Privacy Policy for Website

(Exclusively under the Swiss FADP)

The protection of our users’ privacy is important to us. In this privacy policy, we inform users about which personal data is processed in connection with the use of our website. Additionally, it provides information on the type, extent and purposes of the collection and use of personal data by BX Digital Ltd. on our website.

By using our website, as well as our services and products, the user agrees to this privacy policy.

BX Digital Ltd. (hereinafter referred to as the “Provider”) is committed to processing all personal data collected through our website in accordance with applicable data protection regulations and taking appropriate security measures to protect the collected personal data from unauthorized access.

1. Identity and Contact Information of the Provider

The provider within the meaning of data protection legislation is:

BX Digital Ltd.
Talacker 50
8001 Zurich
Switzerland
Phone: +41 (0)31 329 40 60
email: contact@bxdigital.ch
Website: www.bxdigital.ch

The provider determines the purposes and means of processing and is therefore responsible for the processing and use of personal data. Users may address any questions or concerns related to this privacy policy or the processing of personal data at any time by sending an email to contact@bxdigital.ch.

2. Terms

a) Personal data
The following explanations refer to the processing of personal data of natural persons.
Personal data means any information relating to an identified or identifiable natural person. Personal data include all data that allow for identification, such as name, email address, date of birth, or phone number. Additionally, data about preferences, memberships, or which websites a user has visited are also considered personal data.

b) Data processing
Data processing means any handling of personal data, irrespective of the means and procedures used, in particular the collection, storage, keeping, use, modification, disclosure, archiving, deletion or destruction of data.

The provider collects and processes personal data carefully and solely for the purposes described in this privacy policy. Personal data are only collected, used, and disclosed by the provider if legally permitted, if the user consents to the data collection, or if there is an overriding interest of a third party.

The provider strives, within reasonable limits, to collect or process information in an anonymized or pseudonymized form so that the identity of the user is not recognizable.

3. Collection of personal data and purposes of data processing

a) Personal data provided by the user
When the user contacts the provider (e.g., via contact form or email), the user’s information is stored for the purpose of processing the inquiry and in case of follow-up questions.

The provision of this personal data is explicitly voluntary.

The provider uses the personal data submitted by the user for the following purposes:
– to provide, maintain, protect, and optimize the offered services and information;
– to communicate with the user and provide him with the best possible and personalized information that the user requires from the provider (e.g., about products and services);
– to offer the user new services and information, and to suggest services and information tailored to the user’s profile that might be of interest to them;

– to comply with legal and other regulatory requirements and internal policies;
– to establish, exercise, and/or defend actual or potential legal claims, investigations, or similar proceedings;
– for other lawful purposes, if this processing arises from the circumstances or was indicated at the time of collection.

b) Access Data/Server Log Files
The provider collects data on every access to the website (known as server log files). The access data includes:

– name of the accessed website or file(s);
– date and time of access;
– amount of data transferred;
– notification of successful retrieval;
– browser type and version of the user’s operating system;
– referrer URL (the previously visited page) and exit pages;
– IP-address and the requesting provider;
– location data (especially when using mobile devices);
– information about interactions between pages (e.g., scrolling, clicking, mouse-overs).
The provider uses the log data only for statistical analysis for the purpose of operating, securing and stabilizing the system, as well as optimizing the offerings. This personal data is not combined with other personal data. It is stored separately from any personal data that may have been provided by the user. However, the provider reserves the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete evidence.

4. Recipients of personal data

The provider takes necessary measures to ensure that only authorized employees or auxiliary persons with the required knowledge have access to personal data, solely for the purposes for which the personal data was collected.

The provider is entitled to disclose the users’ personal data to the following possible recipients or categories of recipients, as necessary for the intended data processing, according to the purposes and legal bases described above:

– experts and other service providers of the provider in connection with an inquiry;
– service providers who process personal data on behalf of and according to the instructions of the provider (so-called processors, e.g., in IT, hosting and support);
– other business partners and auxiliary persons (e.g., lawyers);
– authorities, government offices, courts, or other state institutions;
– social media;
– other parties in potential or actual legal proceedings
The provider ensures that its business partners and processors have appropriate organisational and technical measures in place to comply with data protection regulations.

5. Cross-border disclosure of personal data

The provider may disclose personal data abroad. In such cases, the relevant countries or international organizations must ensure an adequate level of data protection.
If personal data is transferred to countries that do not have an adequate level of data protection, the provider ensures appropriate data protection by taking suitable measures to comply with data protection regulations (e.g., contractual guarantees through data protection clauses).

6. Cookies

Our website uses cookies. Cookies are small files that allow specific device-related information to be stored on the user’s access device (e.g., PC, smartphone). They serve to improve the user-friendliness of websites, and thus benefiting users (e.g., by saving the selected language). Additionally, they are used to collect statistical data on website usage, which can then be analyzed to improve the offerings.

Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, please note that the use and especially the convenience of using the website may be limited without cookies.

7. Integration of Third Party Services and Content

Our website may include third party content, such as videos from YouTube, maps from Google Maps, Google Web Fonts, RSS feeds, spam protection via reCAPTCHA, or graphics from other websites. This presupposes that, the providers of these contents (hereinafter referred to as “third party providers”) need to know the user’s IP-address. Without the IP-address, a connection would not be possible, and thus the content could not be displayed in the user’s browser. The IP-address is necessary for displaying this content.

