The company database contains details of businesses. Some of them relate to individuals: the business name of a sole proprietorship must contain the owner’s surname (Art. 945 of the Swiss Code of Obligations), the business address may also be a home address, and a phone number or email address may belong to a particular person. Such details are personal data. Being publicly accessible does not permit any further use whatsoever.
The controller for processing in the database is Martin Adamec. The postal address and email are given at the end of this page.
Depending on the source and the order: business name, legal form, UID, registered office and business address, municipality and canton, industry (NOGA code), business phone number (not checked against the asterisk marking), business email address and website. The standard export does not contain names of authorised signatories or other people unless they form part of the business name itself. We do not process sensitive personal data.
The basic data comes from the commercial register, which the Federal Commercial Registry Office publishes as open government data (Zefix via LINDAS; free use with attribution, “Open use. Must provide the source.”, opendata.swiss). Phone, email and website currently come from the open places data of Overture Maps (Overture Maps Foundation, Places; licence CDLA Permissive 2.0, attribution). Planned and not yet processed are company websites (in particular their legal notices), OpenStreetMap (licence ODbL) and individual look-ups in the UID register of the Federal Statistical Office. We do not currently check phone numbers against the asterisk marking in telephone directories. On request we will tell you the available origin of your record. Details are on the page Data sources and methodology.
We structure company details and deliver them as B2B exports for CRM and master data, for market analysis and for direct mail by post. We do not sell email lists for advertising mailings. An export does not contain consent to advertising. The data is not used to make automated decisions about people.
Under the FADP there is as a rule no breach of privacy if a person has made their data generally accessible and has not expressly prohibited its processing (Art. 30(3) FADP). Otherwise we rely on the overriding private interest of the operator and its customers in reliable company information (Art. 31(1) FADP). Under the GDPR the legal basis is Art. 6(1)(f) (legitimate interest). As safeguards we limit the fields, respect objections, do not supply phone numbers for sales calls, correct reported errors and block deleted records from being added again.
Recipients are business customers receiving the agreed fields, hosting and IT providers acting as processors, professional advisers and competent authorities. Customers are responsible for their own processing and have their own duties to inform.
The database is processed in Czechia and hosted in Germany; the Swiss Federal Council has found that both countries provide adequate data protection. Customers may be based in Switzerland, in the EU or in other countries. Delivery to a country without adequate protection only takes place with safeguards under Art. 16(2) FADP or Chapter V GDPR, or on the basis of a statutory exception under Art. 17 FADP. On request we will tell you the country and the basis.
We keep records for as long as they are needed for the purpose and up to date. We correct or delete outdated or incorrect details as soon as we learn of them. Deleted records are kept only as a minimal blocking identifier so that they are not added again.
You can ask whether and which details we process about you, including the available origin (Art. 25 FADP). Access is generally free of charge and is provided within 30 days. You can ask for incorrect data to be corrected (Art. 32(1) FADP) and for us to stop the processing, to stop passing the data on to customers or to delete it (Art. 32(2) FADP). If you expressly object to the processing, we will not continue it without a justification (Art. 30(2)(b) FADP).
Under the GDPR you have the rights of access, rectification, erasure, restriction and objection (Art. 15 to 21 GDPR). To object, the objection form or an email to info@kontaktdatenbank.ch is enough.
In Switzerland the competent authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Under the GDPR you can complain to the Czech Úřad pro ochranu osobních údajů (uoou.gov.cz) or to the supervisory authority where you live or work in the EU.
If personal data is not obtained from the person concerned, Art. 19(5) FADP requires that person to be informed no later than one month after the data is received, or at the latest when the data is disclosed if that happens earlier; exceptions are set out in Art. 20 FADP. Art. 14 GDPR contains a corresponding duty. This page supplements individual notice but does not replace it.
TO CONFIRM: define how individual notice is given before the first exports containing personal data are delivered, and document any reliance on Art. 20(2)(b) FADP (disproportionate effort).
If sources, purposes or processing change significantly, we update this notice. The version stated above applies.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czechia
IČO: 19552319
info@kontaktdatenbank.ch
Legal notice · Terms · Privacy policy · Database notice · Objection form · Data sources and methodology
