What is this Privacy Policy about?
Data protection is a matter of trust, and your trust matters to us. In this Privacy Policy we therefore explain how and why we collect, process and use your personal data. Among other things, you will learn:
- which personal data we collect and process;
- for which purposes we use your personal data;
- who has access to your personal data;
- what benefit our processing offers you;
- how long we process your personal data;
- which rights you have with regard to your personal data; and
- how you can contact us.
We have aligned this Privacy Policy with both the Swiss Data Protection Act and the European General Data Protection Regulation — GDPR for short. The GDPR has established itself worldwide as a benchmark for strong data protection. Whether and to what extent the GDPR applies, however, depends on the individual case.
This English version is provided for your convenience. In the event of any discrepancy, the German version of this Privacy Policy prevails.
1. Controller and scope of this Privacy Policy
The party responsible for the processing operations described in this Privacy Policy is the operator of the website ki-ai-kurse.ch:
Ideall Engineering GmbH
Lorzenmatt 14, 6332 Hagendorn, Switzerland
Commercial register no.: CHE-474.923.626
Email: info@ki-ai-kurse.ch
Further details can be found in the Imprint. "KI Kurse Zug" is a brand of Ideall Engineering GmbH.
So that you know which personal data we collect from you and for which purposes we use it, please take note of the information below. With regard to data protection, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (DSG), and additionally take into account the EU General Data Protection Regulation (GDPR) where it is applicable.
Please note that we review and adjust this Privacy Policy from time to time. We therefore recommend that you consult it regularly.
2. Data protection contact
If you have questions about data protection or would like to exercise your rights, please contact our data protection contact by sending an email to the following address: info@ki-ai-kurse.ch
3. Your rights
Provided that the legal requirements are met, you, as a person affected by a processing operation, have the following rights:
Right of access
You have the right to request access, free of charge and at any time, to the personal data we hold about you, where we process it. This allows you to check which data we process about you and that we use it in accordance with the applicable data protection provisions.
Right to rectification
You have the right to have inaccurate or incomplete personal data corrected and to be informed of the rectification. We inform the recipients of the affected data about the adjustments, unless this is impossible or involves disproportionate effort.
Right to erasure
You have the right to have your personal data erased under certain circumstances. In particular where there are statutory retention obligations, the right to erasure may be excluded; instead, the data may be blocked.
Right to restriction
You have the right to request that the processing of your personal data be restricted.
Right to data portability
Insofar as we process your data by automated means on the basis of your consent or a contract, you have the right to receive the data you have provided, free of charge, in a common, machine-readable format.
Right to object
You may object at any time, on grounds relating to your particular situation, to processing of your personal data that we base on a legitimate interest.
Right to withdraw consent
You generally have the right to withdraw a consent you have given at any time. However, processing carried out in the past on the basis of your consent does not become unlawful as a result of your withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a competent supervisory authority — in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and within the scope of the GDPR with the data protection supervisory authority responsible for you.
4. Data security
We use suitable technical and organisational security measures to protect the personal data we hold about you against loss and unlawful processing, in particular unauthorised access by third parties. Our employees and the service providers we engage are obliged by us to maintain confidentiality and to comply with data protection requirements. Furthermore, these persons are granted access to personal data only to the extent necessary to perform their tasks.
Our security measures are continuously adapted in line with technological developments. However, the transmission of information over the internet and electronic means of communication always entails certain security risks, and we too cannot provide an absolute guarantee for the security of information transmitted in this way.
5. Contact and workshop enquiries
If you contact us via our email address or via the workshop enquiry form, we process the personal data you provide to us in doing so. In the enquiry form these are: your name, your email address, your organisation, the desired number of participants and your message; providing a telephone number is optional. Mandatory fields are marked with an asterisk (*). In addition, the time of receipt is recorded.
We process this data exclusively in order to handle your enquiry, to make you an offer and to get in touch with you. The legal basis is the performance of pre-contractual measures taken at your request (Art. 31 revDSG; where applicable Art. 6(1)(b) GDPR); for matters with no contractual connection, we rely on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
The enquiry form is processed technically via the Netlify Forms service of our hosting provider (see section 6 "Hosting"). The transmission of your details is encrypted (TLS). For the storage period, see section 9.
6. Hosting
This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). Netlify provides the server and content delivery infrastructure through which our website is delivered, and processes the data arising in this context — in particular the server log files described in section 10 and the details submitted via the enquiry form — as a processor acting on our instructions.
The hosting serves the purpose of making our website available securely and reliably. The legal basis is our legitimate interest in a secure and efficient operation of our website (Art. 31 revDSG; where applicable Art. 6(1)(f) GDPR).
As Netlify is a US company, this may involve a transfer of personal data to the USA. For the safeguards covering this transfer, see section 8.
