Definitions

In this Act:

• a.

  personal data means any information relating to an identified or identifiable natural person;

• b.

  data subject means a natural person whose personal data is processed;

• c.

  sensitive personal data means:

  • 1.

    data relating to religious, philosophical, political or trade union-related views or activities,

  • 2.

    data relating to health, the private sphere or affiliation to a race or ethnicity,

  • 3.

    genetic data,

  • 4.

    biometric data that uniquely identifies a natural person,

  • 5.

    data relating to administrative and criminal proceedings or sanctions,

  • 6.

    data relating to social assistance measures;

• d.

  processing means any handling of personal data, irrespective of the means and procedures used, in particular the collection, storage, keeping, use, modification, disclosure, archiving, deletion or destruction of data;

• e.

  disclosure means transmitting personal data or making such data accessible;

• f.

  profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

• g.

  high-risk profiling means profiling that poses a high risk to the data subject's personality or fundamental rights by matching data that allow an assessment to be made of essential aspects of the personality of a natural person;

• h.

  breach of data security means a breach of security that leads to the accidental or unlawful loss, deletion, destruction or modification or unauthorised disclosure or access to personal data;

• i.

  federal body means an authority or service of the Confederation or a person entrusted to carry out public tasks on behalf of the Confederation;

• j.

  controller means a private person who or federal body which, alone or jointly with others, determines the purpose and the means of processing personal data;

• k.

  processor means a private person or federal body that processes personal data on behalf of the controller.