Protection of your personal data

European regulations on the protection of personal data have undergone major changes, resulting in the General Data Protection Regulation (nLPD) of 27 April 2017, which came into force on 25 May 2018.

Our company, anxious to comply with the regulations capable of improving relations with our European customers, has complied and expresses in this charter its attachment to the quality of service provided to our customers whether they are Individuals or Professionals.

This new regulation, which applies to European citizens who are not professionals and are therefore considered to be ‘private individuals’, strengthens citizens’ own control over the use of their data. The regulation applies to all processing of personal data, whether automated or non-automated, and whether or not the data is contained in a file.

What is personal data for an individual?

By definition, personal data is: « Any information relating to a natural person identified directly (surname, first name) or indirectly (by an identifier, customer number, telephone number, etc.). The identification of a natural person may be based on a single piece of data (ABS or SS number) or on the cross-referencing of a set of data.

What personal data may we collect?

We only collect appropriate and relevant data, strictly limited to carrying out the service you have ordered and, with your consent, data relating to our commercial and canvassing activities.

Why do we need to collect and process your personal data?

Your personal data is collected and processed to enable us to conclude, manage, modify and execute the service you have ordered and, with your consent, to inform you of the services and products available to you from Boissec.

To whom are your personal details transmitted?

Your personal data is intended for Boissec employees according to their function and for some of our subcontractors. All our staff have been trained and comply with the nLPD. Our subcontractors also comply with the requirements of the nLPD in order to ensure that the service ordered is carried out correctly. None of the information collected is transferred or sold to a third party who is not a recognised subcontractor. Data is hosted exclusively in Switzerland and Europe.

How long do we keep your personal data?

Personal data collected and processed as part of an ordered service, a commercial contact or a sales follow-up is kept in accordance with the statutory limitation periods set according to the nature of the contract and in compliance with Swiss rules, i.e. 10 years.
In the case of commercial canvassing, personal data is kept for 2 years from the date of collection or last contact with the person concerned. The data is then anonymised in order to preserve the basis for the company’s statistical studies.

What security measures are in place to protect your data?

Paper documents not filed in secure locations are destroyed immediately.
Electronic information is stored with a professional host ensuring a high level of security.

Access to this information is restricted and protected. Persons with access rights are appointed by the Management.

What rights do you have?

In accordance with the applicable General Regulation on the Protection of Personal Data, you have various rights, namely :

• Right of access: you may obtain information about the processing of your personal data and a copy of that data.
• Right of rectification: if you consider that your personal data is inaccurate or incomplete, you may request that it be amended accordingly.
• Right to erasure: you may request the erasure of your personal data to the extent permitted by law.
• Right to limit processing: you may request that the processing of your personal data be limited.
• Right to object: you may object to the processing of your personal data on grounds relating to your particular situation. You have the absolute right to object to the processing of your personal data for the purposes of commercial canvassing, including the profiling associated with such canvassing.
• You have the right to define directives relating to the conservation, deletion or communication of your personal data, applicable after your death.
• Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.

You can exercise these rights by writing to the DPO of Boissec SA – Commerce de bois – Route de Reculan 1b – 1030 Bussigny or by email to info@boissec.ch.