Data protection

Last update: January 1, 2022
Data protection information
customers
Retrieve document
Data protection information
website visitors
Retrieve document
Data protection information
Suppliers/ Partner companies
Retrieve document
Data protection information
Applicants
Retrieve document

The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

WOW Museum GmbH München
Tal 27
80331 München
E-Mail: media@wow-museum.de
Site: https://www.wow-museum.de/

GENERAL NOTE

Based on Article 13 of the Swiss Federal Constitution and federal data protection regulations (Data Protection Act, DSG), every person is entitled to protection of their privacy and to protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as much as possible from third-party access, loss, misuse or falsification.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect data from access by third parties.

By using this website, you agree to the collection, processing and use of data in accordance with the following description. In principle, this website can be visited without registration. Data such as pages accessed or the name of the retrieved file, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or email address, is collected on a voluntary basis as far as possible. The data will not be passed on to third parties without your consent.

PROCESSING OF PERSONAL DATA

Personal data is all information relating to a specific or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, storage, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, we process personal data — to the extent and insofar as the EU GDPR is applicable — in accordance with the following legal bases in connection with Article 6 (1) GDPR:

  • lit. a) Processing of personal data with the consent of the person concerned.
  • lit. b) Processing of personal data to fulfill a contract with the data subject and to carry out appropriate pre-contractual measures.
  • lit. c) Processing of personal data to fulfill a legal obligation to which we are subject in accordance with any applicable EU law or in accordance with any applicable law of a country in which the GDPR is applicable in whole or in part.
  • lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
  • lit. f) Processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and fundamental rights as well as the interests of the data subject prevail. Legitimate interests include in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the period necessary for the respective purpose or purposes. If there are longer storage obligations due to legal and other obligations to which we are subject, we will restrict processing accordingly.

COOKIE PRIVACY STATEMENT

This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device while using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze site usage patterns, but also to make our offering more customer-friendly. Cookies remain stored after the end of a browser session and can be accessed again when you visit the site again. If you do not want this, you should set your Internet browser so that it refuses to accept cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a variety of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Cookies can also be saved by switching them off in the browser settings. Please note that you may then not be able to use all functions of this online offer.

SSL/TLS ENCRYPTION PRIVACY STATEMENT

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as a site operator. You can recognize an encrypted connection when the browser's address line changes from “http://” to “https://” and by the lock icon in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

DATA TRANSFER SECURITY (WITHOUT SSL)

Please note that data that is transmitted via an open network such as the Internet or an e-mail service without SSL encryption can be viewed by anyone. You can recognize an unencrypted connection by the fact that the browser's address bar shows “http://” and no lock icon is displayed in your browser line. Information that is transmitted over the Internet and content received online may be transmitted via third-party networks. We cannot guarantee the confidentiality of communications or documents submitted via such open networks or third-party networks.

If you disclose personal information via an open network or third-party networks, you should be aware that your data will be lost or that third parties could potentially access that information and may therefore collect and use the data without your consent. Although in many cases the individual data packets are transmitted in encrypted form, the names of the sender and recipient are not. Even if the sender and recipient live in the same country, data is transmitted via such networks frequently and without controls even via third countries, i.e. also via countries that do not offer the same level of data protection as your country of domicile. We assume no responsibility for the security of your data during transmission over the Internet and disclaim any liability for indirect and direct losses. We invite you to use other means of communication if you deem this necessary or reasonable for security reasons.

Despite extensive technical and organizational security measures, data may be lost or intercepted and/or manipulated by unauthorized persons. As far as possible, we take appropriate technical and organizational security measures to prevent this within our system. However, your computer is outside the security area that we can control. As a user, it is your responsibility to inform yourself about the necessary security measures and to take appropriate measures in this regard. As a website operator, we are in no way liable for damage that you may incur as a result of loss or manipulation of data.

Data that you provide in online forms can be passed on to commissioned third parties for order processing and viewed by them and, if necessary, processed.

PRIVACY POLICY FOR SERVER LOG FILES

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • Time of server request

This data cannot be attributed to specific persons. This data is not combined with other data sources. We reserve the right to review this data retrospectively if we become aware of concrete evidence of illegal use.

THIRD PARTY SERVICES

This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.

These services provided by the American Google LLC use cookies, among other things, and as a result, data is transferred to Google in the USA, although we assume that no personal tracking takes place solely through the use of our website.

Google is committed to ensuring adequate data protection in accordance with the American-European and American-Swiss Privacy Shield.

Further information can be found in the Google's privacy policy.

PRIVACY STATEMENT FOR CONTACT FORM

If you send us inquiries via the contact form, we will store your details from the enquiry form, including the contact details you provided there, for the purpose of processing the enquiry and in case of follow-up questions. We will not share this data without your consent.

PRIVACY POLICY FOR NEWSLETTER DATA

If you would like to receive the newsletter offered on this website, we need an email address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively to send the requested information and do not pass it on to third parties.

You can withdraw your consent to the storage of the data, the e-mail address and their use to send the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

Privacy policy for comment function on this website

For the comment function on this website, in addition to your comment, information about the time the comment was created, your e-mail address and, if you do not post anonymously, the username you have chosen are saved.

Saving the IP address

Our comment function stores the IP addresses of users who write comments. Since we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

subscribing to comments

As a user of the site, you can subscribe to comments after signing up. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info emails.

PRIVACY POLICY FOR THE RIGHT TO INFORMATION, DELETION, BLOCKING

You have the right to receive free information about your stored personal data, its origin and recipients and the purpose of data processing, as well as the right to correct, block or delete this data at any time. You can contact us at any time at the address given in the legal notice for this and for further questions on the subject of personal data.

PRIVACY POLICY FOR OBJECTION TO PROMOTIONAL EMAILS

The use of contact data published as part of the legal notice obligation to send unsolicited advertising and information material is hereby rejected. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

PAID SERVICES

In order to provide paid services, we ask for additional data, such as payment details, in order to be able to process your order or order. We store this data in our systems until the legal retention periods have expired.

USING GOOGLE MAPS

This website uses the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This is done regardless of whether Google provides a user account through which you are logged in, or whether there is no user account. If you are logged in to Google, your data is directly associated with your account. If you do not want to be associated with your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses them for advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, in addition to further information on your rights in this regard and settings options to protect your privacy, please visit: www.google.de/intl/de/policies/privacy.

GOOGLE ADWORDS

This website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be traced via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not want to participate in tracking, you can refuse the necessary setting of a cookie — for example via a browser setting that generally deactivates the automatic setting of cookies or set your browser to block cookies from the “googleleadservices.com” domain.

Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all of your cookies in your browser, you must set the respective opt-out cookie again.

USE OF GOOGLE REMARKETING

This website uses the remarketing function provided by Google Inc. The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the website visitor's browser, which makes it possible to recognize the visitor when they visit websites that belong to Google's advertising network. On these pages, visitors can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

According to its own information, Google does not collect any personal data during this process. If you still do not want Google's Remarketing feature, you can always deactivate it by changing the appropriate settings under http://www.google.com/settings/ads carry out. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp follow.

Using Google reCAPTCHA

This website uses the reCAPTCHA service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The purpose of the query is to distinguish whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be sent to Google and further used there. However, Google will abbreviate your IP address beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not combined with other data from Google. Your data may also be transferred to the USA. There is an adequacy decision from the European Commission, the “Privacy Shield”, for data transfers to the USA. Google takes part in the “Privacy Shield” and has submitted to the requirements. By pressing the query, you consent to the processing of your data. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

You can find more information about Google reCAPTCHA and the associated privacy policy at: https://www.google.com/privacy/ads/

GOOGLE ANALYTICS PRIVACY POLICY

This website uses Google Analytics, a web analysis service provided by Google LL.C., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Using the statistics obtained, we can improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage under “My data”, “personal data” in the settings there.

The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Please note that the code “_anonymizeIp ();” has been added to Google Analytics on this website to ensure anonymized collection of IP addresses. As a result, IP addresses are further processed in abbreviated form, so that identification of a person can be ruled out. Insofar as the data collected about you is personally identified, this is therefore immediately excluded and the personal data is therefore immediately deleted.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. For exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to fully use all functions of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

You can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics. This stores a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies from your device, these opt-out cookies will also be deleted, i.e. you must set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be activated separately for each browser, computer or other device.

