Privacy Policy

We, ORIOR AG, Zoll­strasse 62, 8005 Zurich, Switzer­land (here­inafter “ORIOR” or “we”), op­er­ate the web­site https://​orior.ch/​en/.

Per­sonal data is usu­ally col­lected when­ever you con­tact ORIOR, ei­ther by us­ing this web­site or by e-mail or tele­phone. This con­sists of in­for­ma­tion you pro­vide to us via the con­tact form, such as your name and email ad­dress. How­ever, per­sonal data also com­prises purely tech­ni­cal data, such as your IP ad­dress, which is au­to­mat­i­cally col­lected when you visit our web­site. 

This pri­vacy pol­icy cov­ers both our on­line and of­fline data col­lec­tion ac­tiv­i­ties, in­clud­ing per­sonal data that we col­lect through our var­i­ous chan­nels, such as web­sites, third-party so­cial net­works and points of sale.

It ex­plains how we process the per­sonal data that we col­lect in the course of our re­la­tion­ship with you and how you can ex­er­cise your rights. We com­ply with the Swiss Fed­eral Act on Data Pro­tec­tion (FADP) and other ap­plic­a­ble data pro­tec­tion reg­u­la­tions.

Please be aware that this web­site is in­tended for adults only and not for chil­dren un­der the age of 16. We do not know­ingly col­lect per­sonal data from un­der-16s through this web­site. How­ever, ORIOR may col­lect per­sonal data re­lat­ing to chil­dren and young peo­ple un­der the age of 16 di­rectly from their par­ent or guardian with their ex­press con­sent.

If you do not pro­vide us with the re­quired per­sonal data, we may be un­able to pro­vide you with our goods and/​or ser­vices.

1.         Vis­it­ing our web­site

You can ac­cess our web­site with­out pro­vid­ing any per­sonal in­for­ma­tion. When you visit our web­site, we only col­lect in­for­ma­tion which your browser au­to­mat­i­cally trans­mits to our servers, known as log files. These files may con­tain in­for­ma­tion in­clud­ing:

• Your device’s IP address

• The date and time of your request

• Your time zone difference relative to Greenwich Mean Time (GMT) 

• The content of the request (specific page)

• The access status/HTTP status code 

• The data volume transferred, as applicable

• The website from which the request was made

• Your browser 

• Your operating system and its interface

• The language and version of your browser software

This data is processed in our le­git­i­mate in­ter­ests to fa­cil­i­tate the use of our web­site (es­tab­lish a con­nec­tion), safe­guard sys­tem se­cu­rity and sta­bil­ity over the long term, rec­tify tech­ni­cal prob­lems, ward off at­tacks on in­fra­struc­ture, analyse hack­ing at­tacks and com­pile vis­i­tor sta­tis­tics. Af­ter you visit our web­site, we will store your log files for the above pur­poses for a max­i­mum of 30 days.

2.        Con­tact form

You have the op­tion of get­ting in touch with us us­ing the con­tact form on our web­site or by e-mail or tele­phone. When you do so, the in­for­ma­tion you pro­vide will be processed for our cor­re­spon­dence with you and for the pur­pose of pro­cess­ing and car­ry­ing out your re­quest. The le­gal ba­sis for this is our le­git­i­mate in­ter­est in pro­vid­ing and us­ing a mod­ern in­for­ma­tion medium in or­der to deal with your en­quiries in the best pos­si­ble way.

If you con­tact us on­line via the con­tact form, you must pro­vide your first and last name, e-mail ad­dress and tele­phone num­ber and de­scribe your re­quest; nam­ing your com­pany is op­tional. If you write to us by e-mail or tele­phone us, we will process your e-mail ad­dress and tele­phone num­ber and any other in­for­ma­tion you pro­vide.

