Data Privacy Statement

Tornos Data Privacy Statement

Tornos SA, Rue Industrielle 111, 2740 Moutier, Switzerland, registered in the Commercial Register of the Canton of Berne under number CH-106.841.398, is responsible for the collection, processing and use of your personal data.

Your trust is important to us, which is why we take data protection seriously and ensure appropriate security in the application of Swiss law.

If you have any questions or comments about our processing of personal data and the legal basis on which we process them, you can contact us using the following details:

By post: Tornos SA, DPO, Rue Industrielle 111, 2740 Moutier

By e-mail: dpo [at] tornos.com       

Data Processing

Calling up our websites

Tornos SA is the operator of the www.tornos.com website and other sites and sub-sites (all our websites). When you visit our websites, our servers temporarily record each access in a log file. The following technical data is recorded and stored until it is automatically deleted after 180 days at the latest, as is the case for every connection to a web server:

• the IP address of the requesting computer,
• the name of your Internet service provider (usually your ISP),
• the date and time of access,
• the website from which the access was made (referring URL), if applicable with the search term used,
• the name and URL of the requested data,
• status code (e.g. error message)
• your computer's operating system,
• the browser you are using (type, version and language),
• the transmission protocol used (e.g. HTTP/1.1) and
• if applicable, your username from registration or authentication.

This data is collected and processed to enable the use of our websites and applications (connection establishment and data exchange), to ensure ongoing system security and stability, and to optimize our Internet offering. Data is also collected for internal statistical purposes.

In addition, the IP address is evaluated together with other data in the event of attacks on the network infrastructure or other unauthorized or abusive use of the website for clarification and defense purposes and, if necessary, used in criminal proceedings for identification and for civil and criminal proceedings against the users concerned.

The legal basis for such data processing is our legitimate interest in processing within the meaning of art. 13 para. 1 DPA/31 para. 1 nDPA and art. 6 para. 1 lit. f GDPR.

 

Contact via the 24 hours hotline or via regular telephone line

You may contact us by telephone. You yourself are responsible for the messages or content you send us by telephone (e.g. orders, purchase requests, general inquiries, etc.).

In order to be able to answer your questions, we may ask you to provide us with additional information, such as your full name, address, e-mail address, etc. We will only collect information about you that is relevant to our business. We will only collect from you the personal data that is necessary to identify you (including your telephone number) and to answer your questions in the best possible way or to provide the services you have requested.

The processing of this data is therefore necessary for the implementation of pre-contractual or contractual measures in accordance with art. 13 al. 2 lit. a DPA/31 al. 2 let. a nDPA or art. 6 al. 1 lit. b GDPR or is in our legitimate interest in accordance with art. 13 al. 1 DPA/31 al.1 nDPA or art. 6 al. 1 lit. f GDPR.

 

Contact via email, fax or post

You can contact us by e-mail or post. You are solely responsible for any messages or content you send to us in this way. We recommend that you do not send us any sensitive information. Only the personal data you provide voluntarily will be collected. You therefore decide what information you send us..

In order to respond to your e-mail request, we may ask you to provide us with additional information, such as your full name, address, telephone number, etc. We will only collect personal data that is necessary to identify you (including your e-mail address) and to respond to your request in the best possible way. We will only collect personal data that is necessary to identify you (including your e-mail address) and to respond to your request in the best possible way.

The processing of this data is therefore necessary for the implementation of pre-contractual or contractual measures in accordance with art. 13 para. 2 lit. a DPA/31 para. 2 lit. a nDPA or art. 6 para. 1 lit. b GDPR or is in our legitimate interest in accordance with art. 13 para. 1 DPA/31 para. 1 nDPA or art. 6 para. 1 lit. f GDPR.

 

Use of a contact form

You can use a contact form to get in touch with us. To do so, we need the following information:

• Title*
• First and last name*
• Job title (for corporate customers)
• Company (for corporate customers)
• Function (for corporate customers)
• Address*
• Phone
• e-mail*
• Comments*

Information marked with an asterix (*) is mandatory.

We use this data solely to respond to your contact request in the best possible, personalized manner. The processing of this data is therefore necessary for the implementation of pre-contractual or contractual measures in accordance with art. 13 al. 2 lit. a DPA/31 al. 2 let. a nDPA or art. 6 al. 1 lit. b GDPR or is in our legitimate interest in accordance with art. 13 al. 1 DPA/31 al. 1 nDPA or art. 6 al. 1 lit. f GDPR.

