Purpose of the Privacy Policy
Visiting a website generally involves data processing activities that may relate to your personal data. As your personal data is particularly sensitive, Article 13 and 14 of the European General Data Protection Regulation (GDPR) impose a duty on every website operator to provide information in this regard. This privacy policy is intended to inform users of this website, in accordance with the Federal Data Protection Act and the Telemedia Act, about the nature, scope and purpose of the collection and use of personal data by the website operator [Rémy Schnell, praklahom GmbH, Zurlindenstrasse 49, CH-8048 Zurich, Switzerland], as well as about users’ rights.
I take your data protection very seriously and treat your personal data confidentially and in accordance with legal requirements.
Please bear in mind that there may generally be security vulnerabilities when data is transmitted over the internet. It is not possible to provide complete protection against access by third parties.
I. General information on data protection
I.1.a) Data protection officer for this website
As the operator of this website, I,
Rémy Schnell
Zurlindenstrasse 49
CH-8048 Zürich
Switzerland
Tel. +41 43 960 05 15
E-Mail info@nasal-specific.eu
am responsible for the data processing that occurs when you visit this website. You can find all details about me in the legal notice section of this website.
I.1.b) Name and address of the Data Protection Officer
The controller responsible for data processing on this website is:
Rémy Schnell
Zurlindenstrasse 49
CH-8048 Zürich
Switzerland
Tel. +41 43 960 05 15
E-Mail info@nasal-specific.eu
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Any data subject may contact the website operator directly at any time with any questions or suggestions regarding data protection.
I.2. Scope
This privacy policy is intended to inform users of this website, in accordance with the Federal Data Protection Act and the Telemedia Act, about the nature, scope and purpose of the collection and use of personal data by the website operator Rémy Schnell, Zurlindenstrasse 49, CH-8048 Zurich, Switzerland.
I.3. Data access
What is personal data and how is it processed on this website?
Personal data is any data that can be used to identify you personally, such as your name, address or email address. Non-personal data is not subject to data protection legislation and may be stored and processed in anonymised form.
When you visit my website www.nasal-specific.eu, the browser used on your device automatically sends information to my website’s server. This information is temporarily stored in a so-called log file. The following information is collected by the provider without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of access
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Name and URL of the file accessed
- Website from which the access originates (referrer URL),
- Browser used and, where applicable, your computer’s operating system, as well as the name of your internet service provider
- Language and version of the browser software.
Further data is collected when you provide it to me, for example by using a contact form.
In addition, I use cookies and analytics services when you visit my website. Further details on this can be found below under sections II.1. and II.2. of this privacy policy.
The legal basis for data processing is Article 6(1)(f) of the GDPR.
I would like to point out that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.
I.4. Purpose of data collection and disclosure
I process the data mentioned in order to display my website to you and to ensure its stability and security. In particular, the data is required
- to ensure the website connects smoothly
- to ensure a user-friendly experience on my website
- to assess system security and stability, and
- for other administrative purposes.
Your personal data will not be transferred to third parties for purposes other than those listed below.
I will only disclose your personal data to third parties if:
- you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR,
- the disclosure is necessary pursuant to Article 6(1)(f) of the GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- there is a legal obligation to disclose the data in accordance with Article 6(1)(c) of the GDPR, and
- this is permitted by law and necessary for the performance of contractual relationships with you in accordance with Article 6(1)(b) of the GDPR.
II. Detailed information on data collection on this website
II.1. Technically necessary cookies
I use cookies on my website. These are small files that your browser creates automatically and which are stored on your device (laptop, tablet, smartphone, etc.) when you visit my site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.
Information is stored in the cookie that relates to the specific device used. However, this does not mean that I thereby gain knowledge of your identity.
The use of cookies serves, on the one hand, to make the use of my website more convenient for you. For example, I use so-called session cookies to recognise that you have already visited individual pages of my website. These are automatically deleted when you leave my site.
In addition, to optimise user-friendliness, I also use temporary cookies that are stored on your device for a specific, defined period. If you visit my site again to use the services, the system automatically recognises that you have already visited and which entries and settings you have made, so that you do not have to enter them again.
The data processed by cookies is necessary for the purposes stated, in order to safeguard my legitimate interests and those of third parties in accordance with Article 6(1)(f) of the GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all the features of my website.
II.2. Cookies that are not technically necessary
II.2.a. Privacy Policy on the Use of Analytics Tools
The tracking measures listed below and used by me are carried out on the basis of Article 6(1)(f) of the GDPR. I use these tracking measures to ensure that my website is designed to meet your needs and is continuously optimised. Furthermore, the tracking measures are used to statistically record the use of my website and to evaluate this data for the purpose of optimising my offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
II.2.b. Privacy Policy on the Use of Social Media Plugins
This website uses Facebook social plugins, which are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). These plugins can be identified by the Facebook logo or the terms “Like”, “Gefällt mir”, “Share” in Facebook’s colours (blue and white). Information on all Facebook plugins can be found at the following link: https://developers.facebook.com/docs/plugins
The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the nature and scope of the data that the plugin transmits to the servers of Facebook Inc. You can find information on this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you have visited this website. It is possible that your IP address may be stored. If you are logged into your Facebook account whilst visiting this website, the aforementioned information will be linked to it.
If you use the plugin’s functions – for example, by sharing or ‘liking’ a post – the relevant information will also be transmitted to Facebook Inc.
If you wish to prevent Facebook Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website.
The data controller has integrated YouTube components into this website. YouTube is an online video portal that allows video publishers to upload video clips free of charge and enables other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers or videos created by users themselves, are available via the internet portal.
The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time a user accesses one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed of which specific subpage of our website is being visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the data subject’s respective YouTube account.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish such information to be transmitted to YouTube and Google, they can prevent this by logging out of their YouTube account before visiting our website.
The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.
II.2.c. Privacy policy regarding the use of newsletter subscriptions
As the website operator, I offer you a newsletter through which you can be kept informed of the latest news and offers, if you wish. If you would like to subscribe to the newsletter, you must provide a valid email address.
II.3. Contacting me by email
You can also contact me by email (SSL encryption). When you send me an email, the data you provide (e.g. your email address, your name and telephone number if applicable) will initially be stored so that I can answer your questions. Once storage is no longer necessary, I will delete the personal data collected. If there is a legal obligation to retain data, I will restrict its processing. This data will not be passed on to third parties without your consent.
The legal basis for data processing for the purpose of establishing contact is set out in Article 6(1)(a) of the GDPR.
III. Data subject rights
With regard to your data protection, you have the right,
pursuant to Article 15 of the GDPR, to request information about your personal data processed by me. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, and the origin of your data;
- pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by me, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer require the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
- in accordance with Article 20 of the GDPR, to receive the personal data you have provided to me in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
- in accordance with Article 7(3) of the GDPR, to withdraw your consent at any time. As a result, I may no longer continue the data processing based on this consent in the future; and
- pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence or workplace, or of the location of my practice or law firm.
IV. Data security
During your visit to the website, we use the SSL (Secure Sockets Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether a particular page on our website is being transmitted in encrypted form by the closed key or padlock symbol in the status bar at the bottom of your browser.
We also employ appropriate technical and organisational security measures to protect the data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
V. Right to object and right to erasure
Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which I will implement without you needing to specify a particular situation.
If you wish to exercise your right of withdrawal or right to object, simply send an email to info@nasal-specific.eu. Please note the comments under Section II.3.
VI. Validity and amendments to this privacy policy
This privacy policy is currently valid and was last updated in May 2018.
It may become necessary to amend this privacy policy as a result of further developments to my website and the services I provide, or due to changes in legal or regulatory requirements.
You can view and print the current privacy policy at any time on the website at https://nasal-specific.org/datenschutzerkaerung-eu-dsgvo/.
In case of doubt, the original German privacy policy applies.