Federal Act on Data Protection

¹A breach of pri­vacy is un­law­ful un­less it is jus­ti­fied by the con­sent of the in­jured party, by an over­rid­ing private or pub­lic in­terest or by law.

²An over­rid­ing in­terest of the per­son pro­cessing the data shall in par­tic­u­lar be con­sidered if that per­son:

a.

pro­cesses per­son­al data in dir­ect con­nec­tion with the con­clu­sion or the per­form­ance of a con­tract and the per­son­al data is that of a con­trac­tu­al party;

b.

is or in­tends to be in com­mer­cial com­pet­i­tion with an­oth­er and for this pur­pose pro­cesses per­son­al data without dis­clos­ing the data to third parties;

c.

pro­cess data that is neither sens­it­ive per­son­al data nor a per­son­al­ity pro­file in or­der to veri­fy the cred­it­wor­thi­ness of an­oth­er, and dis­closes such data to third parties only if the data is re­quired for the con­clu­sion or the per­form­ance of a con­tract with the data sub­ject;

d.

pro­cesses per­son­al data on a pro­fes­sion­al basis ex­clus­ively for pub­lic­a­tion in the ed­ited sec­tion of a peri­od­ic­ally pub­lished me­di­um;

e.

pro­cesses per­son­al data for pur­poses not re­lat­ing to a spe­cif­ic per­son, in par­tic­u­lar for the pur­poses of re­search, plan­ning and stat­ist­ics and pub­lishes the res­ults in such a man­ner that the data sub­jects may not be iden­ti­fied;

f.

col­lects data on a per­son of pub­lic in­terest, provided the data relates to the pub­lic activ­it­ies of that per­son.