Data protection declaration

With this Data protection declaration We inform you about the processing of personal data in connection with our Activities and activities including ours Website under the domain name captnandis.ch. We inform in particular about what, how and where we process personal data. We also inform about the rights of individuals whose data we process.

For individual or additional activities and operations, we may publish additional data protection statements or other information regarding data protection.

 

1. Contact addresses

Responsibility for the processing of personal data:

Andreas Rieser
Old Landstrasse 91
8803 Rüschlikon

andreas.rieser@upwind-sailing.ch

In individual cases, third parties may be responsible for processing personal data, or there may be joint responsibility with third parties.

Data protection consultant or data protection consultant

We have the following data protection advisor or the following data protection advisor as a point of contact for affected individuals and authorities in cases of requests related to data protection:

Andreas Rieser
Old Landstrasse 91
8803 Rüschlikon

andreas.rieser@upwind-sailing.ch

 

2. Terms and legal basis

2.1 Terms

Affected person: Natural person about whom we process personal data.

Personal data: All Information that relates to a specific or determinable natural person.

Especially sensitive personal data: Data on occupational, political, religious or philosophical views and activities, data on health, the intimate sphere or belonging to an ethnicity or race, genetic data, biometric data that uniquely identify a natural person, data on criminal and administrative sanctions or prosecutions, and data on social assistance measures.

Edit: Everyone Handling of personal data, independent of the means and procedures applied, such as querying, reconciling, adjusting, archiving, storing, reading, disclosing, acquiring, capturing, collecting, deleting, disclosing, organizing, storing, modifying, disseminating, linking, destroying and using personal data.

2.2 Legal basis

We process personal data in accordance with Swiss data protection law, such as the Data Protection Act. Federal law on data protection (Data Protection Act, DSG) and the Regulation on data protection (Data Protection Regulation, DSV).

 

3. Nature, scope and purpose of the processing of personal data

We process the personal data of those required in order to be able to carry out our activities and operations in a permanent, humane, safe and reliable manner. The processed personal data may, in particular, fall into the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data and payment data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities and operations, insofar as such processing is permitted for legal reasons.

We process personal data, if necessary, with the consent of the persons concerned. In many cases, we can process personal data without consent, for example to fulfill legal obligations or to safeguard overriding interests. We can also ask affected persons for their consent if their consent is not required.

We process personal data for the Duration, Data that is required for the respective purpose. We anonymize or delete personal data, in particular in accordance with legal retention and statute of limitations periods.

 

4. Disclosure of personal data

We can process personal data to disclose to third parties, Have them edited by third parties or edited jointly with third parties. Such third parties are in particular specialized providers whose services we utilize.

We may disclose personal data to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies and insurance companies.

 

5. Communication

We process personal data in order to communicate with individual persons as well as with authorities, organizations, and companies. In doing so, we process in particular data that an affected person provides to us for contact purposes, for example by postal mail or email. We can store such data in an address book or with comparable means.

Third parties that provide us with data about other individuals are obliged to independently ensure the data protection of these individuals concerned. In particular, they must ensure that such data is correct and may be transmitted.

 

6. Data security

We take appropriate technical and organizational measures to ensure data security that is appropriate to the respective risk. With our measures, we in particular ensure the confidentiality, availability, traceability, and integrity of the processed personal data, without, however, being able to guarantee absolute data security.

Access to our website and our other online presence is provided using transport encryption (SSL / TLS, In particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting websites without transport encryption.

Our digital communication is subject to – as Basically Any digital communication – mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries. We cannot have any direct influence on the corresponding processing of personal data by intelligence services, police departments, and other security authorities. We cannot rule out the possibility that an affected person is being targeted for surveillance.

 

7. Personal data abroad

We process personal data Basically in Switzerland. However, we may disclose or export personal data to other countries as well, especially to process or have it processed there.

We can process personal data in all States on Earth and elsewhere in Universum to be disclosed, insofar as the local law so requires Decision of the Swiss Federal Council ensures appropriate data protection.

We may disclose personal data to states whose laws do not provide adequate data protection, provided that there are other reasons for providing adequate data protection, particularly on the basis of standard data protection clauses or with other appropriate guarantees. By way of exception, we may export personal data to states without adequate or suitable data protection if the special data protection requirements are met, for example the explicit consent of the affected persons or a direct connection to the conclusion or execution of a contract. We are happy to provide information on any guarantees upon request or provide a copy of the guarantees.

