Data Privacy Policy

Thank you for visiting our website. In this Policy, we would like to inform you about how we handle your data in accordance with Art. 19 of the Swiss Data Protection Act (DSG) and Art. 13 of the General Data Protection Regulation (GDPR).

CONTROLLER

The Controller for the data processing operations described below is the office named in the imprint.

USAGE DATA

When you visit our website, our web server temporarily evaluates usage data for statistical purposes in order to improve the quality of our website. This data consists of the following data categories:

• the name and address of the requested content,
• the date and time of the query,
• of the transferred data volume,
• the access status (content transferred, content not found),
• the description of the used web browser and operating system,
• the referral link, which indicates from which page you reached ours,
• the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.

The protocol data is only evaluated anonymously.

The legal basis for the processing of usage data is Art. 6 DSG and Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimized display.

DATA SECURITY

In order to protect your data from unwanted access as comprehensively as possible, we take technical and organisational measures. We use an encryption process on our websites. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

NECESSARY COOKIES

On our website, we use cookies which are necessary in order for the site to function.

Cookies are small text files that can be placed on your computer or mobile device by websites that you visit. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

In some cases, these cookies only contain information on certain settings and cannot be linked to a person. They may also be necessary to enable user guidance, security and implementation of the site.

The legal basis for using these cookies is our legitimate interest according to Art. 6 p. 3, p. 5 DSG and Art. 6 para. 1 p. 1 lit. f GDPR.

You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings.

Please note that if you delete certain cookies, our web pages may not be displayed correctly and some functions may no longer be available.

Google Analytics

We use the web analysis tool “Google Analytics”. Google Analytics creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognize returning visitors and count them as such.

As part of the Google Analytics service, Google Ireland Limited supports us as a processor in accordance with Art. 9 DSG and Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). About Google, no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. Please bear this in mind if you decide to give your consent to our use of Google Analytics.

Data processing is based on your consent, provided that you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 14f DSG and Art. 49 para. 1 lit. a GDPR.

You can withdraw your consent at any time. Please make the appropriate settings via our banner.

VISITOR MEASUREMENT

We use web analysis tools to design our websites in line with requirements. These create user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In addition, it is possible that we retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint or your unabridged IP address). In this way, we are able to recognize returning visitors and count them as such.

We also use the following functions as part of visitor measurement:

• We enrich the pseudonymous data with further data provided to us by third-party providers. In this way, we are able to record demographic characteristics of our visitors, e.g. statements on age, gender and place of residence.
• We use a recognition method that allows us to record and subsequently evaluate the mouse pointer movements of our visitors.

Data processing takes place based on your consent, provided that you have given your consent via our banners.

WHICH THIRD-PARTY PROVIDERS DO WE USE IN THIS CONTEXT?

Below we list the third-party providers with whom we work in connection with visitor measurement. If the data is processed outside the EU or the EEA in this context, please note that there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. If we use providers in unsafe third countries and you give your consent, the transfer to a third country is carried out on the basis of Art. 49 para. 1 lit. a GDPR.

 

TRACKING TECHNOLOGIES FROM THIRD-PARTY PROVIDERS FOR ADVERTISING PURPOSES

We use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and we can recognize how effective our advertising measures were.

Data processing takes place on the basis of your consent, provided you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

HOW DOES TRACKING WORK?

When you visit our websites, it is possible that the third-party providers mentioned below may retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint), evaluate your IP address, store or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by third-party providers to recognize your device on other websites. We can commission the relevant third-party providers to place advertisements based on the pages you visit on our website.

WHAT DOES CROSS-DEVICE TRACKING MEAN?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked together. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you are using, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

WHICH THIRD-PARTY PROVIDERS DO WE USE IN THIS CONTEXT?

Below we list the third-party providers with whom we work for advertising purposes. If the data is processed outside the EU or the EEA in this context, please note that there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. If we use providers in unsafe third countries and you give your consent, the transfer to a third country takes place on the basis of Art. 14f. DSG and Art. 49 para. 1 lit. a GDPR.

CONTACT FORM

You may contact us via our contact form. In order to use our contact form, we will require you to provide the data marked as mandatory.

The legal basis for this processing is Art. 6 S. 3, S. 5 DSG and Art. 6 (1) (f) GDPR, being our legitimate interest to respond to your request.

Your data will only be used to process your request. We delete your data if they are no longer required and there are no legal obligations to retain them.

Where the processing of your data is based on legitimate interest in accordance with Art. 6 S.3, S.5 DSG and Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time. To do so, please use the email address provided in the imprint.

EMBEDDED VIDEOS

On our websites, we embed videos that are not hosted on our servers. In order to ensure that accessing our websites containing embedded videos does not automatically lead to the download of third-party content, we only show locally hosted preview images of the videos as a first step. As a result, the third-party provider does not receive any information.

Only after you click on the preview image, is content from the third-party provider downloaded. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose. Furthermore, the third party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to download content from the third-party provider.

The embedding is based on your consent if you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR.

STORAGE PERIOD

Unless otherwise specified, we will delete your personal data if they are no longer required for the relevant processing purposes and no legal retention obligations oppose deletion.

DATA PROCESSORS

We transfer your data to service providers who support us in the operation of our websites and related processes. These service providers are usually data processors within the meaning of Art. 9 DSG and Art. 28 GDPR. Our service providers are strictly bound by contracts and our instructions.

Any processors who may not have been previously disclosed are listed below. If data is transferred outside the EU or the EEA, we will also provide information on the adequate level of data protection.

YOUR RIGHTS AS A DATA SUBJECT

When processing your personal data, the GDPR grants you certain rights as a data subject:

RIGHT OF ACCESS BY THE DATA SUBJECT (ART. 25 DSG and ART. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed of this personal data and to receive the information specified in Art. 25 DSG bzw. Art. 15 GDPR.

RIGHT TO RECTIFICATION (ART. 32 S. 1 DSG and ART. 16 GDPR)

You have the right to rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement without delay.

RIGHT TO ERASURE (ART. 32 S. 2 c. DSG and ART. 17 GDPR)

You have the right to obtain the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17 GDPR applies.

RIGHT TO RESTRICTION OF PROCESSING (ART. 32 S. 2 a. DSG and ART. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of our examination.

RIGHT TO DATA PORTABILITY (ART. 28 S. 2 DSG and ART. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request that this data be transferred to a third party.

RIGHT TO WITHDRAW CONSENT (ART. 7 GDPR)

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

RIGHT TO OBJECT (ART. 37 DSG and ART. 21 GDPR)

If data is collected on the basis of Art. 6 S. 3 DSG and Art. 6 (1) 1 f GDPR (data processing for the purpose of our legitimate interests) or on the basis of Art. 6 (1) 1 e GDPR (data processing for the purpose of protecting public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if data is still needed for the establishment, exercise or defence of legal claims.

ASSERTING YOUR RIGHTS

Unless otherwise described above, please contact us to assert your rights. You will find our contact details in our imprint.

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Our external data protection officer is available to provide further information on data protection.

datenschutz nord GmbH

Konsul-Smidt-Strasse 88

28217 Bremen

Web: www.datenschutz-nord-gruppe.de

E-Mail: office@datenschutz-nord.de

 

When contacting our data protection officer, please specify the name of the company, stated in our imprint.