Data protection policy

This Data Protection Policy ("notice") sets out the basis on which ANTAES Consulting SA. and ANTAES Asia Pte. Ltd. ("we", or "our") may collect, use, share or process personal data of data subjects such as customers, employees or candidates in accordance with the European Data Protection Regulation ("EDPR"), the Swiss Federal Data Protection Act ("DPA"), the draft revision of the DPA ("P-LPD") and the Singapore Personal Data Protection Act ("PDPA"). This notice applies to all personal data in our possession and data in the possession of organizations with which we are involved.

PERSONAL DATA

As used in this Notice and defined in Article 4 of the RGPD :

"Data subject", i.e. an identified or identifiable natural person who (a) has contacted us by any means to find out more about our services or (b) could or has entered into a contract with us for the provision of our services. "Personal data", i.e. any information directly or indirectly identifying a natural person such as a customer or applicant (e.g. name, telephone number, photograph, date of birth, municipality of residence, IBAN, ...).

As far as the context allows, all other terms used in this notice shall have the meaning given by the RGPD, LPD, P-LPD and PDPA.

COLLECTION, USE AND DISTRIBUTION OF PERSONAL DATA

Usually we do not collect your personal data unless (a) it has been voluntarily provided to us directly by you, a partner or job site that have been duly authorized and after (b) you (or your authorized representative) have been informed of the purposes for which your data is being collected or, (c) the collection and use of your personal data without your consent is permitted or required by the RGPD, LPD, P-LPD, PDPA or any other law. In the event of the collection of additional personal data and prior to the use of such data for a purpose not notified to you (unless permitted or authorized by law), we must obtain your prior consent.

We collect and use your personal data for the following purposes:

to perform our obligations in accordance with the services requested by you;to verify your identity;to respond to, process any request, application, claim from you;to manage your relationship with us;to process payments or transactions relating to you;to send you marketing information about our services including our marketing events or other initiatives;to comply with applicable laws and/or regulations and/or codes of conduct or to facilitate investigations by government law enforcement and security agencies and/or regulatory authorities; for any other purpose for which you have provided us with your personal data;to transmit your data to the various Antaes Consulting SA entities in Switzerland and Singapore, to our customers and prospects or to any other third party service provider for the purposes set out above;for any other activity in connection with the purposes set out above.

We may pass on your personal data:

The purposes mentioned in this notice may continue to apply even if your relationship with us has been modified or terminated, for a reasonable period of time.

WITHDRAWAL OF YOUR CONSENT

Your consent to the collection, use and dissemination of your personal data will remain valid until you request its deletion in writing. At any time, you may withdraw your consent and request that we cease using and/or distributing your personal data for any of the purposes and uses mentioned in this notice by submitting your request in writing or by email to our Data Protection Officers ("DPO") in Switzerland or Singapore whose contact details are available below.At any time you may exercise your right to obtain from Antaes the erasure, as soon as possible, of personal data concerning you or "right to be forgotten" as provided for in Article 17 of the RGPD, Article 25, para. 1 let. c of the P-LPD and Sections 16 and 25 of the PDPA.

Upon receipt of your request to withdraw consent in writing, we may need a reasonable period of time (depending on the complexity of the request and its impact on our relationship) to process your request and notify you of the legal and other consequences of your rights and responsibilities to us. Generally, we will endeavour to process your request within ten (10) working days of receipt. In general, we aim to process your request within ten (10) working days of receipt. While we respect your decision to withdraw consent, please note that depending on the nature and scope of your request, we may no longer be able to provide you with our services and, if so, we would need to inform you in advance. Should you decide to withdraw your consent, please inform us in writing as described above.

Please note that withdrawal of consent does not affect our right to continue to collect, use and disclose personal data where collection, use and disclosure without consent is permitted or required under applicable laws and regulations.

ACCESS TO AND CORRECTION OF PERSONAL DATA

As provided for in Article 17 of the RGPD, Articles 5 and 8 of the LPD, Article 25, para. 1 let. c of the P-LPD and PART V, Sections 21 and 22 of the PDPA, if you wish to make (a) a request for access to a copy of your personal data in our possession or obtain information as to its use or dissemination, or if you wish to make (b) a request for correction or updating of such data, you may make the request in writing or by email to our DPOs in Switzerland or Singapore whose contact details are available below.

Please note that a reasonable fee may be charged for an access request. We will respond to your request as soon as reasonably possible. If, however, we are unable to respond to your request within thirty (30) working days of receipt, we will inform you in writing within thirty (30) working days. If we are unable to provide you with your personal data or to correct it in accordance with your request, we would have to specify the reasons for this unless we are not obliged to do so under the GDPR, the DPA or the PDPA.

PROTECTION OF PERSONAL DATA

To protect your personal data from unauthorized access, collection, use, dissemination, copying, modification, making available or similar risks, we have implemented appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to protect any archiving and transmission internally or to our authorized service providers of your personal data and only on a need-to-know basis (Article 25 of the RGPD, Article 18 of the P-LPD and Section 24 of the PDPA).You should nevertheless be aware that no method of transmission via the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we make every effort to protect the confidentiality of your data and are constantly reviewing and improving our information security measures.

ACCURACY OF PERSONAL DATA

In general, we rely on the accuracy of the data you (or your authorized representative) have provided to us (Article 5 RGPD, Article 4 P-LPD and Section 23 PDPA). To ensure that your data is up-to-date, complete and accurate, please inform our DPOs in Switzerland or Singapore, whose contact details are specified below, in writing or by email of any changes to your personal data.

RETENTION OF PERSONAL DATA

We may retain your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable law. We will stop storing your personal data, or remove any means of associating it with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which your data was collected and is no longer required for legal or commercial purposes.