GOOGLE ADS PRIVACY POLICY

This website uses Google Ads, an online marketing tool from Google (“Google Ads”). Google Ads uses cookies to show users relevant ads, improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being displayed multiple times. In addition, Google Ads can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later uses the same browser to visit the advertiser's website and buys something there. According to Google, Google Ads cookies do not contain any personal information.

As a result of the marketing tools used, your browser automatically creates a direct connection to Google's server. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that Google will find out and save your IP address.

You can prevent participation in this tracking process in various ways:

  • by setting your browser software accordingly, in particular, the suppression of third-party cookies means that you will not receive ads from third parties;
  • by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://adssettings.google.com, although this setting is deleted when you delete your cookies;
  • by deactivating interest-based ads from providers that are part of the “About Ads” self-regulation campaign via the link https://www.aboutads.info/choices, although this setting is deleted when you delete your cookies;
  • by permanently deactivating your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to make full use of all functions of this offer.

The legal basis for processing your data is a balance of interests, according to which the processing of your personal data described above does not conflict with any overriding contrary interests on your part (Art. 6 (1) (f) GDPR). For more information about Google Ads from Google, visit https://ads.google.com/intl/de_DE/home/, as well as data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org visit.

PRIVACY POLICY FOR THE USE OF GOOGLE WEB FONTS

This website uses so-called web fonts, which are provided by Google, to uniformly display fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. If your browser does not support web fonts, a standard font is used by your computer.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

GOOGLE TAG MANAGER

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offering, for example. The tag manager itself, which implements the tags, does not process any personal user data. With regard to the processing of users' personal data, reference is made to the following information about Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

USING MATOMO

This website uses Matomo (formerly Piwik), an open-source software for the statistical evaluation of visitor access. Matomo uses so-called cookies, i.e. text files that are stored on your computer and allow an analysis of your use of the website.

The information generated by the cookie about your use of the website is stored on a server in Germany.

The IP address is anonymized immediately after processing and before storage. You can prevent the installation of cookies by changing the settings in your browser software. We would like to point out that if you set the appropriate settings, not all functions of this website may be available anymore.

You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data.

USING ADOBE ANALYTICS (OMNITURE)

This website uses Adobe Analytics, a web analysis service provided by Adobe Systems Software Ireland Limited (“Adobe”). Adobe Analytics uses so-called cookies, i.e. text files that are stored on your computer and allow an analysis of your use of the website. If a tracking data set is transmitted from a website visitor's browser to the Adobe Data Center, the server setting made by us ensures that the IP address is anonymized before geolocation, i.e. that the last octet of the IP address is replaced by zeros. Before the tracking package is saved, the IP address is replaced by individual generic IP addresses.

On behalf of the operator of this website, Adobe will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Adobe Analytics is not combined with other Adobe data.

You can prevent cookies from being saved by setting your browser software accordingly. However, this offer points out to users that in this case they may not be able to use all functions of this website to their full extent. Users can also prevent Adobe from collecting the data generated by the cookie and related to their use of the website (including their IP address) and from processing this data by Adobe by downloading and installing the browser plug-in available at the following link: http://www.adobe.com/de/privacy/opt-out.html

ANALYSIS BY WIREDMINDS

This website uses tracking pixel technology from WiredMinds AG (www.wiredminds.de) to analyze visitor behavior

This involves collecting, processing and storing data from which user profiles are created under a pseudonym. Where possible and useful, these user profiles are completely anonymized. Cookies may be used for this purpose. Cookies are small text files that are stored in the visitor's Internet browser and are used to recognize the Internet browser. The data collected, which may also include personal data, is transmitted to WiredMinds or collected directly by WiredMinds. WiredMinds may use information left behind by visits to the websites to create anonymized user profiles. The data obtained in this way will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym. If IP addresses are collected, they are immediately anonymized by deleting the last block of numbers.

For inquiries regarding opt-out, please use the contact details at the beginning of this privacy policy.

