{"id":1318,"date":"2022-12-15T16:56:31","date_gmt":"2022-12-15T15:56:31","guid":{"rendered":"https:\/\/malcanton.ch\/privacy-policy-2\/"},"modified":"2026-06-29T10:14:57","modified_gmt":"2026-06-29T08:14:57","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/malcanton.ch\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">1. Data controller<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The data controller is:<\/span><\/span><\/p>\n<p><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Green Web Solutions SNC<br \/>\n5 Via Generoso<br \/>\n6900 Lugano<br \/>\n<a href=\"mailto:team@greenwebsolutions.ch\">team@greenwebsolutions.ch<\/a><br \/>\n091 2260164<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\"><br \/>\n<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller determines the purposes and means of processing personal data.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">2. Scope<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">This data protection notice applies to all processing of personal data carried out in connection with the services offered by the Data Controller, and in particular includes, by way of example and without limitation:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the website, all its pages, subdomains and related features, as well as any related digital services or applications;<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the contact forms on the website or on third-party platforms used by the Data Controller;<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">requests for advice, assistance and IT technical support, both online and in person;<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the sale of products and services, whether carried out via online channels (e-commerce or digital systems) or through direct negotiations or face-to-face meetings;<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">communications between the user and the Data Controller, regardless of the channel used, including emails, telephone calls, instant messaging, ticketing platforms or other digital tools;<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">any interactions with third-party systems, tools or suppliers used to provide the services.<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">This also includes all ancillary and instrumental activities necessary for the performance of the requested services, the management of the contractual relationship and compliance with applicable legal or regulatory obligations.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3. Types of data processed<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller processes personal data in the course of various operational activities, including, in particular, the management of the website and digital services, IT consultancy and support, the sale of products and services both online and at physical outlets, participation in third-party marketplaces and platforms, as well as the provision of courses, training and professional activities, whether in person or remotely.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In the context of these activities, the Data Controller may act, depending on the circumstances, either as an independent data controller or, where applicable, as a data processor on behalf of third parties (for example, when carrying out technical work on the client\u2019s systems or infrastructure).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3.1 Data provided directly by the user<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller may process personal data provided voluntarily by the user, including, but not limited to:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">first name and surname<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">company name, role within the organisation and professional details (where applicable)<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">email address and telephone number<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">postal address, billing details and payment details<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the content of enquiries submitted via forms, email or other channels (including requests for advice, support or IT tickets)<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">attachments, files or documents uploaded or sent by the user<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">information contained in quotations, orders, contracts or commercial communications<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data relating to participation in courses, events or training activities organised by the Data Controller<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data relating to transactions carried out via third-party platforms or marketplaces<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">any data relating to third parties provided by the user in connection with a request for services (for example, data contained in IT systems managed or analysed on behalf of the client)<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3.2 Technical and navigation data<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Whilst browsing the website and using the digital services, the following data may be collected automatically:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">IP address and network identifiers<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">date, time and duration of access<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">information about the browser, device and operating system used<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">system logs, security logs and data relating to access and authentication<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">cookies, online identifiers and similar technologies<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">pages visited, navigation paths and interactions with the website or services<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3.3 Data relating to the use of the services<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In the context of the provision of IT services, consultancy and technical support, additional data may be processed, such as:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data contained in support tickets and helpdesk systems<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">History of support requests and communications with the customer<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">technical data relating to systems, infrastructure or software subject to maintenance work<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">operational logs and information required for the diagnosis and resolution of technical issues<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data relating to the administration of courses, enrolments, attendance and training activities<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3.4 Security and anti-abuse measures<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller may also process data necessary to ensure the security of systems and services, including:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">records of logins and login attempts<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">suspicious or potentially fraudulent activity<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">information necessary to prevent abuse, cyber-attacks or misuse of the website or services<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data required to protect IT infrastructure and customers\u2019 systems during technical support activities<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">3.5 Data derived from communications and marketing (where applicable)<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Where applicable and to the extent permitted by law, the following may also be processed:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the content of communications via email, telephone or digital tools (including support channels and messaging services)<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data relating to interactions with marketing communications (e.g. opening emails, clicking on links)<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">preferences expressed in relation to informational or promotional communications<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4. Purposes of the processing<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Personal data is processed exclusively for specific purposes that are clear to the data subject and compatible with the context of the contractual or pre-contractual relationship, in accordance with the principles of the Federal Data Protection Act (nLPD \/ revDSG).