Privacy policy for the Kieser website

 

Privacy policy for the Kieser websiteWe, Kieser Training AG, take the protection of your personal data very seriously. This privacy policy informs you about how we collect, process and use your personal data when you visit our website and make use of the services offered on it. Personal data is any information relating to an identified or identifiable natural person.

Responsible for data processing on this website is

Kieser Training AG Hardstrasse 223 8005 Zurich Switzerland E-mail: kontakt.datenschutz@kieser.com

The EU Commission has issued an adequacy decision for Switzerland (2000/518/EC), which confirms that Switzerland guarantees an adequate level of data protection in accordance with Art. 45 GDPR.

Our representative in the European Union pursuant to Art. 27 GDPR is

Kieser Training GmbH Schanzenstraße 39/D15 51063 Cologne Germany Email: kontakt.de.datenschutz@kieser.com

This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done and what rights you have under the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG). 

### Duration of storage

Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such statutory retention obligations may arise in particular from commercial or tax law regulations.

### Categories of recipients of the data

We use processors in the context of processing your data. The processing operations carried out by such processors include, for example, hosting, e-mail dispatch, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures or file and data carrier destruction. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller and are contractually obliged to guarantee suitable technical and organisational measures for data protection. We may also transfer your personal data to organisations such as postal and delivery services, your bank, tax consultants/auditors or the tax authorities. Further recipients may result from the following information.

### Data protection officer

You can reach our data protection officer or data protection advisor using the following contact details

Herting Oberbeck Datenschutz GmbH

Hallerstr. 76, 20146 Hamburg

https://www.datenschutzkanzlei.de

### Processing of server log files

When you visit our website, our system automatically collects data and information from the computer system of the accessing computer. These so-called server log files are technically necessary in order to display our website to you and to ensure stability and security.

The following data is collected:

• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (IP address)
• Time of the server enquiry
• Name of the retrieved file
• Amount of data transferred
   

This data is temporarily stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP, based on our legitimate interest in improving the stability and functionality of our website and its security.

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. 

### Cookies

Our website uses cookies. Cookies are small text files that are stored on your end device and enable your use of the website to be analysed. Some cookies are technically necessary to ensure the functionality of our website. Other cookies help us to make our website more user-friendly and to statistically analyse the use of our website.

Technically necessary cookies: These cookies are absolutely necessary for the operation of the site and enable security-relevant functionalities, for example. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR i.V.m. § 25 para. 2 no. 2 TDDDG / Art. 31 para. 1 DSG, our legitimate interest in offering you a functional website.

Cookies for analysis and optimisation (consent required): We also use cookies to analyse the use of our website and to optimise our offering. This only takes place if you have given us your consent to do so. The legal basis for the processing of personal data using cookies for analysis and optimisation purposes is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG / Art. 31 para. 1 DSG.

You can revoke your consent at any time with effect for the future by adjusting your cookie settings in your browser or changing them via our Consent Management Tool (if available and implemented). Please note that if you deactivate cookies, you may not be able to use all the functions of our website to their full extent.

Information on the specific cookies set by services such as Google Analytics, Hotjar or marketing tools can be found in the relevant sections of this privacy policy. 

### Consent management tool

We use a consent management tool to obtain and manage your consent to the processing of data. This tool helps us to fulfil the requirements of the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) by allowing you to set your preferences regarding cookies and other tracking technologies.

When you visit our website, you will see the Consent Management Tool, which informs you about the different types of data we collect and process and gives you the opportunity to give or withhold your consent. Your preferences are saved and can be changed by you at any time.

The legal basis for the processing of data in connection with the Consent Management Tool is Art. 6 para. 1 lit. c GDPR / Art. 31 para. 1 lit. a FADP, as we are legally obliged to obtain and manage your consent. 

### Fonts

Our website uses so-called web fonts, which are provided by Monotype Imaging Holdings Inc, 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Monotype's servers. As a result, Monotype becomes aware that our website has been accessed via your IP address. The use of web fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP.[DSK1] 

If your browser does not support web fonts, a standard font will be used by your computer.

Monotype (MyFonts) states in its privacy policy that when using the web font services, the IP address of visitors to the website is transmitted to a third-party service provider. This transmission of the IP address takes place in order to count page views for licence holders and to prevent unauthorised use of the web font software. However, the IP addresses are not transmitted to Monotype itself, stored or otherwise processed by its third-party provider.

