corporate benefits

Benefits at work

header_login_header_asset

Welcome at the registration

Please fill in all mandatory fields (*).

Please validate your input
Your registration data
Please validate your input
Please validate your input
Please validate your input
Default
Close

Your DOB will be used for internal statistics only.

Default
Close

The postcode will be used for internal statistics only.

Please validate your input
Your login data
Default
Close

Please use either your private e-mail address or your corporate e-mail address

Please validate your input
Default
Close

After completing registration you will get an activation code per mail. After entering this code your account is activated and you can login.

Please validate your input
Please validate your input
Default
Close

Please identify yourself as corporate employee by using the registration code.

Please validate your input
Default
Close

Instructions for a secure password
Please use at least 6 characters.
Chose characters of at least 2 of the following groups:
- lower case (a-z)
- upper case (A-Z)
- digits (0-9)
- special characters: _-/()+*.:,;#$%&=?!

Spaces and umlauts will not be accepted.
Passwords marked "too weak" will not be accepted.

Further hints to create a very secure password
- use characters from all of the four groups mentioned above
- create a password with more than 12 characters
- use more than one special character

Please enter a password
Too weak Sufficiently strong password Very strong password
Your input doesn't match with the "password".
Please validate your input
Please validate your input

We will only use your data in accordance with our privacy policy.

We have just sent you an e-mail containing your activation code. Please enter this activation code into the appropriate field on the registration page. Your account will then be activated.

In case you have not received our e-mail, this might be due to the following reasons:

* Your inbox is full - there is not sufficient space available
* Our e-mail was moved to your spam folder
* Your inbox has not been refreshed yet. You can also initiate this process manually (by retrieving your e-mails)
* A spelling mistake occured in your e-mail address. Please let us know so that we can correct this mistake.

If you still have not received any e-mail from us within 10 minutes, please send us an e-mail using our contact form "Problems with registration". We will be pleased to give you support with your registration.

Your corporate benefits Support Team

Registration problems?

Please fill in all mandatory fields (*).

Please validate your input
Please validate your input
Please validate your input
Please enter your email.
Please validate your input
Please validate your input

Thank you!

We have received your request and will deal with it immediately!

Terms of use

1. Disclaimer
1.1 The following Terms of Use apply to the use of the employee offers presentation platform (hereinafter referred to as presentation platform) by the employees of the company (hereinafter referred to as employees).
1.2 Use of the employee benefits presentation platform is conditional upon your agreement to these Terms of Use. By registering and logging on to the presentation platform, the employee indicates their agreement to be bound by all of the terms and conditions contained in these Terms of Use.
1.3 Use of the presentation platform is free of charge.

2. Access to and use of the presentation platform
2.1 The personal credentials do not entitle any person other than the employee to use the respective presentation platform.
2.2 A permanent e-mail address is required for registration. The use of a disposable temporary e-mail address or “throw-away” e-mail address is expressly prohibited. Disposable e-mail addresses are re-assigned to other users once they have been “thrown away”, which might give unauthorized persons access to the participant’s account.
2.3 The employee commits to keep the following confidential and/or prevent abuse of the following: Personal login credentials, coupons and promotional codes.
2.4 In case of loss, the employee will receive new personal login credentials. 2.5 Under no circumstances is the employee to use the employee benefits program to resell the discounted products or services acquired, especially via online auctions and the like.
2.6 In case of a breach of contract the employee’s access can be terminated immediately.
2.7 Upon leaving the company, the employee is to make sure that their account be deleted. This shall not impact on the possibility that the administrator(s) can revoke access at any time. In case of doubt, the continued use of the presentation platform can be made dependent on the presentation of proof of employment.
2.8 In order to use the presentation platform, employees must be at least 16 years of age or provide written consent of their parents or legal guardians.
2.9 Access to the presentation platform can be revoked and the respective account may be deleted if the employee has not visited the presentation platform for 5 years.

3. Contracts between vendors and employees
3.1 The presentation platform is a virtual marketplace in the sense that it provides the framework for a first contact between an interested employee and a vendor.
3.2 All further matters, including but not limited to the conclusion of a sales contract, delivery of goods and services, returns, and warranties occur solely and strictly between the employee and the vendor without the direct or indirect participation of a third party – usually via the vendor’s own website or via e-mail correspondence or other direct communications between vendor and employee.

