PROTECTION OF PERSONAL DATA

European regulations on the protection of personal data are undergoing a major change, resulting in the General Data Protection Regulation (nLPD) of 27 April 2017, which came into force on 25 May 2018.

Our company, anxious to comply with regulations capable of improving relations with our European customers, has complied and expresses in this charter its attachment to the quality of service provided to our customers, whether they are Individuals or Professionals.

This new regulation, which applies to European citizens who are not professionals and are therefore considered to be 'individuals', strengthens citizens' own control over the use of their data. The regulation applies to all processing of personal data, whether automated or non-automated, regardless of whether the data is contained in a file or is intended for inclusion in a file.

What is personal data for an individual?

By definition, personal data is: "Any information relating to a natural person identified directly (surname, first name) or indirectly (by an identifier, customer number, telephone number, etc.). A natural person can be identified on the basis of a single piece of data (ABS or SS number) or by cross-referencing a set of data.

What personal data may we collect?

We only collect appropriate and relevant data, strictly limited to carrying out the service you have ordered and, with your consent, data relating to our commercial and canvassing activities.

Why do we need to collect and process your personal data?

Your personal data is collected and processed to enable us to conclude, manage, modify and execute the service you have ordered and, with your consent, to inform you of the services and products available to you from CASSAR SA.

To whom are your personal details transmitted?

Your personal data is intended for CASSAR SA employees according to their function and for some of our subcontractors. All members of our staff have been trained and comply with the nLPD. Our subcontractors also comply with the requirements of the nLPD in order to ensure that the service ordered is carried out correctly. None of the information collected is transferred or sold to a third party who is not a recognised subcontractor. Data is hosted exclusively in Switzerland and Europe.

How long do we keep your personal data?

Personal data collected and processed as part of an ordered service, a commercial contact or a sales follow-up is kept in accordance with the statutory limitation periods set according to the nature of the contract and in compliance with Swiss rules, i.e. 10 years. In the case of commercial canvassing, personal data is kept for 2 years from the date of collection or last contact with the person concerned. The data is then anonymised in order to preserve the basis for the company's statistical studies.

What security measures are in place to protect your data?

In accordance with the applicable General Regulation on the Protection of Personal Data, you have a number of rights:

• Right of access: you can obtain information about the processing of your personal data and a copy of that data.
• Right of rectification: if you believe that your personal data is inaccurate or incomplete, you may request that it be amended accordingly.
• Right to erasure: you may request the erasure of your personal data to the extent permitted by law.
• Right to limit processing: you may request that the processing of your personal data be limited.
• Right to object: you may object to the processing of your personal data on grounds relating to your particular situation. You have the absolute right to object to the processing of your personal data for the purposes of commercial canvassing, including the profiling associated with such canvassing.
• You have the right to define directives concerning the conservation, deletion or communication of your personal data, applicable after your death.
• Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.

You can exercise these rights by writing to the DPO of CASSAR SA - Avenue de la Cour 38A, 1007 Lausanne or by email to pompesfunebres@cassar.ch.

What rights do you have?

By definition, personal data is: "Any information relating to a natural person identified directly (surname, first name) or indirectly (by an identifier, customer number, telephone number, etc.). A natural person can be identified on the basis of a single piece of data (ABS or SS number) or by cross-referencing a set of data.