Last updated on: 01.03.2024
We attach great importance to the transparent handling of personal data. This privacy policy provides information about what personal data we collect, for what purpose and to whom we pass it on. To ensure a high level of transparency, this privacy policy is regularly reviewed and updated.
1. which services we use
- Vimeo
- YouTube
- Joomla
2. contact information
If you have any questions or concerns about the protection of your data by us, you can contact us at any time by e-mail at
Fabian Mooser
Haus Wanaka
3929 Täsch
Switzerland
Person responsible for data protection:
Fabian Mooser
+41 78 667 11 71
3. general principles
3.1 What data we collect from you and from whom we receive this data
First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:
- Personal master data (name, address, date of birth, etc.);
- Contact data (mobile phone number, email address, etc.);
- Financial data (e.g. account details);
- Online identifiers (e.g. cookie identifier, IP addresses);
- Location and traffic data;
- Sound and image recordings;
- particularly sensitive data (e.g. biometric data or information about your health) .
3.2 Under what conditions do we process your data?
We treat your data confidentially and in accordance with the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.
If, in exceptional cases, we are unable to comply with these principles, data processing may still be lawful because there is a justification. In particular, the following grounds for justification may apply:
- Your consent;
- the performance of a contract or pre-contractual measures;
- our legitimate interests, unless your interests prevail;
3.3 How can you withdraw your consent?
If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.
You can withdraw your consent at any time by sending an email to the address given in the legal notice. Data processing that has already taken place is not affected by this.
3.4 In which cases can we pass on your data to third parties?
a. Principle
We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). The categories of recipients are as follows:
- Accounting, fiduciary and auditing companies; Consultancy firms (legal advice, taxes, etc.);
- IT service providers (web hosting, support, cloud services, website design, etc.);
- Payment service provider;
- Providers of tracking, conversion and advertising services;
We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.
We may also be obliged to disclose your personal data to authorities.
b. Visiting our social media channels
We may have embedded links to our social media channels on our website. This is visible to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.
In this case, the social media providers will be informed that you have accessed their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.
c. Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide.
If the level of data protection does not correspond to that in Switzerland, we will carry out a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de
3.5 How long do we store your data?
We only store personal data for as long as is necessary to fulfil the individual purposes for which the data was collected.
Data that we store when you visit our website is stored for twelve months. An exception applies to analysis and tracking data, which may be stored for longer.
We store contractual data for longer, as we are obliged to do so by law. In particular, we must retain business communications, concluded contracts and accounting documents for up to 10 years. If we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.
3.6 How we protect your data
We will keep your data secure and take all reasonable steps to protect your data from loss, access, misuse or alteration.
Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your enquiries to companies affiliated with us. Your data will also be treated confidentially in these cases.
We use the SSL (Secure Socket Layer) method within our website in conjunction with the highest level of encryption supported by your browser.
3.7 What rights do you have?
a. Right to information
You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to
You also have the right to receive your data in a commonly used file format if we process your data automatically and if:
- you have given your consent for the processing of this data; or
- you have provided data in connection with the conclusion or performance of a contract
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.
The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of enquiries, for legal or technical reasons or because we need more detailed information from you. You will be informed of the extension in good time, at least in text form.
b. Erasure and rectification
You can request the erasure or rectification of your data at any time. We may reject the request if statutory provisions oblige us to retain your data for a longer period or to retain it unchanged or if your request conflicts with a legal authorisation.
Please note that exercising your rights may conflict with contractual agreements and may have a corresponding impact on the performance of the contract (e.g. premature termination of the contract or cost consequences).
c. Legal recourse
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch
3.8 Changes to the privacy policy
We may amend this privacy policy at any time. The changes will be published on , you will not be informed separately.
4. individual data processing operations
4.1 Provision of the website and creation of log files
What information do we receive and how do we use it?
- When you visit, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for system administration, statistical or backup purposes or for tracking purposes. These are:
- the name of your internet service provider; Your IP address (under certain circumstances);
- the version of your browser software;
- the operating system of the computer used to access the URL;
- the date and time of access;
- the website from which you visit the URL;
- the search terms you used to find the URL;
Why are we allowed to process this data?
This data cannot be assigned to a specific person and this data is not merged with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.
How can you prevent data collection?
The data is only stored for as long as is necessary to fulfil the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is absolutely necessary for the operation of the website, so you have no option to object to this.
4.2 Vimeo
Vimeo is a service of Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. Vimeo is a platform that allows users to upload, share and view videos. It also provides various tools for video producers to monetise their content and interact with their audience.
We use Vimeo to embed videos on our website and provide our visitors with high quality visual content. This may include product launches, tutorials or other content relevant to our users. By embedding Vimeo videos, our visitors can watch them directly on our website without being redirected to the Vimeo platform.
When you visit a web page on our website that contains a Vimeo video, your browser establishes a direct connection to Vimeo's servers. Certain information is transmitted to Vimeo in the process. This also includes the user's IP address. Vimeo also uses cookies and similar technologies to collect information about the use of the service and to improve the user experience.
4.3 YouTube
Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"), are integrated on our website. When you view the videos or click on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google's servers and stored there. This data is used to provide the video, monitor performance and improve the user experience.
If you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
4.4 Joomla
Joomla is an open source content management system (CMS) developed and supported by Open Source Matters, Inc, a company registered in the USA. Joomla allows individuals and organisations to create and manage websites and online applications. The organisation Open Source Matters, Inc. is based in P.O. Box 4668 #88354, New York, NY 10163-4668, USA.
We use Joomla on our website to ensure a structured and user-friendly online presence. Joomla allows us to efficiently organise, edit and display content to provide relevant information and services to our visitors.
Joomla uses cookies to store certain user preferences and to optimise the user experience on the website. Data such as IP addresses and browser information may also be collected to ensure the functionality of the website and to implement security measures.
BrainBox Generators
BrainBox Generators is a service provided by BrainBox Solutions GmbH to recognise all data protection-relevant services on a website and, among other things, to help with the creation of the privacy policy. No personal data is collected or processed in the process.