4. Warranties
4.1 No warranty is given or shall be construed concerning the accuracy of the information provided by vendors, nor concerning the conduct and performance of the vendors, as well as their goods and services available via the presentation platform. Furthermore, no warranty is given or shall be construed concerning the accuracy and completeness of the content of the information and declarations provided by the vendors, nor concerning the actual availability, quality and viability of their goods and services, nor the fitness of the goods and services for a particular purpose, nor concerning non-infringement of the rights of others by these services.
4.2 No warranty is given or shall be construed regarding the actual discounts granted by vendors or savings achieved by the employee.
4.3 All matters, including but not limited to the conclusion of a sales contract, delivery of goods and services, returns, and warranties occur solely and strictly between the employee and the vendor. Therefore, any warranties or other entitlements must be asserted in the context of this relationship. In case of doubt, the employee is to communicate directly with their contracting party.

5. Further general provisions
5.1. These Terms of Use are subject to the jurisdiction and laws of the Federal Republic of Germany.




last updated: 03.2019

Privacy statement


I.    Name and address of the responsible entity

The entity responsible for compliance with the provisions of the Swiss Data Protection Act (DPA) and any other applicable data protection provisions on this internet presentation platform for employee offers is:

corporate benefits swiss AG
Schwanengasse 3

CH-3011 Bern Switzerland

Tel.: 031 301 36 36

E-mail: info@cb-ag.ch
Web: https://www.corporate-benefits.ch

II.    General information on data processing

1.    Scope of the personal data processing

We collect and utilize our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilization of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for circumstantial reasons and the processing of the data is permitted by law.

2.    Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing personal data, art. 6 para. 6 in conjunction with art. 31 para. 1 DPA applies as the legal basis.

For the processing of personal data necessary for performance of a contract to which the data subject is a party, art. 31 para. 1, 2 letter a DPA applies as the legal basis. This also applies to processing that is necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, art. 31 para. 1 DPA applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, art. 31 para. 1 DPA applies as the legal basis for processing.

3.    Data deletion and storage duration

The affected person's personal data will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this has been provided for by laws and regulations to which the data controller is subject. Data is also blocked or deleted once a retention period prescribed by the specified standards expires, unless there is a need for further storage of the data in order to conclude or fulfill a contract.

III.   Provision of the website and creation of log files

1.    Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

  • Information regarding the used browser type and version

  • The user’s operating system

  • The user's IP address

  • Date and time of access

  • The websites accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

When generating a coupon code, we save the following personal data for 1 year to protect against misuse (e.g. commercial resale):

  • Coupon code

  • Offer

  • Company portal where the coupon code is offered

  • First name

  • Surname

  • E-mail address

  • Time of code generation (date & time)

  • The user's IP address

2.    Legal basis for data processing

The legal basis for temporary storage of data and log files is art. 31 para. 1 DPA.

3.    Purpose of data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address shall remain stored for the duration of the session.

The data is stored in log files to ensure the website's functionality. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is performed in this context.

These purposes also encompass our legitimate interest in data processing in accordance with art. 31 para. 1 DPA.

4.    Duration of retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.

Further storage is possible. In this case, the user's IP addresses will be deleted or altered so that a tracing back to the accessing client would no longer be possible.

Log files regarding the generation of coupon codes are deleted after one year to prevent abuse.

5.    Options for Objection and Removal

Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.

IV.   Use of cookies

1.    Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser's accessing can be identified even after changing the page.

The following data is stored and transmitted in the cookies:

  • An ID that allows for user identification

Beyond this, we use services and cookies from Webtrekk GmbH on our website in order to collect statistical data on the use of the website and to improve the offer accordingly. Figures provided by Webtrekk are used to show the "Top 5 Offers Of My Colleagues" on the company platforms. Webtrekk GmbH is certified for data protection in the area of web controlling software by TÜV Saarland, Germany.

