Privacy Policy

General Notice

Pursuant to Article 13 of the Swiss Federal Constitution and the data protection provisions of the Confederation (Federal Data Protection Act, DSG), every person is entitled to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this privacy policy.

In cooperation with our hosting providers, we make every effort to protect the databases as effectively as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing and use of data as described below. This website can generally be visited without registration. In this process, data such as pages accessed or names of files retrieved, date and time are stored on the server for statistical purposes, without this data being directly related to your person. Personal data, in particular name, address or e-mail address, are collected on a voluntary basis insofar as possible. Without your consent, data will not be passed on to third parties.

Processing of Personal Data

Personal data means any information relating to an identified or identifiable natural person. A data subject is a person to whom personal data relates. Processing encompasses any handling of personal data, regardless of the means and procedures applied, in particular the retention, disclosure, collection, deletion, storage, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, where and insofar as the EU GDPR applies, we process personal data according to the following legal bases in connection with Article 6 (1) GDPR:

• Consent (Art. 6 para. 1 sent. 1 lit. a GDPR) – The data subject has given their consent to the processing of their personal data for a specific purpose or several specific purposes.
• Contract Performance and Pre-Contractual Requests (Art. 6 para. 1 sent. 1 lit. b GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures taken at the data subject's request.
• Legal Obligation (Art. 6 para. 1 sent. 1 lit. c GDPR) – Processing is necessary to comply with a legal obligation to which the controller is subject.
• Protection of Vital Interests (Art. 6 para. 1 sent. 1 lit. d GDPR) – Processing is necessary to protect the vital interests of the data subject or another natural person.
• Legitimate Interests (Art. 6 para. 1 sent. 1 lit. f GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, override such interests.
• Application Process as Pre-Contractual or Contractual Relationship (Art. 9 para. 2 lit. b GDPR) – Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data, such as severe disability status or ethnic origin) are requested from applicants in the course of the application process, in order for the controller or the data subject to exercise their rights and fulfil their obligations arising from employment law and the law of social security and social protection, such processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR, or in the case of protection of vital interests of applicants or other persons pursuant to Art. 9 para. 2 lit. c GDPR, or for purposes of occupational health and safety, for the assessment of the employee's work capacity, for medical diagnosis, care or treatment in the healthcare or social sector, or for the administration of systems and services in the healthcare or social sector pursuant to Art. 9 para. 2 lit. h GDPR. In the event of voluntary disclosure of special categories of data based on consent, such processing is carried out on the basis of Art. 9 para. 2 lit. a GDPR.

We process personal data for the duration necessary for the respective purpose or purposes. In case of longer-term retention obligations due to statutory and other obligations to which we are subject, we restrict processing accordingly.

Applicable Legal Bases

In accordance with Art. 13 GDPR, we provide you with information on the legal bases for our data processing activities. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing to fulfil our services and implement contractual measures as well as to respond to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security Measures

We implement appropriate technical and organisational measures, in accordance with statutory requirements and taking into account the state of the art, implementation costs, and the nature, scope, circumstances and purposes of processing as well as the varying probabilities of occurrence and extent of risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.

These measures include in particular the protection of confidentiality, integrity and availability of data through control of physical and electronic access to the data as well as access to, input, transmission, availability and segregation thereof. Furthermore, we have established procedures that ensure the exercise of data subject rights, deletion of data, and responses to data breaches. We also take data protection into account in the development and selection of hardware, software and procedures in accordance with the principle of data protection by design and by default.

Transmission of Personal Data

In the course of our processing of personal data, it may be necessary to transmit the data to other entities, companies, legally independent organizational units, or persons, or to disclose it to them. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are embedded in a website. In such cases, we comply with legal requirements and in particular conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Data Processing in Third Countries

Insofar as we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or if processing takes place in the context of using services of third parties or the disclosure or transmission of data to other persons, entities or organisations, this is done only in accordance with statutory requirements.

Subject to express consent or contractually or legally required transmission, we process data only in third countries with a recognised level of data protection, contractual obligation through so-called standard contractual clauses of the EU Commission, where certifications or binding internal data protection regulations exist (Art. 44 to 49 GDPR, Information page of the EU Commission).

Privacy Policy for Cookies

This website uses cookies. Cookies are text files containing data from websites or domains visited and stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit within an online offering. The stored information may include, for example, language settings on a webpage, login status, a shopping cart, or the point at which a video was watched. The term cookies also includes other technologies that fulfill the same functions as cookies (for example, when user data is stored using pseudonymous online identifiers, also referred to as "user IDs")

The following cookie types and functions are distinguished:

• Temporary Cookies (also: Session or Session Cookies): Temporary cookies are deleted at the latest after a user leaves an online offer and has closed their browser.
• Permanent Cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users that are used for reach measurement or for marketing purposes can be stored in such a cookie.
• First-Party Cookies: First-party cookies are set by us ourselves.
• Third-Party Cookies (also: Third-Party Cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
• Necessary (also: essential or absolutely required) Cookies: Cookies can on the one hand be absolutely required for the operation of a website (e.g., to save logins or other user inputs or for security reasons).
• Statistics, Marketing and Personalization Cookies: Furthermore, cookies are generally also used in the context of reach measurement and when the interests of a user or their behavior (e.g., viewing specific content, using functions, etc.) are stored on individual web pages in a user profile. Such profiles serve to display content to users that corresponds to their potential interests. This process is also referred to as "tracking," i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on Legal Bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the expressed consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the commercial operation of our online offer and its improvement) or, if the use of cookies is required to fulfill our contractual obligations.