Job Applications

On our website, you can apply for open positions using our online application form. During the online application process, the following data will be processed:   Personal Information :

• Vacancy*
• First and last name*
• Place and country of residence*
• Postal code*
• Place*
• E-mail*
• Phone*
• Date of birth*
• Job function and current employer *
• Nature of the source of the application*

Documents :

• Curriculum vitae*
• Motivation Letter*
• Certificates and diplomas*

Information marked with an asterisk (*) is mandatory.

We need this information in order to process your application and, if necessary, to carry out the application procedure. The legal basis for the processing of your personal data is pre-contractual or contractual measures in accordance with Art. 13 para. 2 lit. a DPA/31 para. 2 lit. a nDPA or Art. 6 para. 1 lit. b GDPR or is in our legitimate interest in accordance with Art. 13 para. 1 DPA/31 para. 1 nDPA or Art. 6 para. 1 lit. f GDPR.

Subscription to our newsletter and marketing e-mails

On our website, you can subscribe to our newsletter. This requires registration. The following data must be submitted when registering:

• Title
• First and last name
• E-mail address*

Information marked with an asterisk (*) is mandatory.

After entering the above information, you can subscribe to our newsletter. We use the so-called "Double-Opt-In" mechanism. After sending the registration, you will receive an e-mail from us containing a confirmation link. To subscribe definitively to the newsletter, you must click on this link. If you do not click on the confirmation link, the e-mail address on our temporary list of newsletter subscribers will be permanently deleted after 24 hours, and no further subscriptions will be taken out.

We will use your data to send you the newsletter until you revoke your consent. You can revoke your consent at any time with effect for the future, or click on the unsubscribe link in the newsletter e-mails.

Our newsletter contains web beacons or similar technical means (web beacons). Web beacons are invisible 1x1 pixel graphics that are associated with the user ID of the corresponding newsletter subscriber. Web beacons provide us with the following information about the newsletter mailing:

• Address file used ;
• Purpose and number of newsletters sent;
• Information on addresses that have or have not received the newsletter and on addresses where sending failed;
• Information on addresses from which the newsletter was opened;
• Information on addresses that have been deleted
• Technical information (e.g. time of search, IP address, browser type and operating system).

 

This information is used for statistical analysis of our newsletter dispatch. The results of these analyses may be used to better tailor future newsletters to the interests of recipients. Web beacons are deleted when you cancel the newsletter.

To prevent the use of web beacons, you can set your e-mail program so that no HTML is displayed in messages, if this is not already the default setting. The following pages explain how to do this in the most common e-mail programs.

• Microsoft Outlook
• Mail für Mac ("Load deleted content into messages")

By subscribing to the newsletter, you give us your consent to the processing of the data provided for the regular sending of the newsletter to the address you have given us as well as for the statistical evaluation of the usage behavior and the optimization of the newsletter. This consent constitutes our legal basis for data processing in accordance with art. 13 al. 1 DPA/31 al.1 nDPA and art. 6 al. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future.

Cookies

Cookies contribute in many ways to making your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your Internet browser automatically saves on your computer's hard disk when you visit our website.

We use cookies, for example, to temporarily save the services and entries you have selected when you fill in a form on our web pages, so that you don't have to repeat the entry when you call up another subpage.

Most web browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer, or so that a message appears each time you receive a new cookie. The following pages explain how to configure cookie handling with the most common browsers. :

• Microsoft Edge
• Mozilla Firefox
• Google Chrome office use
• Google Chrome mobile use
• Apple Safari office use
• Apple Safari mobile use

Disabling cookies may mean that you cannot use all the features of our websites.

The legal basis for processing personal data for the above purposes is in our legitimate interest, in accordance with Art. 13 para. 1 DPA/31 para. 1 nDPA and Art. 6 para. 1 lit. f GDPR, to ensure the functionality and optimization of our web pages. In the case of purely analytical cookies, we base the processing of your personal data on your consent, which you give via the cookie banner.

Tracking-tools

A. Google Analytics

The websites use Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics uses methods such as cookies to analyze the use of our websites (see "Cookies"). The cookie generates the following information about your use of our website.