Every time our portal website is accessed, web controlling collects and evaluates some information that is transmitted by the user's browser during the registration process. The collection is carried out through a pixel that is integrated on each page. The following data is collected:

  • Request (file name of the requested file)

  • Browser type/version (e.g. Internet Explorer 6.0)

  • Browser language (e.g. German)

  • Operating system used (e.g. Windows XP)

  • Internal resolution of the browser window

  • Display resolution

  • JavaScript activation

  • Java on/off

  • Cookies on / off

  • Colour depth

  • Referrer URL (the website visited immediately beforehand)

  • Abbreviated IP address for geographical recognition

  • Time of access

  • Clicks

Webtrekk only saves the IP address in abbreviated (anonymised) form and uses it only for session detection, for geolocation and for the defense against cyber attacks. The IP address is then deleted immediately, so that the data collected is then anonymous.

Webtrekk places the following cookies:

  • Session cookie (for session detection, lifetime: one session)

  • Long-term cookie (to identify new / regular customers: 6 months)

  • Opt-out cookie (in case of objection to tracking: 60 months)

More information can be found on the website of Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany, http://www.webtrekk.com .

2.     Legal basis for data processing

The legal basis for processing personal data using cookies is art. 31 para. 1 DPA.

3.    Purpose of data processing

The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. In such cases, it is necessary that the browser is recognised even after changing the page.

4.    Duration of storage and options for objection and removal

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

V.   Newsletter

1.    Description and scope of data processing

You have the possibility to subscribe to free newsletters on our website. You can sign up for the monthly newsletter immediately upon registration. You can also subscribe to the newsletter at any time under "My Account". In this case, the data from the input form are transmitted to us when you subscribe to the newsletter during registration:

  • Salutation and title

  • Name and surname

  • Date of birth

  • Company postal code

  • Company e-mail address

  • Password

  • Date and time of registration

  • Mailing list affiliation (company platform)

In addition to monthly newsletters, you can also subscribe to a special newsletter that is sent at irregular intervals after successfully completing your registration and logging in.

During the registration process, your consent is obtained for processing data and reference is made to this data protection declaration.

In connection with data processing for sending newsletters, the data is transmitted to Mapp Digital Germany GmbH, Dachauer Strasse 63, 80335 Munich, Germany. The data will be used exclusively for sending the newsletter.

For the purpose of sending the newsletter, we hand over a data package with the following personal content to Mapp:

  • E-mail address

  • Salutation

  • Surname

  • Mailing list affiliation (company platform & newsletter type)

2.    Legal basis for data processing

The legal basis for processing data after the user registers for the newsletter, if the user's consent to this has been obtained, is art. 6 para. 6 in conjunction with art. 31 para 1 DPA.

3.    Purpose of data processing

The user's email address is collected in order to deliver the newsletter.

Collection of other personal data as part of the subscription process is for preventing the misuse of the services or of the used email address.

4.    Duration of retention

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active.

5.    Options for Objection and Removal

The subscription to the newsletter can be cancelled by the user at any time. For this purpose, a relevant link to the employee's "My Account" area can be found in every newsletter. Here, the employee can unsubscribe from the newsletters.

The "My Account" area transparently lists when a the has user subscribed or unsubscribed to a monthly newsletter or special newsletter.

VI.   Registration

1.    Description and scope of data processing

On our website, we offer users the opportunity to sign up to our portal by providing personal information. The data is entered into an input form and transmitted to us and stored. This data is not transferred to third parties. The following data is collected during the registration process:

  • Salutation (mandatory)

  • Title (optional)

  • Name and surname (mandatory)

  • Date of birth (optional)

  • Postal code (optional)

  • Email address (mandatory)

  • Date of birth (optional)

  • Newsletter (optional)

  • Date and time of registration

The user's consent to processing this data is obtained during the registration process. We also store:

  • Language preference on multi-language platforms

  • Location (Web browser, if approved by user. User can also specify location manually)

  • Date of registration

  • Registration code time stamp

  • Subscription to the monthly email newsletter with time stamp

  • Subscription to the special email newsletter with time stamp

  • Acceptance of the terms of use and privacy policy

  • Linked company platform

  • Login with time stamp

  • APP use iOS/Android yes/no

  • Offers saved to bookmarks

  • Generation of coupon codes

  • Storage of coupons

  • Contact form content

  • Callback form content

  • User ratings of offers with time stamp

IOS and Android App

  • Location access (Automatic detection of location / New - Push message if a store location from the user's watch list is nearby)

  • Camera access (Scan QR codes)

  • Receive push messages – New offers yes/no

  • Receive push messages – Expiring offers yes/no

  • Receive push messages – Store location from watch list nearby yes/no

Insofar as far as this has been activated for your respective portal, users have the possibility to post classified ads. The following data can be entered for the creation of an advertisement:

  • Salutation and title

  • Name and surname

  • E-mail address

  • Phone number

  • Address

2.    Legal basis for data processing

The legal basis for processing the optional data, if the user's consent to this has been obtained, is art. 6 para. 6 in conjunction with art. 31 para 1 DPA. The legal basis for the processing of the data in other respects is also art. 31 para. 1 DPA.

