Privacy Policy

General Note

Based on Article 13 of the Swiss Federal Constitution and federal data protection regulations (Data Protection Act, DPA), every person has the right to the protection of their privacy and to the protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as much as possible from unauthorized access, loss, misuse, or falsification.

We would like to point out that data transmission over the Internet (e.g., when communicating by e-mail) can have security gaps. A complete protection of the data from access by third parties is not possible.

By using this website, you consent to the collection, processing, and use of data according to the following description. This website can generally be visited without registration. In this process, data such as pages viewed or names of the retrieved file, date, and time are stored on the server for statistical purposes without these data being directly related to your person. Personal data, in particular name, address, or e-mail address, are collected as far as possible on a voluntary basis. No transfer of the data to third parties takes place without your consent.

Processing of Personal Data

Personal data are all details relating to a specific or identifiable person. A data subject is a person about whom personal data is processed. Processing includes all handling of personal data, regardless of the means and methods used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Otherwise, we process - as far as and to the extent that the EU GDPR applies - personal data according to the following legal bases in connection with Art. 6 Para. 1 GDPR:

• Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) - The data subject has given their consent to the processing of personal data relating to them for one or more specific purposes.
• Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b GDPR) - The processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation (Art. 6 Para. 1 S. 1 lit. c GDPR) - The processing is necessary for compliance with a legal obligation to which the controller is subject.
• Protection of vital interests (Art. 6 Para. 1 S. 1 lit. d GDPR) - The processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR) - The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
• In the context of the application process as a pre-contractual or contractual relationship (Art. 9 Para. 2 lit. b GDPR) - If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g., health data, such as disability status or ethnic origin) are requested from applicants so that the controller or the data subject can exercise rights arising from employment law and social security and social protection law and fulfill his or her obligations in this regard, their processing is carried out according to Art. 9 Para. 2 lit. b GDPR. In the case of protecting vital interests of applicants or other persons according to Art. 9 Para. 2 lit. c GDPR or for purposes of preventive health care or occupational medicine, for the assessment of the employee's ability to work, for medical diagnosis, for care or treatment in the health or social field or for the management of systems and services in the health or social field according to Art. 9 Para. 2 lit. h GDPR. In the case of voluntary consent-based communication of special categories of data, their processing is based on Art. 9 Para. 2 lit. a GDPR.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer retention obligations due to legal and other obligations to which we are subject, we limit the processing accordingly.

Pertinent Legal Basis

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: 

• The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR.
• The processing of personal data for the performance of our services and the implementation of contractual measures, as well as the response to inquiries, is based on Art. 6 para. 1 lit. b GDPR.
• The processing of personal data to fulfill our legal obligations is based on Art. 6 para. 1 lit. c GDPR.
• The processing of personal data to protect our legitimate interests is based on Art. 6 para. 1 lit. f GDPR.
• In the event that vital interests of the person concerned or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security Measures

In accordance with the legal requirements, taking into account the state of the art, the costs of implementation, and the nature, scope, circumstances, and purposes of processing, as well as the different likelihoods of occurrence and the extent of the threat to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access to, input of, dissemination of, assurance of availability, and separation of the data. Furthermore, we have established procedures that guarantee the exercise of data subject rights, the deletion of data, and the response to data threats. In addition, we already consider the protection of personal data during the development or selection of hardware, software, and processes, in accordance with the principle of data protection, through technology design, and through data protection-friendly presettings.

Transmission of Personal Data

In the course of our processing of personal data, it may happen that the data is transmitted to other bodies, companies, legally independent organizational units, or persons. The recipients of this data may, for example, include service providers entrusted with IT tasks or providers of services and content that are integrated into a website. In these cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

Data Processing in Third Countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transmitting data to other persons, bodies, or companies, this only happens in compliance with legal requirements.

Subject to express consent or contractually or legally required transmission, we process the data only in third countries with a recognized level of data protection, a contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications, or binding internal data protection regulations (Art. 44 to 49 GDPR, Information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en). 

Privacy Policy for Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie is primarily used to store information about a user during or after his visit within an online service. The stored information can include, for example, the language settings on a website, the login status, a shopping cart, or the place where a video was watched. We also include other technologies that perform the same functions as cookies (e.g when user information is stored based on pseudonymous online identifiers, also referred to as "user IDs").

