Pri­va­cy policy

With this Pri­va­cy pol­i­cy We pro­vide infor­ma­tion about the pro­cess­ing of per­son­al data in con­nec­tion with our Activ­i­ties and oper­a­tions includ­ing our Web­site under the domain name thegate-hotel.ch. In par­tic­u­lar, we pro­vide infor­ma­tion about what per­son­al data we process, for what pur­pose, in what man­ner, and where. We also pro­vide infor­ma­tion about the rights of indi­vid­u­als whose data we process.

We have draft­ed this pri­va­cy pol­i­cy in Ger­man. If it is pub­lished in anoth­er lan­guage, the Ger­man-lan­guage pri­va­cy pol­i­cy shall prevail.

For spe­cif­ic or addi­tion­al activ­i­ties and oper­a­tions, we may pub­lish fur­ther pri­va­cy poli­cies or oth­er infor­ma­tion regard­ing data protection.

We are sub­ject to Swiss law as well as any applic­a­ble for­eign law, in par­tic­u­lar that of the Euro­pean Union (EU), includ­ing the Euro­pean Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR).

The Euro­pean Com­mis­sion rec­og­nized with Deci­sion of July 26, 2000, that Swiss data pro­tec­tion law ensures ade­quate data pro­tec­tion. With Report dat­ed Jan­u­ary 15, 2024 The Euro­pean Com­mis­sion con­firmed this ade­qua­cy decision.

1. con­tact addresses

The data con­troller, as defined by data pro­tec­tion law, is:

ARGU-BAU AG
Main Street 69
9434 Au
Switzer­land

welcome@thegate-hotel.ch

In cer­tain cas­es, third par­ties may be respon­si­ble for the pro­cess­ing of per­son­al data, or there may be shared respon­si­bil­i­ty with third par­ties. Upon request, we are hap­py to pro­vide data sub­jects with infor­ma­tion regard­ing the respec­tive responsibility.

Data Pro­tec­tion Rep­re­sen­ta­tive in the Euro­pean Eco­nom­ic Area (EEA)

We have the fol­low­ing data pro­tec­tion rep­re­sen­ta­tion in accor­dance with Art. 27 of the GDPR:

VGS Daten­schutz­part­ner GmbH
69 Kaiserkai
20457 Ham­burg
Ger­many

info@datenschutzpartner.eu

The Data Pro­tec­tion Author­i­ty serves data sub­jects and pub­lic author­i­ties in the Euro­pean Union (EU) and the rest of the Euro­pean Eco­nom­ic Area (EEA) as addi­tion­al Con­tact point for inquiries in con­nec­tion with the GDPR.

2. terms and legal bases

2.1 Terms

Per­son con­cerned: Nat­ur­al per­son about whom we process per­son­al data.

Per­son­al data: All Infor­ma­tion relat­ing to an iden­ti­fied or iden­ti­fi­able nat­ur­al person.

Par­tic­u­lar­ly sen­si­tive per­son­al data: Data con­cern­ing trade union, polit­i­cal, reli­gious or philo­soph­i­cal opin­ions and activ­i­ties, data con­cern­ing health, pri­va­cy or racial or eth­nic ori­gin, genet­ic data, bio­met­ric data unique­ly iden­ti­fy­ing a nat­ur­al per­son, data con­cern­ing crim­i­nal or admin­is­tra­tive sanc­tions or pros­e­cu­tions, and data con­cern­ing social assis­tance measures.

Edit: Every­one Han­dling of per­son­al data, inde­pen­dent the means and pro­ce­dures used, such as the retrieval, com­par­i­son, adap­ta­tion, archiv­ing, stor­age, read­ing, dis­clo­sure, pro­cure­ment, col­lec­tion, record­ing, era­sure, dis­clo­sure, struc­tur­ing, orga­ni­za­tion, stor­age, mod­i­fi­ca­tion, dis­sem­i­na­tion, link­ing, destruc­tion and use of per­son­al data.

