This privacy policy (“Privacy Policy”) provide you information on how t10r Kapital AG (“t10r”) process personal data when providing the services (as defined in section “Definitions”): which data are collected, why and how we process it, and with whom we share it. Please note that the Cookies and Analytics page is part of the Privacy Policy.
For the sake of clarity, t10r will be referred in the present document as “t10r”, “we”, and the associated pronouns. You, as well as the other users of the services, are referred as “users”, “you” and associated pronouns.
Your privacy matters to us, and the present document addresses the different aspects of data processing in connection with the use of the services.
To provide the services, t10r need to process certain Personal Data (as defined below), such as your e-mail address, your name, your IP address, etc. We are a Swiss company relying on international providers, which implies certain cross-border data transfers.
Please note that, we don’t use your Personal Data for any automated decision producing legal effects, and we don’t sell, in the meaning defined by the California Consumer Privacy Act (CCPA), Personal Data.
Anonymization / Anonymized means the process according to which data are rendered not relatable to an individual anymore. Anonymization implies that no re-identification is possible, following techniques such as deidentification and k-anonymization.
Personal Data means information that relates to an identified or identifiable individual. The information may be directly or indirectly identifiable (e.g., encrypted Personal Data remains Personal Data).
Processing means any operation on Personal Data, including but not limited to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Services means any services provided by t10r, including the website, as well any other services.
Users means any person of full age and legally capable of entering into an agreement (according to applicable laws) using the services. Should you be not, please refrain from using any of our services. If you are acting on behalf of a company, we may assume that you are authorized to act on behalf of such company in connection with the acknowledgement and/or acceptance of this Privacy Policy, regardless of the internal regulations and/or circumstances of that company and entries in the commercial/trade register and without further verification of such authorization.
Should you have any question about this policy, our processing, or if you want to exercise your rights (see article 4 “Your Rights” below), please contact us: t10r Kapital AG, Protection Officer, Huobmattstrasse 3, 6045 Meggen, Switzerland.
To exercise your rights, please contact us according to the article 3 “Contact” above. Please note that, depending on the request, we may require additional information and/or a copy of an identification document (such information and document would only be processed for the purpose of establishing your identity and ensuring your data are sent only to you or your legal representative).
You are entitled to exercise your rights according to the applicable law, which may include (non-exhaustively):
| Purpose | Categories of data collected(1) | Lawful basis | Categories of recipients |
| Answer to any request (including support) | Identity data (such as a name), contact information (such as an e-mail address), technical information (such as IP address, location), any data transmitted in the request | Performance of a contract | t10r and affiliated companies |
| Cookies(3) | Technical information, location, settings preferences | Performance of a contract | t10r and affiliated companies |
| Analytics(3) (no-tracking) | Technical information | Legitimate interest | t10r and affiliated companies |
| Cookies(3) (marketing purposes) | Technical information, history information, profiling | Consent | t10r and affiliated companies |
| Analytics(3) (tracking) | Technical information, history information, ad data | Consent | t10r and affiliated companies |
| Monitoring and technical maintenance | IP address, any data relevant to the defect description, device performance data, location | Legitimate interest | t10r and affiliated companies |
| Supplier management | Identity data (such as a name), contact information (such as an e-mail address) | Performance of a contract | t10r and affiliated companies |
| Customer management | Identity data (such as a name), contact information (such as an e-mail address), data relevant to the transactions | Performance of a contract | t10r and affiliated companies |
| Member management | Identity data (such as a name), contact information (such as an e-mail address) | Performance of a contract | t10r and affiliated companies |
| Commercial prospecting | Identity data (such as a name), contact information (such as an e-mail address) | Legitimate interest | t10r and affiliated companies |
| Archives | All Personal Data (to the extent necessary) | Compliance with legal obligation / Legitimate interest | t10r and affiliated companies |
The types of data are for an illustrative purpose and not exhaustive. For an exhaustive list of all types of data collected, please contact us at the address indicated in the section ”Contact”. For the purpose of this section, this also includes subprocessors acting on behalf of the recipient. Please refer to the section “Subprocessors”. Regarding cookies and analytics, please refer to section “Cookies and Analytics” below.
We store Personal Data for the time necessary to achieve the purpose of processing as well as a retention period of 12 months, unless otherwise provided by the applicable law, especially in the matter of archives. Please note that once the retention period is over, and except the case of our archives, Personal Data may be deleted or Anonymized, and as such, out of scope from data protection regulation and from the Privacy Policy.
Your Personal Data may be processed in various locations, including but not limited to:
We operate globally, as a consequence, cross-border transfers are necessary to provide you the services. Nevertheless, we seek to protect your Personal Data, by applying security processes (see article 11 “Security” below) and requesting legal guarantees from our partners. By accepting the Privacy Policy, you are aware and consent to the transfer of your Personal Data.
