Privacy Policy

Preamble

With the following privacy policy, we would like to inform you which types of your personal data (hereinafter also briefly referred to as “data”) we process, for which purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”).

The terms used are not gender-specific.

Last updated: 12 October 2025

Table of Contents

Overview of Processing

The following overview summarizes the types of data processed and the purposes of processing, and refers to the categories of data subjects.

Types of Data Processed

  • Inventory data.
  • Contact data.
  • Content data.
  • Usage data.
  • Meta-, communication-, and procedural data.
  • Log data.

Categories of Data Subjects

  • Communication partners.
  • Users.

Purposes of Processing

  • Communication.
  • Security measures.
  • Direct marketing.
  • Feedback.
  • Provision of our online offering and user-friendliness.
  • Information technology infrastructure.
  • Public relations.

Relevant Legal Bases

Relevant legal bases under the Swiss Data Protection Act: If you are located in Switzerland, we process your data on the basis of the Federal Act on Data Protection (hereinafter “Swiss DPA”). Unlike, for example, the GDPR, the Swiss DPA generally does not require specifying a legal basis for processing personal data, and the processing of personal data must be carried out in good faith, lawfully, and proportionately (Art. 6 paras. 1 and 2 Swiss DPA). Furthermore, we collect personal data only for a specific purpose that is recognizable to the data subject and process it only in a manner compatible with that purpose (Art. 6 para. 3 Swiss DPA).

General Information on Data Storage and Deletion

We delete personal data that we process in accordance with statutory provisions as soon as the underlying consent is revoked or no other legal basis for processing exists. This applies in cases where the original purpose of processing ceases to apply or the data is no longer required. Exceptions apply where statutory obligations or special interests require longer retention or archiving of the data.

In particular, data that must be retained for commercial or tax reasons or whose storage is necessary for legal prosecution or for the protection of the rights of other natural or legal persons will be archived accordingly.

Our privacy notices contain additional information on retention and deletion of data that apply specifically to certain processing operations.

If multiple retention or deletion periods are indicated for the same type of data, the longest period is always decisive. Data that is no longer retained for its original purpose but on the basis of statutory provisions or other reasons is processed solely for the reasons that justify its retention.

Retention and deletion of data: The following general periods apply to retention and archiving under Swiss law:

  • 10 years – Retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets, accounting vouchers and invoices, as well as all necessary work instructions and other organizational documents (Art. 958f of the Swiss Code of Obligations (CO)).
  • 10 years – Data necessary to consider potential claims for damages or similar contractual claims and rights, as well as for processing related inquiries, based on prior business experience and usual industry practice, is stored for the statutory limitation period of ten years, unless a shorter period of five years applies in certain cases (Art. 127, 130 CO). After five years, claims for rent, lease and interest as well as other periodic payments, for the delivery of food, for board and lodging and innkeepers’ claims, for craftsmanship, small sales of goods, medical services, professional services of lawyers, legal agents, procurators and notaries, and from employment relationships of employees become time-barred (Art. 128 CO).

Provision of the Online Offering and Web Hosting

We process users’ data in order to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the users’ browser or device.

  • Types of data processed: Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems, interactions with content and functions); meta-, communication-, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons). Log data (e.g., logfiles regarding logins or the retrieval of data or access times).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Provision of our online offering and user-friendliness; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)). Security measures.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Storage and Deletion”.
  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Additional notes on processing activities, procedures, and services:

  • Collection of access data and log files: Access to our online offering is recorded in the form of so-called “server log files”. The server log files may include the address and name of the accessed web pages and files, date and time of access, transferred data volumes, message on successful access, browser type including version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files can be used for security purposes, e.g., to avoid server overload (in particular in the case of abusive attacks, so-called DDoS attacks), and also to ensure the utilization and stability of the servers; Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Deletion of data: Logfile information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is necessary for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Use of Cookies

The term “cookies” refers to functions that store information on users’ end devices and read it from them. Cookies can also be used for different purposes, for example for functionality, security and convenience of online offerings and for the creation of analyses of visitor flows. We use cookies in accordance with statutory provisions. Where required, we obtain users’ consent in advance. If consent is not necessary, we rely on our legitimate interests. This applies when the storage and reading of information is essential in order to be able to provide expressly requested content and functions. This includes, for example, storing settings and ensuring the functionality and security of our online offering. Consent can be revoked at any time. We provide clear information about their scope and which cookies are used.

Notes on data protection legal bases: Whether we process personal data with the help of cookies depends on consent. If consent is given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the respective services and procedures.

Storage duration: With regard to storage duration, the following types of cookies are distinguished:

  • Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and has closed their end device (e.g., browser or mobile application).
  • Permanent cookies: Permanent cookies remain stored even after closing the end device. For example, the login status can be saved and preferred content displayed directly when the user visits a website again. Likewise, user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit information on the type and storage duration of cookies (e.g., in the context of obtaining consent), they should assume that these are permanent and that the storage duration can be up to two years.

General notes on withdrawal and objection (opt-out): Users can revoke consents they have given at any time and also declare an objection to processing in accordance with the legal requirements, including by means of the privacy settings of their browser.

