Privacy Policy
Privacy policy regarding the processing of personal data on the website oculox.com — pursuant to Article 13 Regulation (EU) 2016/679 (GDPR) and Article 19 of the Federal Data Protection Act (FADP).
Categories of personal data subject to processing
Personal data provided — or otherwise acquired in accordance with applicable legal provisions — inherent in, related to and/or instrumental to the evaluation of your experience on our website, will be processed in accordance with the privacy regulations and confidentiality obligations applicable to you.
Key definitions
- Personal data — any information relating to an identified or identifiable person.
- Data subjects — natural persons whose data are subject to processing (hereinafter, also "You").
- Processing — any operation relating to personal data, regardless of the means and procedures adopted, namely the collection, storage, use, review, communication, archiving or destruction of data.
- Communication — i.e., making personal data accessible, such as by allowing it to be accessed, transmitted or published.
Personal data we process
- Browsing data — for more information on data collected with cookies, read the Cookie Policy.
- Master & contact data — provided through the website's contact forms.
- Job application data — including personal and contact details (full name, email, phone number, address), resume and employment details (work experience, qualifications, references), and any additional information voluntarily provided in an application.
Who is responsible for your data
The entity that determines purposes and means of processing (hereinafter also only the "Data Controller", the "Company" or "we") is Oculox Technologies SA.
DPO — Oculox Technologies SA
For matters related to data protection compliance, contact the Data Protection Officer directly.
dpo@oculox.comPurpose, legal basis and data retention
Each category of processing is justified by a defined legal basis and retained only as long as necessary to achieve its purpose.
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Site navigation & correct functioning. The computer systems responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols — IP addresses or domain names, URI/URL of the resources requested, time of the request, HTTP method, response size and status code, and other parameters relating to the user's operating system and computer environment. | Overriding / Legitimate Interest of the Data Controller. | Until the end of the browsing session. For data processed with cookies, see our Cookie Policy. |
| Respond to requests received through the "Contact" area found on this site. | Pre-contractual measures. | As long as necessary to achieve the purpose; up to 10 years if a business relationship is established. |
| Processing job applications submitted through the website. Your personal data is processed for evaluating your application for current and future job opportunities, communicating with you regarding your application status, and fulfilling legal and regulatory employment requirements. | Pre-contractual measures. Legitimate interest where you consent to your data being retained for future opportunities. | If not hired: up to 12 months, unless earlier deletion is requested. If hired: application data becomes part of the employee's record. |
3.1 — Data processing methods
The processing will be carried out in automated and/or manual form, using methods and tools designed to ensure maximum security and confidentiality, by individuals specially trained to do so. The personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
Who may receive your personal information
We may share personal information with employees and/or personnel acting under the authority of the Data Controller (duly instructed to do so), as well as third parties bound by contractual relationship — for the purpose of fulfilling contractual obligations and the processing purposes set out above.
These third parties will process the data provided as data controllers or independent data controllers. Specifically, we may share the collected personal data with the following categories of recipients:
- Service providers — entities that provide services related to the operation of this website (e.g., hosting providers, webmasters).
- Support & consulting companies — e.g., web & digital marketing agencies.
- Competent authorities — for compliance with legal obligations and/or the provisions of public bodies, upon request.
Transmission of personal data abroad
Oculox Technologies SA is a company under Swiss law based in the Swiss Confederation. The Data Controller uses systems, tools and applications located in Switzerland. In particular: the website is based in Switzerland (hosting).
Personal data are therefore transmitted to countries that provide an adequate level of protection in accordance with the GDPR, as they reside in Switzerland. Under the GDPR, the data transfer complies with the requirements of Article 45 GDPR. The European Commission has recognised Switzerland's adequacy.
Data subjects' rights
You are granted the rights listed below — depending on whether the Swiss FADP or the European GDPR applies to your case. The lists below are non-exhaustive.
Under Swiss law
Federal Data Protection Act — applies to data processing under Swiss jurisdiction.
- Obtain rectification of inaccurate or outdated personal data.
- Revoke the consent given.
- Be informed in writing and free of charge whether personal data concerning you are being processed.
- Prevent the disclosure of any sensitive personal data to third parties.
- Obtain portability of personal data or request that they be transferred to third parties.
- Request restriction or blocking of data processing, prevention of disclosure to third parties, or rectification or destruction of personal data.
- Request the prohibition of specific processing of personal data and specific disclosure to third parties, or the deletion of specific personal data.
- Where neither correctness nor inaccuracy can be proven, request that a note be added to indicate the dispute.
- Request that rectification, destruction, blocking, disclosure to third parties — or the note on the challenge or ruling — be communicated to third parties or published.
- Have the processing of personal data declared unlawful.
Under EU law
General Data Protection Regulation — applies to data subjects in the European Economic Area.
- Access — confirmation as to whether or not personal data concerning you are being processed and, if so, access to that data.
- Revoke the consent given.
- Rectification — obtain rectification of inaccurate personal data concerning you.
- Erasure — obtain the erasure of personal data concerning you.
- Restriction — obtain restriction of processing.
- Portability — receive personal data in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance.
- Objection — object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Subject to any other administrative and jurisdictional remedies, if you believe that the processing of your data violates the provisions of the FADP and GDPR, you have the right to lodge a complaint with the competent supervisory authority — for Switzerland, the Federal Data Protection and Transparency Commissioner; for the EEA, see the European Data Protection Board members. To exercise your rights, contact us at privacy@oculox.com. For further assistance or concerns about our compliance, contact our Data Protection Officer at dpo@oculox.com.
Additional information, changes & updates
The Data Controller reserves the right to revise, update, add or remove any part of this Privacy Policy at its discretion at any time. In case of changes, the date of update will be indicated.