 

8. Rights of affected persons

8.1 Data protection legal claims

We grant affected persons all rights under applicable data protection law. Affected persons have in particular the following rights:

• Information: Affected persons may request information as to whether we process personal data about them, and if so, what personal data it concerns. Affected persons will also receive the information necessary to assert their data protection rights and to ensure transparency. This includes the processed personal data as such, but also, among other things, information about the processing purpose, the duration of storage, any disclosure or export of data to other countries, and the origin of the personal data.
• Correction and restriction: Affected individuals can correct inaccurate personal data, complete incomplete data, and restrict the processing of their data.
• Deletion and objection: Affected individuals can have their personal data deleted («right to be forgotten») and object to the processing of their data with effect for the future.
• Data output and data transmission: Affected persons may request the disclosure of personal data or the transfer of their data to another responsible party.

We may defer, restrict, or refuse the exercise of the rights of affected persons within the legally permissible framework. We may at all events inform affected persons of the prerequisites for the exercise of their data protection rights. For example, we may refuse the disclosure entirely or partially, citing confidentiality obligations, overriding interests, or the protection of other persons. For example, we may also refuse the deletion of personal data, in particular with reference to legal retention obligations, in whole or in part.

We can exercise the rights exceptionally Provide costs. We inform concerned parties in advance about any potential costs.

We are obliged to identify the affected persons who request information or exercise other rights by taking appropriate measures. The affected persons are required to cooperate.

 

8.2 Legal protection

Affected individuals have the right to enforce their data protection rights through the legal process or to file a complaint with a data protection supervisory authority.

The data protection supervisory authority for private individuals and federal bodies in Switzerland is the Federal Data Protection and Public Relations Commissioner (EDÖB).

 

9. Use of the Website

9.1 Cookies

We may use cookies. Cookies – both our own cookies (first-party cookies) and cookies from third parties whose services we use (third-party cookies) – are data that are stored in the browser. Such stored data does not have to be limited to traditional text-based cookies.

Cookies can be temporarily stored in the browser as «session cookies» or for a specific period as so-called permanent cookies. «Session cookies» are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. Cookies enable, in particular, a browser to be recognized upon the next visit to our website and thereby, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.

Cookies can be completely or partially disabled and deleted at any time in the browser settings. Without cookies, our website may no longer be fully available. We request – at least where necessary – the express consent to the use of cookies.

For cookies that are used for success and reach measurement or for advertising, a general opt-out mechanism is available for numerous services. AdChoices (Digital Advertising Alliance of Canada), which Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

9.2 Recording

We can log the following information for every access to our website and our other online presence, provided that this is transmitted to our digital infrastructure during such access: Date and time, including time zone, IP address, Access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed including amount of data transferred, last visited website accessed in the same browser window (referrer or referrer).

We log such information, which may also constitute personal data, in log files. The information is necessary to be able to provide our online presence permanently, in a user-friendly and reliable manner. The information is also necessary to ensure data security – also by third parties or with the help of third parties.

9.3 counting pixels

We can integrate tracking pixels into our online presence. Tracking pixels are also referred to as web beacons. Tracking pixels – from third parties whose services we use – are usually small, non-visible images or JavaScript-formatted scripts that are automatically retrieved when accessing our online presence. Tracking pixels can capture at least the same information as in log files.

 

10. Social Media

We are present on social media platforms and other online platforms to communicate with interested parties and to inform them about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.

The General Terms and Conditions (AGB) and Terms of Use, as well as the privacy policies and other regulations of the individual operators of such platforms, also apply in each case. These regulations inform in particular about the rights of individuals directly with respect to the respective platform, including, for example, the right to information.

 

11. Services from third parties

We use services from specialized third parties to be able to carry out our activities and operations in a permanent, humane, safe, and reliable manner. With these services, we can, among other things, embed functions and content into our website. When such embedding occurs, the services used collect at least temporary data for technically necessary reasons. IP addresses the users.

For necessary security-related, statistical and technical purposes, third parties whose services we use may aggregate and process data related to our activities and operations in an aggregated, anonymized or pseudonymized manner. This includes, for example, performance or usage data to enable the respective service to be offered.

We use in particular:

• Google services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) partly for users in the European Economic Area (EEA) and in Switzerland; General information on data protection: «Principles on data protection and security», «More information on how Google uses personal data», Data protection declaration, «Google is obliged to comply with applicable data protection laws», «Guidelines for data protection in Google products», «How we use data from websites or apps where our services are used», «Types of cookies and similar technologies that Google uses», «Advertising that you have influence over» («Personalized advertising»).
• Microsoft services: Providers: Micro­soft Ireland Operations Limited (Ireland) for users in the European Economic Area (EEA), Switzerland and the United Kingdom / Micro­soft Corporation (USA) for users in the rest of the world; General information on data protection: «Data protection at Microsoft», «Data protection and privacy», Data protection declaration, «Data and data protection settings».

11.1 Digital infrastructure

We use the services of specialized third parties to access the necessary digital infrastructure related to our activities and operations. These include, for example, hosting and storage services from selected providers.

We use in particular:

• Cyon: Hosting; Provider: cyon GmbH (Switzerland); Data protection information: «Data protection», Privacy policy.
• Google Cloud including Google Cloud Platform (GCP): Storage space and other infrastructure; Google Cloud-specific providers: National or regional Google communities depending on the country and region; Google Cloud-specific information: «Data Protection Center», «Google Cloud and general data protection principles», «Google Cloud Data Protection Guidelines», «Data protection».
• Dropbox Cloud storage service; Provider: Dropbox International Unlimited Company; Privacy policy: «Data protection».
• WordPress.com: Blog hosting and website building tools; providers: Automattic Inc. (USA) / Aut O’Mattic A8C Ireland Ltd. (Ireland) for users in Europe, among others; information on data protection: Data protection declaration, Cookie policy.

11.2 Scheduling

We use services from specialized third parties to make it possible to schedule appointments online, for example for meetings. In addition to this privacy policy, any applicable terms and conditions of the services used, such as terms of use or privacy statements, are also made visible in each case.

We use in particular:

• Google Calendar: Online appointment scheduling; Provider: Google; Google Calendar-specific information: «Scheduling with Google Calendar», «Data protection in Google Calendar».

11.3 Audio and video conferences

We use specialized services for audio and video conferencing to communicate online. This allows us, for example, to hold virtual meetings or conduct online teaching and webinars. In addition, the legal texts of the individual services, such as privacy statements and terms of use, apply to participation in audio and video conferencing.

We recommend that, depending on your personal situation, when participating in audio or video conferences, you turn the microphone off by default, blur the background, or have a virtual background displayed.

We use in particular:

• Google Meet: Video conferences; Provider: Google; Google Meet-specific information: «Google Meet – Security and Privacy for Users».
• Zoom: Platform for collaborative work, especially with video conferencing; Provider: Zoom Video Communications Inc. (USA); Privacy information: «Data protection at Zoom», Privacy policy, «Legal compliance».

11.4 Social Media Features and Social Media Content

We use services and plugins from third parties to enable the embedding of functions and content from social media platforms and to enable the sharing of content on social media platforms and in other ways.

We use in particular:

• Facebook (Social Plugins): Embedding of Facebook features and Facebook content, for example «Like» or «Share»; providers: Meta Platforms Ireland Limited (Ireland) and Other Meta companies (among others in the USA); Information on data protection: Privacy policy.
• Instagram platform: Embedding of Instagram content; providers: Meta Platforms Ireland Limited (Ireland) and Other Meta companies (among others in the USA); Information on data protection: Privacy policy (Instagram), Data protection policy (Facebook).

11.5 Card material

We use services from third parties to be able to embed maps on our website.

We use in particular:

• Google Maps including Google Maps Platform: Map service; Provider: Google; Google Maps-specific information: «How Google uses location information».

11.6 Digital content

We use services from specialized third parties to be able to integrate digital content into our website. Digital content includes, in particular, image and video material, music, and podcasts.

We use in particular:

• YouTube: Video platform; Provider: Google; YouTube-specific information: «Data protection and security center», «My data on YouTube».

11.7 Documents

We use services from third parties to be able to include documents on our website. Such documents can include PDF files, presentations, tables, and text documents. This allows us not only to view them but also to edit or comment on them.

We use in particular:

• Microsoft 365: Text documents, presentations and tables; Provider: Microsoft; Microsoft 365-specific information: «Datenschutz und Sicherheit mit Microsoft 365».

11.8 Werbung

Wir nutzen die Möglichkeit, gezielt Werbung bei Dritten wie beispielsweise Social Media-Plattformen und Suchmaschinen für unsere Aktivitäten und Tätigkeiten anzeigen zu lassen.

Wir möchten mit solcher Werbung insbesondere Personen erreichen, die sich für unsere Aktivitäten und Tätigkeiten bereits interessieren oder sich dafür interessieren könnten (Remarketing and Targeting). Dafür können wir entsprechende – allenfalls auch personenbezogene – Angaben an Dritte, die solche Werbung ermöglichen, übermitteln. Wir können ausserdem feststellen, ob unsere Werbung erfolgreich ist, das heisst insbesondere, ob sie zu Besuchen auf unserer Website führt (Conversion Tracking).

Dritte, bei denen wir werben und bei denen Sie als Nutzerin oder Nutzer angemeldet sind, können die Nutzung unserer Website allenfalls Ihrem dortigen Profil zuordnen.

We use in particular:

• Google Ads: Suchmaschinen-Werbung; Anbieterin: Google; Google Ads-spezifische Angaben: Werbung unter anderem aufgrund von Suchanfragen, wobei verschiedene Domain­namen – insbesondere double­click.net, google­adservices.com und google­syndication.com – für Google Ads verwendet werden, Datenschutzerklärung für Werbung, «Eingeblendete Werbung direkt über Anzeigen verwalten».
• Meta-Werbeanzeigen (Meta Ads): Social Media-Werbung bei Facebook und Instagram; Anbieterinnen: Meta Platforms Ireland Limited (Irland) und Other Meta companies (unter anderem in den USA); Angaben zum Datenschutz: Targeting, auch Retargeting, insbesondere mit dem Meta-Pixel und mit Custom Audiences including Lookalike Audiences, Privacy policy, «Werbepräferenzen» (Anmeldung als Nutzerin oder Nutzer erforderlich).

12. Erweiterungen für die Website

Wir verwenden Erweiterungen für unsere Website, um zusätzliche Funktionen nutzen zu können. Wir können ausgewählte Dienste von geeigneten Anbietern nutzen oder solche Erweiterungen auf eigener digitaler Infrastruktur verwenden.

Wir verwenden insbesondere:

• Google reCAPTCHA: Spam­schutz (Unter­scheidung zwischen er­wünsch­ten Inhalten von Men­schen sowie u­nerwün­schten Inhalten von Bots und Spam); An­biete­rin: Google; Google reCAPTCHA-spezifische Angaben: «Was ist reCAPTCHA?».

13. Erfolgs- und Reichweiten­messung

Wir versuchen, den Erfolg und die Reich­weite unserer Aktivitäten und Tätig­keiten zu messen. In diesem Rahmen können wir auch die Wirkung von Hinweisen Dritter messen oder prüfen, wie unter­schiedliche Teile oder Versionen unseres Online-Angebots genutzt werden («A/B-Test»-Methode). Wir können aufgrund der Ergebnisse der Erfolgs- und Reichweiten­messung insbesondere Fehler beheben, beliebte Inhalte stärken oder Verbesserungen vornehmen.

Für die Erfolgs- und Reichweiten­messung werden in den meisten Fällen die IP addresses von einzelnen Nutzerinnen und Nutzern erfasst. IP-Adressen werden in diesem Fall Basically gekürzt («IP-Masking»), um durch die entsprechende Pseudo­nymisierung dem Grundsatz der Daten­sparsamkeit zu folgen.

Bei der Erfolgs- und Reichweiten­messung können Cookies zum Einsatz kommen und Nutzer­profile erstellt werden. Allenfalls erstellte Nutzer­profile umfassen beispiels­weise die besuchten einzelnen Seiten oder betrachteten Inhalte auf unserer Website, Angaben zur Grösse des Bild­schirms oder des Browser-Fensters und den – zumindest ungefähren – Standort. Grundsätzlich werden allfällige Nutzer­profile ausschliesslich pseudo­nymisiert erstellt und nicht für die Identi­fizierung einzelner Nutzerinnen und Nutzer verwendet. Einzelne Dienste von Dritten, bei denen Nutzerinnen oder Nutzer angemeldet sind, können die Nutzung unseres Online-Angebotes allenfalls dem Nutzerkonto oder Nutzerprofil beim jeweiligen Dienst zuordnen.

We use in particular:

• Google Marketing Platform: Erfolgs- und Reich­weiten­messung, insbesondere mit Google Analytics; Anbieterin: Google; Google Marketing Platform-spezifische Angaben: Messung auch über verschiedene Browser und Geräte hinweg (Cross-Device Tracking) mit pseudonymisierten IP-Adressen, die nur ausnahmsweise vollständig an Google in den USA übertragen werden, Daten­schutz­erklärung für Google Analytics, «Browser Add-on zur Deaktivierung von Google Analytics».
• Google Tag Manager: Einbindung und Verwaltung von Diensten von Google und Dritten, insbesondere für die Erfolgs- und Reich­weiten­messung; Anbieterin: Google; Google Tag Manager-spezifische Angaben: Daten­schutz­erklärung für Google Tag Manager; weitere Angaben zum Daten­schutz finden sich bei den einzelnen eingebundenen und verwalteten Diensten.

14. Abschliessende Hinweise zur Daten­schutz­erklärung

Wir haben diese Daten­schutz­erklärung mit dem Daten­schutz-Generator von Daten­schutz­partner erstellt.

Wir können diese Daten­schutz­erklärung jederzeit aktualisieren. Wir informieren über Aktualisierungen in geeigneter Form, insbesondere durch die Veröffentlichung der jeweils aktuellen Daten­schutz­erklärung auf unserer Website.

Data protection declaration

With this Data protection declaration We inform you about the processing of personal data in connection with our Activities and activities including ours Website under the domain name captnandis.ch. We inform in particular about what, how and where we process personal data. We also inform about the rights of individuals whose data we process.

For individual or additional activities and operations, we may publish additional data protection statements or other information regarding data protection.

 

1. Contact addresses

Responsibility for the processing of personal data:

Andreas Rieser
Old Landstrasse 91
8803 Rüschlikon

andreas.rieser@upwind-sailing.ch

In individual cases, third parties may be responsible for processing personal data, or there may be joint responsibility with third parties.

Data protection consultant or data protection consultant

We have the following data protection advisor or the following data protection advisor as a point of contact for affected individuals and authorities in cases of requests related to data protection:

Andreas Rieser
Old Landstrasse 91
8803 Rüschlikon

andreas.rieser@upwind-sailing.ch

 

2. Terms and legal basis

2.1 Terms

Affected person: Natural person about whom we process personal data.

Personal data: All Information that relates to a specific or determinable natural person.

Especially sensitive personal data: Data on occupational, political, religious or philosophical views and activities, data on health, the intimate sphere or belonging to an ethnicity or race, genetic data, biometric data that uniquely identify a natural person, data on criminal and administrative sanctions or prosecutions, and data on social assistance measures.

Edit: Everyone Handling of personal data, independent of the means and procedures applied, such as querying, reconciling, adjusting, archiving, storing, reading, disclosing, acquiring, capturing, collecting, deleting, disclosing, organizing, storing, modifying, disseminating, linking, destroying and using personal data.

2.2 Legal basis

We process personal data in accordance with Swiss data protection law, such as the Data Protection Act. Federal law on data protection (Data Protection Act, DSG) and the Regulation on data protection (Data Protection Regulation, DSV).

 

3. Nature, scope and purpose of the processing of personal data

We process the personal data of those required in order to be able to carry out our activities and operations in a permanent, humane, safe and reliable manner. The processed personal data may, in particular, fall into the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data and payment data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities and operations, insofar as such processing is permitted for legal reasons.

We process personal data, if necessary, with the consent of the persons concerned. In many cases, we can process personal data without consent, for example to fulfill legal obligations or to safeguard overriding interests. We can also ask affected persons for their consent if their consent is not required.

We process personal data for the Duration, Data that is required for the respective purpose. We anonymize or delete personal data, in particular in accordance with legal retention and statute of limitations periods.

 

4. Disclosure of personal data

We can process personal data to disclose to third parties, Have them edited by third parties or edited jointly with third parties. Such third parties are in particular specialized providers whose services we utilize.

We may disclose personal data to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies and insurance companies.

 

5. Communication

We process personal data in order to communicate with individual persons as well as with authorities, organizations, and companies. In doing so, we process in particular data that an affected person provides to us for contact purposes, for example by postal mail or email. We can store such data in an address book or with comparable means.

Third parties that provide us with data about other individuals are obliged to independently ensure the data protection of these individuals concerned. In particular, they must ensure that such data is correct and may be transmitted.

 

6. Data security

We take appropriate technical and organizational measures to ensure data security that is appropriate to the respective risk. With our measures, we in particular ensure the confidentiality, availability, traceability, and integrity of the processed personal data, without, however, being able to guarantee absolute data security.

Access to our website and our other online presence is provided using transport encryption (SSL / TLS, In particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers warn against visiting websites without transport encryption.

Our digital communication is subject to – as Basically Any digital communication – mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries. We cannot have any direct influence on the corresponding processing of personal data by intelligence services, police departments, and other security authorities. We cannot rule out the possibility that an affected person is being targeted for surveillance.

 

7. Personal data abroad

We process personal data Basically in Switzerland. However, we may disclose or export personal data to other countries as well, especially to process or have it processed there.

We can process personal data in all States on Earth and elsewhere in Universum to be disclosed, insofar as the local law so requires Decision of the Swiss Federal Council ensures appropriate data protection.

We may disclose personal data to states whose laws do not provide adequate data protection, provided that there are other reasons for providing adequate data protection, particularly on the basis of standard data protection clauses or with other appropriate guarantees. By way of exception, we may export personal data to states without adequate or suitable data protection if the special data protection requirements are met, for example the explicit consent of the affected persons or a direct connection to the conclusion or execution of a contract. We are happy to provide information on any guarantees upon request or provide a copy of the guarantees.

 

8. Rights of affected persons

8.1 Data protection legal claims

We grant affected persons all rights under applicable data protection law. Affected persons have in particular the following rights:

• Information: Affected persons may request information as to whether we process personal data about them, and if so, what personal data it concerns. Affected persons will also receive the information necessary to assert their data protection rights and to ensure transparency. This includes the processed personal data as such, but also, among other things, information about the processing purpose, the duration of storage, any disclosure or export of data to other countries, and the origin of the personal data.
• Correction and restriction: Affected individuals can correct inaccurate personal data, complete incomplete data, and restrict the processing of their data.
• Deletion and objection: Affected individuals can have their personal data deleted («right to be forgotten») and object to the processing of their data with effect for the future.
• Data output and data transmission: Affected persons may request the disclosure of personal data or the transfer of their data to another responsible party.

We may defer, restrict, or refuse the exercise of the rights of affected persons within the legally permissible framework. We may at all events inform affected persons of the prerequisites for the exercise of their data protection rights. For example, we may refuse the disclosure entirely or partially, citing confidentiality obligations, overriding interests, or the protection of other persons. For example, we may also refuse the deletion of personal data, in particular with reference to legal retention obligations, in whole or in part.

We can exercise the rights exceptionally Provide costs. We inform concerned parties in advance about any potential costs.

We are obliged to identify the affected persons who request information or exercise other rights by taking appropriate measures. The affected persons are required to cooperate.

 

8.2 Legal protection

Affected individuals have the right to enforce their data protection rights through the legal process or to file a complaint with a data protection supervisory authority.

The data protection supervisory authority for private individuals and federal bodies in Switzerland is the Federal Data Protection and Public Relations Commissioner (EDÖB).

 

9. Use of the Website

9.1 Cookies

We may use cookies. Cookies – both our own cookies (first-party cookies) and cookies from third parties whose services we use (third-party cookies) – are data that are stored in the browser. Such stored data does not have to be limited to traditional text-based cookies.

Cookies can be temporarily stored in the browser as «session cookies» or for a specific period as so-called permanent cookies. «Session cookies» are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. Cookies enable, in particular, a browser to be recognized upon the next visit to our website and thereby, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.

Cookies can be completely or partially disabled and deleted at any time in the browser settings. Without cookies, our website may no longer be fully available. We request – at least where necessary – the express consent to the use of cookies.

For cookies that are used for success and reach measurement or for advertising, a general opt-out mechanism is available for numerous services. AdChoices (Digital Advertising Alliance of Canada), which Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

9.2 Recording

We can log the following information for every access to our website and our other online presence, provided that this is transmitted to our digital infrastructure during such access: Date and time, including time zone, IP address, Access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-page of our website accessed including amount of data transferred, last visited website accessed in the same browser window (referrer or referrer).

We log such information, which may also constitute personal data, in log files. The information is necessary to be able to provide our online presence permanently, in a user-friendly and reliable manner. The information is also necessary to ensure data security – also by third parties or with the help of third parties.

9.3 counting pixels

We can integrate tracking pixels into our online presence. Tracking pixels are also referred to as web beacons. Tracking pixels – from third parties whose services we use – are usually small, non-visible images or JavaScript-formatted scripts that are automatically retrieved when accessing our online presence. Tracking pixels can capture at least the same information as in log files.

 

10. Social Media

We are present on social media platforms and other online platforms to communicate with interested parties and to inform them about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.

The General Terms and Conditions (AGB) and Terms of Use, as well as the privacy policies and other regulations of the individual operators of such platforms, also apply in each case. These regulations inform in particular about the rights of individuals directly with respect to the respective platform, including, for example, the right to information.

 

11. Services from third parties

We use services from specialized third parties to be able to carry out our activities and operations in a permanent, humane, safe, and reliable manner. With these services, we can, among other things, embed functions and content into our website. When such embedding occurs, the services used collect at least temporary data for technically necessary reasons. IP addresses the users.

For necessary security-related, statistical and technical purposes, third parties whose services we use may aggregate and process data related to our activities and operations in an aggregated, anonymized or pseudonymized manner. This includes, for example, performance or usage data to enable the respective service to be offered.

We use in particular:

• Google services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) partly for users in the European Economic Area (EEA) and in Switzerland; General information on data protection: «Principles on data protection and security», «More information on how Google uses personal data», Data protection declaration, «Google is obliged to comply with applicable data protection laws», «Guidelines for data protection in Google products», «How we use data from websites or apps where our services are used», «Types of cookies and similar technologies that Google uses», «Advertising that you have influence over» («Personalized advertising»).
• Microsoft services: Providers: Micro­soft Ireland Operations Limited (Ireland) for users in the European Economic Area (EEA), Switzerland and the United Kingdom / Micro­soft Corporation (USA) for users in the rest of the world; General information on data protection: «Data protection at Microsoft», «Data protection and privacy», Data protection declaration, «Data and data protection settings».

