We, ORIOR AG, Dufourstrasse 101, 8008 Zurich, Switzerland (hereinafter “ORIOR” or “we”), operate the website https://orior.ch/en/.
Personal data is usually collected whenever you contact ORIOR, either by using this website or by e-mail or telephone. This consists of information you provide to us via the contact form, such as your name and email address. However, personal data also comprises purely technical data, such as your IP address, which is automatically collected when you visit our website.
It explains how we process the personal data that we collect in the course of our relationship with you and how you can exercise your rights. We comply with the Swiss Federal Act on Data Protection (FADP) and other applicable data protection regulations.
Please be aware that this website is intended for adults only and not for children under the age of 16. We do not knowingly collect personal data from under-16s through this website. However, ORIOR may collect personal data relating to children and young people under the age of 16 directly from their parent or guardian with their express consent.
If you do not provide us with the required personal data, we may be unable to provide you with our goods and/or services.
I. Collection of personal data and purposes of its processing
1. Visiting our website
You can access our website without providing any personal information. When you visit our website, we only collect information which your browser automatically transmits to our servers, known as log files. These files may contain information including:
Your device’s IP address
The date and time of your request
Your time zone difference relative to Greenwich Mean Time (GMT)
The content of the request (specific page)
The access status/HTTP status code
The data volume transferred, as applicable
The website from which the request was made
Your operating system and its interface
The language and version of your browser software
This data is processed in our legitimate interests to facilitate the use of our website (establish a connection), safeguard system security and stability over the long term, rectify technical problems, ward off attacks on infrastructure, analyse hacking attacks and compile visitor statistics. After you visit our website, we will store your log files for the above purposes for a maximum of 30 days.
2. Contact form
You have the option of getting in touch with us using the contact form on our website or by e-mail or telephone. When you do so, the information you provide will be processed for our correspondence with you and for the purpose of processing and carrying out your request. The legal basis for this is our legitimate interest in providing and using a modern information medium in order to deal with your enquiries in the best possible way.
If you contact us online via the contact form, you must provide your first and last name, e-mail address and telephone number and describe your request; naming your company is optional. If you write to us by e-mail or telephone us, we will process your e-mail address and telephone number and any other information you provide.
3. Customer management
If you obtain services or products from ORIOR, the following personal data may be processed:
Last name and first name
Billing address and personal or business address
Delivery address, unless in-store collection has been arranged
Your payment information, such as your IBAN or credit card number and credit card expiry date
The products you have ordered
Any comments you have added
We will process this data on the basis of our contract with you in order to fulfil your order, inform you about the status of your orders, correct addresses, carry out fraud detection activities and provide other contractual services.
We use an e-commerce platform based in Ireland to process your orders and payments. We have contracts in place with the provider of this platform to ensure that your data is processed for us only in relation to the processing of your orders and that the applicable security standards, such as PCI DSS, are complied with.
We will also process this data based on our legitimate interest to improve and develop new products and services, increase efficiency, protect our systems, networks and employees, and comply with legal obligations.
We will store the personal data you have provided and a record of your interest in our products in our CRM system for the purpose of customer management. We will enrich this data with additional properties, such as role, function and company, so we can send you targeted communications, subject to your consent.
4. Personal data of job applicants
If you wish to apply to ORIOR online, you must first create a user account. This involves entering your first and last name, e-mail address and place of residence. In connection with job applications, we may subsequently process your CV, including candidate photo and cover letter, if you provide us with these documents, and also manage your account. To process your employment contract, we will request additional data, such as your AHV number and bank details.
We will process this data with your consent and, if necessary, to take pre-contractual measures. For certain forms of data processing we will need your express consent, for example to obtain information from third parties, such as previous employers, or to keep your application documents in our talent pool for other potential jobs. You can withdraw your consent for this at any time. Such withdrawal will not affect any data processing that has already taken place.
If your application is successful, we will store your personal data for as long as you are employed by us and beyond, if provided for by law (generally no longer than 10 years). If your application is unsuccessful, we will delete your data within six months, unless you expressly agree to a longer storage period for potential positions in the future.
When you create an account with ORIOR to submit an application, you can expressly consent to be included in our talent pool. In such cases, we are allowed to retain your application and related documents and personal data even after the recruitment process for that position has come to an end, and to notify you and review your application again if a suitable vacancy comes up.
5. Marketing, newsletter and market research
At your request, we can send you our newsletter by e-mail through the mailXpert service in Switzerland to keep you up to date about our products and latest offers. To register for the newsletter, we will need the following information from you:
Contact category and desired messages
Last name and first name
We will process this data on the basis of your express consent. You can withdraw this consent at any time by contacting us as set out in section VII or directly using the unsubscribe link in the newsletter e-mail. Such withdrawal will not affect any data processing that has already taken place.