3.        Cus­tomer man­age­ment

If you ob­tain ser­vices or prod­ucts from ORIOR, the fol­low­ing per­sonal data may be processed:

• Title

• Last name and first name

• Billing address and personal or business address

• Delivery address, unless in-store collection has been arranged

• E-mail address

• Telephone number

• Your payment information, such as your IBAN or credit card number and credit card expiry date

• The products you have ordered

• Any comments you have added

We will process this data on the ba­sis of our con­tract with you in or­der to ful­fil your or­der, in­form you about the sta­tus of your or­ders, cor­rect ad­dresses, carry out fraud de­tec­tion ac­tiv­i­ties and pro­vide other con­trac­tual ser­vices.

We use an e-com­merce plat­form based in Ire­land to process your or­ders and pay­ments. We have con­tracts in place with the provider of this plat­form to en­sure that your data is processed for us only in re­la­tion to the pro­cess­ing of your or­ders and that the ap­plic­a­ble se­cu­rity stan­dards, such as PCI DSS, are com­plied with.

We will also process this data based on our le­git­i­mate in­ter­est to im­prove and de­velop new prod­ucts and ser­vices, in­crease ef­fi­ciency, pro­tect our sys­tems, net­works and em­ploy­ees, and com­ply with le­gal oblig­a­tions.

We will store the per­sonal data you have pro­vided and a record of your in­ter­est in our prod­ucts in our CRM sys­tem for the pur­pose of cus­tomer man­age­ment. We will en­rich this data with ad­di­tional prop­er­ties, such as role, func­tion and com­pany, so we can send you tar­geted com­mu­ni­ca­tions, sub­ject to your con­sent.

4.         Per­sonal data of job ap­pli­cants

If you wish to ap­ply to ORIOR on­line, you must first cre­ate a user ac­count. This in­volves en­ter­ing your first and last name, e-mail ad­dress and place of res­i­dence. In con­nec­tion with job ap­pli­ca­tions, we may sub­se­quently process your CV, in­clud­ing can­di­date photo and cover let­ter, if you pro­vide us with these doc­u­ments, and also man­age your ac­count. To process your em­ploy­ment con­tract, we will re­quest ad­di­tional data, such as your AHV num­ber and bank de­tails.

We will process this data with your con­sent and, if nec­es­sary, to take pre-con­trac­tual mea­sures. For cer­tain forms of data pro­cess­ing we will need your ex­press con­sent, for ex­am­ple to ob­tain in­for­ma­tion from third par­ties, such as pre­vi­ous em­ploy­ers, or to keep your ap­pli­ca­tion doc­u­ments in our tal­ent pool for other po­ten­tial jobs. You can with­draw your con­sent for this at any time. Such with­drawal will not af­fect any data pro­cess­ing that has al­ready taken place.

If your ap­pli­ca­tion is suc­cess­ful, we will store your per­sonal data for as long as you are em­ployed by us and be­yond, if pro­vided for by law (gen­er­ally no longer than 10 years). If your ap­pli­ca­tion is un­suc­cess­ful, we will delete your data within six months, un­less you ex­pressly agree to a longer stor­age pe­riod for po­ten­tial po­si­tions in the fu­ture.

When you cre­ate an ac­count with ORIOR to sub­mit an ap­pli­ca­tion, you can ex­pressly con­sent to be in­cluded in our tal­ent pool. In such cases, we are al­lowed to re­tain your ap­pli­ca­tion and re­lated doc­u­ments and per­sonal data even af­ter the re­cruit­ment process for that po­si­tion has come to an end, and to no­tify you and re­view your ap­pli­ca­tion again if a suit­able va­cancy comes up.

5.         Mar­ket­ing, newslet­ter and mar­ket re­search

At your re­quest, we can send you our newslet­ter by e-mail through the mailX­pert ser­vice in Switzer­land to keep you up to date about our prod­ucts and lat­est of­fers. To reg­is­ter for the newslet­ter, we will need the fol­low­ing in­for­ma­tion from you:

• Contact category and desired messages

• Language preference

• Title

• Last name and first name

• Company

• Address

• Country

• E-mail address

We will process this data on the ba­sis of your ex­press con­sent. You can with­draw this con­sent at any time by con­tact­ing us as set out in sec­tion VII or di­rectly us­ing the un­sub­scribe link in the newslet­ter e-mail. Such with­drawal will not af­fect any data pro­cess­ing that has al­ready taken place.

