en
en

Privacy Policy

With this privacy policy, we inform you about the processing of personal data in connection with our conceptory.ch-Website and our other online offerings.
For individual or additional services and offers, special, supplementary, or further privacy policies as well as other legal documents such as General Terms and Conditions (GTC), Terms of Use, or Participation Terms may apply.

1. Contact Information

Responsible for the online service:
Conceptory Veljaca
Damir Veljaca
Langfurenstrasse 10
CH-8143 Stallikon
UID: CHE-448.902.914
damir@conceptory.ch

2. Processing of Personal Data
2.1 Definitions

Personal data includes all information relating to an identified or identifiable person. A data subject is a person whose personal data is being processed. Processing covers any handling of personal data, regardless of the means and methods used, particularly storing, disclosing, collecting, recording, deleting, saving, altering, destroying, and using personal data.

2.2 Legal Basis

We process personal data in accordance with Swiss data protection law, particularly the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (OFADP).

2.3 Type, Scope, and Purpose

We process the personal data necessary to provide our online service on a permanent, user-friendly, secure, and reliable basis. Such personal data may fall into categories such as inventory and contact data, content data, meta or ancillary data, usage data, location data, contract data, and payment data.

We process personal data for as long as necessary for the respective purpose(s) or as required by law. Personal data that is no longer needed will be anonymized or deleted.

In principle, we only process personal data with the consent of the data subject, unless processing is otherwise legally permissible, for example, to fulfill a contract or pre-contractual measures, to protect our overriding legitimate interests, if the processing is apparent from the circumstances, or after prior notification.

In this context, we particularly process information that a data subject voluntarily provides to us when making contact, e.g., by postal mail, email, contact form, social media, or telephone. We may store such information in an address book or similar tools. If you transmit personal data about third parties to us, you are obliged to ensure data protection for such third parties and to guarantee the accuracy of such personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect while providing our online service, insofar as such processing is legally permissible.

2.4 Processing of Personal Data by Third Parties, Including Abroad

We may have personal data processed by third parties, particularly processors, or process, share, or transmit it jointly with third parties. Such third parties are primarily service providers whose services we use. We ensure appropriate data protection also with such third parties.

Such third parties are generally located in Switzerland and the European Economic Area (EEA), including the European Union (EU) and Liechtenstein. However, such third parties may also be located in other countries around the world and elsewhere in the universe, provided their data protection law ensures adequate protection according to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or adequate protection is guaranteed for other reasons, such as through contractual agreements (e.g., standard contractual clauses) or certification. In the United States of America (USA), adequate protection may be ensured through certification under the Privacy Shield. In exceptional cases, such third parties may be located in countries without adequate protection if the applicable data protection requirements, such as explicit consent by the data subject, are met.

3. Rights of Data Subjects

Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information as well as the right to correction, deletion, or blocking of processed personal data.

They also have the right to lodge a complaint with the competent supervisory authority. The competent authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

4. Data Security

We take appropriate and suitable technical and organizational measures to ensure data protection, in particular data security. However, the processing of personal data on the Internet can have security gaps despite such measures. We therefore cannot guarantee absolute data security.

Access to our online service is protected by transport encryption (SSL / TLS via HTTPS).

Access to our online service is subject—like all internet use—to indiscriminate and suspicion-independent mass surveillance and other monitoring by security authorities in Switzerland, the EU, the USA, and other countries. We have no direct influence on the corresponding processing of personal data by intelligence agencies, police authorities, or other security services.

5. Use of the Website
5.1 Cookies

We may use cookies on our website. Cookies—including third-party cookies—are text files stored in your browser. Cookies cannot run programs or transmit malware such as trojans or viruses.

Cookies can be stored in your browser temporarily as «session cookies» or for a defined period as «permanent cookies.» Session cookies are automatically deleted when you close your browser. Permanent cookies allow us to recognize your browser next time you visit our website, measure reach, or be used for online marketing.

Cookies can be deactivated or deleted in your browser settings at any time. However, our online offerings may no longer be fully available without cookies. Where necessary, we will request your explicit consent for the use of cookies.

For cookies used in analytics, reach measurement, or advertising, you may opt out via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

5.2 Server Log Files

We may collect the following information for each access to our website, provided it is transmitted from your browser or determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including interface and version, browser including language and version, pages accessed including data volume transmitted, last page visited in the same browser window (referrer).

We store such information, which may also constitute personal data, in server log files. The information is necessary to provide our online service on a lasting, user-friendly, and reliable basis, and to ensure data security and thereby protect personal data, even through third parties.

5.3 Web Beacons (Tracking Pixels)

We may use tracking pixels (also called web beacons) on our website. Tracking pixels—also from third parties—are small images automatically retrieved when visiting our website. These capture the same information as server log files.

6. Services from Third Parties

We may use third-party services to make our online service permanently user-friendly, secure, and reliable. These also serve to embed content, such as hosting, storage, video, and payment services. These providers need your Internet Protocol (IP) address to deliver their content.

Such services may also be located outside Switzerland and the EEA if adequate protection is ensured. They may also process data for their own statistical, security, and technical purposes in aggregated, anonymized, or pseudonymized form.

6.1 Maps

We use Google Maps to embed maps into our website. This also involves cookies. Google Maps is a service of Google LLC (USA). For EEA and Swiss users, Google Ireland Limited (Ireland) is responsible. More details can be found in Google’s Privacy Policy, Safety Principles, and Cookie information, as well as guidelines on data use in Google products. You may also object to personalized advertising.

6.2 Analytics and Reach Measurement

6.2.1 Google Analytics
We use Google Analytics to analyze website usage, measure reach, and track the success of third-party links. Google Analytics, operated by Google LLC (USA), with Google Ireland Limited responsible for EU/EEA and Swiss users, employs cookies. Google may attempt cross-device tracking.

We anonymize your IP address before analysis, so your full IP is generally not transferred to the USA. More details are in Google’s privacy resources. You can also install the «Google Analytics Opt-out Browser Add-on» and object to personalized advertising.

6.2.2 Google Tag Manager
We use Google Tag Manager to embed and manage Google and third-party analytics and advertising services. Google Tag Manager itself does not use cookies, though services managed through it may. Details on their data processing are provided in this privacy policy.

7. Website Extensions

We use jQuery, a free JavaScript library by the JS Foundation, loaded via Google Hosted Libraries (ajax.googleapis.com) to improve website speed. Cookies are only used for security and anti-abuse purposes. The service is provided by Google LLC (USA), though Google Ireland Limited is responsible for EU/EEA and Swiss users. Details are in Google’s policies and usage conditions for Google Hosted Libraries.

8. Final Provisions

We may adapt or amend this privacy policy at any time. We will inform appropriately about such changes, especially by publishing the latest version on our website.