As Monotype is a US company, data may be transferred to the USA. There is currently no adequacy decision by the EU Commission for the USA within the meaning of Art. 45 GDPR. We would like to point out that there may be risks involved in transferring data to the USA, e.g. that US authorities could access the data. As a rule, standard contractual clauses of the EU Commission are used as suitable guarantees for data transfer. We recommend consulting Monotype's current privacy policy for detailed information.

Further information on MyFonts Web Fonts and the privacy policy of Monotype Imaging Holdings Inc. can be found at: https://www.myfonts.com/a/font/legal/website-use-privacy-policy 

### Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact e-mail. We process the data for the purpose of answering your enquiry. 

If your enquiry is aimed at the conclusion or execution of a contract with us, Art. 6 para. 1 letter b GDPR / Art. 31 para. 2 DSG is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting enquiring persons. The legal basis for data processing is then Art. 6 para. 1 letter f GDPR / Art. 31 para. 1 FADP.

The data you enter in the contact form will remain with us until you ask us to delete it or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible. We therefore recommend that you send confidential information by post or contact us directly. 

### Studio enquiry

On our website, we offer you the opportunity to make an enquiry for a trial training session or information about one of our studios. If you use this offer, the data entered in the input mask will be transmitted to us and stored. This is usually your name, your e-mail address, your telephone number and the studio you have selected or your enquiry.

This data is processed to carry out pre-contractual measures in response to your enquiry (Art. 6 para. 1 lit. b GDPR / Art. 31 para. 2 lit. a FADP) in order to process your studio enquiry, arrange an appointment for a trial training session or provide you with the requested information.

Your data will be used exclusively for processing your enquiry and the associated communication. Your data will not be passed on to third parties unless this is absolutely necessary to process your enquiry (e.g. forwarding to the Kieser Training studio you have selected) or you have expressly consented to this.

The data entered by you as part of the studio enquiry will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed or if no contractual relationship is established). Mandatory statutory provisions - in particular retention periods - remain unaffected.                   

### Trial training

If you register for a trial training session at Kieser Training, we will collect the personal data required for this. This usually includes your name, your contact details (such as email address and telephone number) and, if applicable, health-related information that is relevant for the safe and effective implementation of the trial training programme. This health-related data will only be collected with your express consent.

The processing of your personal data in the context of the trial training is carried out to fulfil the contract for the performance of the training (Art. 6 para. 1 lit. b GDPR / Art. 31 para. 2 lit. a FADP) and on the basis of your consent for health-related data (Art. 9 para. 2 lit. a GDPR in conjunction with Art. 6 para. 1 lit. a FADP). Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP in conjunction with. Art. 6 para. 7 lit. a DSG).

Your data will be used to plan and carry out the trial training and to contact you in this regard. Your data will not be passed on to third parties unless this is necessary to fulfil our contractual obligations or you have expressly consented to this.

The data you provide during the trial training session will be stored by us for as long as this is necessary to carry out the training and fulfil contractual or legal obligations. Your data will be deleted once the purpose no longer applies or statutory retention periods have expired. You can revoke your consent to the processing of health-related data at any time. 

### Newsletter

If you register for our newsletter, we will use the e-mail address you provide to send you regular information about our offers, news and promotions. We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter.

The processing of your e-mail address for the newsletter dispatch takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 DSG). You can revoke this consent at any time with effect for the future by unsubscribing from the newsletter. You will find the unsubscribe link at the end of each newsletter. Alternatively, you can also send your cancellation by email to the address given in the legal notice. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

Your e-mail address will be stored for the duration of the newsletter subscription by us or by the service provider commissioned by us to send the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted from the mailing list, unless you have expressly consented to further use of your data or such use is permitted by law and we inform you of this in this privacy policy.

We may use external service providers to send our newsletter. We have concluded corresponding order processing contracts with these service providers in accordance with Art. 28 GDPR / Art. 9 FADP, which ensure that your data is protected and only used for the purpose of sending the newsletter.

 ### Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager is a tool that allows us to integrate and manage tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP. [DSK3] As a website operator, we have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP; the consent can be revoked at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Further information on data protection at Google can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de. ### Statistics

a. Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse the behaviour of website visitors. In doing so, we receive various usage data, such as page views, length of visit, operating systems used and origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 DSG and § 25 para. 1 TDDDG. 

IP anonymisation: We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics with Google Analytics: This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

Storage period: Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

b. Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: www.hotjar.com).

Hotjar is a tool for analysing your user behaviour on our website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a certain place. Hotjar uses this information to create so-called heat maps, which can be used to determine which website areas are favoured by website visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you cancelled your entries in a contact form (so-called conversion funnels).

In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offering.

