Privacy Policy

Transparent handling of personal data is very important to us. This data protection statement provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.

1. What services we use

Google Analytics
Google Analytics
Enhanced eCommerce
Google Tag Manager for WordPress
Linkedin Insight Tag
Google AdSense
Google Ads
Google Ads Conversion Tracking
Linkedin Ads
Cloudflare CDN
WordPress
Microsoft Azure
Google Maps
YouTube
Cloudflare Turnstile
Google reCaptcha
Google reCaptcha v2 for Contact Form 7
Linkedin Sign-in
Microsoft Authentication
Google Site Kit
Microsoft 365

2. Contact Information

If you have any questions or concerns about our protection of your data, you can always reach us by email at [email protected]. Responsible for data processing done through this website is:

Flavio Meyer
Xaver Brun-Weg
3032 Emmen
Switzerland
Email: [email protected]

Michele Blum
Hinterwies 1
6037 Root
Switzerland
Email: [email protected]

Data protection officer:
Michele Blum
[email protected]

3. General principles

3.1 What data we collect from you and from whom we receive this data

First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:

Personal master data (name, address, dates of birth, etc.);
Contact information (cell phone number, email address, etc.);
Financial data (e.g. account details);
Online identifiers (e.g. cookie identifier, IP addresses);
Location and traffic data;
Sound and image recording;
particularly sensitive data (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:

Your consent;
the execution of a contract or pre-contractual measures;
our legitimate interests, unless your interests are overridden.

3.3 How can you withdraw your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.

You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.

3.4 In which cases can we share your data with third parties?

a. Principle

We may need to rely on the services of third parties or affiliates and engage them to process your data (known as processors). Categories of recipients are namely:

Accounting, fiduciary and auditing firm;
Consulting firms (legal, tax, etc.);
IT service provider (web hosting, support, cloud services, website design, etc.);
Payment service provider;
Provider of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with the requirements of data protection and treat your personal data confidentially.

We may also be required to disclose your personal information to government authorities.

b. Visiting our social media channels

We may have embedded links to our social media channels on our website. This is apparent to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.

In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.

c. Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad in the course of order processing. These companies are obligated to data protection to the same extent as we are. The transfer may take place worldwide.

If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in Switzerland (for example, by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link. https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we keep your data?

We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected.

Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer.

We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

a. Right to information

You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to [email protected].

You also have the right to receive your data in a common file format if we process your data automatically and if:

you have given your consent for the processing of this data; or
you have disclosed data in connection with the conclusion or performance of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.

3.8 Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on , you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?

By visiting , certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:

the name of your Internet service provider;
Your IP address (in some circumstances);
the version of your browser software;
the operating system of the computer with which the URL is accessed;
the date and time of access;
the web page from which you are visiting URL;
the search words you used to find the URL.

Why may we process this data?

This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website, you therefore have no possibility to object.

4.2 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

4.3 Google Analytics Enhanced eCommerce

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

4.4 Google Tag Manager for WordPress

On our website we use the plugin “Google Tag Manager for WordPress”, which enables an integration of Google Tag Manager, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), into our WordPress-based website. Through this plugin, we can manage and embed various scripts and codes through a central interface.

Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process any personal data. The service takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

By using the plugin “Google Tag Manager for WordPress”, scripts (so-called tags) can be activated automatically on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you use, the subpages visited on our website and other interactions during your website visit.

4.5 Linkedin Insight Tag

We have integrated the LinkedIn Insight Tag on our website, a tool from LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The LinkedIn Insight Tag allows us to collect information about visitors to our website, specifically the types of LinkedIn features that visitors to our website use and how they interact with those features. This tool helps us create targeted ads within the LinkedIn platform and measure the effectiveness of those ads.

Through the use of the LinkedIn Insight Tag, cookies are set on your device that enable the collection of pseudonymized data, such as the URL of the page visited, the referrer URL, IP address (in shortened form), device and browser properties, and timestamps.

The data collected by the LinkedIn Insight Tag is anonymous for us, which means that we do not receive any personal data of individual users. However, this data is stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with the LinkedIn privacy policy.

If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected through the LinkedIn Insight Tag will be linked to your LinkedIn account.

The use of the LinkedIn Insight Tag serves the purpose of analyzing and optimizing the effectiveness of our advertising measures. The data processing is based on our legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.

4.6 Google AdSense

On our website, we use Google AdSense, a service for embedding advertisements of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

Google AdSense uses cookies to analyze how visitors use the website. In addition, Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on the pages of this offer can be evaluated.

The information generated by cookies and web beacons about the use of this website (including the user’s IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Furthermore, you can deactivate interest-based ads on Google as well as interest-based Google ads on the web (within the Google display network) in your browser by activating the “Off” button at https://www.google.com/settings/ads or by deactivating at https://www.aboutads.info/choices/. You can find more information about your settings options and data protection at Google at https://www.google.com/intl/de/policies/privacy/?fg=1.

4.7 Google Ads

We use the Google Ads service on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Ads enables us to place advertisements in the Google search results as well as in the Google advertising network.

4.8 Google Ads Conversion Tracking

We use the online advertising program “Google Ads” on our website and in this context the conversion tracking. Google Ads Conversion Tracking is an analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

When you click on an ad placed by Google, a cookie for conversion tracking is set on your end device. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.

The information obtained using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

You can prevent the storage of cookies by selecting the appropriate technical settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.

Furthermore, you can disable personalized advertising for you in Google’s advertising settings. You can find instructions on how to do this at https://support.google.com/My-Ad-Center-Help/answer/12155764.

