Privacy policy
We protect your data.
General Information / Introduction
Based on Article 13 of the Swiss Federal Constitution and the federal data protection regulations (Federal Data Protection Act, FADP), everyone has the right to privacy and protection against the misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
In cooperation with our hosting providers, we strive to protect the databases as effectively as possible against unauthorized access, loss, misuse, or falsification.
Please note that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
By using this website, you consent to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages visited or names of accessed files, date and time, are stored on the server for statistical purposes, without this data being directly linked to you personally. Where personal data (e.g., name, address, or email addresses) is collected on our website, this is always done on a voluntary basis, where possible. This data will not be shared with third parties without your explicit consent.
Processing of Personal Data
Personal data is any information relating to an identified or identifiable natural person. A data subject is a person whose personal data is processed. Processing includes any operation performed on personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, retention, alteration, destruction, and use of personal data.
We process personal data in accordance with Swiss data protection law. Where and to the extent that the EU GDPR is applicable, we also process personal data on the following legal bases in conjunction with Article 6(1) GDPR:
-
lit. a) Processing of personal data with the consent of the data subject.
-
lit. b) Processing of personal data for the performance of a contract with the data subject and for taking steps at the request of the data subject prior to entering into a contract.
-
lit. c) Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or the applicable law of a country in which the GDPR is wholly or partially applicable.
-
lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
-
lit. f) Processing of personal data to protect our legitimate interests or those of third parties, unless the fundamental rights and freedoms of the data subject override those interests. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.
We process personal data for the period necessary for the respective purpose(s). In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.
Cookies
This website uses cookies. These are small text files that allow us to store specific, user-related information on the user’s device while they are using the website. Cookies make it possible, in particular, to determine the frequency of use and the number of users of the pages, to analyze user behavior patterns, and also to make our website more user-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when the website is visited again. If you do not wish this, you should configure your internet browser to refuse the acceptance of cookies.
A general objection to the use of cookies for online marketing purposes can be declared for many services, especially tracking, via the US website http://www.aboutads.info/choices or the EU website http://www.youronlinechoices.com. Furthermore, the storage of cookies can be prevented by deactivating them in your browser settings. Please note that in this case, not all functions of this website will be available.
With SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential information, such as requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
This data cannot be attributed to specific individuals. This data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of concrete indications of unlawful use.
Third-Party Services
This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.
These services from the American company Google LLC use cookies, among other things, which transfers data to Google in the USA. We assume that no personal tracking occurs in this context simply through the use of our website.
Google has committed to ensuring adequate data protection in accordance with the EU-US and Swiss-US Privacy Shield frameworks.
Further information can be found in Google’s Privacy Policy.
Newsletter
If you wish to receive the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not share it with third parties.
After you have given your consent to the storage of your data, email address and its use for sending the newsletter, you can revoke this consent at any time, for example via the “unsubscribe link” in the newsletter.
Rights of the Data Subject
Right to Confirmation
Every data subject has the right to obtain confirmation from the website operator as to whether or not personal data concerning him or her are being processed. If you wish to exercise this right of confirmation, you may contact the data protection officer at any time.
Right of Access
Every data subject whose personal data are being processed has the right to obtain from the operator of this website, at any time and free of charge, information about the data stored concerning him or her and a copy of this information. Furthermore, information may be provided regarding the following:
- Purposes of the processing
- Categories of personal data processed
- Recipients to whom the personal data have been or will be disclosed
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- The right to lodge a complaint with a supervisory authority
- Where the personal data are not collected from the data subject: Any available information as to their source.
In addition, the data subject has the right to be informed whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If you wish to exercise this right of access, you can contact our data protection officer at any time.
Right to Rectification
Every data subject has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you wish to exercise this right to rectification, you can contact our Data Protection Officer at any time.
Right to Erasure (Right to be Forgotten)
Every individual whose personal data are being processed has the right to request from the controller of this website the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and the processing is no longer necessary:
-
The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. - The data subject withdraws consent on which the processing was based, and there is no other legal basis for the processing.
