Last updated: 28 February 2024
We attach great importance to transparent handling of personal data. This privacy policy explains which personal data we collect, for what purpose and to whom we disclose it. To ensure a high level of transparency, this privacy policy is reviewed and updated regularly.
1. Services we use
Google Forms
Microsoft 365
2. Contact information
If you have questions or concerns about how we protect your data, you can contact us by email at any time. The controller responsible for data processing carried out through this website is:
Benda Grill Leicht und Wach GmbH
Traubenstrasse 2
8274 Tägerwilen
Switzerland
Person responsible for data protection: Zoltán Akácz
3. General principles
3.1 What data do we collect from you and where do we obtain it?
We primarily process personal data that you provide to us or that we collect when operating our website. In some circumstances, we also receive personal data about you from third parties. This may include the following categories:
- Personal master data (name, address, date of birth, etc.)
- Contact details (mobile number, email address, etc.)
- Financial data (for example, account details)
- Online identifiers (for example, cookie identifiers and IP addresses)
- Location and traffic data
- Audio and image recordings
- Particularly sensitive data (for example, biometric data or health information)
3.2 Under what conditions do we process your data?
We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure transparent and proportionate processing.
If, exceptionally, we are unable to follow these principles, the processing may still be lawful if there is a justification. Possible justifications include your consent, the performance of a contract or pre-contractual measures, and our legitimate interests, provided your interests do not override them.
3.3 How can you withdraw your consent?
If you have given us consent to process your personal data for specific purposes, we process your data within the scope of that consent unless another legal basis applies. You may withdraw your consent at any time by sending an email to the address stated in the legal notice. Processing already carried out is not affected.
3.4 When can we disclose your data to third parties?
a. Principle
We may need to use the services of third parties or affiliated companies and commission them to process your data. Categories of recipients include accounting, fiduciary and audit firms, consulting companies, IT service providers, payment providers and providers of tracking, conversion and advertising services.
We ensure that these third parties and affiliated companies comply with data-protection requirements and treat your personal data confidentially. We may also be legally required to disclose your personal data to authorities.
b. Visits to our social-media channels
Our website may contain links to our social-media channels. If you click the icons, you are redirected to those channels. The providers then learn that you accessed their platform from our website and may use the data collected for their own purposes.
c. Disclosure abroad
As part of commissioned processing, personal data may be transferred to companies abroad. If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and ensure by contract that the same level of protection as in Switzerland is guaranteed. The European Commission's standard contractual clauses are available at commission.europa.eu.
3.5 How long do we retain your data?
We retain personal data only for as long as necessary to fulfil the individual purposes. Data stored when you visit our website is retained for twelve months. An exception applies to analytics and tracking data, which may be retained for longer.
We retain contract data for longer because legal requirements oblige us to do so. Business correspondence, concluded contracts and accounting records must in particular be retained for up to ten years.
3.6 How do we protect your data?
We store your data securely and take all appropriate measures to protect it from loss, access, misuse or alteration. Our contractual partners and employees who have access to your data are required to comply with data-protection regulations. We use SSL on our website together with the highest level of encryption supported by your browser.
3.7 What rights do you have?
a. Right of access
You may request information about the data we store about you at any time. Send your request together with proof of identity to zoltan@akacz.de. You also have the right to receive your data in a commonly used file format if the legal requirements are met.
Your request is generally subject to a statutory processing period of 30 days. This period may be extended for legal or technical reasons or if there is a high volume of requests.
b. Erasure and rectification
You may request the erasure or correction of your data at any time. We may reject the request if legal provisions require us to retain the data for longer or unchanged, or if another lawful basis conflicts with your request.
c. Legal remedies
If you are affected by the processing of personal data, you may enforce your rights in court or file a report with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner.
3.8 Changes to this privacy policy
We may amend this privacy policy at any time. Changes will be published on the website; you will not be notified separately.
4. Individual data-processing activities
4.1 Providing the website and creating log files
When you visit the website, certain data may be stored automatically on our servers or on servers of services and products we obtain or have installed for system administration, statistics, security or tracking purposes. This includes, in particular, internet service provider, IP address, browser version, operating system, date and time of access, referring website and search terms used.
This data cannot be assigned to a specific person and is not combined with other data sources. The log files support the functionality and security of our information systems. They are retained only for as long as necessary to achieve the purpose.
4.2 Google Forms
For surveys and online forms, we use Google Forms, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you complete a Google form provided by us, the data entered and your IP address are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.
4.3 Microsoft 365
For office and communication tasks, we use Microsoft 365, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. If you contact us or we share documents, these interactions are processed and stored through Microsoft 365. Data may be stored in data centres outside Switzerland; Microsoft has implemented various security and privacy measures for this purpose.
BrainBox Generators
BrainBox Generators is a service of BrainBox Solutions GmbH that detects privacy-relevant services on a website and assists in creating the privacy policy. No personal data is collected or processed in this process.