3.    Purpose of data processing

User registration is required for the provision of certain content and services on our website. The registration gives the user access to our platform for employee offers. The platform is intended exclusively for the presentation of discount offers. If an employee accepts these offers, they will be forwarded directly and anonymously to the selected supplier and thus into their area of responsibility. The data collected by the third-party companies for the execution of the contract with the employees are processed by the third-party companies or their contractual partners. Only when a product is actually purchased does the employee provide the personal data customary for the purchase and thus enter into a legal transaction with the supplier. Even at this point, no data is transmitted by us and the supplier cannot draw any conclusions as to which company the employee belongs to. No personal data about his/her activities and purchases are processed by our company. The collection of personal data during registration is for the purpose of user identification and communication, support inquiries, legal evidence, marketing and target group analyses as well as for displaying bookmarked offers.

4.    Duration of retention

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case for the data collected during the registration process, if registration on our website is withdrawn or amended.

5.    Options for Objection and Removal

As a user you have the option of cancelling the registration at any time. You may change the data stored about you, at any time. You can remove your account and platform access at any time in the "My Account" area using the "Delete account" link or change your data in this area.

VII.  Contact form and email contact

1.    Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user accepts this option, the data entered in the input form will be transmitted to us and saved. This data is:

  • Salutation

  • Name and surname

  • Your e-mail address

  • Subject

  • an the content of the message

  • Browser version

  • Operating system

The following data are also stored at the time the message is sent:

  • User's IP address

  • Date and time the e-mail was sent

Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data that is transmitted along with the email will be stored.

2.    Legal basis for data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is art. 6 para. 6 in conjunction with art. 31 para 1 DPA.

The legal basis for processing the data transferred in the course of sending an email is art. 31 para. 1 DPA. If the ultimate purpose of sending the e-mail is entering into contract with us, the additional legal basis for the data processing is art. 31 para. 1, 2 letter a DPA.

3.    Purpose of data processing

The processing of personal data in the input screen is used by us only for processing the contact. If contact is made via email, this is also because of our required legitimate interest in processing the data.

The other personal data processed during the sending process is for preventing the misuse of the contact form and to ensure the security of our information technology systems.

4.    Duration of retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by e-mail, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved.

5.    Options for Objection and Removal

The user has the option of revoking his or her consent to the processing of personal data at any time. If the user contacts us by email, he may object to the storage of his personal data at any time. It will not be possible to continue the conversation in this case.

In such cases, all personal data that was stored when establishing contact with us shall be deleted.

VIII.   Disclosure of personal data to third parties

We use an external system from http://salesforce.com Germany GmbH (Registered office: München, Bavaria District court München HRB, 158525, Business address: Erika-Mann-Straße 31-37, 80636 Munich, Germany, Directors: Joachim Wettermark, José Luiz Moura Neto) to process service requests submitted by e-mail or via the Service Portal Forms. Data is stored only within the EU. We have entered into a contract processing agreement with Salesforce and also an additional EU standard contract. Please also note Salesfroce's data protection/privacy policy:  https://www.salesforce.com/de/company/privacy/

We store our portal data with our technical service provider mpex GmbH (Hosting), Werner-Voß-Damm 62, 12101 Berlin, Germany.

Furthermore, data is passed on within our group to corporate benefits IT solutions, Schiffbauerdamm 40, 10117 Berlin, Germany for the purpose of providing our services.

IX.    Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the data controller (responsible party):

1.    Right to information

You can request that the responsible party confirm whether we will process personal data that concerns you.