USE OF THE SCALABLE CENTRAL MEASUREMENT METHOD

This website uses the measurement method (“SZMnG”) from INFOnline GmbH (https://www.INFOnline.de) to determine statistical parameters about the use of our offers. The aim of usage measurement is to statistically determine the number of visits to our website, the number of website visitors and their surfing behavior — based on a uniform standard procedure — and thus to obtain comparable values across the market.

For all digital offerings that are members of the Information Community for Determining the Distribution of Advertising Media e.V. (IVW — http://www.ivw.eu) or participate in studies by the Online Research Association (AGOF — http://www.agof.de), the usage statistics are regularly further processed by AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (agma — http://www.agma-mmc.de) to reach and published with the service value “Unique User” and by the IVW with the performance values “Page Impression” and “Visits.” These ranges and statistics can be viewed on the respective websites.

  1. Legal basis for processing

The measurement using the SZMnG measurement method by INFOnline GmbH is carried out with legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.

The purpose of processing personal data is to compile statistics and create user categories. The statistics are used to understand and document the use of our offer. The user categories form the basis for an interest-based orientation of advertising material and advertising measures. To market this website, usage measurement, which ensures comparability with other market participants, is essential. Our legitimate interest results from the economic usability of the findings derived from statistics and user categories and the market value of our website — even in direct comparison with third-party websites — which can be determined on the basis of statistics.

In addition, we have a legitimate interest in making the pseudonymized data available to INFOnline, AGOF and IVW for the purpose of market research (AGOF, agma) and for statistical purposes (INFOnline, IVW). We also have a legitimate interest in making the pseudonymized data available to INFOnline for the development and provision of interest-based advertising material.

  1. Type of data

INFOnline GmbH collects the following data, which is personal in accordance with the EU GDPR:

  • IP address: On the Internet, every device requires a unique address, the so-called IP address, to transmit data. Storing the IP address for at least a short time is technically necessary due to the way the Internet works. The IP addresses are abbreviated by 1 byte before any processing and are only anonymized. There is no storage or further processing of the unabridged IP addresses.
  • A randomly generated client identifier: Range processing alternatively uses either a cookie with the identifier “ioam.de”, a “local storage object” or a signature that is created from various automatically transmitted information from your browser. This identifier is unique to a browser as long as the cookie or local storage object is not deleted. It is therefore possible to measure the data and then assign it to the respective client identifier even if you visit other websites that also use INFOnline GmbH's measurement method (“SZMng”). The validity of the cookie is limited to a maximum of 1 year.
  1. Using the data

The INFOnline GmbH measurement method, which is used on this website, determines usage data. This is done to collect the performance values of page impressions, visits and clients and to generate further key figures from them (e.g. qualified clients). In addition, the measured data is used as follows:

  • So-called geolocation, i.e. the allocation of a website visit to the location of the visit, is carried out exclusively on the basis of the anonymized IP address and only up to the geographical level of the federal states/regions. The geographical information obtained in this way can in no case be used to draw conclusions about the specific whereabouts of a user.
  • The usage data of a technical client (e.g. a browser on a device) is brought together across websites and stored in a database. This information is used for the technical assessment of social information age and gender and is transferred to AGOF service providers for further coverage processing. As part of the AGOF study, socio-characteristics are technically estimated on the basis of a random sample, which can be assigned to the following categories: age, gender, nationality, professional activity, marital status, general household information, household income, place of residence, Internet use, online interests, place of use, user type.
  1. Data storage period

The full IP address is not stored by INFOnline GmbH. The abbreviated IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier is stored for a maximum of 6 months.

  1. Transfer of data

The IP address as well as the abbreviated IP address are not passed on. To prepare the AGOF study, data with client identifiers is passed on to the following AGOF service providers:

  1. Rights of the person concerned

The data subject has the following rights:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to deletion (Art. 17 GDPR)
  • Right to restrict processing (Art. 18f. GDPR)
  • Right to data portability (Art. 20 GDPR)

For inquiries of this kind, please use the contact details at the end of this privacy statement. Please note that when making such requests, we must ensure that it is actually the person concerned.

Right to object

If you do not want to participate in the measurement, you can object under the following link: https://optout.ioam.de

In order to guarantee an exclusion from measurement, it is technically necessary to set a cookie. If you delete the cookies in your browser, it is necessary to repeat the opt-out process using the link above.