We may also use your contact details for marketing purposes, provided you have entered into a contract with us and did not object to receiving marketing communications when you did so. In such cases, we will notify you by e-mail, text message, telephone or post about products that are similar to purchases you have already made. For this purpose, we will also process information about your past purchases in addition to the data provided in relation to the newsletter. This data processing is based on our legitimate interest in sending you targeted information about our products and offers. You can object to this processing purpose at any time by contacting email@example.com or directly by clicking on the unsubscribe link in that marketing communication.
With your consent, we will also use information about your purchasing behaviour for market research and internal studies and to measure the effectiveness of our advertising campaigns. For these purposes, your personal data will first be pseudonymised and ultimately anonymised when the statistics are compiled.
II. Data transfer and transmission abroad
Service providers, including those that process payment transactions; IT service providers that host our website, provide IT support and implement security measures on our website; delivery services; newsletter services; debt collection agencies; and analytics services that measure and statistically analyse interactions with our website.
Law enforcement authorities in the event of judicial actions or proceedings, and our tax advisors, auditors and lawyers in relation to the exercise of our rights and legal obligations.
Third parties in the event of a change of ownership.
Most of these recipients are usually based in Switzerland or the EU. If personal data needs to be transmitted to a country outside the EU that does not assure adequate data protection, including the USA, such a transfer will only take place if it has been ensured that appropriate measures have been taken to protect your personal data. This includes in particular obtaining your express consent to data processing or the conclusion of recognised standard contractual clauses.
Cookies: To make your visit to the ORIOR website more user-friendly and effective, cookies that identify your browser and device are automatically installed on your computer. A cookie is a small text file sent to your computer or automatically stored on your computer or mobile device by the web browser that you are using when you visit our website.
These cookies are needed for technical reasons: they make the website usable by enabling basic functions such as page navigation and remembering information such as your language selection. They are processed on the basis of our legitimate interest in the economic operation of this website and its optimisation.
You can deactivate this function in your computer’s browser settings and delete the cookies that are stored there. However, certain functions may no longer work if you block cookies. These cookies are only used during a session and are deleted after your website visit (session cookies).
We only use other cookies with your express consent, as described in our cookie banner. These may include persistent cookies, which are deleted after a predefined period, which may differ depending on the cookie.
reCAPTCHA: To protect our website as much as possible from malware and abuse, we use Google reCAPTCHA, provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, D04E5W5 Ireland. This service does not process personal data.
We also use Google Tag Manager to quickly update measurement codes and associated code fragments (tags) and in doing so improve the functionality of Google Analytics.
To ensure the lawful processing of your personal data to the greatest possible extent, we have concluded data protection contracts with Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, D04E5W5 Ireland. This processing also involves sending certain items of personal data to Google Inc. in the USA. An assessment by the European Commission and the Swiss Federal Data Protection and Information Commissioner concluded that the USA does not have an adequate level of data protection. When a transfer to the USA is made, there is a risk that your data might be viewed by US public authorities. By consenting to the use of Google Analytics and/or Google Tag Manager, you not only agree to the setting of cookies, but also expressly agree to the transfer to the USA in the knowledge of this risk.
Google Maps: Our website uses the Google Maps service via an API. The provider is Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, with which we have entered into contracts to ensure data protection. Using the Google Maps functionalities requires the storing of your IP address, your latitude and longitude coordinates, and your search terms. This information may be transferred to a Google server in the USA and stored there, where it may be viewed by US public authorities for audit and monitoring purposes outside of our control.
We are jointly responsible with LinkedIn Ireland Unlimited Company for the processing of your personal data when you visit our LinkedIn page. For more information about how LinkedIn processes your personal data, visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
External links: We are not responsible for the content of or data processing by third-party websites that can be accessed through links on the ORIOR website. Please read the privacy policies of these third parties to learn how your data is processed.
IV. Data security
We take appropriate technical and organisational security precautions to protect personal data against unauthorised access and misuse. This includes instructions to employees, access regulations and restrictions, and encryption of data carriers.
V. Retention period for personal data
VI. Your rights regarding your personal data
You can exercise the following rights under the applicable legal provisions:
Right to be informed about your personal data
Right to rectification of your personal data if it is inaccurate or incomplete
Right to erasure, unless there is a legal obligation to retain records or another legal reason for continued storage
Right to restrict processing if we process personal data based on our legitimate interest
Right to withdraw your consent to data processing at any time; such withdrawal of consent will have no influence on data processing that has already taken place
Right to transfer your personal data to a third party (data portability)
Please note that these rights are not absolute, and we reserve the right to enforce the restrictions provided for by law.
You also have the right to lodge a complaint with the competent data protection authority (in Switzerland, this is the Federal Data Protection and Information Commissioner) or to enforce your claims in a court.
To exercise your rights, contact us at the contact address below. Please note that we reserve the right to request a copy of your ID and other information if needed to verify your identity.
VII. Controller and contact details
ORIOR AG, Dufourstrasse 101, 8008 Zurich, Switzerland
To exercise your rights, contact the data protection officer at firstname.lastname@example.org.
Date of last revision: October, 2022