Data Protection

6. General Principles

 

6.1 What data do we collect from you, and from whom do we receive this data?

 

Primarily, we process personal data that you provide to us or that we collect in the operation of our website. In some cases, we may also receive personal data about you from third parties. These may include the following categories:

 

Personal master data (name, address, date of birth, etc.).

Contact data (mobile number, email address, etc.).

Financial data (e.g., account information).

Online identifiers (e.g., cookie identifiers, IP addresses).

Location and traffic data.

Audio and visual recordings.

Particularly sensitive data (e.g., biometric data or information about your health).

​

6.2 Under what conditions do we process your data?

 

We process your data in good faith and for the purposes specified in this privacy policy. We strive for transparent and proportionate processing.

 

If, in exceptional cases, we cannot adhere to these principles, data processing may still be lawful if there is a justification. Justifications may include:

 

Your consent.

The performance of a contract or pre-contractual measures.

Our legitimate interests, provided they do not outweigh your interests.

 

6.3 How can you revoke your consent?

 

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of that consent unless there is another legal justification. You can revoke your consent at any time by sending an email to the address specified in the imprint. Revocation does not affect data processing that has already taken place.

 

6.4 In what cases can we disclose your data to third parties?

 

a. Principle

 

We may need to use the services of third parties or affiliated companies and entrust them with the processing of your data (so-called data processors). Categories of recipients include, in particular:

 

Accounting, fiduciary, and auditing companies.

Consultancy firms (legal advice, taxes, etc.).

IT service providers (web hosting, support, cloud services, website design, etc.).

Payment service providers.

Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.

 

In some cases, we may also be obliged to disclose your personal data to authorities.

 

b. Disclosure to partners and cooperation companies

 

We collaborate with various companies and partners that advertise their offerings on our website. It is recognizable to you that this is a third-party offering (marked as "advertisement").

 

If you take advantage of such an offer, we will transmit your personal data to the respective partner or cooperation company (e.g., name, function, communication, etc.), whose offer you wish to avail. These partners and cooperation companies are independently responsible for the personal data received. After the data is transmitted, the data protection regulations of the respective partner apply.

 

c. Visiting our social media channels

 

We have embedded links to our social media channels on our website. This is visible to you (typically through corresponding symbols). Clicking on the symbols will redirect you to our social media channels.

 

In this case, the social media providers become aware that you are accessing their platform from our website. The social media providers may use the data collected for their own purposes. We point out that we have no knowledge of the content of the transmitted data and its use by the operators.

 

d. Transfer abroad

 

As part of order processing, it may be necessary to transfer your personal data to companies abroad. These companies are obliged to comply with data protection to the same extent as we are. The transfer can take place worldwide.

 

If the level of data protection does not correspond to that of Switzerland, we conduct a prior risk assessment and contractually ensure that the same protection is guaranteed as in Switzerland (e.g., through the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the standard contractual clauses of the EU Commission at the following link.

 

6.5 How long do we keep your data?

 

We only store personal data for as long as necessary to fulfill the specific purposes for which the data was collected.

 

Data that we store during your visit to our website is kept for twelve months. An exception applies to analysis and tracking data, which may be kept for a longer period.

 

We store contract data for a longer period as required by legal regulations. In particular, we must retain business communication, closed contracts, and booking documents for up to 10 years. If we no longer need such data from you to perform the services, the data is blocked, and we only use it for invoicing and tax purposes.

 

6.6 How do we protect your data?

 

We will securely store your data and take all reasonable measures to protect it from loss, access, misuse, or alterations.

 

Our contractual partners and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary for us to forward your inquiries to affiliated companies. Even in these cases, your data is treated confidentially.

 

Within our website, we use the SSL protocol (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser.

 

6.7 What rights do you have?

 

a. Right to information

 

You can request information about the data we store about you at any time. Please send your request for information, along with proof of identity, to silvia.mohn@hirschen-zuerich.ch.

 

You also have the right to receive your data in a common file format if we process your data automatically and if:

 

You have given your consent for the processing of this data, or

You have disclosed data in connection with the conclusion or execution of a contract.

We may restrict or deny the provision of information or data if this conflicts with our legal obligations, legitimate interests, or the interests of a third party.

 

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, legal or technical reasons, or if we need more information from you. You will be informed in writing of any extension in a timely manner.

 

b. Deletion and correction

 

You have the option to request the deletion or correction of your data at any time. We may reject the request if legal regulations require us to retain or not modify the data, or if there is a legal justification for denying your request.

 

Please note that exercising your rights may conflict with contractual agreements and may have corresponding effects on contract performance (e.g., early termination of the contract or cost consequences).

 

c. Legal recourse

 

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to submit a complaint to the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch.

7. Individual data processing operations

 

7.1 Provision of the website and creation of log files

 

What information do we receive and how do we use it?

By visiting hirschen-zuerich.ch, certain data are automatically stored on our servers or on servers of services and products we use and/or have installed, for purposes of system administration, statistical analysis, backup, or tracking. These include:

 

• Your internet service provider's name;

• Your IP address (possibly);

• The version of your browser software;

• The operating system of the computer accessing the URL;

• The date and time of access;

• The website from which you visit the URL;

• The search keywords you used to find the URL.

​​

Why are we allowed to process this data?

These data cannot be directly associated with a specific individual, and there is no merging of this data with other data sources. The storage of log files is done to ensure the functionality of the website and to safeguard the security of our information technology systems. This constitutes our legitimate interest.

