Privacy Policy.
1. Controller
Responsible for processing your personal data within the meaning of the Swiss Federal Act on Data Protection (revDPA) is:
SGZ Ltd - Swiss Society for Certifications
8002 Zurich
Switzerland
Phone:
Email:
2. Principles of Data Processing
SGZ AG processes personal data in accordance with the Swiss Federal Act on Data Protection (revDPA, in force since 1 September 2023). We collect only the data necessary for the respective purpose and process it lawfully, in good faith and in a transparent manner.
- Lawfulness: Data processing is based on one of the statutory legal grounds.
- Purpose limitation: Data is used only for the purpose for which it was collected.
- Data minimisation: Only the minimum necessary data is collected.
- Privacy by design: Data protection is an integral part of our systems development.
3. Personal Data We Process
Website visits: When you visit our website, technically necessary connection data is processed (IP address, timestamp, page accessed, browser type) by our hosting provider (Google Firebase Hosting).
Contact enquiries: When you contact us directly by email, we collect your name, email address and the content of your message solely to respond to your enquiry.
Certificate verification: The verification feature on this website checks entered codes against our database (Google Firestore). No personal data of the requesting person is stored.
Audit and certification processes: In the context of audit procedures, we process contact details of persons at client organisations. This data is necessary for the performance of our contractual services.
4. Third-party Services
| Provider | Purpose | Data location |
|---|---|---|
| Google Firebase | Website hosting, database (Firestore) | EU / USA |
| Cloudflare | DNS management, email routing | USA / EU |
| Google Fonts | Loading of typefaces | USA |
We do not pass data on to third parties unless this is necessary for the performance of the contract or required by law.
5. Cookies and Tracking
Our website uses no analytics cookies, no tracking and no advertising networks. Only technically necessary mechanisms are used.
6. Your Rights
As a data subject, you have the right under the Swiss revDPA to access, rectify, erase, restrict and object to the processing of your data. To exercise your rights, please contact: . We will respond within 30 days.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch
7. Amendments
SGZ AG reserves the right to amend this Privacy Policy at any time. The current version is always available on this website.