Visitor's navigation path on our sites:

• Duration of stay on page or subpage,
• Sub-page from which the website is exited,
• Country, region or city from which the site is accessed,
• Device (type, version, resolution, width and height of browser window),
• Recurring or new visitor,
• Browser type and version,
• Operating system used,
• Reference URL (the page visited previously),
• Host name of accessing computer (IP address)
• Time of server query.

This information is transmitted to and stored on a server belonging to Google, an Alphabet Inc. holding company, in the USA. When IP anonymization is activated on this website, the IP address is shortened before being transmitted to the USA (anonymizeIP). The anonymized IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In such cases, we have entered into a guarantee agreement with Google to ensure that an adequate level of data protection is maintained.

The information is used to evaluate the use of our web pages, to compile reports on activities carried out on our web pages and to provide other services related to the use of our web pages and Internet usage for market research purposes and to organize our website as required. This information may also be transferred to third parties where required to do so by law, or where such third parties process the data on Google's behalf. According to Google, under no circumstances will the IP address be combined with other information about the user.               Users may prevent the collection of data generated by the cookie and related to the use of the website by the user concerned (including the IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under this link. Further information on the web analysis service used can be found on the Google Analytics website.

This processing is based on our legitimate interest within the meaning of Article 6 para. 1 lit. f GDPR.

 

B. Google Maps

We use Google Maps API (Application Programming Interface, Google Maps) from Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, on our websites for the visual presentation of geographical information. By using Google Maps, information about your use of our website, including your IP address, is transmitted to a Google server in the USA and stored there.

The legal basis for processing data for this purpose lies in our legitimate interest in accordance with Article 6 para. 1 lit. f GDPR.

It is possible to deactivate Google Maps and prevent the transfer of data to Google by disabling JavaScript in your browser. However, we would like to point out that in this case, you will not be able to use the map display. Further information on the collection, processing and use of your data by Google and your rights in this regard can be found here in the Google Privacy Policy and here in the additional terms of use for Google Maps or Google Earth. Failure to deactivate the relevant services will be deemed to constitute consent to the processing of data for this purpose and consent to the transfer of data to the United States (see section 17, second and third paragraphs).          

Social Networks

Our websites may contain links to social networks. The links do not lead to the transmission of data to the provider without the user having any influence on the loading of our web pages (no "plugins"). Behind the social network buttons, there is only a link to our presence on the relevant network. No user data is transmitted from our websites to the social network..

Our websites may use the following links :

• Facebook de Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, respectively Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA
• Instagram de Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA
• YouTube managed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, respectively Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA
• X (ex Twitter), 1365 Market Street, Ste 900, San Francisco California, 94103
• LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA
• WeChat, Tencent Holdings Ltd., Tencent Seafront Towers, 33 Tian Er Road, Nanshan Shenzen, China
• Yuku, Tapatalk Inc., 202 Bicknell Avenue, Apt. 1, Santa Monica, California, 90405, USA

When you call up a link to one of our network profiles, a direct connection is established between your browser and the server of the social network concerned. The network is thus informed that you have used your IP address to visit our websites and call up the link. If you connect to a network while logged in to your account on that network, the content of our sites may be linked to your profile on the network, meaning that the network may associate your visit to our websites directly with your account. If you wish to avoid this, you must log out before clicking on a link. In any case, an assignment takes place when you connect to the network in question after clicking on the link.

The legal basis for processing data for this purpose is our legitimate interest in accordance with art. 13 para. 1 DPA/31 para. 1 nDPA and art. 6 para. 1 lit. f GDPR.

 

Conservation Times

We retain personal data for as long as is necessary for the provision of the above-mentioned services as well as for further processing within the scope of our legitimate interest in accordance with Art. 13 para. 1 and para. 2 lit. a DPA/31 para. A and para. 2 lit. a nDPA and Art. 6 para. 1 lit. b and f GDPR. After that period, the data will be deactivated In our active systems, but will be retained in the backup files.

 

Contractual data will be stored by us for a longer period if this is prescribed by legal storage obligations or if we have another legitimate interest in doing so. Storage obligations that require us to retain data result in particular from accounting and tax law regulations. According to these regulations, commercial communications, contracts concluded and accounting documents must be kept for ten years after the end of the year in which they were last processed. If we no longer need this data to provide services for you or for other legitimate purposes, the data will be blocked. This means that the data can only be used for accounting and tax purposes.  

