specialized providers whose services we use.
For example, we may disclose personal data to banks and other financial service providers, public authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies, and insurance companies.
5. Communication
We process personal data to communicate with third parties. In this context, we process data that a data subject transmits when making contact, for example by post or e-mail. We may store such data in an address book or with comparable tools.
Third parties who transmit data about other persons are obliged to guarantee data protection for such data subjects. Among other things, the accuracy of the personal data transmitted must be ensured.
We use selected services from suitable providers to communicate better with third parties.
We use in particular:
Microsoft Forms: Online forms service; Service provider: Microsoft; Microsoft Forms-specific information on data protection: "Data protection and compliance", "Security and data protection".
Wix CRM: Customer Relationship Management (CRM); Service provider: Wix; Wix CRM-specific information: "Wix CRM".
Infinity: Online database software; Service provider: Infinity (USA); Privacy notice: Privacy notice.
6. Applications
We process personal data about applicants to the extent necessary to assess their suitability for an employment relationship or for the subsequent execution of an employment contract. The required personal data results from the information requested, for example in the context of a job advertisement. We may publish job advertisements with the help of suitable third parties, for example in electronic and printed media or on job portals and job platforms.
We also process personal data that applicants voluntarily disclose or publish, particularly as part of cover letters, CVs, and other application documents and online profiles.
We process - if and insofar as the General Data Protection Regulation (GDPR) item is applicable - personal data about applicants, in particular in accordance with Art. 9 para. 2 lit. b GDPR.
We may allow applicants to add their details to our talent pool so that they can be considered for future vacancies. We may also use such information to maintain contact and provide updates. If we believe that an applicant may be considered for a vacancy based on the information provided, we may inform the applicant accordingly.
We use selected services from suitable third parties to advertise jobs via e-recruitment and to enable and manage applications.
7. Data security
We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. With our measures, we guarantee the confidentiality, availability, traceability, and integrity of the processed personal data, without being able to guarantee absolute data security.
Access to our website and our other online presence takes place using transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated to HTTPS). Most browsers warn against visiting websites without transport encryption.
Our digital communication - like all digital communication in general - is subject to mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by secret services, police forces, and other security authorities. Nor can we rule out the possibility that a data subject may be subject to targeted surveillance.
8. Personal data abroad
Axon Active Schweiz AG generally processes personal data in Switzerland and the European Economic Area (EEA), Axon Active Vietnam Co., Ltd. is also in Vietnam under the Personal Data Protection Decree (PDPD), the former Vietnamese Decree 13/2023/ND-CP. However, we may also export or transfer personal data to other countries to process it or have it processed there.
We can export personal data to all countries and territories in the world, provided that the law there guarantees adequate data protection in accordance with the decision of the Swiss Federal Council and - if and insofar as the General Data Protection Regulation (GDPR) is applicable - also in accordance with the decision of the European Commission.
We may transfer personal data to countries whose laws do not guarantee adequate data protection, if data protection is guaranteed for other reasons, in particular on the basis of standard data protection clauses or with other suitable guarantees. Exceptionally, we may export personal data to countries without adequate or appropriate data protection if the special requirements under data protection law are met, for example, the express consent of the data subjects or a direct connection with the conclusion or execution of a contract. Upon request, we will be happy to provide data subjects with information about any guarantees or provide a copy of any guarantees.
An explicit authorization for Vietnam is automatically given when communicating directly with Axon Active Vietnam, Co., Ltd. or via axonactive.com.
9. Rights of data subjects
9.1 Data Protection Claims
We grant data subjects all rights in accordance with the applicable data protection law. Data subjects have the following rights in particular:
Information: Data subjects can request information as to whether we process personal data about them and, if so, what personal data is involved. Data subjects also receive the information required to assert their data protection claims and ensure transparency. This includes the processed personal data as such, as well as information on the purpose of processing, the duration of storage, any disclosure or export of data to other countries, and the origin of the personal data.
Correction and restriction: Data subjects can have incorrect personal data corrected, incomplete data completed, and the processing of their data restricted.
Deletion and objection: Data subjects can have their personal data deleted ("right to be forgotten") and object to the processing of their data with effect for the future.
Data disclosure and data transfer: Data subjects may request the disclosure of personal data or the transfer of their data to another controller.
We may defer, restrict, or refuse the exercise of the rights of data subjects to the extent permitted by law. We may inform data subjects of any requirements that must be met to exercise their data protection law rights. For example, we may refuse to provide information in whole or in part with reference to business secrets or the protection of other people. For example, we may also refuse to delete personal data in whole or in part with reference to statutory retention obligations.
In exceptional cases, we may charge costs for the exercise of rights. We will inform affected persons of any costs in advance.
We are obliged to take appropriate measures to identify data subjects who request information or assert other rights. Data subjects are obliged to cooperate.
9.2 Legal protection
Data subjects have the right to enforce their data protection claims by taking legal action or by lodging a complaint with a data protection supervisory authority.
The data protection supervisory authority for private controllers and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
European data protection supervisory authorities are organized as members of the European Data Protection Board (EDPB). In some member states in the European Economic Area (EEA), the data protection supervisory authorities are federally structured, particularly in Germany.
10. Use of the website
10.1 Cookies
We may use cookies. Cookies - our own cookies (first-party cookies) and those from third parties whose services we use (third-party cookies) - are data stored in the browser. Such stored data need not be limited to traditional cookies in text form.
Cookies can be stored in the browser temporarily as "session cookies" or for a certain period as permanent cookies. "Session cookies" are automatically deleted when the browser is closed. Permanent cookies have a specific storage period. Cookies make it possible to recognize a browser the next time it visits our website and thus, for example, to measure the reach of our website. Permanent cookies can also be used for online marketing, for example.
Cookies can be completely or partially deactivated and deleted at any time in the browser settings. Without cookies, our website may no longer be fully available. We request your consent to the use of cookies - at least to the extent necessary.
For cookies that are used to measure success and reach or for advertising, a general objection ("opt-out") is possible for numerous services via the AdChoices