Euro­pean Eco­nom­ic Area (EEA): Mem­ber States of the Euro­pean Union (EU) as well as the Prin­ci­pal­i­ty of Liecht­en­stein, Ice­land and Norway.

2.2 Legal basis

We process per­son­al data in accor­dance with Swiss law, in par­tic­u­lar the Fed­er­al Act on Data Pro­tec­tion (Data Pro­tec­tion Act, DSG) and the Ordi­nance on data pro­tec­tion (Data Pro­tec­tion Reg­u­la­tion, DSV).

We process—to the extent that the Euro­pean Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) applies—personal data in accor­dance with at least one of the fol­low­ing legal bases:

• Art. 6(1)(b) of the GDPR for the nec­es­sary pro­cess­ing of per­son­al data for the per­for­mance of a con­tract with the data sub­ject and for the imple­men­ta­tion of pre-con­trac­tu­al measures.
• Art. 6(1)(f) of the GDPR for the nec­es­sary pro­cess­ing of per­son­al data to safe­guard legit­i­mate interests—including the legit­i­mate inter­ests of third parties—unless the fun­da­men­tal free­doms, fun­da­men­tal rights, and inter­ests of the data sub­ject take prece­dence. Such inter­ests include, in par­tic­u­lar, the sus­tain­able, peo­ple-ori­ent­ed, secure, and reli­able con­duct of our activ­i­ties and oper­a­tions; ensur­ing infor­ma­tion secu­ri­ty; pro­tec­tion against mis­use, the enforce­ment of our own legal claims, and com­pli­ance with Swiss law.
• Art. 6(1)© of the GDPR for the pro­cess­ing of per­son­al data nec­es­sary to com­ply with a legal oblig­a­tion to which we are sub­ject under the applic­a­ble laws of Mem­ber States of the Euro­pean Eco­nom­ic Area (EEA).
• Art. 6(1)(e) of the GDPR for the pro­cess­ing of per­son­al data nec­es­sary for the per­for­mance of a task car­ried out in the pub­lic interest.
• Art. 6(1)(a) of the GDPR for the pro­cess­ing of per­son­al data with the con­sent of the data subject.
• Art. 6(1)(d) of the GDPR for the nec­es­sary pro­cess­ing of per­son­al data in order to pro­tect the vital inter­ests of the data sub­ject or of anoth­er nat­ur­al person.
• Art. 9, para. 2 et seq. of the GDPR for the pro­cess­ing of spe­cial cat­e­gories of per­son­al data, in par­tic­u­lar with the con­sent of the data subjects.

The Euro­pean Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) refers to the han­dling of per­son­al data as the pro­cess­ing of per­son­al data and the han­dling of sen­si­tive per­son­al data as the pro­cess­ing of spe­cial cat­e­gories of per­son­al data (Art. 9 of the GDPR).

3. nature, scope and pur­pose of the pro­cess­ing of per­son­al data

We process the per­son­al data that required are nec­es­sary to enable us to car­ry out our activ­i­ties and oper­a­tions in a sus­tain­able, peo­ple-friend­ly, secure, and reli­able man­ner. The per­son­al data processed includes, in par­tic­u­lar, the fol­low­ing cat­e­gories: brows­er and device data, con­tent data, com­mu­ni­ca­tion data, meta­da­ta, usage data, mas­ter data (includ­ing pro­file and con­tact infor­ma­tion), loca­tion data, trans­ac­tion data, con­tract data, and pay­ment data. The per­son­al data may also con­sti­tute spe­cial-cat­e­go­ry per­son­al data.

We also process per­son­al data that we receive from third par­ties, obtain from pub­licly avail­able sources, or col­lect in the course of our activ­i­ties and oper­a­tions, to the extent that such pro­cess­ing is permitted.

We process per­son­al data, where nec­es­sary, with the con­sent of the data sub­jects. In many cas­es, we may process per­son­al data with­out con­sent, for exam­ple, to com­ply with legal oblig­a­tions or to pro­tect legit­i­mate inter­ests. We may also ask data sub­jects for their con­sent even when their con­sent is not required.

We process per­son­al data for Dura­tionrequired for the respec­tive pur­pose. We anonymize or delete per­son­al data in par­tic­u­lar depend­ing on statu­to­ry reten­tion and lim­i­ta­tion periods.

4. Automa­tion and Arti­fi­cial Intel­li­gence (AI)

We may process per­son­al data auto­mat­i­cal­ly or use arti­fi­cial intel­li­gence to process per­son­al data.

We may use pro­fil­ing to auto­mat­i­cal­ly eval­u­ate cer­tain per­son­al aspects relat­ing to data sub­jects. Pro­fil­ing is used, for exam­ple, to ana­lyze or pre­dict inter­ests, behav­iors, or per­son­al preferences.

We will pro­vide infor­ma­tion on a case-by-case basis regard­ing deci­sions that are based sole­ly on the auto­mat­ed pro­cess­ing of per­son­al data and that have legal con­se­quences for the indi­vid­u­als con­cerned or sig­nif­i­cant­ly affect them (auto­mat­ed indi­vid­ual decisions).

5. Dis­clo­sure of Per­son­al Data

We may process per­son­al data dis­close to third par­ties, have it processed by third par­ties, or process it joint­ly with third par­ties. Such third par­ties may include, for exam­ple, spe­cial­ized providers whose ser­vices we use. These third par­ties, in turn, may dis­close per­son­al data to oth­er third parties.

We may dis­close per­son­al data in the course of our activ­i­ties and oper­a­tions, in par­tic­u­lar to banks and oth­er finan­cial ser­vice providers, gov­ern­ment agen­cies, edu­ca­tion­al and research insti­tu­tions, con­sul­tants and attor­neys, account­ing and fidu­cia­ry ser­vice providers, debt col­lec­tion agen­cies, advo­ca­cy groups, IT ser­vice providers, coop­er­a­tion part­ners, cred­it and busi­ness infor­ma­tion agen­cies, logis­tics and ship­ping com­pa­nies, mar­ket­ing and adver­tis­ing agen­cies, media, par­ent com­pa­nies, sis­ter com­pa­nies, and sub­sidiaries, orga­ni­za­tions and asso­ci­a­tions, social insti­tu­tions, telecom­mu­ni­ca­tions com­pa­nies, insur­ance com­pa­nies, and pay­ment ser­vice providers.

6. Com­mu­ni­ca­tion

We process per­son­al data in order to com­mu­ni­cate with indi­vid­u­als as well as with gov­ern­ment agen­cies, orga­ni­za­tions, and com­pa­nies. In par­tic­u­lar, we process data that a data sub­ject pro­vides to us when con­tact­ing us, for exam­ple, by mail or email. We may store such data in an address book or using sim­i­lar tools.

Third par­ties who pro­vide us with data about oth­er indi­vid­u­als are legal­ly oblig­at­ed to inde­pen­dent­ly ensure the data pro­tec­tion of those indi­vid­u­als. In par­tic­u­lar, they must ensure that they are autho­rized to trans­fer such data and must also guar­an­tee the accu­ra­cy of the data transferred.

We use select­ed ser­vices from appro­pri­ate providers to facil­i­tate and improve com­mu­ni­ca­tion with indi­vid­u­als and oth­er com­mu­ni­ca­tion part­ners. We may also use such ser­vices to man­age and oth­er­wise process the data of data sub­jects beyond the scope of direct com­mu­ni­ca­tion, for exam­ple in con­nec­tion with orders, ser­vices, projects, and resource planning.

7. Data Security

We take appro­pri­ate tech­ni­cal and orga­ni­za­tion­al mea­sures to ensure data secu­ri­ty appro­pri­ate to the respec­tive risk. With our mea­sures, we guar­an­tee in par­tic­u­lar the con­fi­den­tial­i­ty, avail­abil­i­ty, trace­abil­i­ty and integri­ty of the processed per­son­al data, with­out being able to guar­an­tee absolute data security.

Access to our web­site and our oth­er dig­i­tal plat­forms is secured using trans­port encryp­tion (SSL / TLSespe­cial­ly with the Hyper­text Trans­fer Pro­to­col Secure, abbre­vi­at­ed to HTTPS). Most browsers warn users against vis­it­ing a web­site with­out trans­port encryption.

Our dig­i­tal com­mu­ni­ca­tion is sub­ject to—just as basi­cal­ly all dig­i­tal communications—mass sur­veil­lance with­out cause or sus­pi­cion by secu­ri­ty agen­cies in Switzer­land, the rest of Europe, the Unit­ed States of Amer­i­ca (USA), and oth­er coun­tries. We have no direct influ­ence over the pro­cess­ing of per­son­al data by intel­li­gence agen­cies, police depart­ments, and oth­er secu­ri­ty agen­cies. Nor can we rule out the pos­si­bil­i­ty that a data sub­ject may be specif­i­cal­ly monitored.

8. Per­son­al Data Abroad

We process per­son­al data basi­cal­ly in Switzer­land and the Euro­pean Eco­nom­ic Area (EEA). How­ev­er, we may also export or trans­fer per­son­al data to oth­er coun­tries, in par­tic­u­lar to process it there or have it processed there.

We may trans­fer per­son­al data to all Coun­tries of the World and else­where in the Uni­verse export, pro­vid­ed that the local law accord­ing to Res­o­lu­tion of the Swiss Fed­er­al Coun­cil and—if and to the extent that the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) applies—also in accor­dance with Deci­sion of the Euro­pean Com­mis­sion ensures ade­quate data protection.

We may trans­fer per­son­al data to coun­tries whose laws do not pro­vide ade­quate data pro­tec­tion, pro­vid­ed that data pro­tec­tion is ensured for oth­er rea­sons, in par­tic­u­lar on the basis of stan­dard data pro­tec­tion claus­es or oth­er appro­pri­ate safe­guards. In excep­tion­al cas­es, we may export per­son­al data to coun­tries with­out ade­quate or appro­pri­ate data pro­tec­tion if the spe­cif­ic legal require­ments under data pro­tec­tion law are met, such as the explic­it con­sent of the data sub­jects or a direct con­nec­tion to the con­clu­sion or per­for­mance of a con­tract. Upon request, we are hap­py to pro­vide data sub­jects with infor­ma­tion about any safe­guards or to sup­ply a copy of any safeguards.

9. Rights of Data Subjects

9.1 Claims under Data Pro­tec­tion Law

We grant data sub­jects all rights pro­vid­ed for under applic­a­ble law. In par­tic­u­lar, data sub­jects have the fol­low­ing rights:

• Infor­ma­tion: Data sub­jects can request infor­ma­tion as to whether we process per­son­al data about them and, if so, what per­son­al data is involved. Data sub­jects also receive the infor­ma­tion required to assert their data pro­tec­tion claims and ensure trans­paren­cy. This includes the processed per­son­al data as such, but also infor­ma­tion on the pur­pose of pro­cess­ing, the dura­tion of stor­age, any dis­clo­sure or export of data to oth­er coun­tries and the ori­gin of the per­son­al data.
• Cor­rec­tion and lim­i­ta­tion: Data sub­jects can have incor­rect per­son­al data cor­rect­ed, incom­plete data com­plet­ed and the pro­cess­ing of their data restricted.
• Oppor­tu­ni­ty to form one’s own point of view and to exer­cise human judg­ment: Data sub­jects may, in the case of deci­sions that are based sole­ly on the auto­mat­ed pro­cess­ing of per­son­al data and that result in legal con­se­quences for them or sig­nif­i­cant­ly affect them (auto­mat­ed indi­vid­ual deci­sions), present their own point of view and request a review by a human.
• Dele­tion and objec­tion: Data sub­jects can have their per­son­al data delet­ed (“right to be for­got­ten”) and object to the pro­cess­ing of their data with effect for the future.
• Data out­put and data trans­mis­sion: Data sub­jects may request the dis­clo­sure of per­son­al data or the trans­fer of their data to anoth­er controller.