TRANSFERS OF PERSONAL DATA OUTSIDE THE EU, SWITZERLAND AND SINGAPORE

As we are engaged in cross-border data transfers between Switzerland, the European Union and Singapore (via, among others, the use of online IT services, cloud-based services, remote access services or shared HR databases), we have put in place legitimate data transfer mechanisms to ensure that your personal data receives a standard of protection at least comparable to those under the GDPR (Article 44), P-PLD (Article 5) and PDPA (Section 26).

If we need to transfer your personal data outside Switzerland, the EU or Singapore, we will do so with your consent and take all necessary measures compatible with the requirements of the GDPR, P-LPD and PDPA.

DATA PROTECTION OFFICER ("DPO")

As provided for in Articles 38 and 39 of the GDPR and the PDPA, you may contact our DPOs in Switzerland and Singapore in writing or by email for any questions relating to your personal data and/or our data protection policy or for any other queries, as follows:

ANTAES Asia Pte. Ltd.75 High StreetSingapore 179435F: +65 65956249DPO@antaesasia.com

ANTAES Consulting SA.DPOAvenue des Morgines 12,1213 Petit-LancySwitzerlandStd: +41 022 560 7272DPO@antaes.ch

USE OF COOKIES

ANTAES Consulting SA. ("ANTAES", "we", "us" or "our") is a Swiss technology consulting firm with offices in Geneva, Zurich and Singapore. This Cookie Statement is intended to explain how ANTAES uses cookies and similar technologies to recognize you when you visit our website www.antaes.ch ("Website"). It aims to explain what these technologies are, why we use them, and what rights you have to control how we use them. Our website is hosted and managed in Switzerland.

If we ask you to provide personal data, i.e. any information relating to an identified or identifiable natural person, via our website, you can be assured that your personal data will be processed in accordance with our Data Protection Policy.

WHAT IS A COOKIE

A cookie is a small text file that is downloaded to your computer or mobile device when you visit a website. Cookies are widely used by website owners to ensure the smooth running of the site or to enable more efficient operation, as well as to obtain information about your preferences.

WHY WE USE COOKIES

We use third-party cookies via our website for analytical purposes as detailed below:

Cookie types:

Analysis and personalization cookies: These cookies collect information that is used in aggregate form to help us understand how our website is used and to measure the effectiveness of our marketing campaigns, or to help us personalize our website for you.

Who sets these cookies:

Google AnalyticsCookie name: __utma (2 years), __utmb (30 minutes), __utmc, __utmz (6 months)Google's Privacy Policy is available by clicking on the link below:https://policies.google.com/privacy

How to refuse them:

To refuse these cookies, please follow the instructions given below under the heading "How can you control cookies?" You can also click on one of the deactivation links shown below:http://www.alexa.com/settings/optouthttps://tools.google.com/dlpage/gaoptout/

HOW WE USE COOKIES

You can access and use our website without providing us with your personal data.

ANTAES may collect your personal data via our website in two specific ways:

When you apply for one or more of our job vacancies;When you use our contact form for any question relating to our services.in these cases, the following personal data may be collected: surname, first name, address, telephone number, e-mail address, job title.

Other information may also be collected automatically via cookies when you access and use our website. We use traffic logs via Google Analytics to identify which pages of the ANTAES website are consulted in order to adapt them to your needs. We use this data for statistical analysis purposes only. Cookies do not give us access to your computer or to your data, other than that which you have chosen to share with us.

To give visitors to the ANTAES website the ability to prevent Google Analytics from using their personal data, we have defined an opt-out option in our Data Protection Policy. You can choose to accept or decline cookies at any time by modifying your web browser controls.

HOW WE USE YOUR DATA

Personal data collected from our ANTAES website is used for two purposes:

  1. MARKETING ACTIVITY

To measure the use of the ANTAES website via Google Analytics, in an anonymized way.

2. STANDARD COMMUNICATION

To respond to your inquiries and/or applications via our online contact form or the "Contact Us" section of our website.

HOW WE SHARE YOUR DATA

As an international consulting company, ANTAES may share your personal data collected via our website internally between our offices in Geneva, Lausanne, Zurich and Singapore.

ANTAES may use the services of third parties for certain tasks, such as technical support for our website or application management. Under no circumstances will ANTAES sell or rent your personal data to third parties.

HOW WE STORE AND PROTECT YOUR DATA

We are committed to processing your personal data in a secure manner. In order to prevent unauthorized access or data leakage, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the data we process. In particular, ANTAES adheres to a documented Data Protection Policy.

This ensures that data is stored in compliance with the RGPD, P-LPD and PDPA and within the limits of the purpose for which it was collected.

HOW TO CONTROL COOKIES

You have the right to decide whether or not to accept cookies. You can adjust your cookie preferences by clicking on the deactivation links shown in the table above. You can set your web browser to accept or reject cookies.

If you choose to disable cookies, you may continue to use our website, but your access to certain features and sections of the site may be restricted.

YOUR RIGHTS

If you change your mind and no longer wish us to process your personal data for recruitment purposes, or if you have any questions about our use of cookies and other technologies, please email our DPOs using the contact details provided above.If you would like further information about your personal data that we have collected, if you believe that this data is incorrect or incomplete, or if you would like us to delete your data, please email DPOs using the addresses provided above.

EFFECTIVE DATE AND CHANGES

This notice applies in addition to any other notices, contractual clauses and consent that apply to the collection, use and dissemination of your personal data by us and as provided for in Article 4 of the GDPR, Article 3 of the P-LPD and Sections 13 and 14 of the PDPA.

We may revise this manual without prior notice. The revision history is detailed in this notice. Your continued use of our services constitutes your acknowledgement and acceptance of these changes.

Effective date: September 21, 2018

Last update: May 14, 2020