-
The data subject objects to the processing on grounds relating to his or her particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes and related profiling.
-
The personal data have been unlawfully processed.
-
The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
-
The personal data have been collected in relation to the offer of information society services directly to a child.
If one of the above grounds applies and you wish to have your personal data stored by the operator of this website erased, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the erasure request is complied with immediately.
Right to Restriction of Processing
Every data subject has the right to request from the controller of this website the restriction of processing if one of the following conditions is met:
-
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
-
The processing is unlawful, and the data subject objects to the erasure of the personal data and requests the restriction of its use instead.
-
The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise, or defense of legal claims.
The data subject has objected to processing on grounds relating to his or her particular situation, and it is not yet clear whether the legitimate interests of the controller override those of the data subject.
If one of the aforementioned conditions applies, you can contact our data protection officer at any time to request the restriction of the processing of personal data from the operator of this website. The data protection officer of this website will arrange for the restriction of processing.
Right to Data Portability
Every data subject has the right to receive the personal data concerning him or her in a structured, commonly used, and machine-readable format. Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
To exercise your right to data portability, you can contact the data protection officer appointed by the operator of this website at any time.
Right to Object
Every data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them.
In the event of an objection, the operator of this website will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
To exercise your right to object, you can contact the data protection officer of this website directly.
Right to Withdraw Consent
Every data subject has the right to withdraw their consent to the processing of their personal data at any time.
If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.
Objection to Email Marketing
We hereby object to the use of contact information published as part of our legal notice for sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
Paid Services
To provide paid services, we request additional data, such as payment information, in order to process your order. We store this data in our systems until the statutory retention periods have expired.
Copyright
The copyright and all other rights to the content, images, photos, or other files on this website belong exclusively to the operator of this website or the named copyright holders. Prior written consent from the copyright holders is required for the reproduction of any files.
Anyone who commits copyright infringement without the consent of the respective copyright holders may be liable to prosecution and may, under certain circumstances, claim damages.
Disclaimer
All information on our website has been carefully reviewed. We strive to ensure that the information we provide is current, accurate, and complete. However, errors cannot be entirely ruled out, and therefore we cannot guarantee the completeness, accuracy, or timeliness of the information, including journalistic and editorial content. Liability claims relating to material or immaterial damages caused by the use or non-use of the information provided, or by the use of incorrect or incomplete information, are generally excluded.
The publisher may change or delete texts at its sole discretion and without prior notice and is under no obligation to update the content of this website. Use of or access to this website is at the visitor’s own risk. The publisher, its clients, or partners are not responsible for damages, such as direct, indirect, incidental, or consequential damages, allegedly caused by visiting this website and therefore assume no liability for such damages.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links from this website. The operators of the linked sites are solely responsible for their content. The publisher therefore expressly distances itself from all external content that may be criminally or civilly liable or that violates common decency.
Google Cloud CDN
We use the Google Cloud CDN content delivery network. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google offers a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed through Google’s network. This allows us to improve the global accessibility and performance of our website.
The use of Google Cloud CDN is based on our legitimate interest in providing our website as reliably and securely as possible (Art. 6 para. 1 lit. f GDPR).
Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. You can find details here: https://cloud.google.com/terms/eu-model-contract-clause.
Further information about Google Cloud CDN can be found here: https://cloud.google.com/cdn/docs/overview?hl=de.
Amazon Web Services (AWS)
We use Amazon Web Services (AWS), a web hosting provider, for our website. The service provider is the American company Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.
Amazon processes your data, among other places, in the USA. Amazon is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Amazon also uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Amazon commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj
The Amazon Data Processing Terms (AWS GDPR Data Processing), which correspond to the Standard Contractual Clauses, can be found at https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.
For more information about the data processed through the use of Amazon Web Services (AWS), please see the privacy policy at https://aws.amazon.com/de/privacy/.
