PRIVACY POLICY

To say it upfront. We don't analyze our website traffic nor any visitor's cookies. But we need to post our Privacy Policy nevertheless due to legal reasons. So here it is:

 

We process personal data (hereinafter referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered.​

​

According to Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

​

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide alone or jointly with others on the purposes and means of processing. Furthermore, we inform you about third-party components we use for optimization purposes and to enhance user experience, which may result in these third parties processing data under their own responsibility.

​

Since the GDPR came into force on May 25, 2018, its provisions may also apply to companies and organizations based in Switzerland. We comply with these regulations to the extent that they are applicable to us. These regulations give individuals more control over their personal data and impose stricter obligations on organizations to respect privacy. More information can be found at: http://eur-lex.europa.eu/eli/reg/2016/679/oj. Where the GDPR does not apply, we adhere to relevant Swiss data protection legislation.

​

This privacy policy is structured as follows:

I. Information about the data controller
II. Rights of users and data subjects
III. Information on data processing

​

I. Information about the data controller

The responsible provider of this website in terms of data protection law is:

​

Gönnerverein Andreas Jianhai Kay
Bändlistrasse 54
8064 Zurich, Switzerland

+41 78 673 4566
admin@me-andy.org

​

Data Protection Officer:
Oliver Kay (Founder, Managing Director & President)

​

II. Rights of users and data subjects

Users and data subjects have the following rights:

• Confirmation of whether data concerning them is being processed, information about the data being processed, further information about the data processing, and copies of the data (Art. 15 GDPR);

• Correction or completion of incorrect or incomplete data (Art. 16 GDPR);

• Immediate erasure of data concerning them (Art. 17 GDPR), or alternatively, restriction of processing (Art. 18 GDPR);

• Receipt of their data and transmission to other controllers (Art. 20 GDPR);

• Complaint to a supervisory authority if they believe the processing violates data protection law (Art. 77 GDPR).

We are also obligated to inform all recipients of any correction, deletion, or restriction of processing of personal data unless this proves impossible or involves disproportionate effort. Users have the right to know these recipients.

Additionally, users may object to future data processing (Art. 21 GDPR), particularly in cases of direct marketing.

 

III. Information on data processing

Data processed when using our website is deleted or blocked as soon as the purpose for storage no longer applies, unless legal retention obligations prevent deletion.

​

Server Data

For technical reasons, data is transmitted to us or our web host through your internet browser. These server log files may include browser type/version, operating system, referrer URL, pages visited, date/time of access, and the IP address.

These data are temporarily stored and are not combined with other data. The legal basis is Art. 6(1)(f) GDPR, and the legitimate interest is to ensure the security and functionality of our website. Data is deleted after seven days unless needed for evidence.

 

Cookies

a) Session Cookies

We use cookies to enhance the user experience. These store information such as language preferences or cart functionality.
Legal basis: Art. 6(1)(b) or (f) GDPR.
Session cookies are deleted when the browser is closed.

b) Third-party Cookies

We may use cookies from partners for advertising, analysis, or functionality. Details are found in the relevant sections below.

c) Control Options

You can configure your browser to disable or delete cookies. Flash cookies must be adjusted in your Flash player settings.

 

Contract Processing

Data you provide for goods or services is processed for contract fulfillment (Art. 6(1)(b) GDPR) and may be shared with delivery or payment providers.

 

Newsletter

If you subscribe to our newsletter, we store your email and optional data. We also log your IP and time of registration. Consent is obtained in accordance with Art. 6(1)(a) GDPR. You can unsubscribe at any time via a link or by contacting us.

 

Contact Requests

When contacting us by form or email, we use your information to respond. Legal basis: Art. 6(1)(b) GDPR. Data is deleted once your request is resolved.

 

Online Job Applications

We collect and process your data to manage applications (Art. 88 GDPR in conjunction with German law). If hired, your data will be stored in your personnel file. If rejected, data is deleted after two months unless legal retention applies. Extended retention requires explicit consent (Art. 6(1)(a) GDPR), which may be revoked at any time.

 

Social Media Links

Our site links to social networks via static images. A connection is only established when you click the image. After clicking, data like IP, time, and pages visited may be collected and processed by the network. If logged in, this may be linked to your account. To prevent this, log out before clicking.

 

Platforms:

• Facebook (https://www.facebook.com/policy.php)

• Instagram (https://help.instagram.com/519522125107875)

• MailChimp

We use MailChimp for newsletters. Data is processed by The Rocket Science Group, LLC, USA. More info: http://mailchimp.com/legal/privacy/

Newsletters may include tracking pixels to analyze open/click rates. This helps us improve newsletter quality (Art. 6(1)(a) GDPR). You can revoke consent at any time.

• YouTube

We embed YouTube videos in privacy-enhanced mode (Art. 6(1)(f) GDPR). Data is only sent to YouTube when a video is played. If logged in, data may be linked to your YouTube account. Cookies may also be used. You can block these in your browser settings.
More: https://policies.google.com/privacy

• Google Analytics

We use Google Analytics (Art. 6(1)(f) GDPR) to analyze usage. IP addresses are anonymized within the EU. Google may use the data to provide reports and services. You can opt out via: https://tools.google.com/dlpage/gaoptout
Further info: https://www.google.com/intl/de/policies/privacy/partners

​

Template provided by Kanzlei Weiß & Partner