We are subject to Swiss data protection law as well as, if applicable, foreign data protection law, in particular that of the European Union (EU) with the General Data Protection Regulation (GDPR). The European Commission acknowledges that Swiss data protection law provides adequate data protection.
Responsible for the processing of personal data:
We would like to point out that there may be other data controllers in individual cases.
We have the following data protection officer as a point of contact for data subjects and as a contact person for supervisory authorities regarding data protection inquiries:
We have the following data protection representative in accordance with Article 27 of the GDPR. The data protection representative serves as an additional point of contact for supervisory authorities and data subjects in the European Union (EU) and the European Economic Area (EEA) regarding inquiries related to the General Data Protection Regulation (GDPR):
VGS Datenschutzpartner UG
Am Kaiserkai 69
Personal data refers to any information relating to an identified or identifiable individual. An data subject is a person about whom personal data is processed.
Processing includes any operation or set of operations performed on personal data, regardless of the means and methods used, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction of personal data.
The European Economic Area (EEA) comprises the member states of the European Union (EU) as well as the Principality of Liechtenstein, Iceland, and Norway. The General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal data.
If and to the extent that the General Data Protection Regulation (GDPR) is applicable, we process personal data based on at least one of the following legal bases:
We process personal data that is necessary to permanently, user-friendly, securely, and reliably carry out our activities and operations. Such personal data may include categories such as inventory and contact information, browser and device data, content data, metadata or marginal data, usage data, location data, sales data, as well as contract and payment data.
We process personal data for the duration that is necessary for the respective purpose(s) or as required by law. Personal data that is no longer necessary for processing will be anonymized or deleted.
We may engage third parties to process personal data. We may process personal data jointly with third parties or disclose it to third parties. Such third parties are particularly specialized service providers whose services we utilize. We ensure data protection with regard to these third parties as well.
We process personal data only with the consent of the data subject, unless the processing is permissible for other legal reasons. Processing without consent may, for example, be permissible for the fulfillment of a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests when processing is apparent from the circumstances, or after prior notification.
In this context, we process, in particular, information that a data subject voluntarily provides to us when contacting us, for example, by postal mail, email, instant messaging, contact form, social media, or telephone, or when registering for a user account. We may store such information, for example, in an address book or with similar tools. If we receive data about other persons, the transmitting individuals are obliged to ensure data protection for these individuals and to ensure the accuracy of this personal data.
Furthermore, we process personal data that we receive from third parties, obtain from publicly accessible sources, or collect during the course of our activities and operations, to the extent permitted by legal reasons.
We process personal data primarily in Switzerland and the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, particularly for processing purposes.
We may export personal data to any country or territory on Earth and beyond, in the Universe, as long as the local laws in accordance with the assessment of the Federal Data Protection and Information Commissioner (FDPIC) or based on the decision of the Swiss Federal Council provide adequate data protection and, where applicable, according to the European Commission's decision, ensure adequate data protection in accordance with the General Data Protection Regulation (GDPR).
We may transfer personal data to countries where the local laws do not provide adequate data protection, provided that data protection is ensured for other reasons, particularly based on standard data protection clauses or other appropriate safeguards. In exceptional cases, we may export personal data to countries without adequate or suitable data protection if the specific data protection requirements are met, such as obtaining explicit consent from the data subjects or a direct connection to the conclusion or performance of a contract. Upon request, we are happy to provide individuals with information about any safeguards or provide a copy of such safeguards.
Data subjects, whose personal data we process, have the rights according to Swiss data protection law. These rights include the right to information as well as the right to rectification, erasure, or blocking of the processed personal data.
Data subjects, whose personal data we process, can, if and to the extent that the General Data Protection Regulation (GDPR) is applicable, request confirmation free of charge as to whether we are processing personal data concerning them. In this case, data subjects can request information about the processing of their personal data, restrict the processing of their personal data, exercise their right to data portability, as well as rectify, erase ("right to be forgotten"), block, or complete their personal data.
Data subjects, whose personal data we process, can, if and to the extent that the GDPR is applicable, revoke their consent given at any time with effect for the future and object to the processing of their personal data at any time.
Data subjects, whose personal data we process, have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
We implement appropriate technical and organizational measures to ensure data security that is appropriate to the respective risks. However, we cannot guarantee absolute data security.
Access to our website is encrypted using transport encryption (SSL/TLS, especially with Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers indicate transport encryption with a padlock symbol in the address bar.
Our digital communication is subject to mass surveillance without cause or suspicion, as well as other forms of surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries, as is the case with all digital communication. We cannot directly influence the corresponding processing of personal data by intelligence agencies, law enforcement agencies, and other security authorities.
Cookies can be stored in the browser temporarily as "session cookies" or for a specific period as so-called persistent cookies. "Session cookies" are automatically deleted when the browser is closed. Persistent cookies have a specific storage duration. Cookies allow, in particular, recognizing a browser on the next visit to our website, enabling us to measure the reach of our website, for example. However, persistent cookies can also be used for online marketing purposes.