Google Maps
This website uses Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google. Further information on the purpose and scope of data collection and processing by Google, as well as further information on your related rights and settings options to protect your privacy, can be found at: https://www.google.de/intl/de/policies/privacy.
Google Ads
This website uses Google Conversion Tracking. If you reached our website via an ad placed by Google, Google Ads will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can refuse the setting of the necessary cookie—for example, by configuring your browser to generally disable the automatic setting of cookies, or by configuring your browser to block cookies from the domain “googleleadservices.com”.
Please note that you must not delete the opt-out cookies as long as you do not want your data to be collected. If you have deleted all your browser cookies, you will need to set the respective opt-out cookie again.
Google Remarketing
This website uses the remarketing function of Google Inc. This function serves to present interest-based advertising to website visitors within the Google advertising network. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these websites, the visitor can be shown advertisements that relate to content that the visitor previously viewed on websites that use Google’s remarketing function.
According to Google, no personal data is collected during this process. However, if you do not wish to use Google’s remarketing function, you can deactivate it by adjusting the corresponding settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
Google reCAPTCHA
This website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”). This query serves to distinguish whether the input is made by a human or by automated, machine processing. The query involves transmitting your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further processed there. However, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. Your data may also be transferred to the USA. For data transfers to the USA, there is an adequacy decision by the European Commission, the “Privacy Shield.” Google participates in the “Privacy Shield” and has committed to its requirements. By submitting the query, you consent to the processing of your data. This processing is based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://policies.google.com/privacy?hl=de
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, the data processing for Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are referred to below as “Google.”
The statistics we gather allow us to improve our website and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out using a user identifier. If you have a Google account, you can deactivate cross-device analysis of your usage in your account settings under “My Data,” “Personal Data.”
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Please note that Google Analytics on this website has been extended with the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. This means that IP addresses are processed in a shortened form so that they cannot be associated with a specific person. Should the data collected about you be attributable to a person, this will be immediately prevented and the personal data will be promptly deleted.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Disable Google Analytics.
You can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will store an opt-out cookie on your device, which prevents the processing of personal data by Google Analytics. Please note that deleting all cookies on your device will also delete these opt-out cookies; that is, you will need to set the opt-out cookies again if you wish to continue preventing this form of data collection. Opt-out cookies are set per browser and computer/device and therefore must be activated separately for each browser, computer or other device.
Google AdSense
We use Google AdSense on this website. This is an advertising program from Google Inc. In Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google AdSense allows us to display ads on this website that are relevant to our topic.
Google AdSense uses cookies to display ads that are relevant to users, to improve campaign performance reports, and to prevent users from seeing the same ads multiple times. Using a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed repeatedly. Furthermore, Google AdSense can use cookie IDs to record conversions associated with ad views. This occurs, for example, when a user sees a Google Ads ad and later visits the advertiser’s website using the same browser and makes a purchase. According to Google, Google Ads cookies do not contain any personally identifiable information.
The marketing tools we use automatically establish a direct connection between your browser and Google’s server. By integrating Google Ads, Google receives information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, Google may still be able to obtain and store your IP address.
You can prevent participation in this tracking process in several ways:
-
by adjusting your browser settings; in particular, blocking third-party cookies will prevent you from receiving advertising from third-party providers;
-
by disabling conversion tracking cookies by configuring your browser to block cookies from the domain https://adssettings.google.com. This setting will be deleted if you clear your cookies;
-
by disabling interest-based advertising from providers participating in the self-regulatory “About Ads” campaign via the link https://www.aboutads.info/choices. This setting will also be deleted if you clear your cookies;
-
by permanently disabling tracking in your Firefox, Internet Explorer, or Google Chrome browser via the link https://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to fully utilize all the features of this service.
The legal basis for processing your data is a balancing of interests, according to which there are no overriding legitimate interests on your part that would preclude the processing of your personal data as described above (Art. 6 para. 1 sentence 1 lit. f GDPR). Further information about Google Ads from Google can be found at https://ads.google.com/intl/de_DE/home/, and about Google’s privacy policy in general at https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.