We may also use your con­tact de­tails for mar­ket­ing pur­poses, pro­vided you have en­tered into a con­tract with us and did not ob­ject to re­ceiv­ing mar­ket­ing com­mu­ni­ca­tions when you did so. In such cases, we will no­tify you by e-mail, text mes­sage, tele­phone or post about prod­ucts that are sim­i­lar to pur­chases you have al­ready made. For this pur­pose, we will also process in­for­ma­tion about your past pur­chases in ad­di­tion to the data pro­vided in re­la­tion to the newslet­ter.  This data pro­cess­ing is based on our le­git­i­mate in­ter­est in send­ing you tar­geted in­for­ma­tion about our prod­ucts and of­fers. You can ob­ject to this pro­cess­ing pur­pose at any time by con­tact­ing daten­schutz@orior.ch or di­rectly by click­ing on the un­sub­scribe link in that mar­ket­ing com­mu­ni­ca­tion. 

With your con­sent, we will also use in­for­ma­tion about your pur­chas­ing be­hav­iour for mar­ket re­search and in­ter­nal stud­ies and to mea­sure the ef­fec­tive­ness of our ad­ver­tis­ing cam­paigns. For these pur­poses, your per­sonal data will first be pseu­do­nymised and ul­ti­mately anonymised when the sta­tis­tics are com­piled.

We will only dis­close your data to third par­ties for the pur­poses de­scribed in this pri­vacy pol­icy if we have an over­rid­ing le­git­i­mate in­ter­est in do­ing so, if there is a le­gal oblig­a­tion to do so, if the dis­clo­sure is nec­es­sary for the as­ser­tion, ex­er­cise or de­fence of le­gal claims or for the per­for­mance of con­tracts and busi­ness ac­tiv­i­ties, or on the ba­sis of your con­sent. Such third par­ties in­clude in par­tic­u­lar:

• Service providers, including those that process payment transactions; IT service providers that host our website, provide IT support and implement security measures on our website; delivery services; newsletter services; debt collection agencies; and analytics services that measure and statistically analyse interactions with our website.

• Law enforcement authorities in the event of judicial actions or proceedings, and our tax advisors, auditors and lawyers in relation to the exercise of our rights and legal obligations.

• Third parties in the event of a change of ownership.

Most of these re­cip­i­ents are usu­ally based in Switzer­land or the EU. If per­sonal data needs to be trans­mit­ted to a coun­try out­side the EU that does not as­sure ad­e­quate data pro­tec­tion, in­clud­ing the USA, such a trans­fer will only take place if it has been en­sured that ap­pro­pri­ate mea­sures have been taken to pro­tect your per­sonal data. This in­cludes in par­tic­u­lar ob­tain­ing your ex­press con­sent to data pro­cess­ing or the con­clu­sion of recog­nised stan­dard con­trac­tual clauses.

Cook­ies: To make your visit to the ORIOR web­site more user-friendly and ef­fec­tive, cook­ies that iden­tify your browser and de­vice are au­to­mat­i­cally in­stalled on your com­puter. A cookie is a small text file sent to your com­puter or au­to­mat­i­cally stored on your com­puter or mo­bile de­vice by the web browser that you are us­ing when you visit our web­site.

These cook­ies are needed for tech­ni­cal rea­sons: they make the web­site us­able by en­abling ba­sic func­tions such as page nav­i­ga­tion and re­mem­ber­ing in­for­ma­tion such as your lan­guage se­lec­tion. They are processed on the ba­sis of our le­git­i­mate in­ter­est in the eco­nomic op­er­a­tion of this web­site and its op­ti­mi­sa­tion.