If such is indeed the case, you can request the following information from the responsible entity:

(1) the purposes for which the personal data is being processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;

(4) the planned duration of retention of your personal data, or, if specific information in this respect is not possible, the criteria for determining the retention period;

(5) the existence of a right to correct or have your personal data deleted or to restrict its processing by the responsible entity or to object to such processing;

(6) the existence of the right to lodge a complaint with a supervisory authority;

(7) any available information on the origin of the data if the personal data has not been collected from the person concerned;

(8) the existence of automated decision-making, including profiling, and at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request information about the appropriate guarantees in accordance with art. 16 of the DPA in relation to the transmission.

2.    Right to have data corrected

You have a right to correct and/or add to your personal data held by the data controller if it is incorrect or incomplete. The responsible party shall make the correction immediately.

3.    The right to limitation of processing

You may ask for the processing of your personal data to be restricted under the following conditions:

(1) if you contest the accuracy of your relevant personal data, for as long as it takes the responsible entity to verify its accuracy;

(2) the processing is unlawful and you refuse to have the data deleted and instead wish to restrict its use;

(3) the party responsible no longer needs the personal data for processing purposes, but you need it to establish, exercise, or defend legal claims; or

(4) if you have made an objection against processing based on art. 30 para. 2 letter b in conjunction with art. 32 para. 2 letters a, b DPA and it is not yet clear whether the legitimate reasons of the data controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, then – apart from their storage – this data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest on the part of the Union or a Member State.

If the limitation of the processing has been restricted for any of the grounds listed above, the responsible entity will notify you before lifting the restriction.

4.    Right to deletion

4.1      Deletion obligation

You may request that the data controller delete the personal data that concerns you immediately, and the data controller will be obliged to delete this data immediately if one of the following reasons applies:

(1) Your personal data is no longer required for the purposes for which it was originally collected or otherwise processed.

(2) You revoke your consent on which the data processing was based and there is no other legal basis for data processing.

(3)You object to processing in accordance with 30 para. 2 letter b in conjunction with art. 32 para. 2 letters a, b DPA.

(4) Your personal data has been processed unlawfully.

(5) The deletion of personal data that concerns you is required to fulfill a legal obligation to which the data controller is subject.

4.2       Transfer of Personal Data to Third Parties

If the data controller has made the personal data that concerns you public and if the data controller is obliged to delete it pursuant to art. 6 para. 4 in conjuction with art. 32 para. 2 letter c DPA, that data controller shall take appropriate measures, including technical means, while taking into account available technology and implementation costs, to inform the parties responsible for data processing who process this personal data, that you as the data subject have requested the deletion of all links to such personal data or of copies or replications of such personal data.

4.3          Exceptions

The right to deletion does not exist if processing is necessary:

(1) to exercise the rights to freedom of expression and information;

(2) to fulfil a legal obligation that requires processing under laws and regulations to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(3) for reasons of public interest with regard to public health;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes, insofar as the right referred to under section 4.1 is likely to make impossible or seriously impair the attainment of the objectives of such processing, or

(5) to assert, exercise, or defend legal claims.

5.      Right to information

If you have exercised your right to have the responsible party correct, delete, or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

It is your right to have the controller inform you about these recipients.

6.       Right to data portability

You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the data controller to whom the personal data was provided, insofar as

(1) the processing is based on consent given in accordance with art. 6 para. 6 in conjunction with art. 31 para. 1 DPA or on a contract in accordance with art. 31 para. 1, 2 letter a DPA and

(2) processing is carried out using automated methods.

In exercising this right, you also have the right to bring about that the personal data relating to you are transmitted directly from one data controller to another data controller, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.

7.       Right of Objection

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with art. 31 para. 1 DPA; the same applies to profiling based on these provisions.

The data controller will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

If you object to your data being processed for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information society services, you may exercise your right to object by automated means using technical specifications.

8.        Right to revoke consent

You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.

9.       Automated decision in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:

(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party,

(2) is authorised by laws and regulations to which the party responsible is subject and which also lay down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to art. 5 letter c DPA, unless appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state his or her own position and to challenge the decision.

10.     The right to file a legal complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you also have the right to report to, consult with and, at all events, to receive recommendations from the responsible supervisory authority in Switzerland (Federal Data Protection and Information Commissioner, EDOEB) or in your country of residence if you believe that the processing of your personal data violates the DPA or data protection regulations applicable in your country of residence.



last updated: 12.2023

corporate benefits swiss AG



 

You successfully objected to the storage of data.

You successfully agreed to the storage of data.