Privacy policy


The processing of personal data put in place by KORUTOA SA is carried out in compliance with the Swiss Federal Law on data protection (LPD) and the EURegulation 679/2016, the principles of correctness, lawfulness, transparency, purpose limitation and conservation, minimization and accuracy, and the protection of integrity and confidentiality.ThisPrivacy Policy is intended for the website (hereinafter"Site"). The Data owner is Korutoa SA.

To request further information on the processing of personal data or for the exercise of their rights, the User may contact us by writing to:

Korutoa SA
Corso Enrico Pestalozzi 21A, 6900 -  Lugano Svizzera

or to this email:

01. What is personal data and what is a treatment

Personal data is information that identifies or can identify, directly or indirectly, a natural person and that can provide information on his characteristics, habits, personal relationships, etc. The following are considered personal data, (solely an example but not limited to): name, surname, address or other contact details, an identification number, or an online identifier. A treatment is any operation carried out with or without the aid of automated processes and applied to personal data. Treatments are, (solelyan example but not limited to): the collection, registration, organization, storage, modification, consultation, deletion or destruction of data.

02. Which personal data is being processed?

We inform the User that the personal data being processed may be constituted by way of non-exhaustive example of an identifier such as name, surname, e-mail address, CV.

In particular, the data processed are the following:

  • Browsing data
    The computer systems used to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow the User to be identified. This data includes the IP addresses of the computers used by the User that connect to the Site; the URI addresses of the requested resources (Uniform Resource Identifier); the time of the request, and other parameters relating to the user's operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the owner or third parties.

  • Data provided by the User
    User data is collected by the Owner when filling out the "Contact Us" Form or the "Newsletter" Form, by filling in a form (hereinafter referred to as "form"). The form requires the insertion of different types of personal data depending on the service requested and the related legal obligations. Common data: these are personal data (such as name, surname,); contact details (such as email); work data (such as the function held in the Company; if the CV is forwarded as an attached file by the User in case of interest in one of the job positions indicated in the Career section, Korutoa reminds the User that, if he / she wishes to inform the company of information relating to his person falling within the scope of the so-called particular data or those worthy of particular protection, such data may be processed only if the user has indicated his explicit consent in the copy of the CV attached to the e-mail. Korutoa invites, in any case, the User not to indicate particular data or data worthy of particular protection, with the exception of those that are considered by the same absolutely indispensable in order to allow an adequate evaluation of their application).

03. What is the purpose for processing personal data

The User's personal data will be processed for the following purposes:

  • Response to the User's requests by providing general information on the services offered by Korutoa

  • Provide feedback to potential candidates in relation to the professional positions open in the Career section

  • Send the User communications / notifications regarding the service

  • Fulfill the obligations established by law, by a regulation, and satisfy requests from the competent authority

  • Exercise the right of defense by the Data Owner (extrajudicial, judicial)

  • Send to the User, who has completed the Newsletter Form and given his consent, communications relating to Korutoa's services, events, courses, as well as commercial, advertising and information (marketing) communications. In this case, the User can revoke the consent given at any time by clicking on the appropriate "unsubscribe" link at the bottom of the newsletter.

04. Legal basis for the processing of User data

Each treatment is justified by one of the following legal conditions:

  • The processing is necessary to execute the User's requests. In this case, the provision of personal data is mandatory

  • Processing is necessary to fulfill a legal obligation. In this case, the provision of data is mandatory.

  • The processing is necessary for the pursuit of the legitimate interest of the Data Owner, provided that the interests or fundamental rights and freedoms of the User that require the protection of personal data do not prevail. In this case, the provision of data is optio

05. To whom the data could be communicated

As part of Korutoa's business and for the purposes specified above, the User's personal data may be shared with:

  • Duly appointed data processors who provide specific processing or ancillary services on behalf of the Data Owner and as per his instructions; the User may at any time request the updated list of Data Processors.

  • Partner companies / associations of the Data Owner (i.e., AITI, ATED ICT TICINO).

  • Autonomous Data Controllers to whom the data could be communicated by virtue of the provisions of the law or ordered by the Authorities; to allow the Owner to exercise their rights (law firm).

  • Subjects authorized by the Data Owner to process the personal data necessary for carrying out activities strictly connected to the provision of services and who have assumed an appropriate legal and contractual obligation of confidentiality (eg employees and / or collaborators of the Data Owner).

We do not sell or otherwise disclose the User's personal data to third parties.

06. Where the data is stored

Personal data are stored electronically on servers located in the EU and in Switzerland. The Data Owner, if necessary, will have the right to transfer the data even outside the EU and Switzerland. In this case, the Data Owner ensures from the outset that the transfer of data will take place in accordance with the applicable legal provisions, ensuring adequate protection.

07.  How long is the data kept?

The User's personal data are kept in compliance with confidentiality and current regulations for the period of time allowed by Swiss law and in any case not exceeding 10 years. When the processing is based on the User's consent, personal data can be stored within the aforementioned maximum term, or until such consent is revoked.

08.  Minors

Minors under the age of 16 must not provide information or personal data to the Data Owner in the absence of the consent of their legal guardian. In the absence of this consent, it will not be possible for the minor to send requests through the site. Korutoa takes children's privacy seriously. Therefore, we recommend that all legal guardians inform them regarding the safe and responsible use of the Internet and the Web.

09. What are the User's rights?

The User can request, at any time, confirmation as to whether or not his personal data is being processed, and in relation to the same he has the right to:

  • request access to data to obtain information on the purposes pursued with the processing, on the recipients to whom the data could be communicated, the duration of the processing (where possible) and the possible consequences of a treatment based on profiling

  • withdraw their consent at any time, without compromising the application of the law on the treatment of data based on the consent given before the revocation.

  • request the rectification of personal data if they are found to be inaccurate or incomplete.

  • request the deletion of data if it is no longer necessary for the Data Owner for the intended processing purposes, is inadequate with respect to the purposes of the processing, the User has revoked their consent, or the data has been processed unlawfully.

  • request the limitation of data processing, in the cases provided for by the law.

  • request the transfer of data to another Data Owner, in a commonly used format eligible for an IT device, without impediments on the part of the current Data Owner.

  • oppose the processing of your data and, specifically, have the right to oppose decisions that concern you if based solely on automated processing of your data, including profiling

  • lodge a complaint with the competent authority, in the event that you believe that the treatment of data that concern you violate the current legislation on data protection.

To exercise your rights, you can use the contact details provided in the INTRODUCTION or access the website of the office for Federal Data Protection and Transparency.

10. Automated Decision Making

The User is not subject to decisions based on automated processing.

11. Changes

Korutoa reserves the right to modify or simply update the content of this Privacy Policy, in part or completely, also due to changes in the applicable legislation. These changes will be binding as soon as they are published on the Site. If the User continues to access or use the service after such publication, it is assumed that he has expressly accepted these changes. Korutoa therefore recommends that the User regularly visit this section to become aware of the most recent and updated version of the Privacy Policy in order to be always updated on the data collected and on the use that Korutoa makes of it.

Cookie policy