You can de­ac­ti­vate this func­tion in your com­put­er’s browser set­tings and delete the cook­ies that are stored there. How­ever, cer­tain func­tions may no longer work if you block cook­ies. These cook­ies are only used dur­ing a ses­sion and are deleted af­ter your web­site visit (ses­sion cook­ies).

We only use other cook­ies with your ex­press con­sent, as de­scribed in our cookie ban­ner. These may in­clude per­sis­tent cook­ies, which are deleted af­ter a pre­de­fined pe­riod, which may dif­fer de­pend­ing on the cookie.

re­CAPTCHA: To pro­tect our web­site as much as pos­si­ble from mal­ware and abuse, we use Google re­CAPTCHA, pro­vided by Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, D04E5W5 Ire­land. This ser­vice does not process per­sonal data.

Google An­a­lyt­ics and Google Tag Man­ager: We also use the web an­a­lyt­ics ser­vice Google An­a­lyt­ics to analyse your web be­hav­iour. Google An­a­lyt­ics uses cook­ies and sim­i­lar tech­nolo­gies to eval­u­ate how you use the web­site and pro­vide other ser­vices in re­la­tion to the web­site and in­ter­net us­age. The in­for­ma­tion gen­er­ated about how you use this web­site, in­clud­ing your trun­cated IP ad­dress, is trans­mit­ted to Google An­a­lyt­ics so that anony­mous sta­tis­tics about web­site ac­tiv­ity can be com­piled.

We also use Google Tag Man­ager to quickly up­date mea­sure­ment codes and as­so­ci­ated code frag­ments (tags) and in do­ing so im­prove the func­tion­al­ity of Google An­a­lyt­ics.

When you visit our web­site, Google An­a­lyt­ics and Google Tag Man­ager are only ac­ti­vated with your ex­press con­sent. You can give or with­draw your con­sent at any time via the cookie set­tings (http://​javascript:gaOptout()). You can also gen­er­ally de­ac­ti­vate Google An­a­lyt­ics and Google Tag Man­ager by fol­low­ing the in­struc­tions be­low: https://​tools.google.com/​dl­page/​gaoptout.

To en­sure the law­ful pro­cess­ing of your per­sonal data to the great­est pos­si­ble ex­tent, we have con­cluded data pro­tec­tion con­tracts with Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, D04E5W5 Ire­land. This pro­cess­ing also in­volves send­ing cer­tain items of per­sonal data to Google Inc. in the USA. An as­sess­ment by the Eu­ro­pean Com­mis­sion and the Swiss Fed­eral Data Pro­tec­tion and In­for­ma­tion Com­mis­sioner con­cluded that the USA does not have an ad­e­quate level of data pro­tec­tion. When a trans­fer to the USA is made, there is a risk that your data might be viewed by US pub­lic au­thor­i­ties. By con­sent­ing to the use of Google An­a­lyt­ics and/​or Google Tag Man­ager, you not only agree to the set­ting of cook­ies, but also ex­pressly agree to the trans­fer to the USA in the knowl­edge of this risk.

Google Maps: Our web­site uses the Google Maps ser­vice via an API. The provider is Google Ire­land Ltd, Gor­don House, Bar­row Street, Dublin 4, Ire­land, with which we have en­tered into con­tracts to en­sure data pro­tec­tion. Us­ing the Google Maps func­tion­al­i­ties re­quires the stor­ing of your IP ad­dress, your lat­i­tude and lon­gi­tude co­or­di­nates, and your search terms. This in­for­ma­tion may be trans­ferred to a Google server in the USA and stored there, where it may be viewed by US pub­lic au­thor­i­ties for au­dit and mon­i­tor­ing pur­poses out­side of our con­trol. 

So­cial net­works: ORIOR is pre­sent on the so­cial net­work LinkedIn. When you visit the ORIOR page on this net­work, we are con­sid­ered a joint con­troller with the op­er­a­tor of the so­cial net­work in ques­tion. We have con­cluded agree­ments with the re­spec­tive op­er­a­tors un­der which they will en­sure the se­cu­rity of your per­sonal data and the ex­er­cise of your rights. You can ex­er­cise your rights ei­ther against us or against the op­er­a­tor in ques­tion. If you con­tact us, we will in­form the op­er­a­tor of your re­port and pro­vide them with the nec­es­sary in­for­ma­tion. Please note that de­spite this joint re­spon­si­bil­ity, we have no in­flu­ence over the data pro­cess­ing processes of the so­cial me­dia op­er­a­tors. For fur­ther in­for­ma­tion, please re­fer to the terms of use and pri­vacy poli­cies of the op­er­a­tor in ques­tion.

We are jointly re­spon­si­ble with LinkedIn Ire­land Un­lim­ited Com­pany for the pro­cess­ing of your per­sonal data when you visit our LinkedIn page. For more in­for­ma­tion about how LinkedIn processes your per­sonal data, visit https://​www.linkedin.com/​le­gal/​pri­vacy-pol­icy?trk=home­page-ba­sic_­footer-pri­vacy-pol­icy.

Ex­ter­nal links: We are not re­spon­si­ble for the con­tent of or data pro­cess­ing by third-party web­sites that can be ac­cessed through links on the ORIOR web­site. Please read the pri­vacy poli­cies of these third par­ties to learn how your data is processed.

We take ap­pro­pri­ate tech­ni­cal and or­gan­i­sa­tional se­cu­rity pre­cau­tions to pro­tect per­sonal data against unau­tho­rised ac­cess and mis­use. This in­cludes in­struc­tions to em­ploy­ees, ac­cess reg­u­la­tions and re­stric­tions, and en­cryp­tion of data car­ri­ers.

Ex­cept as oth­er­wise pro­vided in this pri­vacy pol­icy, we process and store per­sonal data that we col­lect in the course of our ac­tiv­i­ties de­scribed in this pri­vacy pol­icy for as long as and to the ex­tent needed to ful­fil the pur­poses de­scribed and our con­trac­tual and le­gal oblig­a­tions, in­clud­ing le­gal re­ten­tion oblig­a­tions, and for as long as we have a le­git­i­mate in­ter­est in re­tain­ing per­sonal data or your valid con­sent. 

You can ex­er­cise the fol­low­ing rights un­der the ap­plic­a­ble le­gal pro­vi­sions:

• Right to be informed about your personal data

• Right to rectification of your personal data if it is inaccurate or incomplete

• Right to erasure, unless there is a legal obligation to retain records or another legal reason for continued storage

• Right to restrict processing if we process personal data based on our legitimate interest

• Right to withdraw your consent to data processing at any time; such withdrawal of consent will have no influence on data processing that has already taken place

• Right to transfer your personal data to a third party (data portability)

Please note that these rights are not ab­solute, and we re­serve the right to en­force the re­stric­tions pro­vided for by law.

You also have the right to lodge a com­plaint with the com­pe­tent data pro­tec­tion au­thor­ity (in Switzer­land, this is the Fed­eral Data Pro­tec­tion and In­for­ma­tion Com­mis­sioner) or to en­force your claims in a court.

To ex­er­cise your rights, con­tact us at the con­tact ad­dress be­low. Please note that we re­serve the right to re­quest a copy of your ID and other in­for­ma­tion if needed to ver­ify your iden­tity.

The con­troller for the terms of use and data pro­tec­tion de­scribed here is

ORIOR AG, Zoll­strasse 62, 8005 Zurich, Switzer­land

To ex­er­cise your rights, con­tact the data pro­tec­tion of­fi­cer at daten­schutz@orior.ch.

We re­serve the right to amend this pri­vacy pol­icy at any time. The lat­est ver­sion pub­lished on this web­site shall al­ways ap­ply.

Date of last re­vi­sion: Oc­to­ber, 2022