Privacy policy
Data controller in terms of the data protection law, in particular the EU General Data Protection Regulation (GDPR) is:

Synergy Zone Klg
Ewelina Ropela & Michael Sätteli
Vilanstrasse 11
7000 Chur

Telefon: +41 76 602 52 81
E-Mail: kontakt@synergyzone.ch
WebSite: http://www.synergyzone.ch/

 
General information
Based on Article 13 of the Swiss federal Constitution and the regulations of federal data protection law (Swiss Data Protection Act (DSG)) each person has the right to the protection of their privacy and protection against abuse of their personal data. The operators of this website put a great emphasis on the protection of your personal data. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
In cooperation with our hosting providers we strive to protect the data bases in the best possible way against unauthorised access, loss, abuse or forgery.
Please, note that data transfer on the internet (e.g., by e-mail correspondence) may involve security gaps. A complete protection of data against the third-party access is not possible.
By using this website, you declare your consent to the collection, processing and use of data according to the specification below. This website can generally be visited without registration. In the process, data such as the webpages viewed or names of files viewed, date and time are saved on the server for statistical purposes, without the possibility to link such data directly to you. Personal data, in particular name, address or e-mail address is collected on a voluntary basis, if possible. No transfer of data is made to third parties without consent.
 
Processing personal data
Personal data is all information related to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing includes each handling of personal data, irrespective of the measures and procedures used, in particular the storage, disclosure, acquisition, erasure, saving, amendment, destruction and use of personal data.
We process personal data in accordance with the Swiss data protection law. Further, to the extent the EU GDPR is applicable, we process personal data pursuant to the following legal principles in the context of Art. 6 (1) GDPR:
• Consent (Art. 6 (1) sentence 1 (a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Performance of a contract and requests prior to entering into a contract (Art. 6 (1) sentence 1 (b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation (Art. 6 (1) sentence 1 (c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Protection of the vital interests (Art. 6 (1) sentence 1 (d) GDPR) – processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Protection of the legitimate interests (Art. 6 (1) sentence 1 (f) GDPR) – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
• Application procedure as pre-contractual and contractual relationship (Art. 9 (2) (b) GDPR) – If in the context of the application procedure specific categories of personal data in terms of Art. 9 (1) GDPR (e.g. health data such as severe disability or ethnic origin) are requested from the applicants, so that the data controller or the data subject who exercise the applicant’s rights derived from labour law and the social security and protection law can meet their or the applicant’s relevant obligations, the data is processed according to Art. 9 (2) (b) GDPR, in the case of protection of vital interests of the applicant and other persons according to Art. 9 (2)(c) GDPR or for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services according to Art. 9 (2) (h) GDPR. In the case of voluntary consent-based notice by specific categories of data, processing is made on the basis of Art. 9 (2)(a) GDPR.
We process personal data during the period which is necessary for the relevant purposes or purpose. In the case of longer retention obligations based on legal or other obligations which we are subject to, we limit the processing accordingly.
 
Relevant legal basis
Pursuant to Art. 13 GDPR, we would like to inform you about the legal basis for our data processing. If the legal basis is not mentioned on the privacy policy, the following applies: the legal basis for obtaining consent is Art. 6 (1)(a) and Art. 7 GDPR, the legal basis for processing to provide our services and take contractual measures as well as responding to requests is Art. 6 (1)(b) GDPR, the legal basis for processing to meet our legal obligations is Art. 6 ( 1) (c) GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1)(f) GDPR. If the vital interest of the data subject or another natural person require processing of personal data, the legal basis is Art. 6 (1)(d) GDPR.
 
Security measures
According to legal requirements, considering the state of technology, implementation costs and type of environment, the circumstances and purposes of processing, different probability of occurrence and the scale of the threat to the rights and freedoms of a natural person, we take suitable technical and organisational measures to guarantee the protection level commensurate with the risk.
In particular, the measures include ensuring confidentiality, integrity and availability of data by controlling the possibility of physical and electronic access to data, of the authorised access to, input and transfer of data, as well as ensuring data availability and their separation. Further, we have created procedures which guarantee the exercise of rights of the data subjects, erasure of data and response to the threat regarding data. Moreover, we have already given consideration to the protection of personal data when we developed or selected hardware, software and procedures according to the principle of data protection by technology design and data protection friendly default settings.
 
