Privacy policy
To obtain information about your personal data collected, the purposes and the parties with whom the data is shared, please contact the Data Controller.
Data Controller
For more information about the controller, contact the following email address:
Data Controller email address: info@vvfsarl.ch
Types of Data collected
The Data Controller does not provide a list of the types of Personal Data collected.
Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed prior to the Data collection itself.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.
Unless specified otherwise, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. Where this Application indicates that some Data is optional, Users are free not to communicate such Data, without any consequences on the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies or other tracking tools by this Application or by third-party service providers used by this Application is aimed at providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application.
Methods and place of processing of the collected Data
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.
In addition to the Data Controller, in some cases other parties involved in the operation of this Application (administrative, commercial, marketing staff, legal advisors, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These may also be appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.
Place
The Data is processed at the operating offices of the Data Controller and in any other places where the parties involved in the processing are located.
For further information, contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, Users can refer to the relevant section.
Retention period
Unless otherwise specified, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained longer due to legal obligations or based on Users’ consent.
Cookie Policy
This Application uses Tracking Tools. Users may refer to the Cookie Policy for more information.
Further information for users
Legal basis of processing
The Data Controller processes Personal Data if one of the following applies:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract and/or pre-contractual measures;
- processing is necessary to comply with a legal obligation;
- processing is necessary for a task carried out in the public interest or in the exercise of official authority;
- processing is necessary for the legitimate interests pursued by the Data Controller or third parties.
Users may request clarification about the legal basis of each processing.
Retention details
Personal Data:
- collected for contractual purposes → retained until contract completion
- collected for legitimate interest → retained until that interest is fulfilled
- based on consent → retained until consent is withdrawn
The Data Controller may retain data longer for legal obligations.
After the retention period, Personal Data will be deleted and rights can no longer be exercised.
User rights under GDPR
Users may:
- withdraw consent at any time
- object to processing
- access their data
- verify and request correction
- obtain restriction of processing
- request deletion
- receive and transfer data (portability)
- lodge a complaint
Users can also request information about international transfers and safeguards.
Right to object
Users may object to processing based on public interest or legitimate interest.
If data is used for direct marketing, Users may object at any time free of charge.
Exercising rights
Requests can be sent to the Data Controller and are free of charge. A response will be provided within one month.
Swiss users
This section applies to Users in Switzerland and replaces conflicting provisions.
Rights under Swiss law
Users may:
- access their data
- object and request restriction/deletion
- request data portability
- request correction
Additional information
Legal defense
Personal Data may be used in court.
System logs
This Application may collect system logs including IP addresses.
Policy changes
The Data Controller may modify this policy at any time and notify Users accordingly.
Definitions and legal references
Personal Data (or Data)
Personal Data means any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
Usage Data are information collected automatically through this Application (also from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects to this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of the visit (for example, the time spent on each page), and the details relating to the path followed within the Application, with particular reference to the sequence of pages visited, the parameters relating to the User’s operating system and IT environment.
User
The individual using this Application who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller, as described in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.
This Application
The hardware or software tool by which the Personal Data of Users are collected and processed.
Service
The Service provided by this Application as defined in the relevant terms (if any) on this website/application.
European Union (or EU)
Unless otherwise specified, any reference made within this document to the European Union includes all current member states of the European Union and the European Economic Area.
Legal references
This privacy policy is drafted on the basis of multiple legislative frameworks.
Unless otherwise specified, this privacy policy applies exclusively to this Application.