The following types of cookies and functions are distinguished:

• Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online service and closes their browser.
• Persistent cookies: Persistent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. User interests, which are used for measuring reach or marketing purposes, can also be stored in such a cookie.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies: Third-party cookies are primarily used by advertisers (so-called third parties) to process user information.
• Necessary cookies (also known as essential or strictly necessary cookies): Cookies may be absolutely necessary for the operation of a website (e.g., to store log-in or other user input or for security reasons).
• Statistics, marketing, and personalization cookies: Cookies are typically also used for measuring reach and storing user interests or behavior (e.g., viewing certain content, using functions, etc.) in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also known as "tracking," i.e., tracking the potential interests of users. If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or as part of obtaining your consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent. Otherwise, the processing of data using cookies is based on our legitimate interests (e.g., in the efficient operation of our online services and their improvement) or, if the use of cookies is necessary, to fulfill our contractual obligations.

Storage duration: If we do not provide explicit information about the storage duration of permanent cookies (e.g., within the context of a so-called cookie opt-in), please assume that the storage duration can be up to two years.

General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or a legal permission, you have the option at any time to revoke consent or to object to the processing of your data using cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection using the settings of your browser, for example, by disabling the use of cookies (which may also limit the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be raised via a variety of services, especially in the case of tracking, through the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can obtain further objection information as part of the information about the providers used and cookies.

Processing of cookie data based on consent: We use a cookie consent management procedure that allows users to give their consent to the use of cookies or the processing and providers mentioned within the cookie consent management procedure and to manage and revoke their consent. The declaration of consent is stored to avoid having to repeat the query and to be able to provide proof of consent in accordance with legal obligations. The storage may take place server-side and/or in a cookie (so-called opt-in cookie or comparable technologies) to be able to assign the consent to a user or their device. Unless individual information is provided about the providers of cookie management services, the following applies: The storage period of the consent can be up to two years. In this case, a pseudonymous user identifier is created and the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers) as well as the browser, system, and device used are stored.

• Processed data types: Usage data (e.g., visited websites, interest in content, access times), meta/communication data (e.g., device information, IP addresses).
• Data subjects: Users (e.g., website visitors, users of online services).
• Legal bases: Consent (Art. 6(1)(a) GDPR), Legitimate Interests (Art. 6(1)(f) GDPR).

Privacy Policy for SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data Transmission Security (without SSL)

Please note that data transmitted via an open network such as the Internet or an email service without SSL encryption is accessible to everyone. You can recognize an unencrypted connection by the "http://" in the address line of the browser and the absence of a lock symbol in your browser line. Information transmitted online may be transmitted through networks of third parties. We cannot guarantee the confidentiality of messages or documents transmitted via such open networks or third-party networks.

If you disclose personal information over an open network or third-party networks, you should be aware that your data may be lost or accessed by unauthorized parties and, as a result, may be collected and used without your consent. Although individual data packets are often encrypted, the names of the sender and recipient are not. Even if the sender and recipient are located in the same country, data transmission frequently occurs via such networks and also without controls via third countries, i.e., even countries that do not offer the same level of data protection as your country of domicile. We assume no responsibility for the security of your data during transmission over the Internet and disclaim all liability for direct and indirect losses. We recommend using other means of communication if you consider it necessary or reasonable for security reasons.

Despite extensive technical and organizational security measures, data may be lost or intercepted by unauthorized persons or be subject to unauthorized access and/or modification. We take appropriate technical and organizational security measures within our system to prevent this from happening to the extent possible. However, your computer is located outside the security area that is under our control. It is your responsibility as a user to inform yourself about the necessary security precautions and to take appropriate measures. As the website operator, we accept no liability for any damages that may arise from data loss or data manipulation. Data that you enter in online forms may be passed on to authorized third parties for order processing and may be viewed and, if necessary, processed by them.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in server log files that your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Server request time
• IP address of the accessing device
• Request method (e.g., GET, POST, PUT, DELETE)
• Status code of the request (e.g., 200 for success, 404 for not found)
• Transferred data volume or size of the sent data
• User-agent string containing information about the browser, its version, and the operating system
• URL of the requested resource
• Time required to process the request
• Date and time of the request
• Used protocol (e.g., HTTP or HTTPS)
• Error messages or exceptions that occurred during the request

These data cannot be attributed to specific individuals. We do not merge this data with other data sources. We reserve the right to retrospectively check this data if we become aware of concrete indications of unlawful use.

Google Services

Services provided by the American company Google LLC use cookies, among other things, and as a result, data is transferred to Google in the United States. We assume that no personal tracking solely through the use of our website takes place in this context. Google has committed to ensuring adequate data protection in accordance with the EU-U.S. and Swiss-U.S. Privacy Shield. Further information can be found in Google's Privacy Policy.