Hotjar uses cookies. Hotjar cookies enable us to analyse your user behaviour on our website. The information generated by the cookie about your use of this website is usually transmitted to a Hotjar server and stored there.

The use of Hotjar and the storage of Hotjar cookies are based on Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 DSG and § 25 para. 1 TDDDG. Consent can be revoked at any time. 

For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link www.hotjar.com/privacy. 

### Marketing

We use various marketing services on our website to publicise our offers and send you relevant information and advertising. The processing of your data in the context of these marketing services is generally based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDG / Art. 31 para. 1 FADP), which you can give and revoke at any time via our Consent Management Tool, or on the basis of our legitimate interests in marketing our services (Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP), unless consent is required or available.

a. Facebook Business Tools (Meta Pixel)

Our website uses the "Meta Pixel" (formerly Facebook Pixel) and other business tools of the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

With the help of the Meta Pixel, Meta is able to determine the visitors to our website as a target group for the display of adverts (so-called "Facebook Ads"). Accordingly, we use the Meta Pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called "custom audiences"). With the help of the Meta Pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the meta pixel, we can also track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advert (so-called "conversion").

Meta processes the data in accordance with Meta's Data Usage Policy. Specific information and details about the Meta Pixel and how it works can be found in Meta's help section: https://www.facebook.com/business/help/651294705016616.Die Event data collected via the Meta Pixel is used to target our ads and improve ad delivery on Meta products such as the social media platforms Facebook and Instagram, to personalise features and content, and to improve and secure Meta products. For this purpose, the event data collected on our website using the meta pixel is transmitted to Meta Platforms Ireland Ltd. This collection and transmission of event data is carried out by us and Meta Platforms Ireland Ltd. as joint controllers. We have entered into an agreement with Meta Platforms Ireland Ltd. on processing as joint controllers, which sets out the distribution of data protection obligations between us and Meta Platforms Ireland Ltd. In this agreement, we and Meta Platforms Ireland Ltd. have agreed, among other things

• that we are responsible for providing you with all information pursuant to Art. 13, 14 GDPR on the joint processing of personal data;
• that Meta Platforms Ireland Ltd. is responsible for enabling the rights of data subjects under Art. 15 to 20 GDPR with regard to the personal data stored by Meta Platforms Ireland Ltd. after the joint processing.

 

You can access the agreement concluded between us and Meta Platforms Ireland Ltd. at www.facebook.com/legal/controller_addendum

Meta Platforms Ireland Ltd. is solely responsible for the processing of the transmitted event data following the transmission. For more information on how Meta Platforms Ireland Ltd. processes personal data, including the legal basis Meta Platforms Ireland Ltd. relies on and how to exercise your rights against Meta Platforms Ireland Ltd., please refer to Meta Platforms Ireland Ltd.'s Data Policy at https://www.facebook.com/about/privacy. 

We have also commissioned Meta Platforms Ireland Ltd. to prepare reports on the impact of our advertising campaigns and other online content (campaign reports) and to generate analyses and insights about users and their use of our website, products and services (analyses) on the basis of the event data collected via the Meta pixel. For this purpose, we transmit personal data contained in the event data to Meta Platforms Ireland Ltd. The personal data transmitted is processed by Meta Platforms Ireland Ltd. as our processor in order to provide us with the campaign reports and analyses.

The collection and transfer of personal data by us to Meta Platforms Ireland Ltd. and the commissioned processing of personal data by Meta Platforms Ireland Ltd. for the creation of analyses and campaign reports will only take place if you have given your prior consent. The legal basis for the processing of personal data is therefore Art. 6 para. 1 letter a GDPR / Art. 31 para. 1 FADP.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum. [DSK6] 

To set which types of adverts are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

The processing of your data in the context of these marketing services is based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDG / Art. 31 para. 1 DSG), which you can give via our Consent Management Tool and revoke at any time

b. Facebook Conversion API (CAPI)

We use the Facebook Conversion API of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Meta". 

User interactions on our website are transmitted to Meta on the server side in order to measure conversions (e.g. completed purchases, registrations) and to better evaluate and optimise our advertising measures on Facebook and Instagram.

In particular, the following data may be processed IP address, user agent, referrer URL, click events, order IDs, email addresses (hashed), telephone numbers (hashed) and other technical information.

The processing is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP) or our legitimate interests (Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP) in improving our performance on Facebook.

Details on data processing by Meta can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy/.

c. Google Marketing Services (Google Ads)

We use the marketing and remarketing services ("Google Marketing Services" for short) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website.