4.9 Linkedin Ads

We use advertising services on our website provided by LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

LinkedIn Ads allow us to serve targeted ads based on users’ interests and behavior. LinkedIn uses cookies and similar technologies to display ads based on your previous visits to our and other websites. This allows us to measure and optimize the effectiveness of our advertising efforts.

The information collected by LinkedIn Ads is anonymous for us, which means that we do not receive any personal data of individual users. However, this data is stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes, in accordance with the LinkedIn privacy policy.

If you are a member of LinkedIn and are logged into your LinkedIn account while visiting our website, the data collected by LinkedIn Ads will be linked to your LinkedIn account.

The use of LinkedIn Ads serves the purpose of analyzing and optimizing the effectiveness of our advertising measures. The data processing is based on our legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.

4.10 Cloudflare CDN

Our website uses the Content Delivery Network (CDN) service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A CDN helps deliver content from our website faster by distributing copies of the content to a network of fast loading servers.

When you visit our website, your IP address is transmitted to Cloudflare and cookies may be set in your browser, which are necessary for the optimization and security of the service. Cloudflare uses this data to speed up traffic between our web server and your end device and to protect our website from attacks.

4.11 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage and publish content.

When using our website, which is based on WordPress, various data, including your IP address, date and time of access, as well as information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure trouble-free operation of the website.

Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.

4.12 Google Maps

On our website, we use Google Maps, a map service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Maps enables us to integrate interactive maps directly into the website and allows you to conveniently use the map function, for example, to search for a location or to plan your journey.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, further data, in particular your IP address, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising.

You have the right to object to the creation of these user profiles, and to exercise this you must contact Google.

4.13 YouTube

Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), are embedded on our website. When viewing the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google servers and stored there. This data is used to provide the video, monitor performance and improve the user experience.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

4.14 Cloudflare Turnstile

Our website uses “Cloudflare Turnstile”, a service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare Turnstile is a security service that helps us distinguish human traffic from automated traffic and thus protect our website from misuse.

When you attempt to access content protected by Cloudflare Turnstile, you will be asked to provide certain information, usually your email address. This information is transmitted to and stored by Cloudflare to enable access to the protected content and to provide us with an overview of the requests.

When you fill out forms on our website or perform certain actions that require verification, Cloudflare Turnstile may be used to ensure that you are a human and not a bot. In doing so, various data, including your IP address and information about your interaction with the Cloudflare Turnstile widget, is transmitted to and processed by Cloudflare.

4.15 Google reCaptcha

To protect against unsolicited requests via the Internet form on our website, we use the reCAPTCHA service of the company Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. As part of the query, information such as your IP address or the behavior when filling out the form may be transmitted to Google.

For this purpose, your input is transmitted to Google and processed there. By using reCAPTCHA, you agree that the recognition you provide may be used in the digitization of old works. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google.

4.16 Google reCaptcha v2 for Contact Form 7

To protect your requests via the Internet form on our website, we use the service reCAPTCHA v2 of the company Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. The query includes the sending of your IP address and possibly further data required by Google for the reCAPTCHA service to Google.

For this purpose, your input is transmitted to Google and used there. By using reCAPTCHA, you agree that the recognition you provide may be used in the digitization of old works. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

4.17 Linkedin Sign-in

On our website, we offer the option to sign in using the LinkedIn Sign-in service. This is a service of LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

If you choose to sign in via LinkedIn Sign-in, you will be redirected to LinkedIn where you can sign in using your LinkedIn user information. Through this sign-in, LinkedIn gives us access to certain information from your LinkedIn profile. The exact information we receive depends on your LinkedIn settings and the permissions we request. For example, this may include your name, profile picture, contact information, network, and professional information.

We use this data to facilitate the registration process and to provide you with a personalized user experience on our website. The data processing is based on your consent that you give to LinkedIn during the registration process.

Please note that LinkedIn also processes this data in accordance with its own privacy policy. We recommend that you regularly review and adjust the privacy settings of your LinkedIn account.

4.18 Microsoft Authentication

For authentication and login on our website, we use Microsoft Authentication, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows users to log in to us using their Microsoft accounts, which eliminates the need for additional registration on our site.

When you sign in using Microsoft Authentication, certain profile information (e.g., your name, email address) is transmitted to us by Microsoft to complete the sign-in process. Microsoft Authentication also uses cookies and similar technologies to make the sign-in request secure and user-friendly.

4.19 Google Site Kit

For the management and analysis of our website, we use the plugin “Google Site Kit”, which is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Site Kit allows us to integrate various Google services, such as Google Analytics, Google Search Console, Google AdSense and others, directly into our WordPress website and manage them centrally.

By using Google Site Kit, various data, including your IP address, information about the browser you use, the subpages of our website you visit and other interactions during your website visit, are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.

Google uses this information to provide us with detailed reports and analytics about website traffic, website performance, visitor interactions, and other relevant metrics.

4.20 Microsoft 365

For various office and communication tasks, we use Microsoft 365, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft 365 offers a range of productivity tools, including email (Outlook), document storage (OneDrive), collaboration tools (Teams), and Office applications such as Word, Excel, and PowerPoint. When you contact us, for example by email, or when we share documents, these interactions are processed and stored through Microsoft 365.

Microsoft uses servers in different countries to provide the Microsoft 365 services. This means that your data may be stored in data centers outside of Switzerland. However, Microsoft has implemented various security and privacy measures to protect its customers’ data.

Source: BrainBox Solutions