WEB PRIVACY POLICY
Information on the processing of personal data of users of the website www.orocashswiss.ch
- PURPOSE OF THE PRIVACY POLICY AND SCOPE OF APPLICATION
Dear user, Aurea Svizzera SA is committed to protecting your personal data in accordance with applicable law. This Policy explains how your personal data is processed when you connect to the Site www.orocashswiss.ch.
This Policy is drawn up pursuant to Article 19 of the Swiss Federal Act on Data Protection (also known as the “FADP”) and is intended to provide information regarding the processing of your personal data in connection with the features offered and browsing on the following domains:
www.orocashswiss.ch
It cannot be ruled out that, because of the languages available, the content published, and the way products and services are offered, the Site may also be directed at data subjects residing in the European Union or may involve monitoring their behaviour within the EU. In that event, pursuant to Article 3(2) of Regulation (EU) 2016/679 (“GDPR”), the processing would also fall within the territorial scope of the GDPR. As a precaution, this privacy notice therefore takes account of the principles and provisions of both the FADP and the GDPR.
The content of this Privacy Policy is supplemented by the following notices, which are specific to certain services:
Cookie Policy
The Site www.orocashswiss.ch also contains a link (“Orocash Invest”) to www.orocashinvest.ch. Aurea Svizzera SA is also the Controller in relation to that website. Although some features of www.orocashinvest.ch (such as newsletter subscriptions and the store locator) are similar to those available on this Site, www.orocashinvest.ch offers additional, specific features that require a dedicated privacy notice. Please consult the privacy policy published at www.orocashinvest.ch for details of the processing of personal data carried out through that website. - DATA CONTROLLER AND CONTACTS
Aurea Svizzera SA is the controller of your personal data. You can contact the Controller at info@aureasvizzera.ch.
The Controller and owner of the Site is Aurea Svizzera SA (hereinafter “Aurea Svizzera” or the “Company”), a Swiss company with registered office at Via Livio 1, Chiasso, 6830, Switzerland. The Controller can be contacted at its registered office or by email at info@aureasvizzera.ch. - WHAT DATA WE USE, HOW WE USE IT AND THE LEGAL BASIS
We will process the data necessary for managing browsing on the website, the data generated through cookies and any data you may provide.
We process browsing data to ensure that the website functions securely and reliably. If you decide to use one of our services, we will process your data to provide the service requested. Each purpose has a legal basis that permits the processing.
By expanding the sections below, you can find the purposes for which we use your data and, for each purpose, the data we use, how we use it and the relevant legal basis.
The following sections indicate, for each situation, what personal data we may collect, how we use this information and what our legal basis is for doing so.3.1 Browsing the orocashswiss.ch website
When you visit our Site, we may collect certain information by automated means, including cookies and similar technologies, such as Flash cookies, local storage, web beacons and pixels, JavaScript, software development kits (SDKs) and device identifiers.
What personal data we collect
The information collected in this way may include the IP address of the device, the domain name, the identifiers associated with the devices, the type and characteristics of the device and the operating system, the characteristics of the web browser, language preferences, user interactions with our Site (such as pages visited, links clicked on and features used, the dates and times of access to our Site, and the pages that led you to or directed you to our Site) and other information about your use of our Site.
How we use your data
For information on the use of data related to cookies, please refer to the Cookie Policy.
How long we retain your data
Some browsing data will be retained only for the duration of the browsing session. The retention period for cookies is specified in the Cookie Policy.
3.2 Contacting customer support
You may want to request assistance or support by contacting our customer service using our online "Contact Us" form or by writing to info@aureasvizzera.ch.
What personal data do we collect?
If you contact our customer service and support team with a question or to request assistance, the types of personal data we collect or process about you include:
● Identifying and contact information, such as name, surname, email address and telephone number;
● Information about you that you submit in your request.How we use your data
We will use your data to respond to you, provide the necessary support and follow up on your request, including, where applicable, to comply with our regulatory obligations and to establish, exercise or defend legal claims. We may retain our communications with you as evidence.
We will use your data for the above purposes on the following legal bases:
● Our need to perform the contract we may have with you (if you are an existing customer) or to take pre-contractual measures at your request;
● Our legitimate interests, in particular in training our staff, improving our services and defending our legal rights; or
● Our need to comply with our legal obligations.How long we retain your data
We will retain your personal data for the period necessary to fulfil your requests and, in any case, for no longer than 2 years from the last contact.
3.3 Geolocation when accessing the Site
When you first access the Site, we may ask you to authorise the use of your location to offer you a personalised experience based on your geographical area, for example by suggesting content or points of sale relevant to your area.