Google Marketing Services allow us to display adverts for and on our website in a more targeted manner in order to present users only with adverts that potentially match their interests. If, for example, a user is shown adverts for products that they have shown an interest in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google Marketing Services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, which content they are interested in and which offers they have clicked on, as well as technical information on the browser and operating system, referring websites, time of visit and other information on the use of the online offer.

The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address will not be merged with the user's data within other Google services.

Google may also combine the aforementioned information with information from other sources. If the user subsequently visits other websites, they can be shown adverts tailored to their interests.

User data is processed pseudonymously as part of Google Marketing Services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's perspective, the adverts are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is.

We use the "Google Ads" service as part of Google Marketing Services. In the case of Google Ads, each Google Ads customer receives a different "conversion cookie". Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained with the help of the cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Google Ads customers find out the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/ .[DSK7] 

Further information on the use of data for marketing purposes by Google can be found on the overview page: https://policies.google.com/technologies/ads, Google's privacy policy is available at policies.google.com/privacy.

The processing of your data in the context of these marketing services is based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDG / Art. 31 para. 1 DSG), which you can give and revoke at any time via our Consent Management Tool.

d. Microsoft Advertising (Bing Ads)

We use conversion tracking from Microsoft Advertising (formerly Bing Ads) on our website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft").

When you click on an advert placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you have clicked on the ad and have been redirected to this page.

The information collected using the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on an advert and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

The use of Microsoft Advertising is based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG / Art. 31 para. 1 DSG), which you can give and revoke at any time via our Consent Management Tool.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Further information on data protection and the cookies used by Microsoft Advertising can be found in Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement.[DSK8] 

### Content and services from third-party providers

We integrate content and services from third-party providers on our website in order to make our online offering appealing and to provide you with additional information or functionalities. This may include, for example, maps, videos or fonts[DSK9]  . In order to use this content and services, it is technically necessary for your IP address to be transmitted to the respective third-party providers so that the content can be delivered to your browser. The third-party providers may also use your IP address for their own statistical or marketing purposes.

The integration of this content and services is generally based on your consent (Art. 6 para. 1 lit. a GDPR / Art. 31 para. 1 FADP), which you can give and revoke at any time via our Consent Management Tool, or on the basis of our legitimate interests in an appealing presentation and optimisation of our online offer (Art. 6 para. 1 lit. f GDPR / Art. 31 para. 1 FADP), unless consent is required or available.

a. Google Maps

This website uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. As the provider of this website, we have no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. The processing takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 TDDDG / Art. 31 para. 1 DSG; the consent can be revoked at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and policies.google.com/privacy/frameworks.[DSK10] 

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de.

b. YouTube

Our website embeds videos from the YouTube platform. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our websites on which YouTube videos are embedded, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts.

The processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 TDDDG / Art. 31 para. 1 DSG; consent can be revoked at any time.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://policies.google.com/privacy?hl=de. 

### Your rights as a data subject

As a person affected by data processing, you have various rights under the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG). If you wish to assert your rights against us, you can contact us at any time at the contact addresses listed above.

Right to information (Art. 15 GDPR / Art. 25 DPA): You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to further information, e.g. the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period or the criteria for determining the storage period.

Right to rectification (Art. 16 GDPR / Art. 32 FADP): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.

Right to erasure ("right to be forgotten") (Art. 17 GDPR / Art. 32 FADP): You have the right to demand that we erase personal data concerning you immediately, e.g. if the data is no longer necessary for the purposes pursued or if you have withdrawn your consent and there is no other legal basis for the processing.

Right to restriction of processing (Art. 18 GDPR): You have the right to obtain from us restriction of processing where one of the conditions set out in Art. 18 GDPR applies, e.g. if you contest the accuracy of the personal data or the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.

Right to data portability (Art. 20 GDPR / Art. 28 FADP): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Right to withdraw consent under data protection law (Art. 7 para. 3 GDPR / Art. 6 para. 6 FADP): You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR / notification to the FDPIC pursuant to Art. 49 FADP): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. Under Swiss law, you have the right to lodge a complaint with the FDPIC if you believe that your personal data is being processed unlawfully.

### Updating this privacy policy

We reserve the right to amend this privacy policy as necessary to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

We recommend that you read this privacy policy regularly to stay up to date on the protection of the personal data we process.

Status of this privacy policy: August 2025

 ### Final provisions

Should individual provisions of this Privacy Policy be or become invalid, this shall not affect the validity of the remaining provisions.

This privacy policy is currently valid and is dated August 2025. Due to the further development of our website and offers or due to changes in legal or official requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on the website