Privacy policy

Version as at August 18, 2024

 

What does this Privacy policy mean?

This privacy policy contains information on how personal data is collected and processed in the context of a contractual relationship with invicto ag. When you visit our website, we refer you to our privacy policy, which is available on the website, concerning the data processed in this regard.

 

How can you contact us?

The responsible party for the processing of personal data as described in this privacy policy is:

invicto ag

Buchserstrasse 3

CH-5001 Aarau

 

If you have any questions regarding the processing of your personal data or would like to exercise your data protection rights, you are welcome to contact us at info@invicto-advisory.ch.

 

What personal data do we collect and process?

We process the following personal data as part of a contractual relationship:

• Client data:

• First and last names and contact details of contact persons;
• Date of birth, nationality, marital status, passport/ID/AHV number;
• Profession/position and job title, associated company/job, industry, any partner/shareholder or related parties etc, beneficial ownership, ownership structure, investments, shareholdings;
• further background information from publicly accessible sources (e.g. commercial register, debt collection register, land register, press, Internet);
• further information to check for any conflicts of interest or to avoid money laundering or other risks;
• risk assessment data (creditworthiness information).

• Mandate details:

• depending on the mandate, e.g. tax information, articles of association, minutes, projects, contracts, employee data (see below);
• communication with clients and third parties;
• consultancy documentation;
• any allocated person, the contents of the request and mandate;
• information that is disclosed to us by or on behalf of clients, authorities, courts and/or third parties in the duration of our services or that we create in the duration of our services.

• Service and billing data: Details of services provided and invoiced, invoice data, proof of services, invoices, payments, bank details.
• Supplementary information: Information in connection with participation in our events and other information provided to us by clients. Also data in connection with IT: security and network data (e.g. website, data room visitor lists, access controls, network and mail scanners, phone call lists).
• Employees and third-party data: As part of the provision of the agreed services, data of employees and other third parties (e.g. contact persons and family members of our clients or other persons who have a relationship with our clients for other reasons) are also processed. This data is transmitted to us by our clients.

The following data, for example, may be affected by:

• First and last names and contact details;
• Date of birth, nationality, marital status, passport/ID/AHV number;
• Bank details;
• Investments, shareholdings;
• salary, social insurance, withholding tax and other accounting data;
• particularly sensitive data, such as health data, religious beliefs or social assistance measures, the latter in particular if we provide services in the payroll processing or accounting areas.

 

How do we use your data?

We process personal data in order to provide documents, invoices and to improve our services arising from the contractual relationship. This also includes processing to fulfill legal requirements (e.g. to check for any conflicts of interest) and to enforce or defend against legal claims. We also process the personal data of our clients in order to communicate with them, respond to inquiries and send them information about our company as well as invitations to events, courses, conferences or lectures. As the appointed auditors, we also process the data to fulfill our legal obligations (these may also be disclosure obligations).

 

Our clients must inform their employees and other third parties about their contractual relationship with us and about the transfer of data to and processing of data by us in the context of this relationship; in particular, they must inform them about this privacy policy and, where necessary, obtain consent for data processing.

 

Do we pass on your data to third parties?

We do not pass on any personal data to third parties without your consent, unless this takes place in connection with the processing of the mandate, is necessary for the purposes described in this data protection declaration or we are obliged to do so by law or by the authorities.

 

We may also pass on personal data to our data processors, in particular to IT providers and other providers who make IT applications available (e.g. collaboration platforms, cloud services, translation tools) or provide support and other services for the purposes listed in this privacy policy on our behalf. We devise corresponding contracts with these data processors to ensure that data protection is guaranteed.

 

How do we communicate with you?

You can contact us by phone, email or contact form. By providing an email address, the client agrees to communicate by (not encrypted) email.

 

Microsoft Teams is used for video conferences. We hereby inform you that we have not taken any special protective measures (e.g. the completion of confidentiality agreements with the video conferencing system providers) to protect professional secrecy when using this system. The terms and conditions of use and data protection of the provider of the video conferencing system apply.

 

We would like to point out that data transmission over the Internet may be subject to security vulnerabilities. Complete data protection against access from third parties cannot be guaranteed.

How long do we store your personal data?

We store your personal data for as long as is necessary for the purposes initially collected for and for as long as we are required to do so by law.

 

How do we protect your data?

We take appropriate measures to protect your personal data from loss and unauthorized access.

 

What rights do you have in relation to your personal data?

You have the right to obtain information about your stored personal data at any time, to request the surrender or transfer of your stored personal data, to correct or amend your personal data, to object to the processing of your personal data or to request the deletion of your personal data.