General Terms and Conditions of the Processing of Personal Data by AURORA³ on behalf of the User

By using certain AURORA³ products, you acknowledge that this possibly involves the transmission of personal data to AURORA³. To the extent that AURORA³ processes such data as your data processor, these General Terms and Conditions of the Processing of Personal Data apply in addition to the applicable general Terms of Service. In the event of a conflict with the Terms of Service, these Terms and Conditions of the Processing of Personal Data shall prevail.

AURORA³ and you agree on the following:

  1. AURORA³ processes personal data only in accordance with the applicable Terms of Service and its Privacy Policy;
  2. AURORA³ will employ appropriate technical and organizational measures to protect personal data;
  3. AURORA³ will support you with appropriate technical and organizational measures (taking into account the type of processing) to fulfill your obligation to respond to requests to exercise the data protection rights of the data subject;
  4. AURORA³ will delete the personal data upon termination of the contractual relationship with you as soon as possible and at the latest within a maximum period of 180 days, unless Swiss law, EU law, or the law of the respective EU member state requires a longer storage of the data; in this context, AURORA³ may keep the personal data longer if this is necessary for the provision of other services used by you;
  5. AURORA³ shall provide you with all information necessary to prove AURORA³’s compliance with its obligations as a processor.
  6. You agree that AURORA³ may assign its data processing obligations to a sub-processor in accordance with its Privacy Policy and these Terms of Use for Data Processing. However, this can only be done by means of a written agreement with the sub-processor that imposes on the sub-processor obligations that are no less onerous than those imposed on AURORA³ by these Terms of Use for Data Processing. If a sub-processor does not comply with such obligations, AURORA³ remains fully liable for the performance of the sub-processor’s obligations towards you. You hereby authorize AURORA³ to engage AURORA³’s subcontractors as its subprocessor(s). If you have objections against such additional subcontractor(s), you may inform AURORA³ in writing of the reasons for your objections. However, this does not constitute a legal right to influence any additional subcontractors. Please use an alternative service to AURORA³ if you have objections against such additional subcontractors.
  7. Upon AURORA³’s discovery of any actual or suspected violation of the protection of your personal data, AURORA³ will notify you immediately. Such notification will include at least the following information: Details about the nature of the violation, the number of datasets involved, the category and approximate number of data subjects, the likely consequences of the violation, and any measures already taken or immediately planned to mitigate the possible adverse effects of the violation, taking into account all circumstances. The notification may also be provided in stages, taking into account the information available.
  8. AURORA³ may also transfer your personal information to sub-processors located outside of your country as appropriate for the data processing purposes described in the Privacy Policy. These subprocessors are required to comply with the same data protection obligations as AURORA³ itself. If the level of data protection in a country does not correspond to the Swiss level, AURORA³ will contractually ensure that the protection of your personal data is always equivalent to that in Switzerland. AURORA³ ensures this in each case through one or more of the following measures: