XO Investments SA is a service company based in Neuchâtel, Switzerland.

In the course of our activities, we collect personal data.

We are informing you here in accordance with the Federal Data Protection Act.

1. Who are we?

The data controller is XO Investments SA, Fbg de l’Hôpital 10, 2000 Neuchâtel, Switzerland.

How can you contact us?

email : info@xoinvestments.ch

phone: +41 32 722 60 10

regular mail :Fbg de l’Hôpital 10, 2000 Neuchâtel

2. What data do we process about you?

We collect the following data directly from you:

• Identity (first name, surname, date of birth, gender) :
• Contact details (postal address, e-mail address, telephone number) and marital status :
• Invoicing data (amount and due date of invoices, reminders, receipts) :
• Correspondence (email exchanges, telephone reports, letters).
• Technical data (IP address, etc).
• Your bank details resulting from our business relationship.
• Any other information you provide to us in the course of carrying out a mandate on your behalf or in the course of our dealings with you. For example, details of the organisation that employs you, or on whose behalf you contact us, data concerning your professional situation, data concerning your health, your financial situation, etc.

We also collect the following data from third parties:

• Those from publicly available sources, such as the commercial register, the debt enforcement register, the land register, the media, the Internet, etc.
• Those obtained from authorities/administrations and other third parties

Data about you that people close to you (family, legal representatives, etc.) provide to us so that we can conclude or execute contracts with you, such as powers of attorney, insurance, bank details, contractual partners, etc.

When carrying out the mandate, we also process the personal data we collect from our correspondence with customers or third parties (in particular opposing parties, authorities/administrations, other contact persons, etc.).

Personal data collected in connection with job applications :

From time to time, we advertise recruitment opportunities through various channels, including our website. You can send us your application either by post or electronically. Your application information, whether for a posted position or sent spontaneously, is collected and processed by our departments with a view to managing the recruitment process.

If this process leads to the signing of an employment contract, the data provided will be kept in your personal file for organisational and administrative management purposes, in compliance with our legal obligations.

If your application is not selected, the information you have shared will be deleted after three months following the end of the recruitment process, unless we are obliged to keep it for longer.

Cookies

On our website, we use ‘cookies’ to identify your browser or your device. A cookie is a small text file that is transferred to your computer and saved by your browser when you browse our pages. We use two types of cookies on our website:

Firstly, cookies linked to your session on our website, which are technically necessary for the website to function properly (‘session cookies’). These cookies are automatically deleted as soon as you leave our website.

Cookies to improve your experience of our website (‘functional cookies’). These cookies are deleted after one year. Our banner on our website gives you the opportunity to refuse the use of these functional cookies. However, please note that if you do so, you may not be able to use all the functions of our website to their full extent.

Social networks

We are present on social networks and process data about you in this context. We receive data from you, but the platforms may also analyse your use and use data for their own purposes. We currently use the platform listed below and refer to its data protection declaration via the link provided: LinkedIn: https://fr.linkedin.com/legal/privacy-policy

3. For what purposes do we process your data?

We process your personal data in order to :

• Communicating with you
• conclude/execute contracts with you (including, where applicable, with a view to employment),
• contractual partners or your employer;
• manage the execution of mandates entrusted to it;
• plan our commercial activities ;
• produce statistics;
• compliance (respect for laws, directives and our internal regulations) ;
• managing our infrastructure (including our website), analysing risks, detecting abuse, implementing security measures and checking that these measures are effective;
• respond to your questions and requests relating to data protection, in particular when you wish to exercise one of your rights under the law;
• control the risk of conflicts of interest ;
• meet our legal obligations.

We do not carry out algorithmic or automated processing of personal data on the basis of profiling.

4. What are the legal bases for processing your data?

Most of the processes we apply are essential for entering into, carrying out and finalising the contract with you. Without these processes, we are unable to provide the services we promise in our contracts.

Other processes arise from our justified interest or that of a third party, as in the case of activities relating to marketing, security, statistics and market research, as well as for the defence of our interests in legal proceedings and the resolution of conflicts, particularly those which have no contractual basis.

Certain processes may be required by Swiss and/or foreign legislation. Where they are not expressly required by law, they are based on our legitimate interest in complying with the legal provisions that apply to us.

The use of your personal data for the purpose of sending our newsletter is based on your consent, which you are free to withdraw at any time by sending an e-mail to : info@xoinvestments.ch

5. With whom do we share your data?

In the context of the contractual relationship between you and us and the other purposes mentioned in paragraph 3 above, we may communicate all or part of your data to the recipients listed below (non-exhaustive list):

• Service providers (who process your data partly on our behalf, e.g. IT service providers, and partly on their own behalf and under their own responsibility, e.g. insurance companies)
• Swiss and foreign authorities
• Business partners, e.g. customers, suppliers, project partners
• Credit agencies
• Third parties who collect data about you via our website or our applications (see list on our website)
• Law firms and entities with which we communicate in the course of carrying out the mandate you have entrusted to us.

6. Do we transfer your data abroad?

We process personal data in Switzerland. We may also transfer this data to recipients (in particular customers, opposing parties or authorities) who in turn process personal data in other countries, even if these countries do not guarantee a level of protection comparable to Swiss law. In the latter case, we will only do so on the basis of consent or standard contractual clauses. The same applies if the transfer of data is essential for the performance of a contract or to assert legal claims.

A transfer abroad will only take place if the performance of the contract makes such a transfer necessary, and with your consent.

We would like to draw your attention to the fact that we use an external IT service provider and a cloud provider with their servers in Switzerland.

7. What data do we process about you?

Personal data collected in connection with job applications :

From time to time, we advertise recruitment opportunities through various channels, including our website. You can send us your application either by post or electronically. Your application information, whether for a posted position or sent spontaneously, is collected and processed by our departments with a view to managing the recruitment process.

If this process leads to the signing of an employment contract, the data provided will be kept in your personal file for organisational and administrative management purposes, in compliance with our legal obligations.

If your application is not selected, the information you have shared will be deleted after three months following the end of the recruitment process, unless we are obliged to keep it for longer.