Storage Duration: If we do not provide you with explicit information about the storage duration of permanent cookies (e.g., as part of a so-called cookie opt-in), please assume that the storage duration can be up to two years.

General Information on Withdrawal and Objection (Opt-Out): Depending on whether the processing is based on your consent or a statutory permission, you have the option at any time to withdraw a given consent or object to the processing of your data by cookie technologies (collectively referred to as «Opt-Out»). You may initially declare your objection through your browser settings, for example by disabling the use of cookies (although this may also restrict the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be made through a variety of services, particularly in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. Furthermore, you can obtain additional objection information in the information provided regarding the service providers and cookies used.

Processing of Cookie Data Based on Consent: We use a cookie consent management procedure in which user consents to the use of cookies or the processing and providers mentioned within the cookie consent management procedure are obtained and can be managed and revoked by users. In this process, the consent declaration is stored so that it does not need to be requested again and the consent can be demonstrated in accordance with legal requirements. Storage may take place on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to assign the consent to a user or their device. Subject to individual information provided by cookie management service providers, the following applies: The duration of storage of the consent may be up to two years. A pseudonymous user identifier is formed and stored together with the date of consent, information on the scope of the consent (e.g. which categories of cookies and/or service providers) as well as the browser, system and device used.

Types of Data Processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

Data Subjects: Users (e.g. website visitors, users of online services).

Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the address bar of your browser changing from "http://" to "https://" and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

This data cannot be attributed to specific individuals. We do not merge this data with other data sources. We reserve the right to review this data subsequently if we become aware of concrete evidence of unlawful use.

Third-Party Services

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the American Google LLC use, among other things, cookies and consequently data is transmitted to Google in the USA. In this context, we assume that no personal tracking takes place solely through the use of our website.

Google has committed to ensuring appropriate data protection in accordance with the US-European and US-Swiss Privacy Shield.

Further information can be found in the Google Privacy Policy.

Privacy Policy for Contact Form

When you submit inquiries to us via contact form, your information from the inquiry form including the contact data you provide there will be stored with us for the purpose of processing your inquiry and for any follow-up questions. We do not share this data without your consent.

Privacy Policy for Newsletter Data

If you wish to subscribe to the newsletter offered on this website, we require an email address from you and information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No further data is collected. We use this data exclusively for the dispatch of the requested information and do not share it with third parties.

You may revoke your consent to the storage of the data, the email address, and its use for newsletter dispatch at any time, for example via the "Unsubscribe" link in the newsletter.

Paid Services

To provide paid services, we collect additional data from you, such as payment details, in order to execute your order or commission. We store this data in our systems until the statutory retention periods have expired.

Google Ads

This website uses Google Conversion Tracking. If you have arrived at our website through an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. When a user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that would allow users to be personally identified.

If you do not wish to participate in tracking, you can refuse to allow the necessary cookie to be set – for example, by adjusting your browser settings to disable the automatic setting of cookies in general, or by configuring your browser to block cookies from the domain "googleleadservices.com".

Please note that you must not delete the opt-out cookies as long as you do not wish to have measurement data recorded. If you have deleted all your cookies in your browser, you will need to set the respective opt-out cookie again.

Privacy Policy for Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It shows us how our website is used: which pages are viewed, roughly which country and region visits come from, which device and browser are used, and which steps take place in the shop (product viewed, added to cart, checkout opened, purchase completed with order value). These analyses help us improve our offer.

For this purpose, Google Analytics stores two cookies on your device: "_ga" is used to distinguish visitors, "_ga_<ID>" stores the session state. Both are valid for two years unless you delete them earlier. According to Google, IP addresses are neither logged nor stored in Google Analytics 4. Advertising cookies and personalised advertising are switched off for Google Analytics on this website. Google Analytics deletes event-level and user-level data after 14 months at the latest; aggregated reports are retained.

Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework, which ensures an adequate level of data protection for these transfers.

We ask visitors from outside Switzerland for their consent before measuring (Art. 6(1)(a) GDPR and national cookie rules, e.g. Section 25(1) TDDDG in Germany). Without consent, Google Analytics sets no cookies and only transmits individual signals without an identifier (Google Consent Mode). For visitors from Switzerland, we base the measurement on our legitimate interest in improving our offer; you can object at any time.

You can change your choice at any time under Cookie settings – the link is also at the bottom of every page. In addition, you can prevent data collection with the browser add-on to disable Google Analytics or block cookies in your browser. Further information can be found in Google's Privacy Policy.