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Data processing may take place through various operational and commercial channels, including the website, digital communications, IT consultancy and support services, the sale of products and services online and at physical outlets, participation in third-party marketplaces and platforms, as well as the provision of courses, training and professional activities, whether in person or remotely.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4.1 Contractual and pre-contractual purposes<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The data is processed for the following purposes:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">handling IT consultancy requests, technical site visits and quotations<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">assessment and drafting of commercial offers and contractual proposals<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">provision of technical support, IT assistance and maintenance services<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of online and direct sales of products and services, including sales at physical outlets<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of purchases and sales made via marketplaces and third-party platforms<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">organisation, management and administration of courses, events and training activities<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">implementation, management and administration of contractual relationships with customers and suppliers<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">managing day-to-day communication with the client in connection with the provision of services, including via digital and telephone channels<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4.2 Administrative, accounting and legal purposes<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Data may be processed for the following purposes:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">accountancy, invoicing and administrative compliance<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">compliance with the legal, tax and regulatory obligations applicable in Switzerland<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">document retention in accordance with the law<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">handling of complaints, disputes, legal claims or court proceedings<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">protection of the Data Subject\u2019s rights in and out of court<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4.3 Operational, technical and security purposes<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Data processing is also necessary for:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to ensure the proper operation, maintenance and updating of the IT systems and the website<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to ensure the security of IT infrastructure, services and data<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to prevent, detect and combat fraud, abuse, unauthorised access or malicious activity<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of technical logs, access logs and security monitoring systems<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">continuous improvement of services, reliability and the user experience<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of any security incidents and technical troubleshooting activities<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of the infrastructure used to deliver digital, physical and training services<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4.4 Marketing and commercial communication purposes (subject to consent where required)<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Subject to the data subject\u2019s consent, the data may be used for:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">sending commercial, promotional and informational communications<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">newsletters and updates relating to services, products or company news<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">personalised recommendations or targeted offers based on the user\u2019s interactions<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Consent to the processing of personal data for marketing purposes is optional and may be withdrawn at any time without affecting the lawfulness of any processing carried out prior to the withdrawal.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">4.5 Other compatible purposes<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">To the extent permitted by law, data may also be processed for purposes compatible with those set out above, including internal organisational activities, managing relationships with suppliers, logistics, shipments, the management of third-party platforms and technical support for customers, whilst always complying with the principles of proportionality and data minimisation.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">5. Legal basis for processing<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The processing of personal data is based on one or more of the following legal grounds, in accordance with the principles of the Federal Data Protection Act (nLPD \/ revDSG):<\/span><\/span><\/p>\n<ul>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Performance of a contract or pre-contractual measures<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: The processing is necessary to respond to user enquiries, provide IT advice and technical support, sell products or services, and to manage and fulfil existing or prospective contractual relationships.<\/span><\/span><\/li>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Compliance with legal obligations<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: The processing is necessary to comply with legal and regulatory obligations applicable to the Data Controller, including tax, accounting, administrative and record-keeping obligations.<\/span><\/span><\/li>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Overriding interests of the Data Controller or third parties<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: the processing may be based on a legitimate and overriding interest of the Data Controller, in particular for:<\/span><\/span>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to ensure the security of IT systems, networks and data<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to ensure the operational continuity of IT services and the proper delivery of services<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to prevent, detect and combat fraud, abuse, unauthorised access or malicious activity<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to improve, optimise and develop the services offered<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">to safeguard the Data Controller\u2019s rights in the event of disputes or legal proceedings<\/span><\/span><\/li>\n<\/ul>\n<\/li>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Consent of the data subject<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: where required or expressly provided for by law, the processing is based on the user\u2019s free, specific, informed and revocable consent, in particular for the purposes of direct marketing, newsletters and the use of cookies or tracking tools that are not strictly necessary.<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In all cases, the Data Controller assesses the proportionality of processing based on an overriding legitimate interest, taking into account the interests, fundamental rights and reasonable expectations of the data subject, as well as the context of the relationship (particularly in the case of IT and technical support services).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">6. Processing methods and security<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Personal data is processed using electronic means and, where necessary, also by manual means, in accordance with the principles of lawfulness, proportionality and security laid down in the applicable Swiss legislation (nLPD \/ revDSG).