1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to personally identify you. Detailed information on data protection can be found in the Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information About the Controller” in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, information entered into a contact form.
Other data is collected automatically or with your consent when you visit the website through our IT systems. This primarily includes technical data (e.g. internet browser, operating system, or the time of the page visit). This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyse user behaviour.
What rights do you have regarding your data?
You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data.
You also have the right to lodge a complaint with the competent supervisory authority.
If you have any questions regarding data protection or your personal data, you may contact us at any time.
Analytics Tools and Third-Party Services
When visiting this website, your browsing behaviour may be statistically analysed. This is primarily done using analytics programs.
Detailed information about these analytics programs can be found in the Privacy Policy below.
2. Hosting
Amazon Web Services (AWS)
We host the content of our website with the following provider:
Amazon Web Services (AWS)
The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).
When you visit our website, your personal data is processed on AWS servers. Personal data may also be transferred to AWS’s parent company in the United States.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Details can be found here:
https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/
Further information can be found in the AWS Privacy Policy:
https://aws.amazon.com/de/privacy/?nc1=f_pr
The use of AWS is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
AWS is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States.
Every company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at:
Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) with the provider named above.
This is a legally required contract under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is any information that can be used to personally identify you. This Privacy Policy explains what data we collect, how we use it, and for what purpose.
Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information About the Controller
The controller responsible for data processing on this website is:
Markus Hänni
Fabrikstrasse 33
3012 Bern
Switzerland
Email: IE1BSUxgTUFSS1VTSEFFTk5JDkNPTQ@nospam
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Data Retention
Unless a more specific retention period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies.
If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g. tax or commercial law retention periods). In such cases, deletion will take place once those reasons no longer apply.
Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of personal data pursuant to Article 9(1) GDPR are processed.
In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where your data is required for the performance of a contract or the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR.
We also process your data where this is necessary to comply with a legal obligation pursuant to Article 6(1)(c) GDPR.
Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
The specific legal basis applicable in each individual case is explained in the following sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we cooperate with various external parties. In some cases, this requires the transfer of personal data to these external parties.
We only disclose personal data where:
- it is necessary for the performance of a contract;
- we are legally required to do so (e.g. disclosure to tax authorities);
- we have a legitimate interest in disclosure pursuant to Article 6(1)(f) GDPR; or
- another legal basis permits the disclosure.
When using data processors, we transfer personal data only on the basis of a valid Data Processing Agreement (DPA).
In the case of joint processing, a Joint Controller Agreement is concluded.
Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent.
You may withdraw your consent at any time.
The legality of any data processing carried out before the withdrawal remains unaffected.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE RELEVANT LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
This right exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format.
You also have the right to request that such data be transferred directly to another controller where technically feasible.
Right of Access, Rectification, and Erasure
Within the framework of applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of data processing.
You also have the right to request the correction or deletion of such data.
For these and any other questions regarding personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data.
You may contact us at any time to exercise this right.
The right to restriction of processing applies in the following cases:
- If you contest the accuracy of your personal data stored by us, we usually require time to verify this. During the verification period, you have the right to request restriction of processing.
- If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.
- If we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of deletion.
- If you have objected pursuant to Article 21(1) GDPR, a balancing of interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing.
Where the processing of your personal data has been restricted, such data may, apart from being stored, only be processed with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL and TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the change in your browser’s address bar from “http://” to “https://” and by the lock symbol displayed in your browser.
When SSL or TLS encryption is activated, data transmitted to us cannot be read by third parties.
Objection to Promotional Emails
The use of contact information published as part of our legal notice obligations for the purpose of sending unsolicited advertising and information materials is hereby expressly prohibited.
The operators of this website reserve the right to take legal action in the event of the unsolicited sending of advertising information, including spam emails.
4. Data Collection on This Website
Cookies
Our website uses so-called "cookies." Cookies are small data packages that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the integration of certain services provided by third parties within websites (e.g. cookies used for payment processing services).
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not operate without them (e.g. shopping cart functions or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies that are required to carry out electronic communication processes, to provide certain functions requested by the user, or to optimise the website (e.g. cookies used to measure website audience statistics) are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified.
The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services.
Where consent has been requested for the storage of cookies and comparable recognition technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.
You may configure your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies in specific cases or generally, and to activate the automatic deletion of cookies when closing the browser.
Disabling cookies may limit the functionality of this website.
Further information about cookies and services used on this website can be found in this Privacy Policy.
