Wal­der Wyss AG is the “con­trol­ler”, i.e. the par­ty pri­ma­ri­ly respon­si­ble under data pro­tec­tion law, for data pro­ce­s­sing pur­su­ant to this Pri­va­cy Notice:

Wal­der Wyss AG, See­feld­stra­sse 123, 8034 Zurich

We pro­cess the fol­lo­wing cate­go­ries of per­so­nal data:

• Name and cont­act details
• E‑mail address
• Infor­ma­ti­on about sent newsletters
• Data about the reac­tion to our news­let­ters (ope­ning and click behavior)
• Com­mu­ni­ca­ti­on con­tent and meta data
• Logs from your inter­ac­tion with the chat­bot on our site

We pro­cess this data for the fol­lo­wing purposes:

• Ope­ra­ti­on of datenrecht.ch inclu­ding sen­ding the news­let­ter to sub­scri­bers and inclu­ding publi­ca­ti­on on social media
• Com­mu­ni­ca­ti­on
• Com­pli­ance with legal requirements
• Legal pro­ce­du­res if it gets to it
• Secu­ri­ty
• Impro­ve­ment of the offer (e.g. ana­ly­sis of the use of the site or the chatbot)

datenrecht.ch is meant for com­pa­nies in Switz­er­land. Should the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR) nevert­hel­ess app­ly, the pro­ce­s­sing of per­so­nal data is based on the fol­lo­wing legal grounds:

• Art. 6 para. 1 let. b GDPR for pro­ce­s­sing that is neces­sa­ry for the ful­fill­ment of a con­tract with the data sub­ject as well as for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res (e.g. sen­ding the news­let­ter to which you have subscribed);
• Art. 6 para. 1 let. f GDPR for pro­ce­s­sing that is neces­sa­ry to pro­tect legi­ti­ma­te inte­rests (e.g. com­pli­ance with Swiss law, secu­ri­ty and ana­ly­sis of user behavior;
• Art. 6 para. 1 let. c GDPR for pro­ce­s­sing that is neces­sa­ry for com­pli­ance with a legal obli­ga­ti­on under the law of a Mem­ber Sta­te of the Euro­pean Eco­no­mic Area (EEA);
• Art. 6 para. 1 let. a GDPR for pro­ce­s­sing that we car­ry out with your sepa­ra­te con­sent (e.g. sen­ding news­let­ters via Intuit or Mailchimp with eva­lua­ti­on of click behavior).

You are not obli­ged to pro­vi­de us with data. Howe­ver, we can­not send you news­let­ters wit­hout per­so­nal data. You can always sub­scri­be to our updates via RSS feed, we do not recei­ve any per­so­nal data from you in the process.

We may dis­c­lo­se Per­so­nal Data to reci­pi­en­ts in the fol­lo­wing categories:

• Ser­vice pro­vi­ders, e.g. for hosting and sen­ding the news­let­ter or ope­ra­ting the chatbot
• Reci­pi­en­ts of the news­let­ter (if this is not yourself)
• Offi­ci­al bodies, aut­ho­ri­ties and courts

The­se reci­pi­en­ts are loca­ted in Switz­er­land (e.g. for hosting), in the USA (Intuit or Mailchimp and Ope­nAI) and poten­ti­al­ly world­wi­de (e.g. sub­con­trac­tors of the reci­pi­en­ts or aut­ho­ri­ties). If the­re is a lack of ade­qua­te data pro­tec­tion the­re, we con­clude cor­re­spon­ding con­tracts, e.g. the so-cal­led Stan­dard Con­trac­tu­al Clau­ses. In cer­tain cases, we may also trans­fer data wit­hout such con­tracts, e.g. if you have proiv­ded sepa­ra­te con­sent to the rele­vant dis­clo­sure – which you do with respect to Intuit or Mailchimp when sub­scrib­ing for our news­let­ter – or if the dis­clo­sure is neces­sa­ry for the per­for­mance of the con­tract, for the estab­lish­ment, exer­cise or enforce­ment of legal claims or for over­ri­ding public interests.

When using our web­site or the chat­bot, data is gene­ra­ted that is stored in logs (IP address of the end device, etc.). This data is not per­so­nal for us.

We also use coo­kies and other tech­no­lo­gies. This allo­ws us to distin­gu­ish indi­vi­du­al visi­tors, but wit­hout wan­ting or being able to iden­ti­fy them. Other tech­no­lo­gies ser­ve the same pur­po­se. We use log data and data we coll­ect via coo­kies and simi­lar tech­no­lo­gies so that our web­site can be used and to under­stand user beha­vi­or. You can con­fi­gu­re your brow­ser in the set­tings to block cer­tain coo­kies or simi­lar tech­no­lo­gies, or dele­te coo­kies and other stored data. You can find out more about this in the help pages of your brow­ser (usual­ly under the key­word “Pri­va­cy”).

We use Goog­le Ana­ly­tics, an ana­ly­sis ser­vice pro­vi­ded by Goog­le LLC (Moun­tain View, USA) and Goog­le Ire­land Ltd (Dub­lin, Ire­land). Goog­le coll­ects cer­tain infor­ma­ti­on about the beha­vi­or of users on the web­site and about the ter­mi­nal device used. The IP addres­ses of visi­tors are shor­ten­ed in Euro­pe befo­re being for­ward­ed to the USA. Goog­le pro­vi­des us with eva­lua­tions based on the recor­ded data, but also pro­ce­s­ses cer­tain data for its own pur­po­ses. Infor­ma­ti­on on the data pro­tec­tion of Goog­le Ana­ly­tics can be found here, and if you have a Goog­le account you can find more details here. You can also pre­vent the use of Goog­le Ana­ly­tics by sel­ec­ting the appro­pria­te Add-On Install

You have cer­tain rights under the con­di­ti­ons of and in accordance with appli­ca­ble data pro­tec­tion law:

• Access right
• Right of rectification
• Objec­tion and rest­ric­tion: You can object to the pro­ce­s­sing of your data with effect for the future and also request its dele­ti­on. In par­ti­cu­lar, you may object at any time, on grounds rela­ting to your par­ti­cu­lar situa­ti­on, to the pro­ce­s­sing of data for our legi­ti­ma­te inte­rest, and to our pro­ce­s­sing for pur­po­ses of direct adver­ti­sing.
• Data por­ta­bi­li­ty right
• With­dra­wal of con­sent (with effect for the future).

You can also cont­act the Fede­ral Data Pro­tec­tion and Infor­ma­ti­on Com­mis­sio­ner (FDPIC) or file a com­plaint with ano­ther authority.