Google Web Fonts
This website uses web fonts provided by Google for the consistent display of fonts. When you visit a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
Google Tag Manager
Google Tag Manager is a solution that allows us to manage website tags via an interface, enabling us to integrate services such as Google Analytics and other Google marketing services into our website. The Tag Manager itself, which implements the tags, does not process any personal data of users. Regarding the processing of users’ personal data, please refer to the following information about Google services. Terms of Use: https://www.google.com/intl/de/tagmanager/use-policy.html
Our website integrates features of the Instagram service. These features are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that as the provider of this website, we have no knowledge of the content of the data transmitted to Instagram or how Instagram uses it. For more information, please see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/
We use the marketing services of the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”), within our online services.
These services use cookies, which are text files placed on your computer. This allows us to analyze your use of the website. For example, we can measure the success of our advertising and show users products they have previously shown interest in.
Information collected includes, for example, your operating system, browser, the previously visited website (referrer URL), the websites you visited, the offers you clicked on, and the date and time of your visit to our website.
The information generated by the cookie about your use of this website is transmitted to and stored on a LinkedIn server in the USA in pseudonymized form. LinkedIn does not store the name or email address of the respective user. Rather, the aforementioned data is only associated with the person for whom the cookie was created. This does not apply if the user has permitted LinkedIn to process their data without pseudonymization or has a LinkedIn account.
You can refuse the use of cookies by adjusting your browser settings accordingly. However, please note that you may then not be able to use all the functions of this website. You can also object to the use of your data directly with LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics we gather allow us to improve our services and make them more interesting for you as a user. All LinkedIn companies have adopted the Standard Contractual Clauses to ensure that data transfers to the US and Singapore, necessary for the development, implementation, and maintenance of the services, are lawful. When we request user consent, the legal basis for processing is Article 6(1)(a) GDPR. Otherwise, the legal basis for using LinkedIn Analytics is Article 6(1)(f) GDPR.
Third-party provider information: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Terms of Service and Privacy Policy.
External Payment Service Providers
This website uses external payment service providers through whose platforms users and we can process payment transactions. For example, via:
- PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
- Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
- Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
- American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
- PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
- Bexio AG (https://www.bexio.com/de-CH/datenschutz)
- Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
- Apple Pay (https://support.apple.com/de-ch/ht203027)
- Stripe (https://stripe.com/ch/privacy)
- Klarna (https://www.klarna.com/de/datenschutz)
- Skrill (https://www.skrill.com/de/fusszeile/datenschutzpolitik)
- Giropay (https://www.giropay.de/rechts/datenschutzerklaerung) etc.
In order to fulfill our contractual obligations, we use payment service providers based on the Swiss Federal Act on Data Protection and, where necessary, Article 6(1)(b) of the EU General Data Protection Regulation (GDPR). Furthermore, we use external payment service providers based on our legitimate interests under the Swiss Federal Act on Data Protection and, where necessary, Article 6(1)(f) of the EU GDPR to offer our users effective and secure payment options.
The data processed by the payment service providers includes, among other things, master data such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs (transaction authentication numbers) and checksums, as well as contract, amount, and recipient-related information. This information is required to process the transactions. However, the entered data is processed and stored only by the payment service providers. As the operator, we do not receive any information about (bank) accounts or credit cards, but only information confirming (accepting) or rejecting the payment. The payment service providers may transmit the data to credit reference agencies. The purpose of this data transfer is to verify your identity and creditworthiness. In this regard, please refer to the terms and conditions and privacy policies of the payment service providers.
The terms and conditions and privacy policies of the respective payment service providers, which can be accessed on their websites or transaction applications, apply to payment transactions. We also refer you to these for further information and to exercise your rights of withdrawal, access, and other data subject rights.