We may defer, restrict, or deny the exer­cise of data sub­jects’ rights to the extent per­mit­ted by law. We may inform data sub­jects of any pre­req­ui­sites that must be met in order to exer­cise their rights under data pro­tec­tion law. For exam­ple, we may refuse to pro­vide infor­ma­tion in whole or in part, cit­ing con­fi­den­tial­i­ty oblig­a­tions, over­rid­ing inter­ests, or the pro­tec­tion of oth­er indi­vid­u­als. We may also, for exam­ple, refuse to delete per­son­al data, in whole or in part, par­tic­u­lar­ly by cit­ing statu­to­ry reten­tion obligations.

We may be respon­si­ble for exer­cis­ing the rights excep­tion­al­ly Pro­vide for costs. We will inform affect­ed per­sons of any costs in advance.

We are oblig­ed to take appro­pri­ate mea­sures to iden­ti­fy data sub­jects who request infor­ma­tion or assert oth­er rights. Data sub­jects are oblig­ed to cooperate.

9.2 Legal Protection

Data sub­jects have the right to enforce their data pro­tec­tion claims by tak­ing legal action or to lodge a com­plaint with a data pro­tec­tion super­vi­so­ry authority.

The data pro­tec­tion super­vi­so­ry author­i­ty for pri­vate con­trollers and fed­er­al bod­ies in Switzer­land is the Swiss Fed­er­al Data Pro­tec­tion and Infor­ma­tion Com­mis­sion­er (EDÖB).

Euro­pean data pro­tec­tion super­vi­so­ry author­i­ties are known as Mem­bers of the Euro­pean Data Pro­tec­tion Board (EDSA). In some mem­ber states of the Euro­pean Eco­nom­ic Area (EEA), the data pro­tec­tion super­vi­so­ry author­i­ties have a fed­er­al struc­ture, espe­cial­ly in Ger­many.

10. Use of the Website

10.1 Cook­ies

We may use cook­ies. Cookies—including our own cook­ies (first-par­ty cook­ies) and cook­ies from third par­ties whose ser­vices we use (third-par­ty cookies)—are data stored in the brows­er. Such stored data is not nec­es­sar­i­ly lim­it­ed to tra­di­tion­al text-based cookies.

Cook­ies can be stored tem­porar­i­ly in the brows­er as «ses­sion cook­ies» or for a spe­cif­ic peri­od of time as so-called «per­sis­tent cook­ies.» “Ses­sion cook­ies” are auto­mat­i­cal­ly delet­ed when the brows­er is closed. Per­sis­tent cook­ies have a spe­cif­ic reten­tion peri­od. In par­tic­u­lar, cook­ies make it pos­si­ble to rec­og­nize a brows­er the next time it vis­its our web­site and, for exam­ple, to mea­sure our website’s reach. How­ev­er, per­sis­tent cook­ies can also be used for online mar­ket­ing, for example.

Cook­ies can be dis­abled, restrict­ed, or deleted—either in whole or in part—at any time in your brows­er set­tings. Brows­er set­tings often also allow for the auto­mat­ic dele­tion and oth­er man­age­ment of cook­ies. With­out cook­ies, our web­site may no longer be ful­ly avail­able. We active­ly seek your express con­sent to the use of cookies—at least to the extent required by applic­a­ble law.

10.2 Log­ging

For every vis­it to our web­site and our oth­er dig­i­tal plat­forms, we may log at least the fol­low­ing infor­ma­tion, pro­vid­ed that this infor­ma­tion is auto­mat­i­cal­ly col­lect­ed or trans­mit­ted to our dig­i­tal infra­struc­ture dur­ing such vis­its: date and time, includ­ing time zone, IP address, Access Sta­tus (HTTP Sta­tus Code), oper­at­ing sys­tem, includ­ing user inter­face and ver­sion; brows­er, includ­ing lan­guage and ver­sion; indi­vid­ual pages accessed on our web­site, includ­ing the amount of data trans­ferred, the last web­page vis­it­ed in the same brows­er win­dow (refer­rer).

We record such information—which may also con­sti­tute per­son­al data—in log files. This infor­ma­tion is nec­es­sary to ensure that our dig­i­tal pres­ence remains avail­able on a long-term basis in a user-friend­ly and reli­able man­ner. This infor­ma­tion is also nec­es­sary to ensure data security—including through third par­ties or with the assis­tance of third parties.

10.3 Pix­el Count

We can incor­po­rate track­ing pix­els into our dig­i­tal pres­ence. Track­ing pix­els are also known as web bea­cons. Track­ing pixels—including those from third par­ties whose ser­vices we use—are typ­i­cal­ly small, invis­i­ble images or JavaScript scripts that are auto­mat­i­cal­ly loaded when you access our dig­i­tal pres­ence. Track­ing pix­els can be used to col­lect at least the same infor­ma­tion as is record­ed in log files.

11. Notices and Announcements

11.1 Mea­sur­ing Suc­cess and Reach

Noti­fi­ca­tions and mes­sages may con­tain web links or track­ing pix­els that track whether an indi­vid­ual mes­sage has been opened and which web links were clicked with­in it. Such web links and track­ing pix­els may also track the use of noti­fi­ca­tions and mes­sages on a per­son­al basis. We require this sta­tis­ti­cal track­ing of usage to mea­sure effec­tive­ness and reach so that we can send noti­fi­ca­tions and mes­sages in a way that is effec­tive, user-friend­ly, sus­tain­able, secure, and reli­able, based on the needs and read­ing habits of the recipients.

11.2 Con­sent and Objection

You must basi­cal­ly con­sent to the use of your email address and oth­er con­tact infor­ma­tion, unless such use is per­mit­ted for oth­er legal rea­sons. To obtain dou­ble-con­firmed con­sent, if nec­es­sary, we may use the «dou­ble opt-in» pro­ce­dure. In this case, you will receive a mes­sage with instruc­tions for dou­ble con­fir­ma­tion. We may use the con­sent obtained, includ­ing IP address and Time­stamp Record this for evi­den­tiary and secu­ri­ty purposes.

You can basi­cal­ly object to receiv­ing noti­fi­ca­tions and com­mu­ni­ca­tions such as newslet­ters at any time. With such an objec­tion, you can simul­ta­ne­ous­ly object to the sta­tis­ti­cal record­ing of usage for per­for­mance and reach mea­sure­ment. Required noti­fi­ca­tions and com­mu­ni­ca­tions in con­nec­tion with our activ­i­ties and oper­a­tions remain reserved.

12. Social Media

We are present on social media plat­forms and oth­er online plat­forms in order to com­mu­ni­cate with inter­est­ed per­sons and to pro­vide infor­ma­tion about our activ­i­ties and oper­a­tions. In con­nec­tion with such plat­forms, per­son­al data may also be processed out­side of Switzer­land and the Euro­pean Eco­nom­ic Area (EEA).

The Gen­er­al Terms and Con­di­tions (GTC) and Terms of Use as well as data pro­tec­tion dec­la­ra­tions and oth­er pro­vi­sions of the indi­vid­ual oper­a­tors of such plat­forms also apply in each case. These pro­vi­sions inform in par­tic­u­lar about the rights of data sub­jects direct­ly vis-à-vis the respec­tive plat­form, which includes, for exam­ple, the right to information.

For our Social media pres­ence on Face­book Includ­ing the so-called Page Insights, we are—to the extent that the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) applies—jointly respon­si­ble with Meta Plat­forms Ire­land Lim­it­ed (Ire­land). Meta Plat­forms Ire­land Lim­it­ed is part of the Meta-com­pa­ny (includ­ing in the USA). Page Insights pro­vide infor­ma­tion about how vis­i­tors inter­act with our Face­book pres­ence. We use Page Insights to pro­vide our social media pres­ence on Face­book in an effec­tive and user-friend­ly way.

Fur­ther infor­ma­tion on the nature, scope and pur­pose of data pro­cess­ing, infor­ma­tion on the rights of data sub­jects and the con­tact details of Face­book as well as Facebook’s data pro­tec­tion offi­cer can be found in the Face­book pri­va­cy pol­i­cy. With Face­book, we have the so-called “Addi­tion for respon­si­ble per­sons” and thus agreed in par­tic­u­lar that Face­book is respon­si­ble for ensur­ing the rights of data sub­jects. For the so-called page insights, the cor­re­spond­ing infor­ma­tion can be found on the page “Page Insights Infor­ma­tion” includ­ing “Page Insights Data Infor­ma­tion”.

13. Third-Par­ty Services

We use the ser­vices of spe­cial­ized third par­ties in order to be able to car­ry out our activ­i­ties and oper­a­tions in a sus­tain­able, peo­ple-friend­ly, secure and reli­able man­ner. Among oth­er things, we can use such ser­vices to embed func­tions and con­tent in our web­site. In the case of such embed­ding, the ser­vices used col­lect the fol­low­ing data at least tem­porar­i­ly for tech­ni­cal­ly com­pelling rea­sons IP address­es of the users.

For nec­es­sary secu­ri­ty-relat­ed, sta­tis­ti­cal and tech­ni­cal pur­pos­es, third par­ties whose ser­vices we use may process data in con­nec­tion with our activ­i­ties and oper­a­tions in aggre­gat­ed, anonymized or pseu­do­nymized form. This is, for exam­ple, per­for­mance or usage data in order to be able to offer the respec­tive service.

13.1 Dig­i­tal Infrastructure

We use ser­vices from spe­cial­ized third par­ties to make use of required dig­i­tal infra­struc­ture in con­nec­tion with our activ­i­ties and oper­a­tions. These include, for exam­ple, host­ing and stor­age ser­vices from select­ed providers.

13.2 Pay­ments

We use spe­cial­ized ser­vice providers to ensure that pay­ments are processed secure­ly and reli­ably. The legal doc­u­ments of the indi­vid­ual ser­vice providers—such as their Terms and Con­di­tions or Pri­va­cy Policies—also apply to the pro­cess­ing of payments.

14. Web­site Extensions

We use exten­sions for our web­site in order to be able to use addi­tion­al func­tions. We may use select­ed ser­vices from suit­able providers or use such exten­sions on our own dig­i­tal infrastructure.

We use in particular:

• Imag­i­fy: Image opti­miza­tion; Provider: WP MEDIA (France); Pri­va­cy infor­ma­tion: Con­di­tions (“Terms of Ser­vice”), “Fre­quent­ly Asked Ques­tions” (“FAQ”).

15. Video Surveillance

We use video sur­veil­lance to pre­vent crimes, to pre­serve evi­dence in the event of crimes, to exer­cise and assert our own legal claims, to defend against third-par­ty legal claims, and to enforce our right to man­age our premis­es. In this context—provided and to the extent that the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) applies—these con­sti­tute over­rid­ing legit­i­mate inter­ests pur­suant to Art. 6(1)(f) of the GDPR, in the case of par­tic­u­lar­ly sen­si­tive per­son­al data with ref­er­ence to Art. 9, para. 2, sub­para­graph (f) of the GDPR.

We store record­ings from our video sur­veil­lance for as long as they are required for the preser­va­tion of evi­dence or anoth­er spec­i­fied purpose.

We may save record­ings from our video sur­veil­lance and trans­mit them to com­pe­tent author­i­ties, in par­tic­u­lar judi­cial or law enforce­ment author­i­ties, pro­vid­ed that the trans­mis­sion is nec­es­sary for a stat­ed pur­pose, in our oth­er legit­i­mate over­rid­ing inter­est or due to legal obligations.

16. Final Notes on the Pri­va­cy Policy

We may update this Pri­va­cy Pol­i­cy at any time. We will noti­fy you of any updates by post­ing the most cur­rent ver­sion of the Pri­va­cy Pol­i­cy on our website.