Data protection
With this data protection declaration we inform you which personal data we process in connection with our activities and operations including our agisuisse.ch website. In particular, we provide information as to why, how and where we process which personal data. We also provide information about the rights of people whose data we process.
Further data protection declarations and other legal documents such as General Terms and Conditions (GTC), Terms of Use or Conditions of Participation may apply to individual or additional activities.
We are subject to Swiss data protection law and any applicable foreign data protection law, such as that of the European Union (EU) with the General Data Protection Regulation (GDPR = DSGVO). The European Commission recognizes that Swiss data protection law ensures adequate data protection.
1. Contact addresses
Responsibility for the processing of personal data:
agisuisse consult gmbh
Hügelstrasse 14
8002 Zürich
We would like to point out if there are other persons responsible for the processing of personal data in individual cases.
Data Protection Representation in the European Economic Area (EEA)
We have the following data protection representation in accordance with Art. 27 GDPR. The data protection representation serves as an additional point of contact for supervisory authorities and data subjects in the European Union (EU) and the rest of the European Economic Area (EEA) for inquiries in connection with the General Data Protection Regulation (GDPR):
VGS data protection partner UG
Am Kaiserkai 69
20457 Hamburg
Germany
2. Terms and legal bases
2.1 Terms
Personal data is all information that relates to a specific or identifiable person. A data subject is a person about whom personal data is processed.
Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, collection, deletion, storage, modification, destruction and use of personal data.
The European Economic Area (EEA) comprises the member states of the European Union (EU) as well as the Principality of Liechtenstein, Iceland and Norway. The General Data Protection Regulation (GDPR) describes the processing of personal data as processing of personal data.
2.2 Legal bases
We process personal data in accordance with Swiss data protection law, in particular the Federal Data Protection Act Bundesgesetz über den Datenschutz (DSG) and the Ordinance on the Federal Data Protection Act Verordnung zum Bundesgesetz über den Datenschutz (VDSG).
If and to the extent that the General Data Protection Regulation (GDPR) is applicable, we process personal data in accordance with at least one of the following legal bases:
- Art. 6 Abs. 1 lit. b DSGVO for the necessary processing of personal data to fulfill a contract with the person concerned and to carry out pre-contractual measures.
- Art. 6 Abs. 1 lit. f DSGVO for the necessary processing of personal data in order to protect our legitimate interests or those of third parties, provided that the fundamental freedoms and fundamental rights and interests of the data subject do not prevail. Legitimate interests are in particular our interest in being able to carry out our activities and activities in a permanent, user-friendly, safe and reliable manner and to be able to communicate about them, ensuring information security, protection against misuse, enforcing our own legal claims and complying with Swiss law.
- Art. 6 Abs. 1 lit. c DSGVO for the necessary processing of personal data to fulfill a legal obligation to which we are subject under any applicable law of member states in the European Economic Area (EEA).
- Art. 6 Abs. 1 lit. e DSGVO for the necessary processing of personal data to perform a task that is in the public interest.
- Art. 6 Abs. 1 lit. a DSGVO for the processing of personal data with the consent of the person concerned.
- Art. 6 Abs. 1 lit. d DSGVO for the necessary processing of personal data in order to protect the vital interests of the data subject or another natural person.
3. Nature, Scope and Purpose
We process the personal data that is required to be able to carry out our activities and activities in a permanent, user-friendly, safe and reliable manner. Such personal data can in particular fall into the categories of inventory and contact data, browser and device data, content data, meta or edge data and usage data, location data, sales data as well as contract and payment data.
We process personal data for as long as is required for the respective purpose or purposes or by law. Personal data that no longer needs to be processed will be made anonymous or deleted.
We can have personal data processed by third parties. We can process personal data together with third parties or transfer them to third parties. Such third parties are, in particular, specialized providers whose services we use. We also guarantee data protection with such third parties.
We only process personal data with the consent of the person concerned, unless processing is permitted for other legal reasons. Processing without consent may be permissible, for example, to fulfill a contract with the data subject and for appropriate pre-contractual measures to protect our overriding legitimate interests because the processing is evident from the circumstances or after prior information.
In this context, we process in particular information that a person concerned voluntarily transmits to us when contacting us - for example by post, e-mail, instant messaging, contact form, social media or telephone - or when registering for a user account. We can store such information, for example, in an address book or with comparable tools. If we receive data about other people, the transmitting people are obliged to ensure data protection for these people and to ensure the accuracy of this personal data.