Sending Newsletters - Mailchimp
Our newsletters are sent via the service provider ‘MailChimp’, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the service provider’s privacy policy here. Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Framework and thus guarantees compliance with European data protection standards (Privacy Shield). The use of this service provider is based on our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR and a data processing agreement pursuant to Art. 28 Para. 3 Sentence 1 GDPR.
The service provider may use recipient data in pseudonymized form, i.e., without linking it to a specific user, to optimize or improve its own services, e.g., for the technical optimization of newsletter delivery and display, or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.
Contractual Services
We process the data of our contractual partners and prospective clients, as well as other clients, customers, or contractual partners (collectively referred to as “contractual partners”), in accordance with the data protection provisions of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR) pursuant to Art. 6 para. 1 lit. b GDPR, in order to provide them with our contractual or pre-contractual services. The data processed in this context, its type, scope, and purpose, as well as the necessity of its processing, arise from the underlying contractual relationship. The processed data includes our contractual partners’ master data (e.g., names and addresses), contact details (e.g., email addresses and telephone numbers), contract data (e.g., services used, contract content, contract communication, names of contact persons), and payment data. We generally do not process special categories of personal data unless they are part of order or contract processing.
We process data that is necessary for establishing and fulfilling contractual obligations and point out the necessity of its disclosure unless this is obvious to the contractual partners. Disclosure to external persons or companies only occurs if required within the scope of a contract. When processing data entrusted to us within the scope of an order, we act in accordance with the instructions of the client and the applicable legal provisions.
When using our online services, we may store the IP address and the time of the respective user action. This storage is based on our [relevant legal provisions/regulations]. The processing of your data is based on our legitimate interests and the interests of users in protection against misuse and other unauthorized use. As a general rule, this data will not be disclosed to third parties unless disclosure is necessary for the enforcement of our claims pursuant to Article 6(1)(f) GDPR or there is a legal obligation to do so pursuant to Article 6(1)(c) GDPR.
Data will be deleted when it is no longer required for the fulfillment of contractual or legal obligations, as well as for the processing of any warranty claims or similar obligations. The necessity of retaining the data is reviewed periodically. Statutory retention periods also apply.
Administration, Accounting, etc.
We process data in accordance with the data protection regulations of the Swiss Confederation (Federal Act on Data Protection, FADP) and the EU GDPR within the scope of administrative tasks, the organization of our business, financial accounting, and the fulfillment of legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The legal bases for this processing are Art. 13 para. 1 FADP, Art. 6 para. 1 lit. c GDPR, and Art. 6 para. 1 lit. f GDPR. Customers, prospective customers, business partners, and website visitors are affected by this processing. The purpose of and our legitimate interest in the processing lies in administration, financial accounting, office organization, and data archiving—i.e., tasks that serve to maintain our business operations, fulfill our obligations, and provide our services. The deletion of data relating to contractual services and contractual communication is carried out in accordance with the data specified in these processing activities.
In this context, we disclose or transmit data to the tax authorities, advisors such as tax consultants or auditors, as well as other fee-collecting agencies and payment service providers.
Furthermore, due to our legitimate business interests, we store information about suppliers, event organizers, and other business partners, for example, for the purpose of future contact. This mostly company-related data is generally stored permanently.
Data Transfer to the USA
Our website uses tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not considered a safe third country under EU data protection law. US companies are obligated to disclose personal data to security authorities without you, as the data subject, having any legal recourse. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no control over these processing activities.
Changes
We may amend this Privacy Policy at any time without prior notice. The current version published on our website applies. If the Privacy Policy is part of an agreement with you, we will inform you of any updates by email or other suitable means.
Disclaimer
The author assumes no liability for the accuracy, completeness, or timeliness of the information provided.
Liability claims against the author for damages of a material or immaterial nature arising from access to or use or non-use of the published information, from misuse of the connection, or from technical malfunctions are excluded.
All offers are subject to change without notice. The author expressly reserves the right to change, supplement, or delete parts of the pages or the entire website without prior notice, or to temporarily or permanently discontinue publication.