Privacy Policy for Contact Form

If you contact us via the contact form, your information from the inquiry form, including the contact details you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data to third parties without your consent.

Privacy Policy for Newsletter

If you would like to receive the newsletter offered on this website, we require an email address from you, as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You can revoke your consent to the storage of data, the email address, and their use for sending the newsletter at any time.

Rights of Data Subjects

Right to Confirmation

Every data subject has the right to obtain confirmation from the website operator as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you can contact the data protection officer at any time.

Right to Information

Every data subject affected by the processing of personal data has the right to obtain free information from the website operator at any time according to Art. 15 GDPR about the personal data stored about them and a copy of this information. Furthermore, information can be provided, if applicable, about the following:

• The purposes of processing
• The categories of personal data being processed
• The recipients to whom the personal data has been or will be disclosed
• If possible, the planned duration for which the personal data will be stored, or, if not possible, the criteria used to determine that duration
• The existence of the right to rectification or erasure of personal data concerning them, or restriction of processing by the controller, or the right to object to such processing
• The right to lodge a complaint with a supervisory authority
• If the personal data is not collected from the data subject: all available information about the source of the data

Furthermore, the data subject has the right to obtain information on whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject has the right to be informed about the appropriate safeguards in connection with the transfer. We will inform the data subject of the results of the request no later than one month after receipt of the request. If you wish to exercise this right to information, you can contact our data protection officer at any time.

Right to Rectification

Every data subject affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, considering the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of providing a supplementary statement. If you wish to exercise this right to rectification, you can contact our data protection officer at any time.

Right to Erasure (Right to be Forgotten)

Every data subject affected by the processing of personal data has the right to request the controller of this website to erase the personal data concerning them without undue delay, provided that one of the following grounds applies and the processing is not necessary:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• The data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing.
• The data subject objects to the processing for reasons relating to their particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes, including profiling related to such direct marketing.
• The personal data has been unlawfully processed.
• The erasure of personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data has been collected in relation to the offer of information society services directly to a child.

If any of the above reasons apply, and you wish to have the personal data stored by the controller of this website erased, you may contact our data protection officer at any time. The data protection officer of this website will ensure that the erasure request is complied with promptly.

Right to Restriction of Processing

Every data subject affected by the processing of personal data has the right to request the controller of this website, according to Article 18 of the GDPR, to restrict the processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, and the data subject opposes the erasure of the personal data and requests instead the restriction of their use.
• The controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise, or defense of legal claims.
• The data subject has objected to processing pursuant to Article 21(1) of the GDPR, pending the verification whether the legitimate grounds of the controller override those of the data subject.

If any of the above conditions apply, you may request the restriction of personal data stored by the controller of this website. You can contact our data protection officer at any time. The data protection officer of this website will arrange for the restriction of processing.

Right to Data Portability

Every data subject affected by the processing of personal data has the right to receive the personal data concerning them, which was provided to the controller, in a structured, commonly used, and machine-readable format (e.g., Excel or CSV). They also have the right to transmit this data to another controller, where technically feasible and if it does not adversely affect the rights and freedoms of others. To exercise your right to data portability, you can contact the data protection officer appointed by the controller of this website.

Right to Object

Every data subject affected by the processing of personal data has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them. The controller of this website will no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. To exercise the right to object, you can directly contact the data protection officer of this website.

Right to Withdraw Consent

Every data subject affected by the processing of personal data has the right to withdraw their consent to the processing of their personal data at any time. If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Privacy Policy for Objection to Promotional Emails

The use of contact data published in the context of the imprint obligation for sending unsolicited advertisements and informational materials is hereby objected to. The operators of this website expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

Paid Services

To provide paid services, we may request additional data, such as payment details, in order to fulfill your order or request. We store this data in our systems until the statutory retention periods have expired.

Use of Mapbox

This website uses Mapbox (Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, D.C. 20005, USA) to provide interactive maps. When using Mapbox, your IP address and possibly other information, such as browser information, are transmitted to Mapbox and typically stored on servers in the United States. Mapbox complies with European data protection standards through its certification under the EU-U.S. Privacy Shield.

The use of Mapbox is intended to enhance the visual appeal of our website and facilitate the location search. The data processing is based on Art. 6(1)(f) of the GDPR or, if consent has been obtained, on Art. 6(1)(a) of the GDPR.

For further information on privacy at Mapbox, please visit their privacy policy at: https://www.mapbox.com/privacy/.

