Data protection notice for customers and Business Partner

The protection of your rights in the processing of personal data is an important concern for MECOS. With the following information, we would like to give you an overview of the processing of your personal data by us and your data protection rights.  

Which data is processed in detail and how it is used depends largely on your individual interests and the contractual services agreed upon. Therefore, not all parts of this information will apply to you.

Who is responsible for data processing and who can I contact?

For the purposes of the General Data Protection Regulation the following acts as the controller of your data:

MECOS Ltd.
Hardstrasse 319
8005 Zürich

If you have any questions about this notice or about how to exercise your rights, you can contact our data protection officer:

Data Protection Officer
MECOS Ltd.
Hardstrasse 319
8005 Zürich

E-mail: dataprotection@MECOS.com

What data do we process?

We process personal data, which we receive from you as a customer or business partner or from your employer or client within the scope of our business relationship. In addition, we process - to the extent necessary for the provision of our services - personal data which we permissibly obtain from publicly accessible sources (e.g. commercial register, press, Internet) or by other third parties (e.g. a credit reference agency).

Relevant personal data may include:

• Identification data (e.g. contact, contracting party and work organization data, pictures, signature),
• Legitimation and authentication data, where required by law or regulation (e.g. to combat money laundering, terrorist financing),
• Data on the use of IT systems (e.g. IP addresses, log files, log data, access / account data for web services and apps),
• Usage data with guarantee, warranty, product liability and data for safe plant operation as well as position data (if person-related) 

and other data comparable with those categories. As a rule, your personal data will be collected directly from you within the framework of the existing or incipient contractual relationship.

For what purposes and on what legal basis will your data be processed?

We process personal data in accordance with the  Federal Act on Data Protection (FADP)

1. to fulfil pre-contractual and contractual obligations and to initiate contracts:

• Offer preparation (e.g. product offers, service offers, financing offers or rental offers),
• Order processing (e.g. completion of order forms, payment transactions, payment options, delivery and delivery conditions, compliance with legal obligations, invoicing, bookkeeping and auditing, internal cost and performance accounting, controlling as well as the implementation of receivables management / dunning),
• Delivery of the product (e.g. plant handover and commissioning)
• Training of the product (invitation process and realization of the training, training purposes and learning management).
• Supplier management

2. If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties (e.g. customer care and improvement of the customer relationship and the products, contract-related advertising, prevention of fraud and payment defaults):

• Market analysis and identification of new customers (e.g. preparation of market analyses, trade fair presence, Internet presence, customer events, competitions and other promotional activities),
• Reporting (e.g. for data quality, control and planning purposes), reporting and planning of sales figures,
• Optimization of production processes and system quality by collection of system data (e.g. Plausibility check and determination of key figures for consumption and wear reduction, collection of service and maintenance data as well as error codes for error diagnosis and error prevention, evaluation of engine data for compliance with warranty obligations, product liability, analysis of plant data for quality improvement of plant functions, product and service optimization),
• After Sales Marketing via email about similar products or services to the one you have enquired and that we think it may be interesting for you. (e.g. product and service training, provision of applications, EDP programs and apps). We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. You can opt out of these communications at any time.
• We may analyze your personal data to build a profile of your interests and preferences so that we can contact you with information relevant to you and also to improve our services and customer experience.  Profiling is based on the information you have provided to us, including through our websites or information about our products and services that you have enquired about. You have the right object to profiling.
• Planning and execution of service orders (e.g. through online appointments).

3. For the fulfilment of legal obligations:

• compliance with storage obligations, ensuring compliance requirements through audit actions (e.g. sanctions list audit, money laundering),
• operation of an internal control system (ICS) and other monitoring systems to ensure the correctness of business processes.

Further details on the data processing purposes can be found in the individual contract documents and terms and conditions.

You must provide the controller with the personal data required for the execution of the contractual relationship. Without this provision, MECOS shall not be able to fulfill its statutory obligations and enter into the contractual relationship.

To which recipients do we pass on your data within the scope of this processing activity?

In certain cases, your personal data may also be passed on to other parties:

• If the disclosure of your personal data is necessary for the execution or initiation of the contractual relationship, such as in the financing of the contractual object, in joint order processing with project-related partners (such as component manufacturers) or for training purposes.
• We also pass on your personal data to service providers commissioned by us within the scope of order processing (e.g. organization of trade fair events, conducting customer satisfaction surveys, sending e-mail newsletters, hosting and operating CRM systems).
• When we are required to disclose your personal data to comply with national laws, e.g. transfer to tax authorities, courts, auditors.

How do we transfer data outside the EEA?

Data protection agreements have been concluded with all data-receiving in order to ensure a high level of data protection.

If we transfer personal data to affiliated companies or service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate and sufficient data protection guarantees (e.g. EU standard contract clauses or certification) are in place.

For how long do we store your data?

In principle, we delete your personal data as soon as it is no longer required for the above-mentioned purposes. Your personal data will be stored as long as we are legally obliged to do so, or as long as statutory limitation periods apply. In addition, storage shall take place if further legal or contractual storage obligations exist, e.g. in connection with product liability.

Your rights

Under certain circumstances you have the following rights:

• the right to be informed about the data that relates to you
• the right to access your data
• the right to rectify your data
• the right to erase your data provided that there are no statutory regulations to the contrary
• the right to restrict or to object to the processing of your data.
• the right to data portability. 
• the right to withdraw your consent, when the processing of your data is based on your consent
• the right to lodge a complaint with the data protection supervisory authority.

Automated decision making

There is no automated decision-making.

Security and confidentiality

MECOS protects your data with technical and organizational security measures to prevent accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures, such as data encryption, are regularly improved in line with technological developments. Furthermore, MECOS employees are obliged to maintain confidentiality with regard to the handling of personal data.

Reservation

MECOS may adapt this declaration concerning data protection at any time while adhering to the provisions of the data protection legislation.

Last updated in September 2025.