What personal data we collect
If you authorise the geolocation request shown when you first access the Site, the types of personal data we collect or process about you include:
● Your device's geolocation data (geographical coordinates), obtained through your browser.How we use your data
We use this data to tailor your browsing experience to your geographical area, for example by giving priority to content or stores that are most relevant to your location.
The processing is based on your consent, which you actively give by authorising the request shown by the browser when you first access the Site. If you refuse authorisation, you will still be able to browse the Site and use all its features, including the store locator described in the next section, without any restrictions.
You can revoke the authorisation granted at any time via the settings of your browser or device.
How long we retain your data
We will retain your geolocation data only for the duration of the browsing session, unless you have chosen to store your decision for a longer period using the relevant option shown in the authorisation request (where available).
3.4 Store locator
The “Stores” section of the Site includes a search tool that allows you to find the nearest OroCash stores by entering a city or postcode or by authorising access to your device's location using the “Location” button.
What personal data we collect
Depending on the method you use, the types of personal data we collect or process about you include:
● If you use the “Location” button: your device's geolocation data (geographical coordinates);
● If you use manual search: the city or postcode you enter in the search field;
● In both cases, any additional search criteria you have selected (service or product searched for, search radius).How we use your data
We use this data to process your search and show you a list of the nearest stores and their locations on a map. The map is provided through Google Maps.
“Location” button: If you use the “Location” button to identify your location automatically, the processing is based on your consent, which you actively give through the authorisation requested by the browser when the button is activated. You can refuse or withdraw this authorisation at any time through your browser or device settings and continue to use the manual search function. When you consent to geolocation, you interact with Google Maps, which receives and processes data (IP address and coordinates) as an independent controller. Please refer to Google's privacy policy for further information.
Manual search: If you manually enter a city or postcode, the processing is based on our legitimate interest in providing you with a store locator service at your request.
How long we retain your data
We will retain your data for the time necessary to fulfil your requests and, in any case, no longer than the duration of your session on the Site.
3.5 Direct marketing communications by newsletter
You can use the form on the Site to request the promotional newsletter about Aurea Svizzera products.
What personal data we collect
The types of personal data we collect or process about you to send you such communications include:
● Contact details, namely your email address.
● Metadata collected through cookies or similar technologies, including information used to understand how you interacted with our Site and whether you opened or clicked content in the emails we sent you. For more information on how we use cookies and the choices available to you, please refer to our Cookie Policy.How we use your data
We use this information to tailor our communications to your specific interests and preferred communication channel, to avoid sending communications that do not interest you or to which you have not consented, and to keep you informed about news and promotions that appear most relevant and useful to you. For this purpose, we may organise the data collected into interest groups.
We will ask you to opt in or consent to the use of your personal data for these communications. You can stop receiving them at any time by using the opt-out method provided in the relevant email, for example by clicking the unsubscribe link in our promotional emails, or by contacting us as specified in section 2, “Contacts”.
If permitted by applicable law, we may rely on our legitimate interests to carry out some of the activities mentioned above.
Please note that if you choose to stop receiving promotional messages from us, we may continue to send you information for other lawful purposes, for example to administer any account or contract you may have with us, send you operational communications, respond to your requests or comply with the law.
How long we retain your data
For the purpose described above, we will retain your personal data for a maximum period of 2 years from the date on which your consent is obtained.
3.6 Careers
You can use the “Careers” section of the Site to send us a speculative application for future job opportunities at our Company.
What personal data we collect
If you submit an application through the “Careers” form, the types of personal data we collect or process about you include:
● Identifying and contact details, such as name, surname, email address and telephone number;
● The CV file you upload via the dedicated field, and all the information contained therein (e.g. professional experience, education, skills);
● The information you choose to enter freely in the introduction/message field, including any personal data you voluntarily choose to provide to us there.How we use your data
We will use your data to assess your application for current vacancies or future career opportunities that match your profile, to contact you about the recruitment process and, where appropriate, to conduct initial interviews.
The processing is necessary to take steps at your request before entering into a possible future employment contract (Article 31(2)(a) FADP). If we wish to retain your application beyond the period indicated below to consider you for future career opportunities, we will ask for your specific consent.
How long we retain your data
We will retain your personal data for as long as is necessary to assess your application. If we intend to retain your data for any future job opportunities, we will do so with your consent, for 1 year from the date of receipt.
3.7 Online advertising
From time to time, you may come across advertisements from our Company online, including on social media platforms. These ads are often presented to the user based on their perceived interests, as determined by their social media activity or internet browsing.
What personal data we collect and how we use it
Online advertising may be based on your search terms (in the case of search-engine advertising) or on information about you held by online platforms (such as the email address associated with your social media account, your country or professional interests selected on a social media platform).