The data subject has the right to lodge a complaint with a data protection authority.

Further information on data protection in the measurement process can be found on the website of INFOnline GmbH (https://www.infonline.de), which operates the measurement process, the AGOF data protection website (http://www.agof.de/datenschutz) and the IVW data protection website (http://www.ivw.eu).

Use of the scalable central measurement method through an application

Our application uses the measurement method (“SZMnG”) from INFOnline GmbH (https://www.INFOnline.de) to determine statistical parameters about the use of our offers. The aim of usage measurement is to statistically determine the intensity of use, the number of uses and users of our application and their surfing behavior — based on a uniform standard procedure — and thus to obtain comparable values across the market.

For all digital offerings that are members of the Information Community for Determining the Distribution of Advertising Media e.V. (IVW — http://www.ivw.eu) or participate in studies by the Online Research Association (AGOF — http://www.agof.de), the usage statistics are regularly further processed by AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (agma — http://www.agma-mmc.de) to reach and published with the service value “Unique User” and by the IVW with the performance values “Page Impression” and “Visits.” These ranges and statistics can be viewed on the respective websites.

  1. Legal basis for processing

The measurement using the SZMnG measurement method by INFOnline GmbH is carried out with legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.

The purpose of processing personal data is to compile statistics to create user categories. The statistics help us to understand and document the use of our offer. The user categories form the basis for an interest-based orientation of advertising material and advertising measures. To market this application, usage measurement, which ensures comparability with other market participants, is essential. Our legitimate interest results from the economic usability of the findings derived from statistics and user categories and the market value of our application — also in direct comparison with third-party applications — which can be determined on the basis of the statistics.

In addition, we have a legitimate interest in making the pseudonymized data available to INFOnline, AGOF and IVW for the purpose of market research (AGOF, agma) and for statistical purposes (IVW, INFOnline). We also have a legitimate interest in making the pseudonymized data available to INFOnline for the development and provision of interest-based advertising material.

  1. Type of data

INFOnline GmbH collects the following data, which is personal in accordance with the GDPR:

  • IP address: On the Internet, every device requires a unique address, the so-called IP address, to transmit data. Storing the IP address for at least a short time is technically necessary due to the way the Internet works. The IP addresses are abbreviated before any processing and only further processed anonymously. There is no storage or processing of the unabridged IP addresses.
  • A device identifier: Range measurement uses unique device identifiers or a signature that is created from various automatically transmitted information from your device to recognize devices. It may be possible to measure the data and then assign it to the respective identifier even if you call up other applications that also use the measurement method (“SZMng”) from INFOnline GmbH.

The following unique device identifiers can be transmitted as a hash to INFOnline GmbH:

  • Advertising identifier
  • installation ID
  • Android ID
  • Vendor ID
  1. Using the data

The INFOnline GmbH measurement method, which is used in this application, determines usage data. This is done to collect the performance values of page impressions, visits and clients and to generate further key figures from them (e.g. qualified clients). In addition, the measured data is used as follows:

  • So-called geolocation, i.e. the allocation of a website visit to the location of the visit, is carried out exclusively on the basis of the anonymized IP address and only up to the geographical level of the federal states/regions. In no case can any conclusions be drawn about the specific place of residence of a user from the geographical information obtained in this way.
  • The usage data of a technical client (e.g. a browser on a device) is brought together across applications and stored in a database. This information is used for the technical assessment of social information age and gender and is transferred to AGOF service providers for further coverage processing. As part of the AGOF study, socio-characteristics are technically estimated on the basis of a random sample, which can be assigned to the following categories: age, gender, nationality, professional activity, marital status, general household information, household income, place of residence, Internet use, online interests, place of use, user type.
  1. Data storage period

The full IP address is not stored by INFOnline GmbH. The abbreviated IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier is stored for a maximum of 6 months.