7. Disclosure to third parties and processors
We disclose your personal data only to the extent necessary for the purposes described in this Privacy Policy. In doing so we use carefully selected processors who may process your data exclusively on our instructions and only to the extent necessary. Specifically, these are currently:
- Netlify, Inc. (USA) – hosting of the website as well as receipt and storage of form enquiries (see section 6);
- Google (Google Ireland Limited or Google LLC) – web analytics using Google Analytics, provided you have consented (see section 12). Google processes the measurement data on our behalf, but may also process certain data as an independent controller in accordance with its terms.
In addition, we disclose personal data where we are required to do so by law or by an authority, or where this is necessary to safeguard, assert or defend our rights (e.g. towards authorities or legal advisers).
8. Transfer of personal data abroad
As part of the processing operations described above, personal data is also transferred to the USA, in particular to Netlify (hosting, section 6) and — where consent has been given — to Google (web analytics, section 12).
Both Netlify, Inc. and Google LLC are certified under the Swiss-U.S. Data Privacy Framework (as well as the EU-U.S. Data Privacy Framework). For DPF-certified recipients in the USA, there is a level of data protection recognised as adequate by Switzerland and the EU; the transfer to these recipients is based on this certification.
Should we use recipients in the future that are located in a country without a recognised adequate level of data protection and are not certified accordingly, we base the transfer on the Standard Contractual Clauses of the European Commission together with supplementary protective measures. You can request a copy of the safeguards via the address given in section 2.
9. Retention periods
We store personal data only for as long as is necessary to carry out the processing operations explained in this Privacy Policy within the scope of our legitimate interest. For contractual data, storage is prescribed by statutory retention obligations. These arise from the provisions on accounting and from tax law requirements. Under these provisions, in particular business correspondence, concluded contracts and accounting records must be retained for up to 10 years.
Insofar as we no longer require this data to carry out the services for you, the data is blocked. This means that the data may then only be used where this is necessary to comply with the retention obligations or to defend and enforce our legal interests. The data is erased as soon as there is no longer any retention obligation and no legitimate interest in its retention.
10. Log file data
When you visit our website, our hosting provider Netlify (see section 6) records each access in a log file (so-called log file) for technical reasons. In doing so, the following data in particular is recorded without any action on your part and stored until it is automatically deleted:
- the IP address of the requesting device,
- the date and time of access,
- the file or URL retrieved and the HTTP status code,
- the website from which the access was made (referrer),
- the operating system and browser used (type and version),
- the approximate origin (country or region) of the access.
The processing of this data serves to enable the delivery of the website (establishing the connection), to ensure system security and stability, and for error and performance analysis. The legal basis is our legitimate interest in a secure and stable operation (Art. 31 revDSG; where applicable Art. 6(1)(f) GDPR).
In the event of an attack on the website's infrastructure or a suspicion of otherwise unauthorised or abusive use, the IP address and the remaining log file data may be analysed to investigate and prevent such use and, where appropriate, used in criminal proceedings.
11. Cookies and local storage
Cookies are small information files that your web browser stores on your device. Our website manages with very few, data-minimising storage mechanisms:
- Technically necessary storage: We store your cookie decision (consent to web analytics or its rejection) locally in your browser (local storage) so that we do not have to ask you again on every page load. This storage is necessary for the operation you have requested and takes place without consent.
- Analytics cookies: Google Analytics only sets cookies once you consent to web analytics via our cookie banner by selecting "Accept all". If you choose "Only necessary", no analytics cookies are set (see section 12). You can change your choice at any time via "Cookie settings" in the footer.
Most browsers accept cookies automatically. You can configure your browser so that it rejects cookies or informs you before they are stored; explanations can be found, among other places, at Mozilla Firefox, Google Chrome and Apple Safari. You can also withdraw your consent to web analytics at any time via the "Cookie settings" link in the footer.
12. Web analytics with Google Analytics
To design our website in line with demand and to continuously improve it, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
Google Analytics uses cookies and similar technologies to evaluate your use of our website in pseudonymous form. Among other things, the following information is processed:
- pages visited, navigation path and time spent,
- the sub-page on which you leave the website,
- approximate origin (country, region), derived from the IP address,
- information about the device and browser (type, version, screen resolution, window size),
- your status as a returning or new visitor.
We use Google Analytics with Google Consent Mode v2. As long as you have not consented, analytical storage is deactivated: no analytics cookies are set, and Google receives only aggregated, cookieless signals without identifiers. Only once you select "Accept all" via our cookie banner is full measurement activated. The legal basis for this processing is your consent (Art. 31 revDSG; where applicable Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the "Cookie settings" link in the footer.
In this process, your IP address is transmitted to Google and used by Google to derive the approximate location; according to Google, the IP address is not logged in Google Analytics 4 and is not stored permanently. This processing may involve a transmission of the IP address and further data to Google servers in the USA (see section 8). We use Google Analytics exclusively for web analytics; your data is not used for personalised advertising.
Further information on data protection at Google can be found in their privacy policy. You can additionally prevent collection by Google Analytics with the browser add-on to disable Google Analytics.