11.1 Digital infrastructure

We use the services of specialized third parties to access the necessary digital infrastructure related to our activities and operations. These include, for example, hosting and storage services from selected providers.

We use in particular:

• Cyon: Hosting; Provider: cyon GmbH (Switzerland); Data protection information: «Data protection», Privacy policy.
• Google Cloud including Google Cloud Platform (GCP): Storage space and other infrastructure; Google Cloud-specific providers: National or regional Google communities depending on the country and region; Google Cloud-specific information: «Data Protection Center», «Google Cloud and general data protection principles», «Google Cloud Data Protection Guidelines», «Data protection».
• Dropbox Cloud storage service; Provider: Dropbox International Unlimited Company; Privacy policy: «Data protection».
• WordPress.com: Blog hosting and website building tools; providers: Automattic Inc. (USA) / Aut O’Mattic A8C Ireland Ltd. (Ireland) for users in Europe, among others; information on data protection: Data protection declaration, Cookie policy.

11.2 Scheduling

We use services from specialized third parties to make it possible to schedule appointments online, for example for meetings. In addition to this privacy policy, any applicable terms and conditions of the services used, such as terms of use or privacy statements, are also made visible in each case.

We use in particular:

• Google Calendar: Online appointment scheduling; Provider: Google; Google Calendar-specific information: «Scheduling with Google Calendar», «Data protection in Google Calendar».

11.3 Audio and video conferences

We use specialized services for audio and video conferencing to communicate online. This allows us, for example, to hold virtual meetings or conduct online teaching and webinars. In addition, the legal texts of the individual services, such as privacy statements and terms of use, apply to participation in audio and video conferencing.

We recommend that, depending on your personal situation, when participating in audio or video conferences, you turn the microphone off by default, blur the background, or have a virtual background displayed.

We use in particular:

• Google Meet: Video conferences; Provider: Google; Google Meet-specific information: «Google Meet – Security and Privacy for Users».
• Zoom: Platform for collaborative work, especially with video conferencing; Provider: Zoom Video Communications Inc. (USA); Privacy information: «Data protection at Zoom», Privacy policy, «Legal compliance».

11.4 Social Media Features and Social Media Content

We use services and plugins from third parties to enable the embedding of functions and content from social media platforms and to enable the sharing of content on social media platforms and in other ways.

We use in particular:

• Facebook (Social Plugins): Embedding of Facebook features and Facebook content, for example «Like» or «Share»; providers: Meta Platforms Ireland Limited (Ireland) and Other Meta companies (among others in the USA); Information on data protection: Privacy policy.
• Instagram platform: Embedding of Instagram content; providers: Meta Platforms Ireland Limited (Ireland) and Other Meta companies (among others in the USA); Information on data protection: Privacy policy (Instagram), Data protection policy (Facebook).

11.5 Card material

We use services from third parties to be able to embed maps on our website.

We use in particular:

• Google Maps including Google Maps Platform: Map service; Provider: Google; Google Maps-specific information: «How Google uses location information».

11.6 Digital content

We use services from specialized third parties to be able to integrate digital content into our website. Digital content includes, in particular, image and video material, music, and podcasts.

We use in particular:

• YouTube: Video platform; Provider: Google; YouTube-specific information: «Data protection and security center», «My data on YouTube».

11.7 Documents

We use services from third parties to be able to include documents on our website. Such documents can include PDF files, presentations, tables, and text documents. This allows us not only to view them but also to edit or comment on them.

We use in particular:

• Microsoft 365: Text documents, presentations and tables; Provider: Microsoft; Microsoft 365-specific information: «Datenschutz und Sicherheit mit Microsoft 365».

11.8 Werbung

Wir nutzen die Möglichkeit, gezielt Werbung bei Dritten wie beispielsweise Social Media-Plattformen und Suchmaschinen für unsere Aktivitäten und Tätigkeiten anzeigen zu lassen.

Wir möchten mit solcher Werbung insbesondere Personen erreichen, die sich für unsere Aktivitäten und Tätigkeiten bereits interessieren oder sich dafür interessieren könnten (Remarketing and Targeting). Dafür können wir entsprechende – allenfalls auch personenbezogene – Angaben an Dritte, die solche Werbung ermöglichen, übermitteln. Wir können ausserdem feststellen, ob unsere Werbung erfolgreich ist, das heisst insbesondere, ob sie zu Besuchen auf unserer Website führt (Conversion Tracking).

Dritte, bei denen wir werben und bei denen Sie als Nutzerin oder Nutzer angemeldet sind, können die Nutzung unserer Website allenfalls Ihrem dortigen Profil zuordnen.

