DATA PROTECTION

Data protection declaration according to Art. 13 EU-DSGVO

taking into account the federal law on data protection

We are pleased that you are interested in our website. The trust of all visitors and customers, the security of your data and the protection of your privacy are of central importance to us.

Your personal data will therefore be treated by us in accordance with the applicable statutory data protection regulations and this data protection declaration. Personal data is information that can be used to find out your identity. Typical personal data include surname, first name, address, telephone number, IP address, cookies and e-mail address.

If you view and use our website or otherwise expressly provide us with information, we process the data that is automatically transmitted to us with each request from your browser (see the “Log data” section). If you voluntarily transmit personal data to us, the processing takes place exclusively for the purpose of the inquiry or the respective order. We would like to point out that data transmission on the Internet can never be completely protected against access by third parties.

In the following, we would like to explain in more detail in the individual sections which data we process when and for what purpose. It explains how the services we offer work and how the protection of your personal data is guaranteed.

Name and address of the person responsible

The person responsible within the meaning of the EU General Data Protection Regulation and other data protection regulations is: Felix Frei, Bungertweg 3, 7000 Chur, e-mail

contact

When you contact us (e.g. e-mail, telephone or via social media), your details for processing the contact request and its processing in accordance with Art. Art. 6 para. 1 lit. b) GDPR (so-called pre-contractual measure).

We delete the requests if they are no longer necessary. We review this necessity every two years. Furthermore, the statutory archiving obligations apply.

legal basis
The legal basis for the processing of this data are so-called pre-contractual measures acc. Art. 6 para. 1 lit. b) GDPR.

log data

The provider of the Internet services (provider) automatically collects “log data” in server log files.

The log data includes the following information:
> Date and time of the respective request
> Internet address (URL) that was requested
> URL that the visitor visited immediately before (referrer)
> Browser and language used
> Operating system used
> Visitor’s IP address and hostname
> Access status / http status code
> amount of data transferred

This data is transmitted to us automatically and this data cannot be assigned to your person with a reasonable effort.

legal basis
The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 Paragraph 1 Sentence 1 lit. f GDPR.
The logging is used for access control and monitoring of the technical processes and their optimization. In addition, this data is used in accordance with § 76 BDSG to check the processing under data protection aspects.
It will not be passed on to third parties, except to law enforcement authorities by judicial order if necessary.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, or after the legally prescribed deletion period has been reached.
Consequently, there is no possibility of objection on the part of the user.

your rights

You have a right to free information about the data we have stored about you and, if necessary, a right to correction, restriction of processing or deletion of this data. You also have the right to data portability. Finally, you also have the right to complain to the data protection supervisory authority about the processing of your personal data by us.

Right to object

We would also like to point out that you consent to the future processing of your personal data in accordance with the statutory provisions pursuant to Art. You can object to Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.

Right to information

If you have any questions about the collection, processing or use of your personal data, for information, for the correction, blocking or deletion of data and for the revocation of any consent you may have given or to object to a specific use of data, please contact us by email

Encryption by SSL / TLS

For security reasons, our website uses SSL or TLS encryption. This protects transmitted data and cannot be read by third parties. You can recognize successful encryption by the fact that the protocol name changes from “http://” to “https://” in the browser’s status bar and that a closed padlock symbol is visible there.

Web hosting via hosttec

We use the services of hosttec GmbH, Seestrasse 15A, 8805 Richterswil for web hosting for our websites and have concluded a contract for order processing in accordance with Art. 28 DSGVO with hosttec GmbH.

legal basis
The legal basis for the processing of this data is our legitimate interest in the operation and maintenance of the operational security of this website in accordance with Art. 6 Paragraph 1 Sentence 1 lit. f GDPR.

linking

This website may contain links to websites operated by other companies; including, for example, social media websites such as YouTube, Vimeo, Instagram or Facebook.
If you follow such links you may encounter cookies that are not under our control. We cannot assume any liability for this and we refer to the data protection regulations or cookie guidelines of the respective websites.

Google reCAPTCHA

To protect against unwanted bots, we use the reCAPTCHA service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
reCAPTCHA is a service running in the background that, with your confirmation, helps us to exclude machines from using our registration form.
We would like to point out that there is a possibility that data will be transferred to the USA and processed by US authorities. According to the current legal situation, the USA is considered an unsafe third country with an insufficient level of data protection.
There is currently no adequacy decision pursuant to Art. 45 GDPR.
However, Google has undertaken to comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).
For more information on the Standard Contractual Clauses, see

ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

and at policies.google.com/privacy/frameworks?hl=de

You can find more information about Google reCAPTCHA at www.google.com/recaptcha

You can find out more information about how Google uses data on the policies.google.com/technologies/ads overview page.
Google’s privacy policy is available at policies.google.com/privacy .

legal basis
The legal basis for this processing on our website is our legitimate interest (according to Art. 6 Para. 1 lit. f GDPR) in securing our website and protecting it against misuse.

cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your end device and store certain information for exchange with our system.

Types of Cookies
First-party cookies – Necessary cookies
These are generated by our website and are necessary for the error-free operation of the application. These cookies are also called session cookies or transient and are automatically deleted after the end of the browser session, i.e. after closing the browser.
Without these cookies, the error-free operation of the website cannot be guaranteed.

legal basis
The legal basis for the processing of this data is Art. 6 Paragraph 1 Sentence 1 lit. f GDPR.

Third party cookies

These are set by various services (e.g. analysis services) and store a unique identifier that your end device recognizes the next time you visit (persistent cookies).

