Introduction

In this privacy statement, the Swiss National Bank (SNB) provides information about how it processes personal data arising from its relationship with suppliers, service providers and similar contractual partners.

Personal data are all information which can, either on its own or together with other information, be attributed to an identified or identifiable natural person.

'External providers' are those suppliers, service providers and similar contractual partners that have been granted access to the SNB's premises or to its infrastructure (e.g. IT systems) to provide their services without being in an employment relationship with, or subordinated to, the SNB. In addition to this privacy statement, such external providers are subject to the 'Privacy statement for the SNB's external providers'. If they have not already received the latter privacy statement, external providers may request it from the SNB's Data Protection Officer; authorised users may download it from the SNB's intranet.

Case-specific agreements, conditions and further privacy statements may also apply. Furthermore, the 'General privacy statement of the SNB', which can be downloaded from the SNB's website (www.snb.ch) or requested from the SNB's Data Protection Officer, contains additional information on the processing of personal data.

For what purpose is personal data processed?

The SNB processes personal data in connection with the negotiation, conclusion and handling of supplier contracts, service contracts or similar contracts, as well as with the use of your products and services.

The SNB also processes personal data in order to fulfil its statutory tasks and oversight duties. Moreover, it processes personal data based on your consent as well as on contractual and pre-contractual rights and obligations arising from an existing, or future, business relationship with you.

In addition, the SNB processes personal data to protect its interests or those of authorised third parties, provided these are not overridden by the interests relating to the protection of your personal data.

The SNB processes your personal data in particular for the following purposes:

• in order to compare the products and services you offer with those of other potential business partners;
• for coordinating delivery dates and payment orders for your products and services;
• for securing your contact details for future collaborations;
• for internal controls in accordance with current law and applicable guidelines and directives;
• for other purposes required by law or the authorities or that relate to the management of the entire supply chain.

Your personal data are generally deleted as soon as the purpose for which they were being processed has been fulfilled, they are no longer needed and there is no (special) statutory or contractual obligation to retain them.

Which categories of personal data are processed?

Various personal data are processed in the context of offering or using products and services. The scope of this processing depends primarily on the information provided in the pre-contractual or contractual business agreements. The SNB mainly processes the following categories of personal data:

• contact and identification data;
• last name;
• first name;
• telephone number;
• business address or email address;
• other personal data that you, your employer or subcontractors disclose to the SNB.

Under which circumstances are personal data disclosed?

The SNB discloses personal data if there is a legal basis for doing so, in response to a court order, or if you have given your consent. In addition, the SNB may disclose personal data to suppliers, service providers, contractual partners, other business partners, parties involved in a report of a regulation violation, authorities and administrative bodies, etc. in connection with the purposes mentioned under section 2, provided that appropriate agreements regarding data protection have been concluded for such disclosure or that the recipients have undertaken or are obliged to undertake appropriate data protection.

Data of third parties

Personal data pertaining to persons other than yourself are referred to as 'personal data of third parties'. If you disclose such data, the SNB assumes that the information you have provided pertaining to third parties is correct and authorised. Furthermore, by disclosing data of third parties, you confirm that you have informed the third parties about this privacy statement and that the disclosure has been authorised.

To which countries does the SNB disclose personal data?

The SNB only discloses personal data in exceptional cases and, as a rule, only to countries with adequate data protection from Switzerland's perspective (specifically the EU and EEA states). In some cases, and subject to specific requirements, personal data may by way of exception also be transferred to other countries (worldwide). Further information on data transfers abroad can be found in the SNB's general privacy statement.

Data security

The SNB takes appropriate technical and organisational measures using state-of-the-art IT security technology to ensure that your personal data are protected as completely as possible against unauthorised access and misuse. When selecting and instructing external suppliers and service providers, the SNB ensures that they have appropriate technical and organizational security measures in place to protect your personal data.

Data controller and contact details of the SNB's Data Protection Officer

The SNB is responsible for the processing of personal data as described in this privacy statement. If you have any questions about the processing of your data, you can contact the SNB using the details below:

Swiss National Bank
Data Protection Office
Börsenstrasse 15
8022 Zurich

You may contact the Data Protection Officer at the same address or electronically at datenschutz@snb.ch.

Amendments

The SNB may amend the present privacy statement at any time and without prior notice.

Date

April 2024