The provider strives to use only content for which the respective providers use the IP address solely for delivering the content. However, the provider cannot control if third-party providers store the IP address and other information, for e.g. for statistical purposes.

8. Google Tag Manager

Google Tag Manager allows marketers to manage website tags through a user interface. However, the Tag Manager itself operates without cookies and does not collect any personal data. It only triggers other tags that may, in turn, collect data. Explanations for these third-party providers can be found in their own privacy policy. The Google Tag Manager does not use this data. If users have set or made changes to their cookie settings, these will be observed for all tracking tags deployed via Google Tag Manager. The tool doesn’t alter the users’ cookie settings.

9. Google Maps

Our website uses the Google Maps product from Google Inc. By using our website, users consent to the collection, processing, and use of automatically collected data by Google Inc., its representatives, and third parties. The terms of use can be found under “Google Maps Terms of Service.”

10. Google Analytics

Our website uses the “Google Analytics” service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyze website usage by users. The service uses “cookies” – text files stored on the user’s device. The information collected by these cookies is typically sent to a Google server in the USA and stored there.

On our website, IP anonymization is enabled. The IP-address of users is truncated within the member states of the EU and the EEA. This truncation removes the personal reference of your IP-address. Under the data processing agreement that the website operators conclded with Google Inc., Google uses the collected information to create reports on website usage and activity and to provide services related to internet usage.

The User can prevent cookies from being stored on his device by adjusting his browser settings. However, it’s not guaranteed that the user will be able to access all features of our website without restrictions if his browser doesn’t accept cookies.

Additionally, the user can prevent the information collected by cookies (including their IP-address) from being sent to and used by Google Inc. by using a browser plugin. The following link leads to the relevant plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Further information on data usage by Google Inc. can be found here: https://support.google.com/analytics/answer/6004245?hl=de

11. Social Media Plug-ins

The provider uses the social media plug-ins listed below on his website to share knowledge and promote his business. The respective external provider is responsible, that his operation ist compliant to data protection. Data processing related to these plug-ins occurs with the users’ consent when they use the plug-ins.

If the user engages with these social networks independently or in connection with our website, the networks may analyze the use of the plug-ins. In such cases, information about the plug-in will be forwarded to the social networks.

a) LinkedIn
Our website includes plug-ins from the social network LinkedIn Corporation (2029 Stierlin Court, Mountain View, California 94043, USA). The LinkedIn plug-in is identifiable by the LinkedIn logo.

When a page of the provider’s website containing such a plug-in is accessed, a direct connection is established between the user’s browser and the LinkedIn server. This allows LinkedIn to receive information that the user, using his IP-address, has visited the provider’s website. By clicking the LinkedIn button, the user can link the provider’s content to his LinkedIn profile while logged into his LinkedIn account. This allows LinkedIn to associate the visit to the provider’s website with the user’s LinkedIn account. The provider has no knowledge of the content of the transmitted data or how LinkedIn uses it. More information can be found here: www.linkedin.com/legal/privacy-policy.

b) Google+
Our website uses plug-ins from the social network Google Plus, offered by Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The plug-ins can be recognized, for e.g. by buttons with the “+1” symbol on a white or colored background. An overview of Google plug-ins and their appearance can be found here: https://developers.google.com/+/plugins.

When a user accesses a page of the provider’s website containing such a plug-in, a direct connection is established between the user’s browser and Google’s servers. The content of the plug-in is sent directly from Google to the user’s browser and integrated into the page. By integrating the plug-in, Google receives the information that the user’s browser has accessed the corresponding page of the provider’s website, even if the user does not have a Google Plus profile or is not logged into Google Plus at the time. This information is transmitted directly from the user’s browser to a Google server in the USA and stored there. If the user is logged into Google Plus, Google can immediately associate the visit to the provider’s website with the user’s Google Plus profile.

12. Retention period

In general, personal data shall be destroyed as soon as they are no longer required for the purpose of processing.
A longer retention period is permissible if required to fulfill legal, contractual, or pre-contractual obligations, or for legitimate business interests of the provider (e.g., legal retention and documentation obligations, in connection with the assertion, exercise, or defense of legal claims).
Specifically, personal data is retained as follows:

– personal data transmitted by users to the provider in connection with the use of services and products, such as via contact forms or email (see Section 3a), will be retained by the provider until the purpose of data storage ceases (e.g., after the request has been processed), unless the user requests deletion or revokes consent to storage.

– Personal data automatically transmitted by the user due to the use of our website (see Section 3b) will be deleted within 3 to 6 months.

– For contractual personal data (including business documents and communications), the provider retains business records as long as the contractual relationship exists, and then for an additional 10 years after the end of the contractual relationship, unless a shorter or longer statutory retention period applies, retention is required for evidentiary reasons, or for another valid reason under applicable law, or if deletion of the data is required earlier (e.g., because the data is no longer needed or the provider must delete the relevant data).

13. Users’ Rights

Users may assert their rights under data protection regulations at any time against the provider. Specifically, users have the right to receive free information from the provider about their processed personal data. Users also have the right to rectification incorrect personal data and to request the deletion of their personal data, provided that no legal or contractual retention obligation prevents this.
Users have the right to report violations of data protection regulations to the Federal Data Protection and Information Commissioner (FDPIC).

14. Translation

In case of discrepancies between the English and German version of this privacy policy, the German version shall prevail.

15. Changes to the Privacy Policy

The provider reserves the right to modify, supplement, or otherwise change this privacy policy at any time and without prior notice. The current version of the privacy policy, as published on the portal, shall apply.