  1. Transfer of data

The IP address as well as the abbreviated IP address are not passed on. To prepare the AGOF study, data with client identifiers is passed on to the following AGOF service providers:

  1. Rights of the person concerned

The data subject has the following rights:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to deletion (Art. 17 GDPR)
  • Right to restrict processing (Art. 18f. GDPR)
  • Right to data portability (Art. 20 GDPR)

For inquiries of this kind, please use the contact details at the beginning of this privacy policy. Please note that when making such requests, we must ensure that it is actually the person concerned.

Right to object

If you do not want to participate in the measurement, you can object here:

The data subject has the right to lodge a complaint with a data protection authority.

Further information on data protection in the measurement process can be found on the website of INFOnline GmbH (https://www.infonline.de), which operates the measurement process, the AGOF data protection website (http://www.agof.de/datenschutz) and the IVW data protection website (http://www.ivw.eu).

PRIVACY POLICY FOR THE USE OF HOTJAR

This website uses the Hotjar service to improve usability. Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe). Mouse clicks as well as mouse and scroll movements can be recorded. Keystrokes made on this website can also be recorded. Personalized information is not included. Hotjar uses a tracking code to collect and transfer your data. As soon as you visit our website, the Hotjar tracking code automatically collects the data based on your activity and stores it on the Hotjar servers (located in Ireland). In addition, the cookies placed on your computer or end device by the website also collect data. For more information on how Hotjar works, visit this page: https://www.hotjar.com/privacy.

If you would like to object to the collection of data by Hotjar (opt-out), please click here: https://www.hotjar.com/opt-out.

CRAZYEGG TRACKING TOOL

This website uses the Crazyegg.com tracking tool to record randomly selected individual visits exclusively with an anonymized IP address. Using cookies, this tracking tool allows you to evaluate how you use the website (e.g. which content is being clicked on). For this purpose, a usage profile is visually presented. User profiles are only created when pseudonyms are used. The legal basis for processing your data is a balance of interests, according to which the processing of your personal data described above does not conflict with any overriding contrary interests on your part (Art. 6 (1) (f) GDPR).

You can object to the collection, processing and collection of data generated by CrazyEgg.com at any time by follow these instructions. You can find more information about data protection at CrazyEgg.com at this privacy statement.

CHARTBEAT TRACKING TOOL

This website uses the web analysis tool “ChartBeat” from Chartbeat Inc. from 826 Broadway, 6th Floor, New York, NY 10003, USA. To analyze the use of the websites, ChartBeat collects and evaluates certain usage data, which your browser transmits. ChartBeat may use one or more cookies to collect this usage data. In addition, the IP address assigned to your device at the relevant time and, in some cases, a device-specific customer number are transmitted. The IP address is only required for session identification and geolocation (down to city level). We only receive statistical, aggregated data without our own ability to establish a personal reference. The legal basis for processing your data is a balance of interests, according to which the processing of your personal data described above does not conflict with any overriding contrary interests on your part (Art. 6 (1) (f) GDPR). For more information about Chartbeat, visit chartbeat.com/about/. Chartbeat's privacy policy can be found at chartbeat.com/privacy.

FACEBOOK PRIVACY POLICY

This website uses features from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. Data is already being transferred to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions, in particular the use of a comment function or clicking on a “Like” or “Share” button, are also passed on to Facebook. Find out more at https://de-de.facebook.com/about/privacy.

TWITTER PRIVACY POLICY

This website uses features from Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you visit our pages with Twitter plug-ins, a connection is established between your browser and Twitter's servers. Data is already being transferred to Twitter. If you have a Twitter account, this data can be linked to it. If you do not want this data to be associated with your Twitter account, please log out of Twitter before visiting our site. Interactions, in particular clicking on a “re-tweet” button, are also shared with Twitter. Find out more at https://twitter.com/privacy.

INSTAGRAM PRIVACY POLICY

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please see Instagram's privacy policy: http://instagram.com/about/legal/privacy/

LINKEDIN PRIVACY POLICY

This website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our pages that contains LinkedIn features, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our websites using your IP address. If you click on LinkedIn's “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data and its use by LinkedIn.