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Data processing is carried out by implementing technical and organisational measures appropriate to the state of the art and the risk associated with the processing, including, in particular:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">systems for controlling logical and physical access to data and systems<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">management of authorisations and access profiles tailored to operational requirements<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the use of encryption techniques, where appropriate, to protect data in transit and\/or at rest<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Regular backups and data recovery procedures<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">perimeter protection systems such as firewalls, antivirus software and threat detection tools<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">monitoring of systems and recording of access and activity logs, where necessary for security and operational purposes<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">restricting access to data exclusively to authorised staff or third-party suppliers who are strictly necessary for the provision of services<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller selects suppliers and technology partners who guarantee adequate security and confidentiality measures in accordance with the applicable standards.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Despite the implementation of appropriate technical and organisational measures, no computer system or method of transmitting data via the Internet can be considered completely secure. Consequently, the Data Controller cannot guarantee the absolute security of the information transmitted or stored, to the extent permitted by law.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In the event of a personal data breach, the Data Controller undertakes to take the measures required by the applicable legislation, including incident management and, where required, notification to the relevant authorities.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">7. Data retention<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Personal data is retained for the period strictly necessary to fulfil the purposes for which it was collected, in accordance with the legal obligations and the principles of proportionality laid down in Swiss legislation (nLPD \/ revDSG).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">As a rough guide:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">contractual, tax and accounting data: up to 10 years, in accordance with the applicable Swiss legal requirements<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data relating to consultancy, technical support and IT tickets: up to 24 months from the last interaction, unless there are technical or legal requirements for further retention<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Non-contractual contact details: generally for up to 12\u201324 months from the last interaction, unless the relationship is renewed or a new request is made<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">data processed for marketing purposes: until the data subject withdraws their consent or until the commercial interest ceases<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Once the retention periods have expired, the data is deleted, anonymised or rendered unidentifiable, subject to any further legal obligations.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Personal data may be disclosed, to the extent strictly necessary to achieve the purposes set out in this privacy notice, to third parties acting as service providers, independent data processors or independent data controllers, depending on the context.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In particular, the data may be disclosed to:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">IT and infrastructure service providers, such as hosting providers, cloud providers, backup services, email providers, ticketing systems and customer management systems<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">payment service and transaction management providers (e.g. payment networks, payment processors, banking services and fintech companies)<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">logistics and delivery services, including couriers, postal services and parcel tracking platforms<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">marketplace platforms and third-party sales channels used for the buying and selling of products and services<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">tax advisers, accountants, solicitors and other professionals appointed by the Data Controller<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">technical partners and collaborators involved in the provision of IT services, consultancy, support and training<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">public bodies, judicial or administrative authorities, in the cases provided for by law or upon legitimate request<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In the course of the Data Controller\u2019s activities, data may also be processed using external systems and platforms necessary for the provision of services, including tools for communication, customer management, analysis and collaboration.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">All third parties are carefully selected and are contractually obliged, where applicable, to ensure adequate levels of confidentiality, security and protection of personal data.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">9. Transfer of data abroad<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Personal data may also be processed or transferred outside Switzerland, including to countries within the European Union, the European Economic Area or third countries (in particular the United States or other countries where digital service providers used by the Data Controller are based).<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Such transfers take place exclusively in accordance with the applicable Swiss legislation (nLPD \/ revDSG) and are permitted when:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the country of destination ensures an adequate level of data protection recognised by the competent authorities, or<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">appropriate safeguards are put in place, such as standard contractual clauses, additional technical measures or other legally valid instruments<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In particular, the use of global providers of IT, cloud, email, communications, payment, analytics or marketplace services may involve the processing of data on servers located abroad.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller takes reasonable measures to minimise the risks associated with such transfers and to ensure an adequate level of protection for personal data.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">10. Rights of the data subject<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The data subject may exercise the rights provided for under the applicable legislation at any time, including:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right of access to one\u2019s personal data<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right to have inaccurate or incomplete data rectified<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right to have data erased, within the limits laid down by law<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right to object to processing, where permitted<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right to withdraw consent, where such consent has been given<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">the right to request further information on data processing<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Requests may be sent to the Data Controller\u2019s email address: <\/span><\/span><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">team@greenwebsolutions.ch<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller reserves the right to verify the applicant\u2019s identity before processing the request, in order to safeguard data security.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">11. Cookies and tracking technologies<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">This website uses cookies and similar technologies to ensure that the web pages function correctly and to improve the user\u2019s browsing experience.