These cookies remain on your end device for a specified period of time. This duration is variable.

legal basis
The legal basis for the processing of this data is Art. 6 Paragraph 1 Sentence 1 lit. a GDPR.
We would like to point out that with some providers, especially providers from the USA, there is the possibility that data will be transferred to the USA and processed by US authorities. According to the current legal situation, the USA is considered an unsafe third country with an insufficient level of data protection.
There is currently no adequacy decision pursuant to Art. 45 GDPR, nor can suitable guarantees acc. Art. 46 GDPR.
Some American companies have declared that they will comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).
We would like to point out that in the event of non-compliance with the aforementioned standard contractual clauses, the legal basis is your express consent, pursuant to Art. Art. 49 para. 1 lit. a DSGVO is.

Disable cookies

Please note that certain cookies are set as soon as you enter our website.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases, in particular cookies from third parties (third party cookies) or in general.
If cookies are not accepted, the functionality of our website may be restricted for you.

Pixelmate

In order to be able to use the services we use optimally and to support your decision in accordance with Art. To respect the legal requirements, we use GDPR Pixelmate, developed by Christian Wedel ( https://wp-dsgvo-plugin.com) and Sabrina Keese-Haufs ( https://lawlikes.de/ ). When you visit our website, you can use Pixelmate to control which of the services we use you want to agree to. Your decision will be saved separately for each service we use. You can change this setting at any time by using the “Cookies” link at the bottom left of the website. Pixelmate does not store any personal data.

Google Tag Manager

This website uses the Google Tag Manager.

In order to be able to centrally manage and configure data collection, this website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means: No cookies are used and no personal data is recorded. The Google Tag Manager triggers other tags, which in turn may collect personal data. This is hereby separately pointed out. However, the Google Tag Manager does not access this data. The Google Tag Manager does not collect or store any data. If a deactivation has been carried out at the domain or cookie level, it will remain in place for all tracking tags if they are implemented with the Google Tag Manager.

Google provides further information on this here: www.google.de/tagmanager/use-policy.html

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and which are used for analysis enabling you to use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. According to the GDPR, the USA is considered a third country with an uncertain level of data protection.

If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports and statistics on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full.

You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plug-in available under the following link. Download and install in: https://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension of IP masking (“anonymizeIp”). As a result, IP addresses are further processed in abbreviated form; According to Google, a personal reference should be almost impossible. If the data collected about you has a personal reference, this should be excluded immediately and the personal data deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

We would like to point out that there is a possibility that data will be transferred to the USA and processed by US authorities. According to the current legal situation, the USA is considered an unsafe third country with an insufficient level of data protection.

There is currently no adequacy decision pursuant to Art. 45 GDPR.

However, Google has undertaken to comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).

For more information on the Standard Contractual Clauses, see

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de and at https://policies.google.com/privacy /frameworks?hl=de

To protect your personal data, we have concluded a contract for order data processing in accordance with Art. 28 DSGVO and a special, supplementary addendum for data processing with Google, as well as the change in Google’s terms and conditions and the changed order data processing conditions with regard to the use of the standard contractual clauses.

You can find more information at: privacy.google.com/businesses/processorterms/

The personal data of the users will be deleted or made anonymous after 14 months.

You can find more information about Google here:
User conditions: www.google.com/analytics/terms/de.html

Overview of data protection: policies.google.com/?hl=de,
and the privacy policy: www.google.de/intl/de/policies/privacy

legal basis
The legal basis for this processing of the data is your consent in accordance with Art. Art. 6 para. 1 lit. a GDPR.

To send our newsletter, we use the newsletter plugin https://www.thenewsletterplugin.com/ by Stefano Lissa & The Newsletter Team.

If you subscribe to our e-mail newsletter and would like to read it regularly, you must register with a valid e-mail address and thus give your consent to the processing of your personal data by us. Please note the declaration of consent on the registration form for the newsletter.

Before the newsletter is sent, you must expressly confirm to us as part of the so-called double opt-in procedure that we should activate the e-mail newsletter service for you. We do this to avoid using third-party e-mail addresses for registrations. You will receive a confirmation and authorization email from us asking you to click on the link contained in this email and thereby confirm that you would like to receive our newsletter. If you do not confirm, your personal data will be deleted within 7 days.

In connection with the registration, in addition to the e-mail address, the time of registration, the time of confirmation, the IP address and the consent text are also stored and we use the e-mail address exclusively for the delivery of the newsletter, unless you expressly consent to another use have agreed.

This data is stored on the hosttech servers.

Small, “invisible” files (beacons) that are sent with the newsletter can be used to carry out various evaluations to improve our offers. The IP address, browser and time of retrieval and opening of the newsletter and click behavior on links contained in the newsletter are recorded and statistically evaluated.

There is currently no adequacy decision pursuant to Art. 45 GDPR.

legal basis
The newsletter is sent on the basis of the consent of the recipient in accordance with Art. Art. 6 para. 1 lit. a GDPR.
The analysis of the opening and click rates is based on our legitimate interest in accordance with Art. Art. 6 para. 1 lit. f GDPR. It is in our interest to create offers that are as suitable as possible for our users and to achieve this by analyzing user behavior and continuously optimizing it.

YouTube

Our website uses YouTube functions. When you visit our site, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you give YouTube the opportunity to assign your user behavior directly to your personal YouTube profile. You can avoid this by logging out of your YouTube account.

We have no knowledge of further processing and the duration of storage.

The operator of the service is Google LLC, D/B/A YouTube, 901 Cherry Ave., San Bruno, CA 94066, USA.

There is currently no adequacy decision pursuant to Art. 45 GDPR.

For more information on the Standard Contractual Clauses, see
ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

and at policies.google.com/privacy/frameworks?hl=de

For more information on how YouTube handles user data, see YouTube’s privacy policy at: www.google.de/intl/de/policies/privacy

legal basis
The legal basis for this processing of the data is your consent in accordance with Art. Art. 6 para. 1 lit. a GDPR