Google Ads

This website uses Google Conversion Tracking. If you accessed our website through an advertisement placed by Google, Google Ads will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not expired, we and Google can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Ads customers. The information obtained through the conversion cookie is used to compile conversion statistics for Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can refuse the setting of the required cookie - for example, by changing your browser settings to disable the automatic setting of cookies or by blocking cookies from the domain "googleleadservices.com".

Please note that you must not delete the opt-out cookies as long as you do not wish for measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The function is used to present website visitors within the Google advertising network with interest-based advertisements. A "cookie" is stored in the visitor's browser, which enables the visitor to be recognized when visiting websites that belong to Google's advertising network. On these pages, visitors may be presented with advertisements that refer to content they have previously viewed on websites that use Google's remarketing function.

According to its own statements, Google does not collect any personal data during this process. If you still do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising through the Network Advertising Initiative, following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Use of Friendly Captcha

This website uses Friendly Captcha, an external tool to protect against spam and abuse. Our privacy policy for end users is as follows:

• Collected Information: Friendly Captcha collects data such as request headers (user-agent, origin, referer), puzzle information, widget version, and timestamp. IP addresses are anonymized.
• Processing and Use of Information: Friendly Captcha processes your information lawfully and fairly and uses it to provide its service and ensure the security of our website.
• Disclosure of Information: Friendly Captcha only discloses personal data to its IT service providers and server providers. Friendly Captcha is based in Germany.
• Your Rights: You have the right to access, modify, or delete your personal data.
• Cookies: Friendly Captcha uses cookies for end users.

Use of Plausible Analytics

We use Plausible Analytics on our website to collect anonymous usage data without using cookies or collecting personal data. Our website uses Plausible Analytics to protect the privacy of our visitors while tracking general trends in our website traffic. Plausible Analytics does not collect personal data and does not use cookies. The collected data is strictly aggregated and includes referral sources, top pages, visit duration, as well as device information such as device type, operating system, country, and browser. We use Plausible Analytics to improve the user experience on our website and better understand traffic patterns without compromising the privacy of our visitors. For more information about Plausible Analytics and its privacy policy, please visit their website at: https://plausible.io/privacy

Use of PostHog

We utilize PostHog to collect and analyze anonymous usage data on our website without collecting personal data or using cookies. PostHog is a powerful open-source analytics tool that helps us optimize the user experience on our website, better understand traffic patterns, and analyze the performance of our content, all while safeguarding the privacy of our visitors.

PostHog does not collect personal data such as names, email addresses, or phone numbers, nor does it use cookies or other tracking technologies stored on your device. Instead, PostHog solely collects aggregated and anonymized data, such as technical information about your device (e.g., operating system, browser, screen resolution), visitor information (e.g., visited pages, visit duration, referring page), and usage patterns (e.g., click paths, scrolling behavior).

To ensure data security and privacy in accordance with EU regulations, we store and process this data in PostHog's German data center. PostHog is therefore GDPR-compliant and meets the requirements for protecting personal data.

We have chosen PostHog because it enables us to continuously improve our website and provide a better user experience to our visitors without compromising their privacy. Your anonymized data helps us identify trends and patterns in the usage of our website and make improvements based on that information.

For more information about PostHog and its privacy policy, please visit their website at: https://posthog.com/privacy.

Privacy Policy for Facebook

This website uses plugins from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plugins, a connection is established between your browser and Facebook's servers. Data is already being transferred to Facebook during this process. If you have a Facebook account, this data can be associated with it. If you do not wish for this data to be assigned to your Facebook account, please log out of Facebook before visiting our site. Any interactions with plugins, especially the use of a comment function or clicking on a "Like" or "Share" button, will also be transmitted to Facebook.

Please note that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Privacy Policy for Instagram

On our website, functions of the Instagram service are integrated via a link. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Instagram"). No personal data is transferred from our site to Instagram when you click on the link, unless you are logged into Instagram and use the link. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please refer to Instagram's privacy policy at: http://instagram.com/about/legal/privacy/.

Privacy Policy for LinkedIn

Within our online offering, we use the marketing services of the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, located at Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

These services use cookies, which are text files stored on your computer. This allows us to analyze your use of the website and measure the success of our advertisements, as well as display products to users based on their previous interests.

The collected information may include details about the operating system, browser, previously visited websites (referrer URL), pages visited by the user, offers clicked on by the user, and the date and time of the user's visit to our website.