We also process personal data that we receive from third parties, procure from publicly accessible sources or collect in the performance of our activities and activities, if and to the extent that such processing is permitted for legal reasons.
4. Personal data abroad
In principle, we process personal data in Switzerland and in the European Economic Area (EEA). However, we can also export or transmit personal data to other countries, in particular in order to process them there or have them processed.
We can export personal data to all states and territories on earth Staaten und Territorien auf der Erde and elsewhere in the universe Universum, provided that the local law, in the opinion of the Federal Data Protection and Information Commissioner Einschätzung des Eidgenössischen Datenschutz- und Öffentlichkeitsbeauftragten (FDPIC) or according to a decision of the Swiss Federal Council, provides adequate data protection and - if and to the extent that the General Data Protection Regulation (DSGVO) is applicable - according to the decision of the European Commission Beschluss der Europäischen Kommission ensures adequate data protection.
We can transfer personal data to countries whose law does not guarantee adequate data protection, provided data protection is guaranteed for other reasons, in particular on the basis of standard data protection clauses or other suitable guarantees. In exceptional cases, we can export personal data to countries without adequate or suitable data protection if the special data protection requirements are met, for example the express consent of the person concerned or a direct connection with the conclusion or execution of a contract. Upon request, we will be happy to provide affected persons with information about any guarantees or provide a copy of guarantees.
5. Rights of Data Subjects
Affected persons about whom we process personal data have the rights under Swiss data protection law. This includes the right to information as well as the right to correction, deletion or blocking of the processed personal data.
Affected persons whose personal data we process can - if and to the extent that the General Data Protection Regulation (GDPR) is applicable - request confirmation free of charge as to whether we are processing personal data relating to them. In this case, data subjects can request information about the processing of their personal data, have the processing of their personal data restricted, exercise their right to data portability and have their personal data corrected, deleted ("right to be forgotten"), blocked or completed.
Affected persons whose personal data we process can - if and to the extent that the GDPR is applicable - revoke a given consent at any time with effect for the future and object to the processing of their personal data at any time.
Affected persons about whom we process personal data have a right of appeal to a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner Eidgenössische Datenschutz- und Öffentlichkeitsbeauftragte (FDPIC).
6. Data security
We take appropriate technical and organizational measures to ensure data security appropriate to the risk in question. However, we cannot guarantee absolute data security.
Our website is accessed using transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated to HTTPS). Most browsers mark transport encryption with a padlock in the address bar.
Our digital communication is subject - like basically all digital communication - to mass surveillance without cause or suspicion as well as other surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We have no direct influence on the corresponding processing of personal data by secret services, police stations and other security authorities.
7. Use of the Website
7.1 Cookies
We may use cookies. Cookies - our own cookies (first-party cookies) as well as cookies from third parties whose services we use (third-party cookies) - are data that are stored in the browser. Such stored data need not be limited to traditional text-form cookies.
Cookies can be stored in the browser temporarily as "session cookies" or for a certain period of time as so-called permanent cookies. "Session cookies" are automatically deleted when the browser is closed. Permanent cookies have a certain storage period. In particular, cookies make it possible to recognize a browser the next time you visit our website and thus, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.
Cookies can be completely or partially deactivated or deleted in the browser settings at any time. Without cookies, our website may no longer be fully available. We actively request - at least if and to the extent necessary - your express consent to the use of cookies.
In the case of cookies used to measure success and reach or for advertising, a general objection ("opt-out") via AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices is required for numerous services (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
7.2 Server Log Files
We can record the following information for each access to our website, provided that this is transmitted from your browser to our server infrastructure or can be determined by our web server: Date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual sub-pages of our website called up including amount of data transferred, website last called up in the same browser window (referrer).
We store such information, which may also represent personal data, in server log files. The information is required in order to provide our website in a permanent, user-friendly and reliable manner and to be able to ensure data security and thus in particular the protection of personal data - also by third parties or with the help of third parties.
7.3 Tracking pixels
We may use web beacons on our website. Tracking pixels are also known as web beacons. Tracking pixels - also from third parties whose services we use - are small, usually invisible images that are automatically retrieved when you visit our website. The same information can be recorded with tracking pixels as in server log files.