 

How can you prevent data collection?

The data is only stored for as long as necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of log files is essential for the operation of the website, and therefore, you have no option to object to it.

 

7.2 Pixel counting

 

How do pixel counting work?

We may use pixel counting on our website, also known as web beacons. Pixel counting, including those from third parties whose services we use, involves small, usually invisible images that are automatically retrieved when visiting our website. Pixel counting can capture the same information as server log files. We use them for the same purposes as log files, and you cannot prevent data collection.

 

7.3 Evaluations

 

Part of your personal data is processed automatically to assess specific personal aspects. Such assessments are particularly used to inform and advise you specifically about certain services or products. For this purpose, we use evaluation tools that enable us to communicate according to needs and take appropriate advertising measures, including market and opinion research.

 

7.4 Contact

 

Email

 

What information do we receive and how do we use it?

You have the option to contact us via email. When you contact us by email, the following data is processed:

 

• Email address;

• Content, subject, and date of your email;

• Contact details provided by you (e.g., name, possibly telephone number, address).

​​

Why are we allowed to process this data?

Your information is stored for the purpose of processing the inquiry and for follow-up questions. The legal basis is pre-contractual measures or our legitimate interests in handling the inquiry.

 

Security notice

We inform you that emails can be read or altered unauthorized and unnoticed during transmission. Emails can be rejected by the spam filter if identified as spam based on certain characteristics.

 

7.5 Success and reach measurement

 

How does success and reach measurement work?

Our notifications and messages may contain web links or pixel counting that capture whether a single message was opened and which web links were clicked. Such web links and pixel counting can also capture the usage of notifications and messages on a personal level.

 

Why are we allowed to process this data?

We need this statistical capture of usage for success and reach measurement to effectively and user-friendly offer notifications and messages based on the needs and reading habits of the recipients, as well as to provide them permanently, securely, and reliably.

 

7.6 Cookies

 

How do cookies work?

Our website uses cookies. Cookies are data records that are stored on the operating system of your device using the browser when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses.

 

What information do we receive and how do we use it?

Most of the cookies we use are session cookies, which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit. This enables us to save certain settings (such as language settings or location information) so that you do not have to enter them again when you revisit the website.

 

Why are we allowed to use cookies?

We use cookies to make our website more user-friendly, effective, and secure. The use of cookies and the related processing of your data are based on our legitimate interests in the specified purposes.

 

How can you prevent data collection via cookies?

Cookies are stored on your computer, giving you full control over their use. You can completely delete them or disable or restrict transmission by changing the settings in your browser. If you disable cookies for our website, some functions of the website may not be fully available.

 

7.7 Google Analytics

 

How does Google Analytics work?

Our website uses Google Analytics, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow St, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, collectively "Google," with Google Ireland Ltd. responsible for processing personal data. Google uses cookies that are stored on your device and allow an analysis of the website by you. The information generated by the cookie about your use of the website is transmitted to and stored on a server of Google in the USA. We have supplemented Google Analytics with the "anonymizeIP" code to ensure that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a server of Google in the USA and truncated there.

 

Why are we allowed to use Google Analytics?

Google analyzes the data collected on our behalf so that we can gain insights into visits and user behavior on our website. This enables us to improve our services, website content, and their design.

 

How can you prevent the collection of your data through Google Analytics?

You can prevent the storage of cookies by adjusting the settings in your browser accordingly (see our explanations on cookies). You can disable Google Analytics by downloading and installing the Google browser add-on.

 

7.8 Vimeo

 

We embed videos from Vimeo on our website.

 

How does embedding work?

Embedding is done via a plugin. When you visit a page equipped with a plugin from us, a connection is established with Vimeo's servers. The servers are informed about which of our subpages you visited. For more information, see Vimeo's privacy policy: https://vimeo.zendesk.com/hc/de/sections/203915088-Datenschutz.

 

Why are we allowed to embed this content?

We embed content via Vimeo to make our offering accessible to a wider audience. This is in our legitimate interest.

 

What information do you share with the providers?

If you are logged into a user account with a provider, you may allow this provider to directly associate your surfing behavior with your personal profile. We note that we have no knowledge of the specific content of the transmitted data or its use. If you do not wish these providers to associate the visit to our pages with your user account, please log out of your respective user account before using our website.

 

7.9 Google Tag Manager

 

We use Google Tag Manager on our website. This captures data on user behavior on our website and forwards it to our analysis tools. Since Google Tag Manager does not process personal data itself, it is referred to the explanations for the respective tracking services and the usage policies of Google Tag Manager. Usage policies: https://www.google.com/intl/de/tagmanager/use-policy.html.

 

7.10 Google Conversion Linker

 

We use Google Conversion Linker to prevent cookies set by Google Conversion Tracking from being stored for more than 24 hours if cross-website tracking is prevented.

 

7.11 Global Site Tag

 

Global Site Tag (gtag.js) is a tag management system developed by Google. It is used to track and manage data such as traffic, revenue, conversions, and more through a single line of code. It allows companies to implement tracking tags for various purposes, such as Google Ads, Google Analytics, and more.

 

7.12 hCaptcha

 

hCaptcha is used on websites to distinguish human users from automated bots. It is a captcha service used to prevent spam and fraud. hCaptcha can also be used to restrict access to certain pages or services.

 

7.13 PrivacyBee

 

PrivacyBee is used on websites to detect all privacy-related services and generate an individual privacy policy based on them.