The information generated by the cookie regarding your use of this website is pseudonymized and transmitted to a LinkedIn server in the United States, where it is stored. LinkedIn does not store the name or email address of the respective user. Instead, the aforementioned data is associated solely with the user who generated the cookie. However, this does not apply if the user allows LinkedIn to process data without pseudonymization or has a LinkedIn account.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, please note that if you do so, you may not be able to fully use all the features of this website. You can also directly object to the use of your data by LinkedIn by visiting: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use LinkedIn Analytics to analyze and improve the use of our website. The statistics obtained help us enhance our offering and make it more interesting for users. All LinkedIn companies have adopted standard contractual clauses to ensure that the necessary data traffic for the development, implementation, and maintenance of the services is conducted lawfully between the USA and Singapore. If we request user consent, the legal basis for processing is Article 6(1)(a) of the GDPR. Otherwise, the legal basis for using LinkedIn Analytics is Article 6(1)(f) of the GDPR.

Third-party information: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; user agreement and privacy policy.

External Payment Service Providers

This website uses external payment service providers through whose platforms users and we can conduct payment transactions. For example:

• Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
• Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
• American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
• PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
• Bexio AG (https://www.bexio.com/de-CH/datenschutz)
• Apple Pay (https://support.apple.com/de-ch/ht203027)
• Stripe (https://stripe.com/ch/privacy)

In the context of fulfilling contracts, we use these payment service providers based on the Swiss Data Protection Ordinance and, where necessary, Article 6(1)(b) of the EU GDPR. In other cases, we use external payment service providers based on our legitimate interests in accordance with the Swiss Data Protection Ordinance and, where necessary, Article 6(1)(f) of the EU GDPR, in order to provide our users with effective and secure payment options.

The data processed by the payment service providers includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related details. This information is required to complete the transactions. However, the data entered is only processed and stored by the payment service providers. As the website operator, we do not receive any information about (bank accounts or credit cards, but only receive information regarding the confirmation (acceptance) or rejection of the payment. In some cases, the data may be transmitted to credit reporting agencies by the payment service providers for the purpose of identity and credit checks. For further information, please refer to the terms and conditions and privacy policies of the respective payment service providers.

The terms and conditions and privacy policies of the respective payment service providers, which are available on their websites or within their transaction applications, apply to payment transactions. We also refer to these for further information and the exercise of revocation, information, and other data subject rights.

Privacy Policy for YouTube

This website may incorporate features of the service "YouTube." "YouTube" is owned by Google Ireland Limited, a company registered and operating under Irish law with its headquarters at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services within the European Economic Area and Switzerland.

Your legal agreement with "YouTube" is governed by the terms and conditions available at the following link: https://www.youtube.com/static?gl=en&template=terms&hl=en. These terms constitute a legally binding agreement between you and "YouTube" regarding the use of the services. The Google Privacy Policy explains how "YouTube" handles your personal data and protects your data when using the service.

Further Service Providers and Partners

We engage a number of service providers or partners to manage or support certain aspects of our business operations on our behalf. Currently, we use the following service providers who process your personal data:

• Google Workspace - Internal data storage and shared workspace
• esignatures.io - Creation of digital contracts and electronic signatures
• Noloco - Streamlined internal data analysis
• mailjet by sinch - Service provider for transactional and marketing emails
• Saleshandy - Service provider for email automation
• cloudflare - Content delivery network
• Heroku - Cloud data hosting
• Amazon Web Services (AWS) - Cloud data hosting
• Lokalise - Translation service provider for the platform
• Github - Open-source repository and internal project management

For detailed information about each partner, please visit their website directly and review their privacy policy.

Contractual Services

We process data of our contractual and business partners, such as customers and prospects (collectively referred to as "contractual partners"), within the scope of contractual and similar legal relationships, as well as related measures and in the context of communication with contractual partners (or pre-contractual), for example, to respond to inquiries.

We process this data to fulfill our contractual obligations, to safeguard our rights, and for the purposes of associated administrative tasks and business organization. We only disclose the data of contractual partners to third parties in accordance with applicable law, to the extent necessary for the aforementioned purposes or to fulfill legal obligations, or with the consent of the individuals concerned (e.g., to telecommunications, transportation, and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities).

We will inform the contractual partners which data is required for the aforementioned purposes prior to or at the time of data collection, for example, in online forms, through special labeling (e.g., colors) or symbols (e.g., asterisks), or personally.

We delete the data after the expiration of statutory warranty and similar obligations, i.e., in principle after 5 years, unless the data is stored in a customer account, for example, as long as it must be retained for legal reasons (e.g., for tax purposes, typically 10 years). Data disclosed to us by contractual partners as part of an order will be deleted in accordance with the specifications of the order, generally after the completion of the order.