Transfer of personal data
In the context of our processing of personal data, it happens that this data is transferred or disclosed to other centres, companies, legally independent organisational units or persons. The recipients of this data can be, for example, service providers authorised to perform IT tasks or suppliers of content and services which are incorporated in a website. In such cases we comply with the legal requirements and conclude the relevant contracts or agreements with the recipients of your data which are used for protection of your data.
 
Data processing in third countries
If we process data in a third country (that is, outside the European Union (EU), European Economic Area (EEA)) or processing takes place in the context of using third-party services or disclosure or transfer of data to other persons, centres or companies, this is done only in accordance with the legal requirements.
Subject to the explicit consent or contractually or legally required transfer, we process data only in the third countries with a recognized data protection level, contractual obligation by the so-called standard data protection clauses of the EU Commission, following submission of certifications or binding corporate rules (Art. 44 to 49 GDPR, information website of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en
 
Privacy policy for cookies
This website uses cookies. Cookies are text files which contain data from the websites or domains visited and are saved on the user PC by a browser. Cookies are used primarily to save the information about the user during or after their visit on the website. The data saved could be language settings on a website, login status, shopping basket or the place where a video was watched. The term cookies also covers other technologies which perform the same functions as cookies (e.g., when user information is saved by pseudonymised online tags also described as user ids).
The following types of cookies and functions are defined:
• Temporary cookies (also: session cookies): Temporary cookies which are deleted only after the user leaves the website and closes the browser.
• Permanent cookies: Permanent cookies remain saved, even after the browser is closed. In this way, the login status can be saved or preferred content can be displayed directly, if the user returns to the website. The user interests which are useful for audience measurement or marketing purposes can also be saved in such cookies.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies (also: third-party provider cookies): Third-party provider cookies are mainly used by advertisers (the so-called third-parties) to process the user information.
• Necessary (also: essential or strictly necessary) cookies: Cookies can be essential for the operation of the website for one thing (e.g., to save logins or other user data for security purposes).
• Statistics, marketing and personalization cookies: Further, cookies are also set as a rule in the context of audience measurement and if the interests of the user or their behaviour (e.g., viewing certain content, using functions, etc.) are saved in the user profile on individual websites. Such profiles are used to show the content which corresponds with their potential interests. This procedure is also described as “tracking”, that is, following up the potential interests of the user. If we set cookies or tracking technology, we inform you separately in our privacy policy or in the context of obtaining consent.
Information on legal basis: The legal basis for our processing of your personal data by cookies depends on requesting consent. If you are requested for consent to cookies and you give it, the legal basis for processing your data is the consent given. In other cases, the data is processed by cookies on the basis of our legitimate interests (e.g., business-oriented operation of our website and its improvement) or if setting of cookies is necessary to meet our contractual obligations.
Storage period: Unless we provide you with clear information on the storage period of permanent cookies (e.g., in the context of the so-called cookie opt-ins), please assume that the storage period can take up to two years.
General information on withdrawal and objection (opt-out): Depending on what is the basis for processing, a consent or legal authorisation, you can withdraw the given consent at any time or object to the processing of your data by cookie technology (described jointly as “opt-out”). First of all, you can declare your objection through the settings of your browser, e.g., by deactivating the use of cookies (which can also limit the functionality of our website). An objection against the use of cookies for the purpose of online marketing can also be declared with respect to many services, primarily for tracking through websites https://optout.aboutads.info and https://www.youronlinechoices.com/ Next, you can receive more information about objection in the context of instructions on the used service providers and cookies.
Processing cookie data on the basis of consent: We have introduced a procedure for cookie consent management which allows to obtain the user consent for using cookies or consent for processing and service providers mentioned in the context of cookie consent management procedure and which allows the user to manage and withdraw the consent. The declaration of consent is saved here without the need to be requested again and in order to be able to provide evidence for consent in accordance with the legal obligation. The consent can be saved on the server and/or in a cookie (the so-called opt-in cookie or by similar technology) to facilitate the allocation of the consent to the user or their device. Subject to individual instructions on the providers of cookie management services, the following information applies: The period of consent storage can take up to two years. A pseudonymised user identification is created here and saved together with the time of consent, information on the scope of consent (e.g., what categories of cookies and/or service providers) as well as the browser, system and device used.
• Extended data type: use data (e.g., visited websites, interest in content, websites accessed), meta/communication data (e.g., device information, IP address).
• Data subject: user (e.g., website visitor, online service user).
• Legal basis: consent (Art. 6 (1) sentence 1 (a) GDPR), legitimate interests (Art. 6 (1) sentence 1 (f) GDPR).
 
Privacy policy for SSL/TLS encryption
For security reasons and as a safeguard against transfer of confidential content such as requests which you send to us as the website operator, this website uses a SSL/TLS encryption. You can recognize the encrypted connection by checking if the address line of the browser changes from “http://” to “https://” and then a padlock symbol appears in the browser line.
If the SSL or TLS encryption is activated, the data which you sent to us cannot be seen by third parties.
 
Privacy policy for server log files
The provider of this website automatically collects and saves information in the so-called server log files which your browser automatically transfers to us. They include:
• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
This data cannot be allocated to specific persons. This data is not merged with other data sources. We reserve the right to check this data later, if we discover any specific evidence for illegal use.
 
Third-party services
If needed, this website uses Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam as well as YouTube for embedding videos.
These services of the American company Google LLC also use cookies and as a result, data is transferred to Google in the USA, whereby it is assumed that no personal tracking is performed in this context just by using our website.
Google undertakes to guarantee a proper data protection according to the E.U.-U.S. and Swiss-U.S. Privacy Shield.
You can find more information at Privacy policy by Google.
 
Rights of the data subjects
Right to confirmation
Each data subject has the right to request a confirmation from the operator of the website whether the personal data related to the data subject is processed. If you would like to exercise this right to confirmation, you can contact the data protection officer for this purpose at any time.
 
Right to information
Each data subject whose personal data is processed has the right to obtain information from the operator of this website at any time free of charge regarding their personal data saved and obtain a copy of this information. Moreover, the following information can be provided, if necessary:
• purpose of processing
• categories of personal data which are processed
• recipients to whom the personal data has been disclosed or will be disclosed
• if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for establishing this period
• existence of the right to rectification or erasure of the their personal data or restriction of processing by the data controller or the right to objection against such processing
• existence of the right to lodge a complaint with a supervisory authority
• if the personal data is not collected from the data subject: all available information about the origin of the data
Further, the data subject has the right to information if the personal data has been transferred to a third country or an international organisation. If this is the case, the data subject also has the right to information about the adequate guarantees related to the transfer.
If you would like to exercise this right to information, you can contact our data protection officer for this purpose at any time.
 
Right to rectification
Each data subject whose personal data is processed has the right to request immediate rectification of their inaccurate personal data. Further, taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you would like to exercise this right to rectification, you can contact our data protection officer for this purpose at any time.
 
Right to erasure (right to be forgotten)
Each data subject whose personal data is processed has the right to request the data controller of this website that their personal data is immediately erased, if one of the following grounds applies and if the processing is not necessary:
• the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed
• the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing
• the data subject objects to the processing on grounds relating to their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes and profiling related to such direct marketing
• the personal data has been unlawfully processed
• the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject
• the personal data has been collected in relation to the offer of information society services directly to a child
If one of the above-mentioned grounds applies and you would like to have personal data which is stored by the operator of this website erased, you can contact our data protection officer for this purpose at any time. The data protection officer of this website will arrange for the erasure request to be immediately fulfilled.
 
Right to restriction of processing
Each data subject whose personal data is processed has the right to request the restriction of processing from the data controller of this website, if one of the following grounds applies:
• the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
• the data controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims
• the data subject has objected to processing on grounds relating to their particular situation, pending the verification whether the legitimate grounds of the data controller override those of the data subject
If one of the above-mentioned grounds applies and you would like to request the restriction of personal data which is stored by the operator of this website, you can contact our data protection officer for this purpose at any time. The data protection officer of this website will arrange for the restriction of processing.
 
Right to data portability
Each data subject whose personal data is processed has the right to receive their personal data in a structured, commonly used and machine-readable format. You also have the right for those data to be transmitted to another data controller, if the legal requirements are present.
Further, the data subject has the right to have the personal data transmitted directly from one data controller to another, where technically feasible and if this does not affect the rights and freedoms of another person.
To exercise the right to data portability you can contact at any time the data protection controller appointed by the operator of this website.
 
Right to objection
Each data subject whose personal data is processed has the right, on grounds relating to their particular situation, at any time, to object to processing of their personal data.
The operator of this website no longer processes the personal data, in the case of objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or if processing is used for the establishment, exercise or defence of legal claims.
To exercise the right to objection you can directly contact the data protection controller of this website.
 
Right to withdrawal of consent under data protection law
Each data subject whose personal data is processed has the right to withdrawal of given consent for processing of personal data at any time.
If you would like to exercise this right to withdrawal of consent, you can contact our data protection officer for this purpose at any time.
 
Privacy policy for objection to advertising e-mails
We hereby object to the use of contact data, published in the context of obligation to provide a legal notice, to send advertisement and information materials which have not been expressly requested. The operators of the website clearly reserve the right to legal steps, in the case of unsolicited sending of advertising information, for example by spam e-mails .
 
Fee-based services
To provide fee-based services we have requested additional data such as payment details to be able to carry out your order or contract. We store this data in our systems until the legal storage periods expire.
 
Use of Google Maps
This website uses the offer of Google Maps. In this way, we can display interactive maps directly on the website for you and make it possible for you to comfortably use the map function. When you visit a website, Google receives information that you have called up the relevant sub-page of our website. This happens irrespective whether Google has provided a user account through which you have logged in, or if no user account exists. If you have logged in with Google, your data is directly matched to your account. If you do not want the match to your profile on Google, you must log out before you activate the button. Google stores your data as user profile and uses them for the purpose of advertising, market research and/or tailor-made design of its website. This type of analysis is made in particular (even for unlogged users) to provide tailor-made advertisement and to inform other users of social networks about your activity on our website. You have the right to object against the creation of this user profile, whereby you must contact Google to exercise this right. You can find more information about the purpose and scope of collecting data and its processing by Google, in addition to more information on your related rights and setting options to protect your privacy at: www.google.de/intl/de/policies/privacy
 
Privacy policy for the use of Google Web Fonts
For the uniform display of fonts, this website uses the so-called Web Fonts, which are provided by Google. When you call up a page, your browser downloads the necessary Web Fonts into your browser cache to display the texts and fonts in a specific way. If your browser does not support Web Fonts, you PC will use a standard font.
You can find more information on Google Web Fonts at https://developers.google.com/fonts/faq and in the Privacy Policy by Google: https://www.google.com/policies/privacy/
 
Information on data transfer to the USA
Among other things, tools of the companies domiciled in the USA are incorporated into our website. If these tools are active, your personal data can be forwarded to the US server of the relevant company. Please note that the USA is not a secure third country in terms of the EU data protection law. US companies have an obligation to disclose the personal data to security agencies, without you as the data subject having a possibility to take legal action against it. Therefore, it cannot be excluded, that the US agencies (e.g., intelligence agencies) process, analyse and permanently store your data located on the US servers for monitoring purposes. We have no influence over these processing activities.
 
Copyright
The copyright and all other rights to content, images, photos or other files on the website are the exclusive property of the operator of this website or the specially appointed copyright holder. A written consent of the copyright holder must be obtained in advance to reproduce any files.
Whoever commits a breach of the copyright without the consent of the relevant copyright holder can be liable to prosecution or at best liable to damages.
 
General exclusion of liability
All information included in our internet offer has been carefully verified. We strive to provide our information as updated, correct and complete. Despite this, it cannot be fully excluded that errors occur, whereby we cannot guarantee that the information, also of journalistic and editorial nature is complete, correct and up to date. Liability claims resulting from damages of a material or non-material type which were incurred by the use of the information offered are excluded, unless demonstrably intentional or grossly negligent fault exists.
The publishers can change or delete texts at their own discretion and without notice and they have no obligation to update the content of this website. This website is used and accessed at the visitor’s own risk. The publishers, their clients or partners are not responsible for direct, indirect, incidental, consequential and special damages which have been allegedly incurred due to the visit on this website and thus, they do not accept any liability for them.
Neither do the publishers accept any responsibility and liability for the content and availability of the third-party websites which can be accessed by external links on this website. Only the operators of such websites are responsible for the content of the linked pages. This means that the publishers expressly disassociate themselves from all third-party content that could be of potential relevance in terms of criminal or liability law or that offends moral standards.
 
Amendments
We can adapt this privacy policy at any time without notice. The applicable version is the one published on our website in each case. If the privacy policy is a part of any agreement with you, you will be notified about the amendment by e-mail or in another appropriate way, in the case of an update.
 
Queries to the data protection officer
If you have queries about the data protection, please contact us by e-mail or refer directly to the person in our organisation who is responsible for the data protection and has been mentioned at the beginning of the privacy policy.

Quelle: SwissAnwalt