In some cases, we will use your email address to display advertisements for our products and services on Meta and Google social media platforms. For this purpose, we will provide your email address to the social media platform in encrypted or otherwise protected form. The platform will then match your email address with personal data (such as email addresses) provided by its users and use that information to show a particular advertisement from our Company to you or other platform users. For more information on how social media platforms use your data, please refer to their privacy policies.
We may also place advertising cookies or similar technologies provided by social media platforms or other third parties on our Site. If you visit our Site and accept those advertising cookies and similar technologies, where required by law, the information collected (such as device identifiers and information about pages visited) may also be used to display relevant advertisements for our products and services on a social media platform or third-party website and to create interest-based profiles for advertising purposes. Our Company will often not receive information that identifies you when those advertisements are displayed, but it may be able to tailor advertising further based on advertisements you have already seen and may receive aggregated statistics on the number of advertisements displayed and clicked.
As specified in the Cookie Policy, we will rely on your consent to use your data for online advertising purposes, for example when you accept advertising cookies, or otherwise on our legitimate interests where permitted by law. You should be able to configure cookie settings on websites that use tracking cookies for advertising purposes. For more information on how we use cookies and how to set your preferences on our Site, please refer to our Cookie Policy.
How long we retain your data
For the purpose described above, we will retain your personal data until you object or withdraw your consent.
3.8 Fulfilment of legal obligations and defence in court
We may use your data to comply with legal obligations or to establish, exercise or defend legal claims. For example, a judicial authority may request information about our users in a case of computer fraud, or we may use the data to bring or defend legal proceedings if a dispute arises.
What personal data we use
In this case, the types of personal data we collect or process about you include your identification and contact details and any other information necessary and relevant to the specific case, such as evidence relevant to legal proceedings.
How we use your data
We will use your information to:
● comply with applicable legal requirements, regulations, court orders or other legal processes;
● establish, exercise or defend our legal rights.We will do so if necessary to comply with the legal obligations to which we are subject in the relevant country or region, or if necessary to satisfy our legitimate interests.
How long we retain your data
For the purpose described above, we will retain your personal data for a maximum period of 10 years.
- COOKIES AND TRACKING TOOLS
This Site uses cookies and other tracking tools to ensure that it functions properly, to carry out statistical analysis and for marketing purposes. Further information is available in the Cookie Policy.
This website uses cookies and other tools belonging to the following categories:
● technical cookies, which ensure that the Site functions properly;
● profiling cookies, which are used to provide additional services that are not essential for the operation of the Site, such as storing your choices, carrying out statistical analysis and other marketing activities.
You can choose which cookies to enable by selecting them according to their purpose. For more information on how these tools work, consult our Cookie Policy or contact us at info@aureasvizzera.ch. - HOW TO MANAGE CONSENT
You can withdraw your consent at any time using the dedicated link at the bottom of direct communications.
You can withdraw your consent to receive the newsletter at any time by:
● using the "Unsubscribe" link at the bottom of promotional messages;
● writing to the Data Controller at info@aureasvizzera.ch.
These methods are alternatives and are equally effective. Withdrawing consent will stop the communications without affecting the lawfulness of processing carried out before consent was withdrawn. - MANDATORY PROVISION OF PERSONAL DATA
The nature of the provision of data (mandatory or optional) depends on the specific processing carried out.
The provision of browsing data is mandatory because it is automatic and inherent in the use of browsing protocols. By contrast, providing data to access specific services is always optional and depends on your free choice. - WHO CAN ACCESS YOUR DATA
Your personal data is processed by duly authorised staff of our Company and shared with third parties acting on our behalf for the specific purposes described in this Privacy Policy.
Processing is carried out directly by the Controller's organisation through employees or other appropriately appointed and trained authorised persons.
We may share your personal data with:
Suppliers acting on our behalf (data processors)
We use external suppliers that process personal data on our behalf as processors under Article 9 FADP and, where applicable, Article 28 GDPR, exclusively for the purposes indicated in this Policy. They include:
● OPIQUAD S.p.A. — Tax Code/VAT No. 05866450967 — Registered office: Via Pietro Paleocapa 6, 20121 Milan (MI), Italy — provider of IT and site management services;
● Cookiebot (Usercentrics A/S) — CVR: DK34624607 — Registered office: Havnegade 39, 1058 Copenhagen, Denmark — cookie consent management platform;
● TWOW s.r.l. — Tax Code/VAT No. 02337580993 — Via Lomellini 2/1, 16124 Genoa (GE), Italy — management of the newsletter, mailings and related database;
● TECH S.r.l. — Tax Code/VAT No. 03532980103 — Lungobisagno Dalmazia, 71 16141 - Genoa (GE), Italy
Group companies
Other companies affiliated with the Gens Aurea S.p.A. group, of which Aurea Svizzera SA is a member: given the corporate structure of Gens Aurea S.p.A., your personal data may be shared with other affiliates in the group.