For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

PINTEREST PRIVACY POLICY

On this website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page that contains such a plugin, your browser connects directly to Pinterest's servers. The plugin transmits log data to the Pinterest server in the USA. This log data may include your IP address, the address of the websites visited, which also include Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

For more information on the purpose, scope and further processing and use of data by Pinterest, as well as your related rights and options for protecting your privacy, please see Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy

EXTERNAL PAYMENT SERVICE PROVIDERS

This website uses external payment service providers whose platforms users and we can use to make payment transactions. For example via

  • PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
  • Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
  • Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
  • American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)
  • PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
  • Bexio AG (https://www.bexio.com/de-CH/datenschutz)
  • Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
  • Apple Pay (https://support.apple.com/de-ch/ht203027)
  • Stripe (https://stripe.com/ch/privacy)
  • Klarna (https://www.klarna.com/de/datenschutz/)
  • Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/)
  • Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/) etc.

As part of the fulfilment of contracts, we use payment service providers on the basis of the Swiss Data Protection Regulation and, to the extent necessary, Article 6 (1) lit. b. EU GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with Swiss Data Protection Ordinance and, to the extent necessary, in accordance with Article 6 (1) (f) of the EU GDPR to offer our users effective and secure payment options.

The data processed by payment service providers includes inventory data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, sum and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed by payment service providers and stored by them. As an operator, we do not receive any information about the (bank) account or credit card, but only information to confirm (accept) or reject the payment. Payment service providers may transfer the data to credit agencies. The purpose of this transfer is to verify identity and credit. In this regard, we refer to the terms and conditions and privacy policies of the payment service providers.

Payment transactions are subject to the terms and conditions and data protection notices of the respective payment service providers, which are available within the respective website or transaction applications. We also refer to these for further information and to assert revocation, information and other data subject rights.

NEWSLETTERS - MAILCHIMP

The newsletters are sent using the mailing service provider 'MailChimp', a newsletter delivery platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can read the shipping service provider's privacy policy here view. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection levels (PrivacyShield). The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO and an order processing contract in accordance with Art. 28 para. 3 p. 1 GDPR.

The shipping service provider can use the recipients' data in pseudonymous form, i.e. without attribution to a user, to optimize or improve its own services, e.g. to technically optimize the delivery and presentation of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass on the data to third parties.

NEWSLETTER VIA WHATSAPP

You can also receive our free newsletter via the WhatsApp instant messaging service. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as “WhatsApp” only. Some user data is processed on WhatsApp servers in the USA.

Through certification in accordance with the EU-US Privacy Shield “EU-US Privacy Shield” However, WhatsApp guarantees that the EU's data protection requirements are also met when processing data in the USA. WhatsApp also offers more Data protection information on.

In order to receive our newsletter via WhatsApp, you need a WhatsApp user account. Details of what data WhatsApp collects during registration can be found in the above WhatsApp privacy information.

If you then sign up to receive our newsletter via WhatsApp, the mobile phone number you entered during the registration process will be processed by WhatsApp. In addition, your IP address and the date of your registration and time are stored. As part of the further registration process, your consent to receive the newsletter will be obtained, the content will be described in detail and reference will be made to this privacy policy.

The legal basis for sending the newsletter and analysis is Art. 6 para. 1 lit. a.) GDPR.

In accordance with Article 7 (3) GDPR, you can withdraw your consent to receive the newsletter at any time with immediate effect. All you have to do is inform us of your withdrawal. You can also block newsletter receipt by setting the WhatsApp software on your device.

USING ADOBE FONTS

We use Adobe fonts to visually design our website. Adobe Fonts is a service provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe), which gives us access to a font library. To integrate the fonts we use, your browser must connect to an Adobe server in the USA and download the font required for our website. Adobe receives the information that our website has been accessed from your IP address. For more information about Adobe Fonts, please see Adobe's privacy policy, which can be found here: Adobe Fonts

USING FONTS.COM

This website uses Fonts.com, a font visualization service provided by Monotype Imaging Holdings Inc., which allows this website to incorporate appropriate content on its pages. Personal data collected: Usage data and various types of data, as described in the service's privacy policy. Place of processing: United States of America (USA); Privacy statement

YOUTUBE PRIVACY POLICY

This website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on the handling of user data, please see YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy

PRIVACY POLICY FOR VIMEO

Plug-ins from the Vimeo video portal from Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on this website. Each time you visit a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. Through interactions with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found in Vimeo privacy policy.