We use in particular:

• Google Ads: Suchmaschinen-Werbung; Anbieterin: Google; Google Ads-spezifische Angaben: Werbung unter anderem aufgrund von Suchanfragen, wobei verschiedene Domain­namen – insbesondere double­click.net, google­adservices.com und google­syndication.com – für Google Ads verwendet werden, Datenschutzerklärung für Werbung, «Eingeblendete Werbung direkt über Anzeigen verwalten».
• Meta-Werbeanzeigen (Meta Ads): Social Media-Werbung bei Facebook und Instagram; Anbieterinnen: Meta Platforms Ireland Limited (Irland) und Other Meta companies (unter anderem in den USA); Angaben zum Datenschutz: Targeting, auch Retargeting, insbesondere mit dem Meta-Pixel und mit Custom Audiences including Lookalike Audiences, Privacy policy, «Werbepräferenzen» (Anmeldung als Nutzerin oder Nutzer erforderlich).

12. Erweiterungen für die Website

Wir verwenden Erweiterungen für unsere Website, um zusätzliche Funktionen nutzen zu können. Wir können ausgewählte Dienste von geeigneten Anbietern nutzen oder solche Erweiterungen auf eigener digitaler Infrastruktur verwenden.

Wir verwenden insbesondere:

• Google reCAPTCHA: Spam­schutz (Unter­scheidung zwischen er­wünsch­ten Inhalten von Men­schen sowie u­nerwün­schten Inhalten von Bots und Spam); An­biete­rin: Google; Google reCAPTCHA-spezifische Angaben: «Was ist reCAPTCHA?».

13. Erfolgs- und Reichweiten­messung

Wir versuchen, den Erfolg und die Reich­weite unserer Aktivitäten und Tätig­keiten zu messen. In diesem Rahmen können wir auch die Wirkung von Hinweisen Dritter messen oder prüfen, wie unter­schiedliche Teile oder Versionen unseres Online-Angebots genutzt werden («A/B-Test»-Methode). Wir können aufgrund der Ergebnisse der Erfolgs- und Reichweiten­messung insbesondere Fehler beheben, beliebte Inhalte stärken oder Verbesserungen vornehmen.

Für die Erfolgs- und Reichweiten­messung werden in den meisten Fällen die IP addresses von einzelnen Nutzerinnen und Nutzern erfasst. IP-Adressen werden in diesem Fall Basically gekürzt («IP-Masking»), um durch die entsprechende Pseudo­nymisierung dem Grundsatz der Daten­sparsamkeit zu folgen.

Bei der Erfolgs- und Reichweiten­messung können Cookies zum Einsatz kommen und Nutzer­profile erstellt werden. Allenfalls erstellte Nutzer­profile umfassen beispiels­weise die besuchten einzelnen Seiten oder betrachteten Inhalte auf unserer Website, Angaben zur Grösse des Bild­schirms oder des Browser-Fensters und den – zumindest ungefähren – Standort. Grundsätzlich werden allfällige Nutzer­profile ausschliesslich pseudo­nymisiert erstellt und nicht für die Identi­fizierung einzelner Nutzerinnen und Nutzer verwendet. Einzelne Dienste von Dritten, bei denen Nutzerinnen oder Nutzer angemeldet sind, können die Nutzung unseres Online-Angebotes allenfalls dem Nutzerkonto oder Nutzerprofil beim jeweiligen Dienst zuordnen.

We use in particular:

• Google Marketing Platform: Erfolgs- und Reich­weiten­messung, insbesondere mit Google Analytics; Anbieterin: Google; Google Marketing Platform-spezifische Angaben: Messung auch über verschiedene Browser und Geräte hinweg (Cross-Device Tracking) mit pseudonymisierten IP-Adressen, die nur ausnahmsweise vollständig an Google in den USA übertragen werden, Daten­schutz­erklärung für Google Analytics, «Browser Add-on zur Deaktivierung von Google Analytics».
• Google Tag Manager: Einbindung und Verwaltung von Diensten von Google und Dritten, insbesondere für die Erfolgs- und Reich­weiten­messung; Anbieterin: Google; Google Tag Manager-spezifische Angaben: Daten­schutz­erklärung für Google Tag Manager; weitere Angaben zum Daten­schutz finden sich bei den einzelnen eingebundenen und verwalteten Diensten.

14. Abschliessende Hinweise zur Daten­schutz­erklärung

Wir haben diese Daten­schutz­erklärung mit dem Daten­schutz-Generator von Daten­schutz­partner erstellt.

Wir können diese Daten­schutz­erklärung jederzeit aktualisieren. Wir informieren über Aktualisierungen in geeigneter Form, insbesondere durch die Veröffentlichung der jeweils aktuellen Daten­schutz­erklärung auf unserer Website.