Data Transfer to Third Parties

We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to fulfill our contractual obligations or to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties insofar as this is necessary in connection with the use of our websites or the application and performance of the contract (also outside our websites).

Any relevant Tornos controller entity may transfer your personal data to other Tornos entities, which may be located in Switzerland or in any other country where Tornos has a subsidiary, and to any third-party service providers ("Processors") to which the Tornos controller entity delegates all or part of the processing (e.g. hosting providers, e-marketing service providers, technical support providers etc.).  The relevant Tornos controller entity may also disclose personal data in connection with a merger, acquisition, bankruptcy or sale, assignment or other transfer of all or substantially all of its assets. Tornos may disclose your personal data to certain public authorities in order to respond to appropriate request of legitimate government agencies or where required by applicable laws, court orders or government regulations. Tornos may disclose personal data where this is needed for corporate audits or to investigate or respond to a compliance or security treat.

 

Some third parties have already been mentioned (Google Inc.). Our websites are hosted on servers in Switzerland. Data is transmitted for the purpose of fulfilling our pre-contractual and contractual obligations and providing and maintaining the functionality of our website and applications. This is our legitimate interest in accordance with art. 13 para. 1 and para. 2 lit. a DPA/31 para. 1 and para.2 lit. a nDPA and art. 6 para. 1 lit. b and f GDPR..

Personal Data Transfer Abroad

We may also transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to protect your data to the same extent as we are. If the level of data protection in a country does not correspond to that of Switzerland or the EU, we will ensure by contract, communicated in advance to the FDPIC, that the protection of your personal data corresponds at all times to that of Switzerland or the EU.

For the sake of completeness, we note that under U.S. law, U.S. authorities may take surveillance measures and access data, which may also include data transferred from Switzerland or the EU to the U.S. or to China and Taiwan. This is done without any distinction, restriction or exception based on the objective pursued, and without any objective criteria that would make it possible to limit access by US authorities to personal data and their subsequent use to certain strictly limited purposes that would justify access to such data. In addition, in the USA and Asia there is no legal remedy for data subjects from EU member states or Switzerland to access, rectify or delete data concerning them that is the subject of governmental action, and there is no effective legal protection against the general access rights of US authorities.

We would like to point out to users residing in Switzerland or an EU member state that in the opinion of the competent authorities in Switzerland and the European Union - partly due to the problems mentioned in this section - the USA and Asia do not have an adequate level of data protection. If the recipients of the data (e.g. Google) are based in the USA or are expected to carry out the relevant data processing in the USA, we will take all reasonable steps to ensure that the relevant data which is processed in the USA by applying reasonable measures to ensure that your data is protected at an appropriate level with our partners by contractual agreements with these companies and, if necessary, by additional safeguards to protect the rights of individuals whose personal data is transferred to a third country. We expressly draw your attention to this legal and factual situation so that you can make an informed decision as to whether you consent to the disclosure of your data to persons who are domiciled in the United States or who are likely to carry out the processing of the data concerned in the United States..

 

Additional Information

Right of information, correction, deletion and processing restriction ; right of data transfer

You may object at any time to the processing of data, in particular to the processing of data in connection with direct advertising (e.g. against advertising e-mails). You also have the following rights: Right to information: You have the right to request free access at any time to your personal data stored with us, if we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right of rectification: You have the right to have incorrect or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves a disproportionate effort.

Right of deletion: You have the right to request the deletion of your personal data under certain circumstances. In individual cases, the right to deletion may be excluded.

Right to restrict processing: Under certain conditions, you have the right to request that the processing of your personal data be restricted.

Right of appeal: You have the right to appeal to a competent supervisory authority against the way in which your personal data is processed.

Right to data portability: If you are domiciled outside Switzerland and reside in an EU/EEA member state, you have the right in certain circumstances to receive from us the personal data you have provided to us free of charge and in a readable form.               Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a competent supervisory authority if you consider that the processing of your personal data infringes applicable data protection regulations.

Right of revocation: In principle, you have the right to revoke your consent at any time. Processing activities based on your past consent do not become unlawful as a result of your revocation.

 

Data Security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or total loss and against unauthorized access by third parties. Our security measures are constantly being improved in line with technological developments.

We also take internal data protection very seriously. Our employees and the service companies we commission are obliged by us to maintain confidentiality and comply with data protection regulations..

 

 

 

 

 

 

 

 

 

 

Last Update : October 2023