If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website.

Vimeo also calls up the Google Analytics tracker via an iframe in which the video is accessed. This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. You can also prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

ORDER PROCESSING IN THE ONLINE SHOP WITH CUSTOMER ACCOUNT

We process our customers' data in accordance with federal data protection regulations (Data Protection Act, DSG) and the EU GDPR, as part of ordering processes in our online shop, to enable them to select and order the selected products and services, as well as their payment and delivery or execution.

The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. Processing is carried out for the purpose of providing contractual services as part of operating an online shop, billing, delivery and customer services. In doing so, we use session cookies, e.g. to save the content of the shopping cart, and permanent cookies, e.g. to save the login status.

Processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as required is required to establish and fulfill the contract. We only disclose the data to third parties as part of delivery, payment or within the framework of legal permits and obligations. The data is only processed in third countries if this is necessary to fulfill the contract (e.g. at the customer's request upon delivery or payment).

Users can optionally create a user account, in particular where they can view their orders. As part of registration, the required mandatory information is provided to users. The user accounts are not public and cannot be indexed by search engines, such as Google. If users have cancelled their user account, their data will be deleted with regard to the user account, subject to their storage being necessary for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until deleted with subsequent archiving in the event of a legal obligation. It is the responsibility of users to secure their data before the end of the contract in the event of termination.

As part of registration and re-registrations as well as using our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user in protecting against misuse and other unauthorized use. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.

The deletion takes place after the expiry of legal warranty and comparable obligations, and the need to store the data is checked at irregular intervals. In the case of legal archiving obligations, they will be deleted after their expiry.

AGENCY SERVICES

We process our clients' data in accordance with federal data protection regulations (Data Protection Act, DSG) and the EU GDPR as part of our contractual services.

In doing so, we process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, etc.), contract data (e.g. contract subject, duration), payment data (e.g. bank details, payment history), usage and metadata (e.g. as part of the evaluation and performance measurement of marketing measures). Those affected include our customers, interested parties and their customers, users, website visitors or employees as well as third parties. The purpose of processing is to provide contract services, billing and our customer service. The legal basis for processing results from Art. 6 para. 1 lit. b DSGVO (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimization, security measures). We process data that is necessary to establish and fulfill the contractual services and point out the need to provide them. Disclosure to external parties only takes place if it is necessary as part of an assignment. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements of order processing in accordance with Article 28 GDPR and do not process the data for any purposes other than those in accordance with the order.

We delete the data after expiry of legal warranty and comparable obligations. The need to store the data is checked at irregular intervals. In the case of legal archiving obligations, they will be deleted after their expiry. In the case of data that has been disclosed to us as part of an order by the client, we delete the data in accordance with the requirements of the order, generally after the end of the order.

Note regarding data transfers to the USA (United States of America)

For reasons of completeness, we would like to point out that there are monitoring measures by US authorities for users based in Switzerland, which generally allow the storage of all personal data from Switzerland - which has been transferred to the USA.

This is done without differentiation, restriction or exception on the basis of the objectives pursued and without an objective criterion which makes it possible to restrict US authorities' access to and subsequent use of the data to very specific, strictly limited purposes which may justify interventions associated with access to and use of this data. In addition, we would like to point out that in the USA, there are no legal remedies for data subjects from Switzerland that would allow them to obtain access to the data concerning you and to obtain its correction or deletion, or that there is no effective judicial protection against general access rights from US authorities. We explicitly draw the person concerned's attention to this legal and factual situation in order to make an informed decision to consent to the use of their data.

We would like to point out to users residing in a member state of the EU that, from the perspective of the European Union, the USA does not have an adequate level of data protection.

COPYRIGHTS

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of all files.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and may be subject to compensation.

AMENDMENTS

We can amend this privacy policy at any time without notice. The current version published on our website applies. To the extent that the privacy policy is part of an agreement with you, we will inform you of the change by email or other appropriate means in the event of an update.

QUESTIONS TO THE DATA PROTECTION OFFICER

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization listed at the beginning of the privacy policy directly.

Horgen, 23.02.2020

Source: SwissAttorney