If we use third-party providers or platforms to provide our services, the terms and conditions and privacy policies of the respective third-party providers or platforms apply in the relationship between the users and the providers.

Customer Accounts: Within our online offering, contractual partners can create an account (e.g., customer or user account, "customer account"). If the registration of a customer account is necessary, contractual partners will be informed accordingly, as well as about the information required for registration. The customer accounts are not public and cannot be indexed by search engines. In the context of registration, subsequent logins, and use of the customer account, we store the IP addresses of the customers along with the access times to prove the registration and prevent any misuse of the customer account.

If users wish to delete their profiles, the relevant data will be removed, unless legal retention obligations require further storage of the data. It is the responsibility of the users to secure their data before deleting their profiles.

Analytics and Market Research: 

For business reasons and to identify market trends, customer and user preferences, we analyze the data available to us on business transactions, contracts, inquiries, etc., whereby the group of affected individuals may include contractual partners, prospects, customers, visitors, and users of our online offering.

The analyses are carried out for the purpose of business evaluations, marketing, and market research (e.g., to determine customer groups with different characteristics). If available, we may consider the profilesof registered users, including their information on services used, in the analyses. The analyses are solely for our own use and are not disclosed externally unless they are anonymous analyses with aggregated, anonymized values. Furthermore, we respect the privacy of users and process the data for analytical purposes in a pseudonymous and, where possible, anonymous manner (e.g., as aggregated data).

Agency Services: 

We process data of our customers within the scope of our contractual services, which may include conceptual and strategic consulting, campaign planning, software and design development/consulting or maintenance, campaign and process implementation, handling, server administration, data analysis/consulting services, and training services.

Administration, Accounting, Office Organization, Contact Management

We process data in accordance with the data protection regulations of the federal government (Federal Data Protection Act, DPA) and the EU General Data Protection Regulation (GDPR) as part of administrative tasks and the organization of our business, accounting, and compliance with legal obligations, such as archiving. In this context, we process the same data that we process within the scope of providing our contractual services. The legal basis for processing is Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR. Customers, prospects, business partners, and website visitors are affected by the processing. The purpose and our interest in processing lie in the administration, accounting, office organization, archiving of data, i.e., tasks that serve the maintenance of our business activities, the performance of our duties, and the provision of our services. The deletion of data concerning contractual services and the communication related to contractual matters complies with the information provided in relation to these processing activities.

In this context, we disclose or transmit data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee authorities and payment service providers.

Furthermore, based on our legitimate business interests, we store information about suppliers, event organizers, and other business partners, e.g., for future contact. We generally store this predominantly company-related data permanently.

Note on Data Transfer to the USA

Our website integrates tools from companies based in the USA, among others. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to inform you that the USA is not considered a secure third country under EU data protection law. US companies are obligated to disclose personal data to security authorities without the possibility of you, as the data subject, being able to take legal action against it. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no control over these processing activities.

Copyright

The copyrights and all other rights to content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. Written permission from the copyright holder must be obtained in advance for the reproduction of any files. Unauthorized reproduction of copyrighted materials may result in legal consequences and possible claims for damages.

General Disclaimer

All information on our website has been carefully reviewed. We strive to offer current, accurate, and complete information in our content. However, errors cannot be completely ruled out, and therefore we cannot guarantee the completeness, accuracy, and timeliness of information, including journalistic and editorial content. Claims for liability for damages of a material or non-material nature caused by the use of the provided information are excluded, unless there is evidence of willful intent or gross negligence.

The publisher reserves the right to modify or delete texts at its own discretion without prior notice and is not obligated to update the content of this website. The use of or access to this website is at the visitor's own risk. The publisher, its clients, or partners are not responsible for any damages, including direct, indirect, incidental, foreseeable, or consequential damages allegedly caused by visiting this website and assume no liability for them.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked sites are solely responsible for their content. The publisher expressly distances itself from all third-party content that may be of criminal or liability relevance or that violates common decency.

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you about any changes via email or by other appropriate means.

Contacting the Data Protection Officer

If you have any questions regarding data protection, please contact us by email or directly reach out to the responsible person in our organization as stated at the beginning of the privacy policy.

Marc Schwery
maison (Schweiz) GmbH
Kernstrasse 57
8004 Zurich
Monday – Friday: 09:00 – 17:00

Contact details

info@maison-schweiz.com
+41 44 223 11 08