Privacy Policy for Google AdSense

We use Google AdSense on this website. This is an advertising program from Google Inc. In Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google AdSense, we can display advertising on this website that is relevant to our content.

Google AdSense uses cookies to display relevant ads to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Via a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Furthermore, Google AdSense can record so-called conversions using cookie IDs that relate to ad requests. This is the case, for example, when a user sees a Google Ads ad and later visits the advertiser's website using the same browser and makes a purchase there. According to Google, Google Ads cookies do not contain any personally identifiable information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.

You can prevent participation in this tracking procedure in various ways:

• by making appropriate settings in your browser software, in particular suppressing third-party cookies will result in you not receiving advertisements from third parties;
• by disabling cookies for conversion tracking by configuring your browser to block cookies from the domain "www.googleadservices.com", https://adssettings.google.com, whereby this setting will be deleted when you clear your cookies;
• by disabling interest-based ads from providers that are part of the self-regulatory "About Ads" campaign via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you clear your cookies;
• by permanently disabling in your browsers Firefox, Internet Explorer or Google Chrome via the link https://www.google.com/settings/ads/plugin. We would like to inform you that in this case you may not be able to use all functions of this service to their full extent.

The legal basis for the processing of your data is a balancing of interests, whereby the processing of your personal data as described above is not opposed by any overriding contrary interests on your part (Art. 6 para. 1 sentence 1 lit. f GDPR). Further information on Google Ads from Google can be obtained at https://ads.google.com/intl/de_DE/home/, and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.

External Payment Service Providers

This website uses external payment service providers whose platforms allow users and us to carry out payment transactions. For example, via

• PostFinance (Privacy)
• Visa (Privacy)
• Mastercard (Privacy)
• American Express (Privacy)
• Paypal (Privacy)
• Bexio AG (Privacy)
• Payrexx AG (Privacy)
• Apple Pay (Privacy)
• Stripe (Privacy)
• Klarna (Privacy)
• Skrill (Privacy)
• Giropay (Privacy) etc.

In fulfilling contracts, we use payment service providers on the basis of the Swiss Data Protection Act and, to the extent necessary, Article 6(1)(b) of the EU GDPR. Otherwise, we use external payment service providers on the basis of our legitimate interests under the Swiss Data Protection Act and, to the extent necessary, under Article 6(1)(f) of the EU GDPR, in order to provide users with effective and secure payment options.

The data processed by the payment service providers includes master data, such as name and address, banking data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount and recipient-related information. This information is necessary to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. As the operator, we do not receive any information about (bank) accounts or credit cards, but only information confirming (acceptance) or rejection of the payment. Under certain circumstances, the payment service providers may transmit the data to credit reporting agencies. This transmission is intended for identity and creditworthiness verification. We refer you to the terms and conditions and privacy notices of the payment service providers.

For payment transactions, the terms and conditions and privacy notices of the respective payment service providers apply, which can be retrieved on their respective websites or transaction applications. We also refer you to these for further information and to exercise withdrawal rights, information rights and other rights of data subjects.

Newsletter – Mailchimp

The newsletter is sent via the mailing service provider 'MailChimp', a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the mailing service provider here. Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection standards (PrivacyShield). The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR and a data processing agreement pursuant to Art. 28 Para. 3 S. 1 GDPR.

The mailing service provider may use the data of recipients in pseudonymous form, i.e. without attribution to a user, to optimize or improve its own services, for example for technical optimization of the dispatch and presentation of newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them directly or to disclose the data to third parties.

Copyright

The copyright and all other rights to content, images, photographs or other files on the website are the exclusive property of the operator of this website or the specifically named rights holders. For the reproduction of any files, the written consent of the copyright holder must be obtained in advance.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be subject to criminal liability and potentially liable for damages.

General Liability Disclaimer

All information provided on our website has been carefully reviewed. We endeavor to provide our information services in a current, accurate, and complete manner. Nevertheless, the occurrence of errors cannot be entirely excluded, which is why we cannot provide any guarantee for the completeness, accuracy, and currency of information, including journalistic and editorial content. Claims for damages of a material or non-material nature caused by the use of the information provided are excluded, unless there is demonstrable willful misconduct or gross negligence.

The publisher may, at its own discretion and without notice, modify or delete texts and is not obligated to update the contents of this website. The use of and access to this website is at the visitor's own risk. The publisher, its clients, or partners are not responsible for damages, such as direct, indirect, incidental, specifically determinable in advance, or consequential damages, which are allegedly caused by visiting this website, and therefore assume no liability for them.

The publisher also assumes no responsibility and liability for the contents and availability of third-party websites that are accessible via external links on this website. The operators of the linked pages are solely responsible for the content of those pages. The publisher hereby explicitly distances itself from all third-party content that may be relevant under criminal or liability law or that violates good morals and customs.

Changes

We may adjust this privacy policy at any time without prior notice. The current version published on our website shall apply at all times. To the extent this privacy policy is part of an agreement with you, we will inform you of any updates via email or by other appropriate means.