For cookies used for measurement of success and reach or for advertising purposes, a general objection ("opt-out") is possible for numerous services through the AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
We may collect the following information for each access to our website if it is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, accessed individual sub-page of our website including transferred data volume, and the previously accessed website in the same browser window (referer or referrer).
We store such information, which can also constitute personal data, in server log files. The information is necessary to provide our website permanently, in a user-friendly and reliable manner, and to ensure data security, in particular, the protection of personal data, even by third parties or with the help of third parties.
We may use tracking pixels, also known as web beacons, on our website. Tracking pixels, including those from third parties whose services we use, are small, usually invisible images that are automatically retrieved when visiting our website. Tracking pixels can capture the same information as server log files.
We send notifications and communications via email and other communication channels such as instant messaging or SMS.
Notifications and communications may contain web links or tracking pixels that capture whether an individual notification was opened and which web links were clicked. Such web links and tracking pixels can also capture the personal usage of notifications and communications. We require this statistical measurement of usage for success and reach measurement in order to effectively and user-friendly send notifications and communications based on the needs and reading habits of recipients, as well as to ensure their long-term, secure, and reliable delivery.
In general, you must expressly consent to the use of your email address and other contact information, unless the use is permissible for other legal reasons. If possible, we use the "double opt-in" procedure for obtaining consent, which means you receive an email with a web link that you must click to confirm, ensuring that no unauthorized third parties can abuse it. We may log such consents, including the internet protocol (IP) address, date, and time, for evidentiary and security purposes.
In general, you can object to receiving notifications and communications, such as newsletters, at any time. By objecting, you can also simultaneously object to the statistical measurement of usage for success and reach measurement. Necessary notifications and communications related to our activities and operations remain reserved.
We send notifications and communications with the help of specialized service providers.
We use the following:
We have a presence on social media platforms and other online platforms to communicate with interested individuals and provide information about our activities and operations. In connection with such platforms, personal data may be processed outside Switzerland and the European Economic Area (EEA).
The terms and conditions, usage policies, privacy policies, and other provisions of each operator of such platforms also apply. These provisions provide information, in particular, about the rights of data subjects directly vis-à-vis the respective platform, including the right to information.
For our Facebook social media presence, including so-called page insights, we are jointly responsible – to the extent that the General Data Protection Regulation (GDPR) is applicable – with Meta Platforms Ireland Limited (Ireland). Meta Platforms Ireland Limited is part of the Meta Companies (including in the USA). Page insights provide information about how visitors interact with our Facebook presence. We use page insights to effectively and user-friendly provide our social media presence on Facebook.
We use services from specialized third parties to conduct our activities and operations in a sustainable, user-friendly, secure, and reliable manner. These services allow us to embed features and content into our website. For such embedding, the utilized services may temporarily collect users' Internet Protocol (IP) addresses for technical reasons.
For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data aggregated, anonymized, or pseudonymized in connection with our activities and operations. This includes performance or usage data to provide the respective service.
We specifically use:
We utilize services from specialized third parties to access the required digital infrastructure in connection with our activities and operations. This includes hosting and storage services from selected providers.
We specifically use:
We recommend muting the microphone by default and blurring the background or using a virtual background, depending on the individual's circumstances during audio or video conferences.
We specifically use:
We use services and plugins from third parties to embed features and content from social media platforms, as well as to enable content sharing on social media platforms and other channels.
We specifically use:
We use services from third parties to embed maps into our website.
We specifically use:
We use services from specialized third parties to enable direct playback of digital audio and video content, such as music or podcasts.
We specifically use:
We utilize the opportunity to display targeted advertisements for our activities and operations through third parties, such as social media platforms and search engines.
With such advertising, we aim to reach individuals who are already interested in or may be interested in our activities and operations (remarketing and targeting). For this purpose, we may transmit relevant – possibly personally identifiable – information to third parties that enable such advertising. Additionally, we may determine whether our advertising is successful, particularly in terms of whether it leads to visits to our website (conversion tracking).
Third parties on which we advertise and where you, as a user, are logged in, may associate the use of our online offering with your respective profile.
We specifically use:
We use extensions for our website to access additional features.
In particular, we use:
We use services and programs to determine how our online offering is used. In this context, we can measure the success and reach of our activities and the impact of third-party links to our website. We may also experiment and compare how different versions of our online offering or parts of our online offering are used (A/B testing method). Based on the results of success and reach measurement, we can fix errors, strengthen popular content, or make improvements to our online offering.
When using services and programs for success and reach measurement, the Internet Protocol (IP) addresses of individual users need to be stored. IP addresses are generally truncated ("IP masking") to follow the principle of data minimization through pseudonymization, thus improving the privacy of users.
When using services and programs for success and reach measurement, cookies may be used, and user profiles may be created. User profiles may include visited pages or viewed content on our website, information about screen size or browser window, and at least approximate location. User profiles are generally created in a pseudonymized form and are not used for identifying individual users. Certain third-party services where users are logged in may associate the usage of our online offerings with their user accounts or profiles.
In particular, we use the following: