obra visual AG privacy notice
This privacy notice is intended to serve as a friendly guide so that you know what happens to your personal data when you visit our website. Personal data means all information that relates to you as an individual or through which you can be personally identified.
Our attitude towards data protection
obra visual AG takes the protection of your personal data extremely seriously. We treat your personal data as confidential and handle it in accordance with the legal data protection regulations and this privacy notice.
Various items of personal data are collected when you use our website. This privacy notice explains what personal data we collect, how we collect it and for what purpose, and the legal basis on which this is done. It also explains what we will use your personal data for and for how long, and sets out your rights in this regard.
The entity responsible for data processing on our website is:
obra visual AG
1. What types of personal data do we collect at obra?
The personal data we collect includes personal data of a general nature (e.g. name, address, email address, telephone number), for example.
If you purchase services via our website, additional personal data may also be collected, in particular customer data (orders, delivery address, customer account, etc.).
Finally, we collect certain information via our website in server log files that are sent to us automatically by your internet browser. This information includes the user agent (browser type and version, operating system used), http header information (referrer URL, IP address of the computer accessing the site), the time of the server request and the login status. These server log files are combined with other data sources solely for the purpose of error analysis.
2. When do we collect your personal data?
One way in which we collect your personal data is when you disclose it to us. This may be, for example, personal data that you enter in a contact form or personal data of a general nature that you provide while registering on our website.
Other data is collected automatically by our IT systems when you visit our website. Primarily, this consists of technical data (e.g. internet browser, operating system or time of page access) as well as data concerning the pages, products and services that you view on our website. This data is collected automatically as soon as you access our website. The collected data also includes personal data through which you can be personally identified, such as your IP address.
3. For what purpose do we collect and process your personal data?
Certain personal data is collected to ensure that our website can be provided without errors.
Other personal data is collected for the purpose of analysing your user behaviour in order to optimise our website.
As a basic principle, we collect, process and use personal data only to the extent that is necessary to establish a legal relationship with you, determine the content of this relationship or make changes to it.
If you have not registered on our website, we will collect, process and use data concerning your usage of our website in anonymous form only. In this case, the functions referred to above will be severely restricted, i.e. the potential customisation of the website, the search functions or the advertising and offers displayed will not be as well matched to your needs and interests.
Use of the contact form
When you send us enquiries via our contact form, the information from the enquiry form – including the contact details you have provided within it – will be stored by us for the purpose of processing the enquiry and dealing with any subsequent queries. We will not divulge this data to anyone else without your consent.
The data you have entered in the contact form will be retained by us until you ask us to erase it or until the purpose for storing it ceases to apply. Any legal retention periods remain unaffected by this.
4. On what legal basis do we collect and process your personal data?
The legal basis for the collection and processing of your personal data depends on the purpose for which the data is being processed in each individual case. The following constitute possible legal bases:
1. To safeguard our legitimate interests, provided that your own interests and fundamental rights and freedoms are not thereby unduly affected;
2. To conclude or perform a contract; or
3. If you gave your consent at the time when your personal data was collected. You may withdraw your consent at any time. To do this, you need only send us a message via email, in respect of which there are no formal requirements. The withdrawal of your consent will not affect the lawfulness of the data processing already undertaken.
5. To whom will we divulge your personal data?
We will not divulge the data to uninvolved third parties, except where we are required to disclose and transmit the data by law or by virtue of a court judgement.
Commissioned service providers (processors, e.g. data processing centres or letter shops) may be hired to operate the pages of the website or send out letters or emails, for example, subject to our strict instructions. All processors will be provided with personal data only to the extent that you have consented to its processing and use or will be provided with personal data only for as long as access to the data is required for the purpose of delivering the services.
Furthermore, your personal data may be divulged to third parties that process the data on behalf of obra visual AG in their capacity as vicarious agents or in order to deliver certain services, within the context of which data may also be transferred abroad. Care will be taken to ensure that any such data transfers are only ever made to a country that guarantees an equivalent level of data protection to Switzerland.
6. For how long will we store your personal data?
We will store your personal data for as long as it is required to fulfil the purposes for which it was collected, but certainly for no longer than we are permitted to do so by law.
We will erase your personal data as soon as it is no longer required, but certainly no later than at the end of the legal retention period.
7. How do we protect your personal data?
We have taken appropriate technical and organisational measures to prevent unauthorised or unlawful access to your personal data. Given that there is no way to guarantee complete data security when communicating via email, we recommend that you select a secure form of data transmission for confidential information.
For security reasons and to protect the transmission of confidential information (e.g. your enquiries), our website uses SSL/TLS encryption. You can identify an encrypted connection from the way the browser address bar changes from ‘http://’ to ‘https://’ and from the padlock symbol that appears in your browser bar.
8. What rights do you have?
The right to withdraw your consent to data processing
Certain data processing operations are only permissible with your consent. If you have already granted your consent, you can withdraw this at any time. To do this, you need only send us a message via email, in respect of which there are no formal requirements. The withdrawal of your consent will not affect the data processing already undertaken prior to this point.
Rights of access, blocking, erasure
On request, you will be informed – free of charge – of what data is being stored in relation to you. In addition, you have the right to have your data rectified, erased or blocked. Under certain circumstances, legal regulations may prevent erasure, particularly with regard to data that is being stored for billing and accounting purposes.
For security reasons, access requests will only be accepted in writing on submission of an official copy of an ID document. Please send access requests to the following address: obra visual AG, Tödistrasse 67, 8002 Zurich or to firstname.lastname@example.org.
The data will be erased unless it has to be stored for the reasons explained above.
In addition, you can block the use of your data for marketing purposes at any time via the contact form with future effect. Please note that it may take a few days to process your request due to technical system constraints.
9. How do you subscribe to a newsletter?
If you would like to receive one of the newsletters offered on our website, we will need an email address from you, along with other information so that we can verify that you are the account holder of the email address provided and that you consent to receipt of the newsletter (‘double opt-in’ process).
Via the newsletter, you will regularly receive recommendations, information and offers that might be of interest to you.
The personal data entered in the newsletter subscription form will be processed on the basis of your consent, which you are entitled to withdraw at any time with future effect. To withdraw your consent, use the ‘Unsubscribe’ link in the newsletter. We will use the personal data collected from you exclusively for the purpose of optimising the content of the newsletter and sending it out. It will not be divulged to third parties.
The personal data that you have provided to us for the purpose of the newsletter subscription will be stored by us until you unsubscribe from the newsletter.
The majority of cookies we use are session cookies, which means that they will be deleted automatically when you leave our website. Other cookies will remain stored on your device, unless you delete them. These cookies enable us to recognise your browser the next time you visit our website.
11. How do we use social media plugins?
Facebook plugins (Like & Share buttons)
Facebook plugins are integrated into our website. The relevant provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can identify the Facebook plugins from the Facebook logo or the ‘Like’ button on our website. An overview of the Facebook plugins can be found at https://developers.facebook.com/docs/plugins/.
When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. This lets Facebook know that you have visited our website using your IP address. If you click the Facebook ‘Like’ button while logged into your Facebook account, you can link content on our pages to your Facebook profile. As a result, Facebook will be able to associate the visit to our website pages with your user account. obra visual AG has no knowledge of what the transmitted data contains or how it is used by Facebook.
Further information can be found in the Facebook Data Policy at https://de-de.facebook.com/policy.php/
If you do not want Facebook to be able to associate the visit to our website with your Facebook user account, please log out of your Facebook user account first.
Various functions of the Instagram service have been incorporated into the pages of our website. These functions are offered and integrated by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link content on our pages to your Instagram profile by clicking the Instagram button. As a result, Instagram will be able to associate the visit to our website pages with your user account. As the provider of the pages, we wish to inform you that we have no knowledge of what the transmitted data contains or how it is used by Instagram.
Further information can be found in the Instagram Data Policy at https://instagram.com/about/legal/privacy/.
YouTube plugins are integrated into our website. The relevant provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
The YouTube plugin establishes a connection to the YouTube servers. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, YouTube will be able to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube user account first.
Further information can be found in the YouTube privacy guidelines at https://www.google.de/intl/de/policies/privacy.
LinkedIn plugins are integrated into our website. The relevant provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Whenever you access our website, a connection to the LinkedIn servers is established. This lets LinkedIn know that you have visited our website using your IP address. If you click the LinkedIn ‘Recommend’ button while logged into your LinkedIn account, LinkedIn will be able to associate your visit to our website with your user account. obra visual AG has no knowledge of what the transmitted data contains or how it is used by LinkedIn.
Google+ plugins are integrated into our website. The relevant provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Google+ button allows you to publish information worldwide. To use the Google+ button, you will need a public Google profile that is visible worldwide and contains – as a minimum – the name selected for the profile. Your ‘+1’ recommendation can be saved and made publicly accessible. It can then be displayed as a notification in Google services together with your username and, where applicable, your Google profile photo, e.g. in search results or in your Google account, or in other locations such as websites and internet advertisements. In addition, Google will be able to link your visit to our page with the data it stores about you.
When you access our website, Google is made aware that you are visiting it. If you access our website while logged into Google and press the ‘+1’ button, Google will be able to collect information via your Google account about the website you are recommending as well as your IP address and other browser-related information. If you want to do the best you can to prevent Google from collecting data, you must log out of your Google account before visiting our website.
Further information can be found in the Google+ Buttons Policy at https://developers.google.com/%2B/web/buttons-policy.
Our website uses plugins of the Vimeo video portal. The relevant provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages that features a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also receives your IP address. This still applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is sent to the Vimeo server in the USA.
If you are logged into your Vimeo account, you allow Vimeo to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your Vimeo account first.
12. How do we use website analytics services?
Our website uses various functions of the Google Analytics service. The relevant provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there. Google complies with the data protection provisions of the ‘Swiss-U.S. Privacy Shield’ agreement and has registered with the U.S. Department of Commerce for the ‘Swiss-U.S. Privacy Shield’ (information on the Swiss-U.S. Privacy Shield can be found at https://www.privacyshield.gov/Swiss-US-Privacy-Shield-FAQs).
Our website has the IP anonymisation function enabled. This means that your IP address will be truncated by Google before it is transmitted to the USA. The full IP address will only be transmitted to a Google server in the USA and truncated there in exceptional cases.
You can prevent the storage of cookies by making the relevant setting in your browser software; however, you are advised that you may not be able to use all functions of this website to their full extent if you do. In addition, you can prevent Google from collecting and processing your data by downloading and installing the browser plugin that is available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/
In this case, an opt-out cookie will be placed on your computer to prevent your data from being collected in the course of future visits to this website.
Our website uses the ‘Demographics and Interests’ function in Google Analytics. This can be used to produce reports with information about the age, gender and interests of page visitors. This data originates from interest-based (personalised) ads from Google as well as visitor data from third-party providers. This data cannot be associated with any specific individual. You can disable this function at any time via the ad settings in your Google account or by blocking the collection of your data by Google Analytics in general.
Google Analytics Remarketing
Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The relevant provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to link the ad target groups created with Google Analytics Remarketing to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based advertising messages that were personalised for you on one device (e.g. mobile phone) based on your previous usage and surfing behaviour can also be displayed on another of your devices (e.g. tablet or PC).
If you have given Google your consent, Google will link your web and app browser history to your Google account for this purpose. As a result, the same personalised advertising messages can be pushed out to each device where you log in with your Google account.
To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data for the purpose of defining and creating target groups for the cross-device advertising.
You can permanently opt out of cross-device remarketing by disabling ad personalisation in your Google account at https://www.google.com/settings/ads/onweb/.
Our website uses Google reCAPTCHA. The relevant provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
reCAPTCHA is used to ascertain whether data is being entered on our website (e.g. in a contact form) by a human or an automated program (known as a bot). In order to do this, reCAPTCHA starts analysing the user’s behaviour automatically as soon as they enter the website. To perform the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, how long the visitor stays on the website or the user’s mouse movements). The data collected in the course of the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Visitors are not even made aware that an analysis is taking place.
User action pixel
Our website uses the user action pixel from Facebook. The relevant provider is Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
The Facebook pixel can be used to track the behaviour of page visitors once they have been directed to our website after clicking on a Facebook ad. This allows us to evaluate the effectiveness of the Facebook ads for statistical and market research purposes, and to optimise future advertising campaigns.
The collected data is provided to obra visual AG on an anonymous basis and we cannot use it to trace your identity. However, the data is stored and processed by Facebook, with the result that it can be linked to the relevant user profile and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. Consequently, Facebook can enable the placement of ads both on Facebook pages and outside of Facebook. obra visual AG has no control over this use of the data.
You can permanently opt out of remarketing by going to https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen ‘Custom Audiences’ remarketing function in the ‘Ad settings’ area. To do this, you must be logged into Facebook
If you do not have a Facebook account, you can disable Facebook online behavioural advertising by visiting the website of the European Interactive Digital Advertising Alliance at https://www.youronlinechoices.com/uk/your-ad-choices.
Further information can be found in the Facebook Data Policy at https://www.facebook.com/about/privacy/.
13. Welche sonstigen Tools verwenden wir?
To ensure that fonts are displayed consistently, our website uses web fonts from Google. This means that your browser loads the required web fonts into your browser cache so that text and fonts are displayed correctly.
For this purpose, the browser you are using has to establish a connection to the Google servers. As a result, Google knows that our website has been accessed via your IP address. If your browser does not support web fonts, your computer will use a default font instead.
Our website uses the Google Maps service via an API. The relevant provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you use the Google Maps functions, your IP address is stored by Google and is usually transferred to a Google server in the USA. obra visual AG has no control over this data transfer.
© obra visual AG, 18.06.2020