Contact Form
If you send us inquiries via the contact form, the information you provide in the form, including your contact details, will be stored by us for the purpose of processing your inquiry and any follow-up questions.
We will not share this information without your consent.
The processing of this data is based on Article 6(1)(b) GDPR where your request is related to the performance of a contract or necessary for the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.
The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. once your inquiry has been fully processed).
Mandatory legal provisions, particularly statutory retention periods, remain unaffected.
Contact by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (e.g. name and inquiry details), will be stored and processed by us for the purpose of handling your request.
We will not share this information without your consent.
The processing of this data is based on Article 6(1)(b) GDPR where your request is related to the performance of a contract or necessary for the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.
The data you send to us through contact inquiries will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed).
Mandatory legal provisions, particularly statutory retention periods, remain unaffected.
5. Analytics Tools and Advertising
Matomo
This website uses the open-source web analytics service Matomo.
Matomo enables us to collect and analyse data about the use of our website by visitors. This allows us, among other things, to determine when specific page views occurred and from which region they originated.
We also collect various log files (e.g. IP address, referrer, browser used, and operating system) and can measure whether website visitors perform certain actions (e.g. clicks, purchases, or similar activities).
The use of this analytics tool is based on Article 6(1)(f) GDPR.
The website operator has a legitimate interest in analysing user behaviour in order to optimise both the website and related communications.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent may be withdrawn at any time.
IP Anonymisation
We use IP anonymisation when analysing data with Matomo.
Your IP address is shortened before analysis so that it can no longer be clearly attributed to you.
Hosting
We host Matomo exclusively on our own servers.
As a result, all analytics data remains under our control and is not shared with third parties.
6. Plugins and Tools
YouTube with Enhanced Privacy Mode
This website embeds videos from YouTube. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page on this website that contains an embedded YouTube video, a connection to YouTube’s servers is established.
The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, YouTube can directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in Enhanced Privacy Mode.
According to YouTube, videos played in Enhanced Privacy Mode are not used to personalise browsing activity on YouTube. Advertisements displayed in Enhanced Privacy Mode are also not personalised.
No cookies are set in Enhanced Privacy Mode. Instead, so-called local storage elements are stored in the user's browser. These may contain personal data and can be used for recognition purposes in a similar manner to cookies.
Details about Enhanced Privacy Mode can be found here:
https://support.google.com/youtube/answer/171780
Additional data processing operations may be triggered after a YouTube video has been activated, over which we have no control.
The use of YouTube is in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Further information about data protection at YouTube can be found here:
https://policies.google.com/privacy
Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at:
https://www.dataprivacyframework.gov/participant/5780
Google Fonts (Local Hosting)
This website uses Google Fonts for the consistent display of fonts.
The Google Fonts are installed locally. No connection to Google servers is established.
Further information about Google Fonts can be found at:
https://developers.google.com/fonts/faq
Google’s Privacy Policy is available at:
https://policies.google.com/privacy
Google Maps
This website uses the Google Maps mapping service.
The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the United States and stored there.
The operator of this website has no influence over this data transfer.
When Google Maps is activated, Google may use Google Fonts to ensure the consistent display of fonts. When accessing Google Maps, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.
The use of Google Maps is in the interest of presenting our online services attractively and making the locations specified on our website easy to find.
This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Details regarding data transfers to the United States can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
Further information about Google's handling of user data can be found here:
https://policies.google.com/privacy
Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google reCAPTCHA
This website uses Google reCAPTCHA ("reCAPTCHA").
The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether data entered on this website (e.g. in a contact form) is entered by a human or by an automated program.
For this purpose, reCAPTCHA analyses the behaviour of website visitors based on various characteristics. This analysis begins automatically as soon as the visitor enters the website.
reCAPTCHA evaluates various types of information, including:
- IP address
- time spent on the website
- mouse movements made by the user
The data collected during the analysis is transmitted to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.
Google acts solely as a data processor within the meaning of Article 28 GDPR and will not use the collected data for its own purposes.
The use of reCAPTCHA is based on a Data Processing Agreement (DPA) concluded with Google.
The storage and analysis of data are based on Article 6(1)(f) GDPR.
The website operator has a legitimate interest in protecting its online services against abusive automated surveillance and spam.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at:
https://www.dataprivacyframework.gov/participant/5780
Source
Privacy Policy generated with the assistance of the eRecht24 Privacy Policy Generator.
