Who we are
The controller of your personal data is BR-NAS AG. References in this privacy notice (the Notice) to “BR-NAS German Mittelstand Properties”, “we” or “us” are references to BR-NAS AG.
Personal data we process
Personal data we process about you includes:
- your name and contact details (for example name, address, phone number or email address), information about the company you work for, your position or title and your relationship to a person, and other basic information;
- identification and background information provided by you or collected as part of our on-boarding process;
- financial information, for example payment-related information;
- information provided to us by or on behalf of our clients or generated by us in the course or providing services to clients;
- information provided to us for the purposes of attending meetings, seminars and events;
- information in relation to materials and communications we send to you electronically, for example your use of marketing e-mails;
- any other information relating to you which you may provide to us.
We collect this information when you interact with us, for example when you communicate with our staff, sign up to receive information by e-mail, or participate at meeting, seminar or other event. We also collect or generate personal data in the course of providing advisory services, and we may collect personal data from other sources for example to keep your information up to date using publically available sources.
How we process your personal data
We process your personal data:
- to carry out anti-money laundering, conflict and reputational checks;
- to provide and improve our services to you and our customers, including personal data of others provided to us or collected by us on behalf of our customers, for example processing identification and background information as part of our on-boarding, finance, administration and marketing processes;
- to administer our relationship with you and with our customers;
- to provide and improve our websites, including monitoring and evaluating its use;
- to promote our services, including by sending publications, alerts, updates, event invitations etc.;
- to comply with our legal, regulatory and risk management obligations, including establishing, exercising or defending legal claims.
We process personal data for these purposes on the following basis: that it is necessary for us to perform a contract, such as engaging with an individual to provide our services; for the establishment, exercise or defence of legal claims or proceedings; to comply with legal and regulatory obligations; for legitimate interests including the interests set out above; and/or based on consent.
We use various technical and organisational measures to help protect your personal data from unauthorised access, use, disclosure, alteration or destruction.
Use of our websites; communication
We automatically collect and store for a limited time log data and device information when you access and use of our websites.That information includes, among other things, details about how you use our website, IP address, access dates and times, hardware and software information, device information and similar information. We process that data on the basis that it is required for us to operate, maintain and improve our websites
Our websites use Google Analytics, a service provided by Google LLC, USA that tracks and reports on the manner in which our websites are used. Google Analytics does this by placing small text files called “cookies” on your computer or other device. Cookies collect information about the number of visitors to the websites, the pages visited and the time spent on the websites. This information is aggregated and not personally identifiable. This integration of Google Analytics generally anonymizes IP addresses by shortening within the EU/EEA. Google is registered under the US-Swiss and the EU-US Privacy Shield.
We may use your name and e-mail address(es) to send you publications, alerts, updates, event invitations and other information by e-mail, but will ask for consent first unless we have obtained your contact details from you in the context of our services and you have not opted out from receiving such marketing communications. If you receive marketing communications from us and no longer wish to do so, you may unsubscribe at any time by following the link included in these e-mails. Note that we use personal data to understand if you read our e-mails or click on links included in them.
Who we share your personal data with
We may share your personal data with trusted third parties including:
- suppliers to whom we outsource certain support services such as translation and document review;
- IT serviceproviders;
- third parties engaged in the course of the services we provide to customers, with their prior consent, for example o technology service providers such as data room services;
- third parties involved in hosting or organising events or seminars.
For the purposes set out in this Policy and where necessary, we may share personal data with courts, tribunals, regulatory authorities, government agencies and law enforcement agencies. We may also be required to disclose your personal data to comply with legal or regulatory requirements.
Countries we transfer your personal data to
We may transfer your personal data to recipients abroad, including in countries that do not provide the same level of protection as Swiss law. We will usually do so on the basis that such a transfer is necessary for the performance of an agreement with the data subject(s), for an agreement or performance of an agreement concluded in the interest of the data subject, or for the establishment, exercise or defence of legal claims.
How we retain your personal data
We retain your personal data for as long as it is necessary for the purposes for which the data is collected, and as long as we have a legitimate interest in keeping personal data, for example to enforce or defend claims or for archiving purposes and IT security. We also retain your personal data as long as it is subject to a legal retention obligation.
You are entitled to ask for details of the personal data we hold about you and how we process it and to receive a copy of your personal data. You may also have your data rectified or deleted, restrict our processing of that information, and object to the processing of your personal data. You may also choose to withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal data to the extent required or permitted by law. You may also lodge a complaint in relation to our processing of your personal data with a local supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner.