Daniela Hadorn – Privacy Policy

Daniela Hadorn operates the website danielahadorn.com, which offers various services such as consulting, meetings, courses, memberships and events.

This website is subject to Swiss data protection law, in particular the Federal Data Protection Act (DSG), as well as a possible other applicable foreign data protection law.

With this data protection declaration we would like to inform you in detail about the handling of your data and about your rights in this connection. This data protection declaration can be adapted at any time by publication on our website.

If you use our services, you accept the collection and use of information in connection with this Privacy Policy. The personal information we collect is used to improve our services. We only need or share your information as described in this Privacy Policy.

Access to our website is subject to general mass surveillance by security authorities in Switzerland, the EU, the USA and other countries, as is any use of the Internet. We have no direct influence on the appropriate processing of personal data by secret services, police forces and other security authorities.

Our responsible body within the meaning of the data protection laws is:

P. + D. Hadorn AG
Daniela Hadorn / Managing Director
Aare Route 198
CH-4618 Boningen
Switzerland

If you wish to object to the collection, processing or use of your data by us in whole or in part in accordance with these data protection provisions, you can address your objection to this responsible body. You can save and print this data protection declaration at any time.

The provisions of this data protection provision are linked to our general terms and conditions.

General use of the website

Links to other pages

Our services and pages may also contain links to other websites. If you click on a third-party link, you will be directed to that site. Please note that these sites are not necessarily operated by us. Therefore, we recommend that you read the privacy policies of these websites. We have no control and assume no responsibility over the content, privacy policies or practices of such third party sites or their services.

Policies for Children

Our services are not aimed at children under the age of 18. We do not intentionally collect personal information from anyone under the age of 18. In the event that we nevertheless discover that a child under the age of 18 has provided us with personal information, we will immediately delete it from our servers. If you are a parent or guardian and notice that your child has provided us with personal information, we ask that you contact us so that we can take the necessary steps.

Citizens of the EU

As a citizen of the EU you have the right of access to the personal data we have about you. You can also ask us to correct, update or delete your personal data. If you wish, you can contact us at any time, see below “Contact us”.

In addition, we would like to point out that we process your personal information so that we can fulfill the possible order we have with you (for example, if you place an order via our website), or otherwise to pursue our legitimate, common business interests.

Access Data

We collect information about you when you use this website. We automatically collect information about your usage patterns and your interaction with us, and we register information about your computer or mobile device. We collect, store and use information about each access to our online services (so-called server log files) for security reasons. Access data includes the name and URL of the file accessed, date and time of access, amount of data transferred, notification of successful access, browser type and version, operating system, referrer URL, IP address and the requesting provider.

We use these protocol data without allocation to your person or other profile creation for statistical evaluations for the purpose of the operation, security and optimisation of our online offer, but also for the anonymous recording of the number of visitors to our website as well as for the scope and type of use of our website and services.

On the basis of this information, we can provide personalised and location-related content and analyse data traffic, search for and correct errors and improve our services.

We reserve the right to subsequently check the log data if there is a justified suspicion of illegal use on the basis of concrete indications. We store IP addresses in the log files for a limited period of 30 days if this is necessary for security purposes or for the provision of services or the billing of a service, e.g. if you use one of our offers.

After the order has been cancelled or payment has been received, we will delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have the concrete suspicion of a criminal offense in connection with the use of our website.

E-mail contact and contact form

When you contact us (e.g. via contact form or e-mail), we store your details for processing the enquiry and in the event that follow-up questions arise. We only store and use further personal data if you give your consent or if this is legally permissible without special consent.

Comments

Comments can be left on our website. We store the information that visitors to our website collect themselves. In addition, we may store the IP address and time and date to combat misuse, such as identity theft and spam.

Third party services

We use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos. These services of the American Google LLC use cookies, and data is transferred to Google in the USA, whereby we assume that no personal tracking takes place in this context solely through the use of our website. Google has undertaken to ensure adequate data protection in accordance with the American-European and American-Swiss Privacy Shield. Further information can be found in Google’s privacy policy.

Newsletter

When you subscribe to the newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe from the newsletter. You can unsubscribe at any time.

You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: via a unsubscribe link in the newsletter, in writing or by e-mail.

The following information will inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you declare your agreement with the receipt and the described procedures.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or a legal permission. If the contents of the newsletter are specifically described within the scope of registration, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and us.

Double-Opt-In and logging: The registration to our newsletter takes place in a so-called Double-Opt-In procedure. This means that you will receive an e-mail after your registration in which Dz will be asked to confirm your registration. This confirmation is necessary so that no one can register with external e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise the changes of your data stored with the delivery service are logged.

Registration data: In order to subscribe to the newsletter, it is sufficient for you to enter your e-mail address and name (for the purpose of personal contact).

The dispatch of the newsletter and the associated performance measurement are based on the consent of the recipients according to Art. 6 Para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 Para. 2 No. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing according to Art. 6 Para. 1 lt. f. DSGVO in connection with § 7 Abs. 3 UWG.

The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and furthermore allows us to provide evidence of consent.

Cancellation/revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove that we have previously given our consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

The newsletters are sent by the dispatch service “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thereby provides a guarantee of compliance with the European Privacy Level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is responsible for the delivery of our products on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f. DSGVO and an order processing contract in accordance with Art. 28 Para. 3 S. 1 DSGVO.

The dispatch service provider can use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of dispatch and the presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Newsletter – Measurement of success

The newsletters contain a so-called “web-beacon”, i.e. a file the size of a pixel, which is retrieved from our server when the newsletter is opened or, if we use a dispatch service provider, from its server. In the course of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are first collected.

This information is used for the technical improvement of the services based on the technical data or the target groups and your reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. It is, however, neither our endeavour nor, if used, that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

A separate cancellation of the performance measurement is unfortunately not possible, in which case the entire newsletter subscription must be cancelled.

Cookies

Cookies are small files that are used for anonymous identification. These are sent to your browser from the website you visited and stored on the hard drive of your computer. We use so-called “session cookies”, which are automatically deleted after your visit. Other cookies remain stored on your computer until you delete them. These cookies enable us to recognize your browser during your next visit.

Our website uses these “cookies” to collect information and to improve our services. You have the option to accept or refuse cookies. And also to recognize when a cookie is sent to your computer. If you refuse to accept cookies, you may not be able to use all of our services.

You can prevent cookies from being saved by selecting “Block cookies” in your browser settings. However, this can result in a functional limitation of our offers.

Security with Wordfence Security

To secure our website we use the service “Wordfence Security”, which is operated by Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO.

We use this plugin to protect against viruses and malware and to prevent attacks on our website. In order to recognize whether the visitor is a human or a robot, the plugin sets cookies. To protect against brute force and DDoS attacks or comment spam, IP addresses are stored on the Wordfence servers. IP addresses classified as harmless are placed on a white list.

Wordfence Security secures our website and protects website visitors from viruses and malware. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. The option Live Traffic View (real-time live traffic) of the PlugIn is switched off because it is not absolutely necessary.

Further information on the collection and use of data by Wordfence Security can be found in Defiant’s privacy policy: https://www.wordfence.com/privacy-policy/.

User analysis with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: optout

You can also prevent the capture by setting an opt-out cookie. If you would like to prevent your data from being collected in the future when you visit this website, please click here: Deactivate Google Analytics

This website uses Google Analytics with the extension “anonymizeIP()”, so that the IP addresses are processed only shortened to exclude a direct personal reference.

Order processing in the online shop and customer account

We process the data of our customers within the framework of the order processes in our online shop, in order to enable them to select and order the selected products and services, as well as their payment and delivery, or execution.

To the processed data belong inventory data, communication data, contract data, payment data and to the persons affected by the processing belong our customers, interested parties and other business partners. Processing is carried out for the purpose of providing contractual services within the framework of operating an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping basket and permanent cookies to store the login status.

Processing is carried out to fulfil our services and carry out contractual measures (e.g. carrying out order processes) and insofar as it is legally prescribed (e.g., legally required archiving of business processes for trade and tax purposes). The information marked as necessary is required for the justification and fulfillment of the contract. We only disclose the data to third parties within the scope of delivery, payment or within the scope of the statutory permits and obligations, and also if this is done on the basis of our legitimate interests, about which we inform you in the context of this data protection declaration (e.g., to legal and tax advisors, financial institutions, freight companies and authorities).

Users can optionally create a user account by viewing their orders in particular. During the registration process, the necessary mandatory information will be provided to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its retention is necessary for commercial or tax reasons. Information in the customer account remains until its deletion with subsequent archiving in the case of a legal obligation or our legitimate interests (eg, in the case of litigation). It is the responsibility of the users to secure their data before the end of the contract in the event of termination.

Within the scope of registration and renewed registrations as well as use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A passing on of these data to third parties does not take place in principle, except it is necessary for the pursuit of our legal requirements as entitled interest or it exists for this a legal obligation.

The deletion takes place after expiration of legal warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers), whereby the necessity of the retention of data is reviewed every three years; in the case of retention due to legal archiving obligations, the deletion takes place insofar after their expiration.

