Privacy Policy

General Notice

Pursuant to Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DSG), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.

In cooperation with our hosting providers, we endeavour to protect the databases as well as possible from unauthorised access, loss, misuse or falsification.

We point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing and use of data in accordance with the description below. This website can basically be visited without registration. Data such as accessed pages or names of accessed files, date and time are stored on the server for statistical purposes, without this data being directly related to your person. Personal data, in particular name, address or e-mail address, is collected on a voluntary basis wherever possible. Without your consent, data is not passed on to third parties.

Processing of Personal Data

Personal data is all information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, obtaining, deletion, storage, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Insofar as the EU GDPR is applicable, we process personal data on the following legal bases in connection with Art. 6 para. 1 GDPR:

• •Consent (Art. 6 para. 1 sent. 1 lit. a GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• •Contract performance and pre-contractual enquiries (Art. 6 para. 1 sent. 1 lit. b GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or for pre-contractual measures taken at the data subject's request.
• •Legal obligation (Art. 6 para. 1 sent. 1 lit. c GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
• •Protection of vital interests (Art. 6 para. 1 sent. 1 lit. d GDPR) – Processing is necessary to protect the vital interests of the data subject or another natural person.
• •Legitimate interests (Art. 6 para. 1 sent. 1 lit. f GDPR) – Processing is necessary for the purposes of the legitimate interests of the controller or a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject.

We process personal data for the duration necessary for the respective purpose. In the case of longer retention periods due to statutory or other obligations to which we are subject, we restrict processing accordingly.

Relevant Legal Bases

Pursuant to Art. 13 GDPR, we inform you of the legal bases of our data processing. Unless the legal basis is mentioned in this privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR; the legal basis for processing for the performance of our services and contractual measures as well as answering enquiries is Art. 6 para. 1 lit. b GDPR; the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR; and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. Where vital interests of the data subject or another natural person require processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security Measures

We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, circumstances and purposes of processing.

These measures include in particular ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access to it, input, disclosure, availability and separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, deletion of data and responses to data threats. We also consider the protection of personal data already in the development or selection of hardware, software and procedures.

Transmission of Personal Data

In the course of our processing of personal data, data may be transmitted to or disclosed to other bodies, companies, legally independent organisational units or persons. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such cases, we comply with the legal requirements and conclude appropriate contracts or agreements that serve to protect your data.

Data Processing in Third Countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if processing takes place within the framework of the use of services of third parties or the disclosure or transmission of data to other persons, bodies or companies, this is only done in compliance with the legal requirements.

Subject to express consent or contractually or legally required transmission, we process data in third countries only with a recognised level of data protection, contractual obligation through standard contractual clauses of the EU Commission, certifications or binding internal data protection provisions (Art. 44 to 49 GDPR).

Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored on the user's computer by a browser. A cookie primarily serves to store information about a user during or after their visit within an online service. The stored information may include, for example, language settings on a website, login status, a shopping cart or the point at which a video was watched.

You can prevent the storage of cookies by setting your browser software accordingly. However, we point out that in this case not all functions of this website may be fully available. You can also delete cookies at any time.

Rights of the Data Subject

You have the following rights with regard to personal data concerning you:

• •Right to information – You can request information about the data we process about you.
• •Right to rectification – You can request the correction of inaccurate or incomplete data.
• •Right to erasure – You can request the deletion of your data, unless statutory retention obligations prevent this.
• •Right to restriction of processing – You can request the restriction of processing of your data.
• •Right to data portability – You can request the transfer of your data to another controller.
• •Right to object – You can object to the processing of your data at any time.
• •Right to withdraw consent – You can withdraw your consent at any time with effect for the future.

Deletion of Data

We delete your personal data as soon as it is no longer necessary for the purpose for which it was collected. Statutory retention periods remain unaffected. If data is subject to statutory retention periods, we restrict processing for the duration of the retention period.

Contact

If you have any questions about data protection, please contact us at the address given above or by email at info@colectivomandarina.ch.