For the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter,
“GDPR”) XanaStim Sarl, (hereinafter, “XANA”) as controller, informs the user of the existence of an automated processing of personal data and is provided with information regarding the personal data subject to processing.

Who is the Data Controller of your data?
XanaStim Sarl (Hereinafter, “XANA”)
Address: Route de la Corniche 3 Biopôle Park 1066 Epalinges
E-mail: info@xanastim.com
Contact telephone: +41 21 566 57 70
Data Protection Officer: dpo@xanastim.com

Object of data protection
Our Privacy Policy affects all personal information you give us. This include your name, your email address, phone number, subject of your inquires, as well as usage data , i.e your IP address.

Data provided by you
E-mail and contact forms

Purposes
The main purposes of the processing of your data are as follows:

– Information about XANA’s services and products: The user receives information and communications about XANA’s services by e-mail. Your personal information will be kept for as long as you remain registered in our systems for sending communications, until you opt out of receiving them. The basis of legitimacy of the data processing is your consent.

– Newsletter and news about our company: If you are registered to received our newsletters and email updates for news about our company you email address will be used for our advertising purposes with your consent until you unsuscribe.

– To manage social networks. The processing of the data of the persons who become followers on the social networks of the official XANA Website will be governed by this section, as well as by the terms of use, privacy policies and access regulations that apply to the social network in each case. On the social networks, we will provide information about XANA’s services and products.

Legal basis for the processing of personal data
GDPR: Article 6.1.a) Processing where the data subject has given consent for one or more specific purposes.

File registration and form
It is compulsory to fill in the form on the website www.xanastim.com in order to be able to respond to the request received.

We inform you that the personal data obtained as a result of filling in the form provided will form part of the Register of Processing Activities and Operations (RAT) of the Data Controller, which will be updated periodically in accordance with the provisions of the GDPR.

How long will we keep your data?
The personal data provided by the User will be kept in XANA’s systems and databases, as long as the User does not request their deletion.

In order to purge the possible responsibilities derived from the processing, the data will be kept for a minimum period of five years.

Origin of the data
The personal data processed are those that you have provided to XANA in the contact form provided at www.xanastim.com.

Accuracy and veracity of the data provided
The interested party is responsible for the truthfulness and accuracy of the data included, and XANA is exonerated from any liability in this regard. The interested parties guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The interested party agrees to provide complete and correct information in the form provided.

XANA is not responsible for the veracity of information that is not of its own creation and for which another source is indicated, nor does it assume any responsibility for any hypothetical damages that may arise from the use of such information.

The company is exonerated from liability for any damage or harm that the interested party may suffer as a result of errors, defects or omissions in the information provided.

Personal data of third parties and minors
As a general rule, XANA only processes data provided by the owners of such data. If you provide us with data of third parties, you must inform and request their consent beforehand, otherwise XANA disclaims any liability for failure to comply with this requirement.

Therefore, please refrain from providing such data if you are not of legal age or, if applicable, from providing data of third parties who are not of legal age. XANA disclaims any liability for failure to comply with this provision.

Transfer to third parties
We will only transfer the personal data concerning the data subject to third parties if you have given your consent, or if we have given your consent in accordance with the applicable data protection legislation. This includes, first of all, the service providers commissioned by XANA (Art. 28 GDPR). These include, for example, the provider of web space for the operation of our website. In these cases, however, the scope of the data transmitted is limited to the minimum necessary to achieve the purposes pursued through the processing of the data.

Automated decisions, profiling and applied logic
Your data will not be used for automated decisions or profiling by XANA.

Rights of information and revocation
You can receive information about the personal datal we have stored on you, without stating a reason and without charge. You can have your personal data, which has been compiled by us, blocked, corrected or deleted.

You can also at any time, cancel or withdraw your consent to us for data collection and use , without stating a reason.

You can exercise your rights at the following e-mail address: info@xanastim.com

Security measures
The legally required levels of security for the protection of Personal Data have been adopted, and every effort is made to install any additional technical means and measures available to prevent the loss, misuse, alteration, unauthorized access and theft of the Personal Data provided.

XANA shall not be liable for hypothetical damages or losses that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operation of this electronic system, due to causes beyond the control of the owner, delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, as well as damage that may be caused by third parties through illegitimate intromissions beyond the control of the coresponsible parties. Nevertheless, the data subject must be aware that security measures on the Internet are not impregnable.

Social networks
XANA has a presence on social networks. If the interested party becomes a follower on XANA’s social networks, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network in each case and that he/she has previously accepted.

XANA will process your personal data in order to correctly manage its presence on the social network, to inform you of its activities or services, and for any other purpose that the regulations of the social networks allow.

Under no circumstances will XANA use the profiles of followers on social networks to send individual advertising.

This Privacy Policy on Social Networks describes the use of the personal data of users when registering through the profile that XANA has on the social network Facebook, Twitter, Instagram, etc., and browsing with their social network user, for the purposes indicated below.

By registering with their Facebook, Twitter, Instagram, etc. ID, in short of a social network, the user gives their express consent to the processing of their personal data in accordance with XANA’s Privacy Policy.

Updated September 2021