External payment service providers

We use external payment service providers whose platforms users and we can use to carry out payment transactions. These payment service providers may include Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full) und Stripe (https://stripe.com/de/privacy), each with a link to the privacy policy.

Within the framework of the performance of contracts, we set the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. Otherwise, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO in order to offer our users effective and secure payment options.

The data processed by the payment service providers include inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sum and recipient details. The information is required to complete the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account- or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service provider to credit agencies. The purpose of this transmission is to check identity and creditworthiness. Please refer to the general terms and conditions and data protection information of the payment service providers.

For payment transactions, the terms and conditions and the data protection notices of the respective payment service providers apply, which can be accessed within the respective websites or transaction applications. We also refer to these for the purpose of further information and assertion of revocation, information and other rights affected.

Rights regarding personal data

Under the applicable laws, you have various rights with respect to your personal information. If you would like to assert these rights, please address your request to the responsible office mentioned in section 1 at the beginning, clearly identifying yourself.

Right to confirmation and information

You have the right at any time to receive confirmation from us as to whether or not personal data in question will be processed. If this is the case, you have the right to request from us free information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:

  • the processing purposes
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed
  • if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
  • the existence of a right to rectify or erase personal data concerning you or to limit the processing by the controller or to object to such processing
  • the existence of a right of appeal to a supervisory authority
  • if the personal data is not collected from you, all available information about the origin of the data
  • the existence of automated decision making, including profiling, meaningful information about the logic involved and the scope and intended impact of such processing for you
  • Right to rectification

You have the right to demand that we correct any incorrect personal data concerning you immediately. Taking into account the purposes, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

Right to deletion

You have the right to request that we delete any personal information about you immediately and we are obligated to delete any personal information immediately for any of the following reasons:

  • Personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You revoke the consent on which the processing was based and there is no other legal basis for the processing.
  • You object to the processing and there are no overriding legitimate reasons for the processing.
  • The personal data have been processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation.

If we have made the personal data public and we are obliged to delete them, we will take appropriate measures, including technical measures, to inform those responsible for data processing who process the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data, taking into account the available technology and implementation costs.

Right to limitation of processing

You have the right to demand that we restrict processing if one of the following conditions is met:

  • the accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data.
  • the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data.
  • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims.
  • You have objected to the processing as long as it is not yet clear whether the justified reasons of our company outweigh yours.

Right to data transfer

You have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format, and you have the right to transfer such data to another responsible person without our interference, provided that

  • processing is based on consent or on a contract, and
  • processing is carried out using automated procedures.

When exercising your right to data transfer in accordance with paragraph 1, you have the right to request that the personal data be transferred directly by us to another responsible person, insofar as this is technically feasible.

  • you dispute the accuracy of the personal data for a period of time that allows us to verify the accuracy of the personal data.
  • the processing is unlawful and you refuse to delete the personal data and instead have requested the restriction of the use of the personal data.
  • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims.
  • You have objected to the processing as long as it is not yet clear whether the legitimate reasons of our company outweigh yours.

Right of objection

You have the right to object to the processing of your personal data at any time for reasons related to your particular situation, including profiling based on these provisions. We will no longer process the personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

If personal data is processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.

You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task in the public interest.

Automated decisions including profiling

You have the right not to be subject to any decision based solely on automated processing – including profiling – which has any legal effect on you or which significantly affects you in a similar manner.

Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

Right to complain to a supervisory authority

You have the right to complain to a supervisory authority if you believe that the processing of your personal data is unlawful.

Data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.

Your personal data will generally be transmitted in encrypted form. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures, which we constantly adapt to the state of the art.

In addition, we do not guarantee that our services are available at certain times; disruptions, interruptions or failures cannot be excluded. The servers we use are regularly and carefully backed up.

Automated decision making

There is no automated decision-making on the basis of the personal data collected.

Service Providers

It may well be that we employ third parties, companies or individuals with us. For the following reasons:

  • to expand and enable our services;
  • to perform certain services on our behalf;
  • to perform services; or
  • to help us analyze our services.

We would like to inform you that these third parties have access to your personal information. The reason is that they can perform the tasks for you. However, these third parties are obliged not to publish, share or use your personal information.

Transfer of data to third parties

In principle, we use your personal data only within our company. If we involve third parties in the fulfillment of contracts, this personal data will only be used to the extent that the transfer is necessary for the corresponding service. In the event that we outsource certain parts of the data processing, we contractually oblige contract processors to use personal data only in accordance with the requirements of the data protection laws and to guarantee the protection of the rights of the data subject.

Contact Us

If you have any questions or suggestions regarding this privacy policy, please feel free to contact us.