8. Third Party Services
We use services from specialized third parties in order to be able to carry out our activities and activities in a durable, user-friendly, safe and reliable manner. Such services allow us, among other things, to embed features and content on our website. With such embedding, the services used record the Internet Protocol (IP) addresses of the users at least temporarily for technically compelling reasons.
For necessary security-related, statistical and technical purposes, third parties whose services we use can process data in connection with our activities in an aggregated, anonymous or pseudonymised manner. It is, for example, performance or usage data in order to be able to offer the respective service.
In particular, we use:
- Google services: Dienste von Google: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the European Economic Area (EEA) and Switzerland; General information on data protection: "Principles of data protection and security"«Grundsätze zu Datenschutz und Sicherheit», "Privacy policy"Datenschutzerklärung, "Google is committed to complying with applicable data protection laws"«Google ist der Einhaltung der anwendbaren Datenschutzgesetze verpflichtet», "Guide to data protection in Google products"«Leitfaden zum Datenschutz in Google-Produkten», "How we use data from websites or apps on or in which our services are used" (information from Google) «Wie wir Daten von Websites oder Apps verwenden, auf bzw. in denen unsere Dienste genutzt werden» (Angaben von Google), "Types of cookies and other technologies used by Google" «Von Google verwendete Cookie-Arten und sonstige Technologien», "Personalized advertising" (activation / deactivation / settings) «Personalisierte Werbung» (Aktivierung / Deaktivierung / Einstellungen).
8.1 Digitale Infrastruktur
We use services from specialized third parties in order to be able to use the digital infrastructure required in connection with our activities and operations. This includes, for example, hosting and storage services from selected providers.
In particular, we use:
- exigo: Hosting; Provider: exigo ag (Schweiz); Information on data protection: Data protection declaration, "Data protection / security". Angaben zum Datenschutz: Datenschutzerklärung, «Datenschutz / -sicherheit».
8.2 Fonts
We use third-party services to embed selected fonts, icons, logos, and symbols on our website.
In particular, we use:
- Adobe Fonts: Fonts; Providers: Adobe Inc. (USA) for users in North America / Adobe Systems Software Ireland Limited (Ireland) for users in the rest of the world; Information on data protection:"Adobe Privacy Center" «Datenschutzzentrum von Adobe», Privacy Policy (Adobe Fonts) Datenschutzerklärung (Adobe Fonts), Privacy Policy (Adobe) Datenschutzerklärung (Adobe), "Questions about Privacy?" «Fragen zum Datenschutz?», "Adobe Privacy Settings" «Adobe-Datenschutzeinstellungen».
9. Success and range measurement
We use services and programs to determine how our online offering is used. In this context, we can, for example, measure the success and reach of our activities and activities as well as the effect of third-party links on our website. However, we can also try out and compare how different versions of our online offer or parts of our online offer are used ("A/B test" method). Based on the results of the success and range measurement, we can in particular correct errors, strengthen popular content or make improvements to our online offer.
When using services and programs to measure success and reach, the Internet Protocol (IP) addresses of individual users must be saved. IP addresses are generally shortened ("IP masking") in order to follow the principle of data economy through the corresponding pseudonymization and thus improve the data protection of the users.
When using services and programs for success and range measurement, cookies can be used and user profiles can be created. User profiles include, for example, the pages visited or content viewed on our website, information on the size of the screen or browser window and the - at least approximate - location. In principle, user profiles are only created pseudonymised. We do not use user profiles to identify individual users. Individual third-party services with which users are registered can assign the use of our online offer to the user account or user profile for the respective service.
In particular, we use:
- Google Analytics: uccess and reach measurement; Provider: Google; Google Analytics-specific information: measurement also across different browsers and devices (cross-device tracking) and with pseudonymised Internet Protocol (IP) addresses, which are only exceptionally transmitted in full to Google in the USA, «Datenschutz», «Browser Add-on zur Deaktivierung von Google Analytics».
- Google Tag Manager: Integration and management of other services for success and range measurement as well as other services from Google and third parties; Provider: Google; Google Tag Manager specific information: «Mit Google Tag Manager erfasste Daten»; Further information on data protection can be found in the individual integrated and managed services.
10. Final Provisions
We have created this data protection declaration with the data protection generator Datenschutz-Generator from data protection partner Datenschutzpartner.
We can adapt and supplement this data protection declaration at any time. We will inform you about such adjustments and additions in a suitable form, in particular by publishing the current data protection declaration on our website.