Business partners and professional consultants
We may share your personal data with external organisations with which we collaborate (such as research partners or co-branding initiatives) and with external professional advisers (such as lawyers, tax advisers, auditors, banks and payment service providers), to the extent necessary for them to provide us with their advice or assistance.
Public authorities and other entities for legal reasons
We may disclose your personal data to other parties, including public and judicial authorities, (1) if we believe we are required to do so by law or in connection with legal proceedings (such as a court order or a subpoena); (2) in response to requests from government agencies, such as law enforcement or regulatory authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe that disclosure is necessary or appropriate to prevent physical or other harm or financial loss; or (5) in connection with an investigation into suspected or actual illegal activity.
At your request
With your consent, we will share your personal data with any other party you choose.
The data will not be transferred to third parties for commercial purposes and will not be made public under any circumstances.
Some information may be disclosed to independent data controllers, such as public bodies or law firms, solely when the legal conditions are met.
The list of processors is available on request by contacting the Controller at info@aureasvizzera.ch. - INTERNATIONAL DATA TRANSFERS
The data may be transferred abroad to the operating centres of our service providers.
The recipients referred to above may be located in countries other than the country where the information was originally collected. Those countries may not have the same data protection laws as the country where you first provided the information. When we transfer your personal data to recipients in other countries, including the United States, we will implement appropriate safeguards to ensure an adequate level of data protection as required by applicable law. These may include selecting service providers and business partners located in a country recognised as providing an adequate level of data protection and implementing safeguards based on standard data protection clauses, such as the FDPIC's standard contractual clauses, where applicable. Under applicable law, you may request a copy of these safeguards by contacting us as specified in section 2, “Contacts”. - DATA RETENTION
We will retain your personal data only for as long as strictly necessary to provide the service you are accessing.
Some browsing data will be retained only for the duration of the browsing session. The retention period for cookies is specified in the Cookie Policy. Some personal data will be retained for as long as necessary to achieve the purposes described above and, in any event, for the periods required by law or, where provided by law, until you object to the processing. You can exercise your right to object as described in section 11, “Exercising Privacy Rights and Lodging a Complaint”. - SECURITY AND PROCESSING METHODS
We protect your personal data using security measures appropriate to the risk.
The data will be processed using both manual and electronic means and through organisational and processing procedures designed to achieve the stated purposes.
We protect the data through appropriate security measures proportionate to the risk identified in relation to your rights and freedoms, pursuant to section 1 DPO and, to the extent that the processing falls within the scope of the GDPR, Article 32 GDPR. These measures include encrypting communications and using SSL certificates. - EXERCISING PRIVACY RIGHTS AND LODGING A COMPLAINT
You may exercise your rights under the FADP and the GDPR, including the right to access your data, request its erasure, withdraw consent or lodge a complaint with the Federal Data Protection and Information Commissioner and, where applicable, the Italian Data Protection Authority. Where provided by law, you may object to the processing of your data.
You may:
● request access to the personal data we process about you (Article 15 GDPR; Article 25 FADP). Your request must include a detailed and accurate description of the personal data you wish to access.
● ask us to rectify information concerning you that you believe is inaccurate or incomplete (Article 16 GDPR; Article 32 FADP).
● object, based on your particular situation, to any use or processing of your personal data based on our legitimate interests (Article 21 GDPR).
● withdraw the consent you previously gave us to use your data. This will not affect the lawfulness of processing carried out before consent was withdrawn.
● ask to receive, in a structured, commonly used and machine-readable format, the personal data that you provided to us directly and to have those data transmitted to another company where technically feasible. This right applies only in certain circumstances, where you provided your personal data to us directly on the basis of your consent or a contract to which you are a party (Article 20 GDPR; Article 28 FADP).
● ask us to restrict or limit the use of your personal data (Article 18 GDPR).
● ask us to erase your personal data (Article 17 GDPR; Article 32 FADP). Please note that we may not be able to erase all your personal data because this right applies only in certain circumstances, for example when your data is no longer necessary for the purposes set out in this Privacy Policy and no legal or regulatory obligation requires us to retain it.
If you wish to exercise your rights, please contact us as specified in the “Contacts” section. In some cases, we may ask you to verify your identity before we can process your request.
Data subjects may assert their rights in court or lodge a complaint with the competent supervisory authority.
The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch/it.
The competent supervisory authority in the EU is the Italian Data Protection Authority (GPDP): https://www.garanteprivacy.it. - AMENDMENTS AND UPDATES TO THIS SITE PRIVACY POLICY
This Site Privacy Policy may be amended or supplemented, including as a result of legislative changes or additions. The latest version of the Policy will always be available on the Site.
This version of the Site Privacy Policy has been in force since 20/09/2026.
Policy updated on 20/09/2026