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Cookies are small text files stored on the user\u2019s device and can be used for various purposes.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">11.1 Types of cookies used<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The website may use the following categories of cookies:<\/span><\/span><\/p>\n<ul>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Technical (essential) cookies<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: essential for the website to function and to enable you to browse the site and use the services you have requested. These cookies do not require the user\u2019s consent.<\/span><\/span><\/li>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Analytical cookies<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: used to collect aggregated and anonymous statistical information on the use of the website, with a view to improving its performance and content. Where possible, such data is anonymised or pseudonymised.<\/span><\/span><\/li>\n<li><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Marketing and profiling cookies<\/span><\/span><\/strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">: used to analyse user behaviour and, where authorised, to display personalised content or adverts based on preferences. These cookies are used only with the user\u2019s explicit consent.<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">11.2 Consent management<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">When accessing the website for the first time, users can set their preferences via the cookie management banner, by accepting, rejecting or customising the use of the various categories.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Consent may be amended or withdrawn at any time via your browser settings or the tools provided on the website.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">11.3 Third-party cookies<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The website may use third-party services (such as analytics tools, hosting services, video embedding or marketing tools) which may set cookies on the user\u2019s device. These third parties are responsible for processing the data collected via their cookies, in accordance with their respective privacy policies.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">11.4 Disabling cookies<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Users can disable or delete cookies at any time via their browser settings. However, disabling technical cookies may affect the website\u2019s proper functioning.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">12. Safety and liability<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller implements reasonable technical and organisational measures, commensurate with the risk, to protect personal data from loss, misuse, unauthorised access or unauthorised disclosure.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The user acknowledges that:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Data transmission via the Internet cannot be guaranteed to be completely secure<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The user is responsible for the use of their devices, networks or systems<\/span><\/span><\/li>\n<\/ul>\n<p class=\"western\"><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">13. Limitation of liability<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">To the extent permitted by applicable law, the Data Controller shall not be held liable for any direct or indirect damages arising from:<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">misuse of the website or services by the user<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">use that does not comply with the instructions, the terms of the contract or good IT practice<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">temporary interruptions, suspensions, unavailability or malfunctions of the website, IT systems or services<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">delays, errors or omissions in the transmission of data via the Internet or electronic communications networks<\/span><\/span><\/li>\n<li><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">unauthorised access, data loss or security breaches despite the implementation of appropriate technical and organisational measures<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller undertakes to maintain the website and services in a secure and operational state in accordance with reasonable and proportionate standards, but does not guarantee that there will be no errors, interruptions or vulnerabilities whatsoever.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Any content, information or services provided via the website are made available \u201cas is\u201d, without any express or implied warranties, to the fullest extent permitted by law.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">To the extent permitted by applicable law, the Data Controller shall not be held liable for events of force majeure, including but not limited to infrastructure failures, cyber-attacks, network outages, natural disasters or decisions by public authorities.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">In any event, the Data Controller\u2019s liability, if any, is limited to the maximum extent permitted by applicable law and, where provided for in specific contractual relationships, by the contractual terms agreed with the user or customer.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">14. Changes to this policy<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller reserves the right to amend this policy at any time in order to bring it into line with regulatory, technical or operational changes.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Any changes will be published on this page, along with the date of the update.<\/span><\/span><\/p>\n<p><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">15. Safeguard clause<\/span><\/span><\/strong><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Should one or more provisions of this policy be, or become, void, invalid or unenforceable, this shall not affect the validity of the remaining provisions.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Any invalid provisions shall be replaced by a valid provision that comes as close as possible to the economic and legal purpose of the original provision, in accordance with the applicable legislation.<\/span><\/span><\/p>\n<p><strong><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">16. Governing law and jurisdiction<\/span><\/span><\/strong><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">This privacy policy is governed by Swiss law, in particular the Federal Data Protection Act (nLPD \/ revDSG) and other applicable provisions of Swiss law.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Unless otherwise required by law, any dispute arising out of or in connection with this policy shall be subject to the jurisdiction of the competent courts of the place where the Data Controller is based.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">The Data Controller reserves the right, however, to bring proceedings at the user\u2019s place of residence or before any other competent court provided for by law.<\/span><\/span><\/p>\n<p><span style=\"font-family: Liberation Sans, sans-serif;\"><span style=\"font-size: small;\">Date of last update: <strong>June 2026<\/strong><\/span><\/span><\/p>","protected":false},"excerpt":{"rendered":"<p>1. Titolare del trattamento Il Titolare del trattamento dei dati personali \u00e8: Green Web Solutions SNC Via Generoso 5 6900 Lugano team@greenwebsolutions.ch 091 2260164 Il&hellip;<\/p>","protected":false},"author":80,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1318","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/pages\/1318","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/users\/80"}],"replies":[{"embeddable":true,"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/comments?post=1318"}],"version-history":[{"count":1,"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/pages\/1318\/revisions"}],"predecessor-version":[{"id":6581,"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/pages\/1318\/revisions\/6581"}],"wp:attachment":[{"href":"https:\/\/malcanton.ch\/en\/wp-json\/wp\/v2\/media?parent=1318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}