IV. Collecting and Storing Personal Data and the Nature and Purpose of its use
Personal data may be provided by you on a voluntary basis or, in the case of usage data, collected automatically when the website is used.
Any use of cookies – or other tracking tools – by this website or third-party service providers used via this website is for the purpose of providing the service you have requested and for the purposes described in this policy.
The personal data that Zühlke processes independently or via third parties (more detailed information provided in Chapters VIII and IX) includes:
- master data (e.g. personal master data, names, addresses, gender for the purpose of forms of address);
- contact details (e.g. email, telephone numbers);
- content data (e.g. text input, photographs, videos);
- usage data (e.g. websites visited, interest in content, access times, cookies); and
- meta/communication data (e.g. device information, IP addresses).
Full details on each type of personal data processed are provided below in this privacy policy or through explanatory texts (referred to as ‘disclaimers’ in emails and on forms) that are displayed at select points when the data is being collected.
1. When visiting the website
If you have accepted the use of cookies via the cookie banner (see Section VI of this privacy policy and our cookie policy), the browser used on your device will automatically send information to our website server when you visit our website. This information is temporarily stored in what is known as a ‘log file’. The following information is collected without any intervention by you and is stored until it is automatically erased:
- name of file retrieved;
- date and time of retrieval;
- amount of data transferred;
- report confirming whether the retrieval was successful;
- description of the type of web browser used;
- operating system used;
- page previously visited;
- provider; and
- your IP address.
The data mentioned is processed by us for the following purposes:
- to ensure that a smooth connection to the website is established;
- to ensure that the user is able to easily use our website;
- for analysis, further development, reach measurement, impact KPI collection and for marketing purposes;
- to evaluate system security and stability; and
- for other administrative purposes.
We process this data based on your consent (Art. 6(1a) GDPR, where the GDPR applies) with regard to the data collection purposes listed above. Under no circumstances do we draw conclusions about you personally from the data that has been collected.
2. When using our contact form
If you have any questions, we give you the opportunity to contact us via a contact form provided on the website. It is necessary for you to provide your name, contact details (last name, first name and email address) and a message so we can respond to these questions. Mandatory fields are marked as such. Sending further information is optional. The subsequent processing of your personal data is based on the legal basis of your consent (Art. 6(1a) GDPR, where the GDPR applies).
3. When accessing information
Zühlke gives you the option to access further information (e.g. white papers, etc.). To do so, you are required to complete a form, where we collect personal data such as your email address, first name and last name. Mandatory fields are marked as such. The legal basis for this data processing is your consent (Art. 6(1a) GDPR, where the GDPR applies) and our legitimate interest within the meaning of Art. 6(1f) GDPR (where the GDPR applies).
The following data is collected, as a minimum, in order to provide the requested service: email address, type of service requested (e.g. white paper). The services are only initiated after completion of a DOI procedure (double opt-in procedure). This means that we will send an email to the email address you have provided. We ask you to confirm that this is the correct email address and that you have actually requested our service. In addition to the email address you have provided, we also save your IP address, the time of your registration and your confirmation for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.
If you would like more detailed information regarding this process, you can contact the controller (see Section II).
4. When subscribing to the newsletter
You can also subscribe to our newsletter on our website. We use this newsletter to inform you about our new offerings that may be of interest. To subscribe to the newsletter, you must provide us with your email address.
Newsletter subscription then takes place via the ‘double opt-in procedure’. This means that we will send an email to the email address you have provided after you have subscribed. We ask you to confirm that this is the correct email address and that you actually want to subscribe to our newsletter. If you do not confirm this subscription, the information you have provided will be made unavailable and automatically erased after one month. In addition to the email address you have provided, we also save your IP address, the time of your registration and your confirmation for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.
The legal basis for processing is your consent in accordance with Art. 6(1a) GDPR, where the GDPR applies. You can withdraw this consent at any time with effect for the future by clicking on the unsubscribe link in the newsletters sent to you.
5. When registering for (online and offline) events
You will find an overview of the events/courses/events we are planning in the near future on our website (Eventhub or Academy website). You can register for these events/courses via the contact form. Mandatory fields are marked as such. Where the provision of personal data is explicitly marked as voluntary on the registration form, you can decide whether or not you wish to provide this data. This decision has no impact on your registration and participation in the event/course.
The following data is collected as a minimum in order to provide the requested service: email address, last name, first name, title, type of service required (e.g. registration for an event/course) and a billing address for courses. In addition to the data listed above, we also store your IP address and the time of your registration as well as your confirmation. This is for the purpose of providing evidence of your registration and to prevent any misuse of your personal data.
If you would like more detailed information regarding this process, you can contact the controller (see Section II).
The legal basis for processing is your consent (Art. 6(1a) GDPR, where the GDPR applies) or the fulfilment of a contract or the implementation of pre-contractual measures (Art. 6(1b) GDPR, where the GDPR applies).
6. When providing services
We also process your data within the scope of our contractual agreements. This concerns master data (e.g. customer master data, such as names or addresses), contact details (e.g. email addresses, telephone numbers), content data (e.g. text input, etc.), contract data (e.g. subject of the contract, term), payment details (e.g. bank details, payment history), usage and metadata (e.g. in the context of evaluating and measuring the success of marketing measures). Data subjects are our customers, course participants, service providers, interested parties and their customers, users, website visitors or employees and third parties. The purpose of the processing is to provide contractual services, for billing and to provide customer services. The legal bases for processing are derived from Art. 6(1b) GDPR (pre-contractual measure/contractual fulfilment) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. Data is only disclosed to external parties if this is necessary as part of a project/order and we are entitled to do so. For Academy courses, data will only be shared with third parties if you have registered for a certification course with an official certification provider. In this case, your last name, first name and email address and, for certification courses provided by the SAQ (Swiss Association for Quality), also your private address, hometown and date of birth, will be forwarded to the certification provider. In turn, they will process the data disclosed to us as part of an order where they act as instructed by the client and in accordance with the legal requirements for processing as a processor (Art. 28 GDPR, where the GDPR applies) and do not process the data for any purposes other than those specified in the order.
We erase personal data relating to Academy courses one year after the date on which you registered for a course, at the latest. Alternatively, such data is anonymised. Otherwise, the data is generally erased once guarantee obligations and comparable obligations have expired. The requirement to store data is reviewed at irregular intervals. If there are any legal archiving obligations, erasure takes place after such periods have passed.
7. LinkedIn lead generation
We give you the opportunity to receive content and information from us as part of LinkedIn campaigns. In this context, we provide information about the processing of user data and refer to this privacy policy. By submitting the LinkedIn form, you are agreeing that the data you have publicly disclosed on the platform (LinkedIn) may be stored and processed by us. The processing of personal data is based on Art. 6(1a) GDPR (consent) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. You can request access to data that has been processed from the controller and you can also request that the controller erases such data (see Chapter II).
8. Processing of contact details via a personal exchange in a business context
We process personal data that arises through a personal exchange of contact details and at your request, provided that there is a specific interest in doing so. The processing is based on Art. 6(1a) GDPR (consent) and Art. 6(1f) GDPR (legitimate interest), where the GDPR applies. The processing of personal data can be revoked at any time.