Be aware that we may disclose Personal Data, if needed to comply with legal proceedings, including court orders, subpoenas or warrants, or in response to a request from courts, law enforcement agencies, regulators, or other public agencies. This is our obligation to comply with the law and legal proceedings, and for EEA such a disclosure would be made under the basis of the article 6. (c) of GDPR.
t10r relies on cookies and analytics to know more about the interactions with our services and improve them accordingly. t10r uses these technologies in particular for the following purposes:
In particular, we use Google Analytics. This services of Google LLC in Mountain View, USA or Google Ireland Limited in Dublin, Ireland, respectively (“Google”) enables us to measure and evaluate the use of our services (website) on a non-personal basis. The t10rice uses permanent cookies, which are set by Google. Google does not receive any Personal Data from us (and does not retain any IP addresses), but may track your use of our services (website), combine this information with data from other websites that you have visited and which are also tracked by Google, and use this information for its own purposes (e.g. management of advertising). If you have registered yourself with Google, Google also knows you. Google is responsible for the processing of your Personal Data in accordance with Google’s privacy policy. Google merely informs us how our services (website) are used without giving any personal information about you. Google has committed itself to ensuring adequate data protection in accordance with the U.S.-EU and the U.S.-Swiss Privacy Shield and to complying with the requirements of GDPR. For more information, please see Google’s privacy policy.
t10r relies on different partners to provide you the services, which may access certain Personal Data. This includes the following categories of partners:
These providers are acting as subprocessors of t10r (for EEA, this corresponds to the article 28 of GDPR). t10r strives to ensure that all t10rice providers with access to Personal Data will only act within the framework we set through our legal framework, such as applicable law (under adequation decision), data processing agreement, standard contractual clauses, binding corporate rules, and / or privacy shield. We also put in place some security safeguards, such as data minimization, to ensure these subprocessors access your data on a need-to-know basis.
If over your interactions with t10r, we may refer you to an affiliated company with your consent. Personal Data may be exchanged with this company. In this context, the concerned company will then act as a data controller for the provision of their own services.
When a reference is made to external contents, please note that t10r has no control over the privacy policies, contents or security safeguards of the providers of these contents, and, as such, may not be held responsible in any way for the actions, as well as the privacy policy, content, and any other matter regarding these third parties. If you disagree with the privacy policy of these providers, please refrain to the use of these t10services.
Security matters to us, and we have put in place security safeguards to protect information submitted to us. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use reasonable efforts to prevent it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot ensure or warrant the security of any information you provide to us.
When using the services or providing Personal Data to us, unless your specific instruction of communicating through postal service, we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the services.
If we learn of an incident that may qualify as a breach under applicable law, when and to the extent required by law, we will attempt to notify you electronically, by posting a notice on the services and/or by sending an e-mail to you.
Subject to any mandatory provisions or requirements of other laws, these Privacy Policy shall be governed by and construed in accordance with the laws of Switzerland, without regard to its conflict of law principles, as well as without regard to the Convention on Contracts for the International Sale of Goods (CISG).
In the event of any dispute, controversy, disagreement or claim arising out of or relating to the services, or any provision of the Terms or the breach thereof, the parties shall try to settle those conflicts amicably between themselves. If, within 30 days, the parties can’t reach an agreement despite good faith discussions, any party may submit the dispute to the competent courts.
Any dispute shall be subject to the exclusive jurisdiction of the courts of the canton of Zurich, Switzerland, venue being Zurich.
Entire Agreement. The Privacy Policy constitutes the entire and exclusive understanding and agreement between you and us on the matter of privacy.
Severability. Should any part of the Privacy Policy be held to be invalid or unenforceable, the unenforceable part will be given effect to the greatest extent possible, or, if it cannot legally be given any effect, will be replaced by the valid provision the nearest to the intention of the parties, and the remaining parts will remain in full force and effect in their original version.
Interpretation. Use of section headers is made for convenience only and will not have any impact on the interpretation of any provision.
Update and Enforceability. The last version of the Privacy Policy is the enforceable version. We may modify this policy at any time, without prior notice, and such changes will be effective from the date of their publication (unless otherwise provided). In the case of material changes, the Privacy Policy will only become effective upon the notice provided in this version, no less than 30 days before its date of entry into force. Your use of any of the services following an update is deemed acceptance of the last version.
Assignment. You may not assign or transfer your rights related to the services, in whole or in part, by operation of law or otherwise, without our prior written consent. t10r may assign any of our rights or obligations to any affiliated company without notice or consent.
Consent to electronic communications. You are aware and acknowledge that any communication by electronic means is associated with risks, in particular interceptions, corrupted or infected content, or misdirected, delayed, or never received communication. t10r advises its customers to adopt sufficient security measures on its systems, data, and communications. Electronic communications (e.g. emails) and its attachments are confidential, if you receive messages in error, please inform the sender and delete any copy of the message. In addition, electronic communications do not constitute in itself financial advice. As a matter of principle, before acting on any information, you should consider its completeness and appropriateness having regard to the relevant matter and seek independent financial advice. In any case, t10r shall not be liable for such inherent risks and any damages arising in connection. By using the services, you consent to receive and engage electronic communications from/with us. You agree that any notices, agreements, disclosures, or other communications that we send to you electronically will satisfy any legal communication requirements, including that those communications be in writing.