  • Types of data processed: Meta-, communication-, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Additional notes on processing activities, procedures, and services:

  • Processing of cookie data based on consent: We use a consent management solution in which users’ consent to the use of cookies or to the procedures and providers stated within the consent management solution is obtained. This procedure serves to obtain, record, manage, and revoke consent, in particular with regard to the use of cookies and comparable technologies used for storing, reading, and processing information on users’ end devices. Within this procedure, users’ consents to the use of cookies and the associated processing of information, including the specific processing activities and providers named in the consent management procedure, are obtained. Users also have the option to manage and revoke their consents. The consent declarations are stored in order to avoid repeated queries and to be able to prove consent in accordance with statutory requirements. Storage takes place server-side and/or in a cookie (so-called opt-in cookie) or by means of comparable technologies to be able to assign the consent to a specific user or their device. Insofar as there are no specific details regarding providers of consent management services, the following general notes apply: The duration of storage of consent is up to two years. A pseudonymous user identifier is created which is stored together with the time of consent, the details of the scope of consent (e.g., categories of cookies and/or service providers concerned), as well as information about the browser, the system, and the end device used; Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Newsletter and Electronic Notifications

We send newsletters, emails and other electronic notifications (hereinafter “newsletter”) exclusively with the consent of the recipients or on the basis of a legal permission. If the contents of the newsletter are specified in the context of a registration, these contents are decisive for users’ consent. To sign up for our newsletter, providing your email address is normally sufficient. However, in order to offer you a personalized service, we may request your name for a personal salutation in the newsletter or further information where necessary for the purpose of the newsletter.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them, in order to be able to prove previously given consent. The processing of this data is restricted to the purpose of potential defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a blocklist (“blocklist”).

The logging of the registration process is based on our legitimate interests for the purpose of proving its proper course. Where we engage a service provider to send emails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.

Contents:

Information about us, our services, promotions, and offers.

  • Types of data processed: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or telephone numbers); meta-, communication-, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons). Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems, interactions with content and functions).
  • Data subjects: Communication partners.
  • Purposes of processing: Direct marketing (e.g., by email or post).
  • Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
  • Right to object (opt-out): You can cancel receipt of our newsletter at any time, i.e., revoke your consent, or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options above, preferably email.

Additional notes on processing activities, procedures, and services:

  • Measurement of open and click rates: The newsletters contain a so-called “web beacon”, i.e., a one-pixel file that is retrieved when the newsletter is opened from our server or, if we use a mailing service provider, from their server. In the course of this retrieval, both technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected. This information is used to technically improve our newsletter based on the technical data or the target groups and their reading behavior on the basis of their retrieval locations (which can be determined using the IP address) or the access times. This analysis also includes determining whether and when the newsletters are opened and which links are clicked. The information is assigned to individual newsletter recipients and stored in their profiles until deletion. The evaluations serve to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Presence on Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us.

We point out that user data may be processed outside the territory of the European Union. This may entail risks for users because, for example, the enforcement of users’ rights could be made more difficult.

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, user profiles may be created based on usage behavior and resulting user interests. These profiles may in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to users’ interests. Cookies are usually stored on users’ computers for these purposes, in which users’ usage behavior and interests are stored. In addition, data may also be stored in the usage profiles regardless of the devices used by the users (especially if they are members of the respective platforms and are logged in there).

For a detailed presentation of the respective forms of processing and the possibilities to object (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks.

Also in the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only they have access to user data and can take direct measures and provide information. Should you still need assistance, you can contact us.

  • Types of data processed: Contact data (e.g., postal and email addresses or telephone numbers); content data (e.g., textual or visual messages and posts as well as the information relating to them, such as details of authorship or time of creation). Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems, interactions with content and functions).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Communication; feedback (e.g., collecting feedback via online form). Public relations.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Storage and Deletion”.
  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Additional notes on processing activities, procedures, and services:

  • Instagram: Social network enabling the sharing of photos and videos, commenting and favoriting of posts, messaging, subscribing to profiles and pages; Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.instagram.com; Privacy Policy: https://privacycenter.instagram.com/policy/. Basis for third-country transfers: Data Privacy Framework (DPF), Data Privacy Framework (DPF).
  • Pinterest: Social network enabling the sharing of photos, commenting, favoriting and curating of posts, messaging, subscribing to profiles; Service provider: Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.pinterest.com. Privacy Policy: https://policy.pinterest.com/de/privacy-policy.

Plug-ins and Embedded Functions as well as Content

We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may include, for example, graphics, videos or city maps (hereinafter collectively referred to as “content”).

Integration always requires that the third-party providers of this content process the users’ IP address, since without the IP address they could not send the content to the users’ browser. The IP address is therefore required for the display of this content or functions. We endeavor to use only such content whose respective providers use the IP address solely to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the users’ device and may contain, among other things, technical information about the browser and operating system, referring websites, visit time as well as other details about the use of our online offering and may also be linked with such information from other sources.

Notes on legal bases: Where we ask users for their consent to the use of third-party providers, consent is the legal basis for data processing. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in efficient, economical and recipient-friendly services). In this context, we also refer you to the information on the use of cookies in this privacy policy.

  • Types of data processed: Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems, interactions with content and functions). Meta-, communication-, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Provision of our online offering and user-friendliness.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Storage and Deletion”. Storage of cookies of up to 2 years (Unless otherwise stated, cookies and similar storage methods may be stored on users’ devices for a period of two years.).
  • Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Discover more from Explore world

Subscribe now to keep reading and get access to the full archive.

Continue reading