Privacy Policy

Grächen/St. Niklaus Snow Sports School, Fux & Co.
Dorfstrasse 190
3925 Grächen
Switzerland
Email: info [at] zenklusensport.ch

Authorized Representatives
Jennifer Maria Fux-Zenklusen,
Ruben Fux

Company Name: Grächen/St. Niklaus Snow Sports School, Fux & Co.

Data Protection Officer:
Jennifer Maria Fux-Zenklusen
+41 ‭79 371 39 76‬
info@zenklusensport.ch

General Information / Introduction
Pursuant to Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Data Protection Act, DSG), every person has the right to privacy and to protection against the misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this Privacy Policy.

In cooperation with our hosting providers, we strive to protect our databases as best we can against unauthorized access, loss, misuse, or tampering.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

By using this website, you consent to the collection, processing, and use of data as described below. In general, this website can be visited without registration. Data such as pages accessed, names of files accessed, and the date and time are stored on the server for statistical purposes without being directly linked to you personally. To the extent that personal data (such as name, address, or email addresses) is collected on our website, this is always done on a voluntary basis whenever possible. This data will not be disclosed to third parties without your express consent.

Processing of Personal Data
Personal data refers to any information relating to an identified or identifiable individual. A data subject is a person whose personal data is being processed. Processing includes any handling of personal data, regardless of the means and methods used, in particular the storage, disclosure, collection, erasure, retention, modification, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. If and to the extent that the EU GDPR applies, we also process personal data on the following legal bases in conjunction with Art. 6(1) GDPR:
(a) Processing of personal data with the consent of the data subject.
lit. b) Processing of personal data to fulfill a contract with the data subject and to carry out related precontractual measures.
lit. c) Processing of personal data to fulfill a legal obligation to which we are subject under applicable EU law or under the applicable law of a country in which the GDPR is fully or partially applicable.
lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
lit. f) Processing of personal data to safeguard our legitimate interests or those of third parties, unless the fundamental freedoms, rights, and interests of the data subject take precedence. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for as long as is necessary to fulfill the respective purpose or purposes. In cases where we are subject to longer-term retention requirements due to legal or other obligations, we restrict our processing accordingly.

Cookies
This website uses cookies. These are small text files that allow specific, user-related information to be stored on the user’s device while the user is browsing the website. In particular, cookies enable us to determine the frequency of use and the number of users of the pages, analyze usage patterns, and make our website more user-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when you visit the site again. If you do not wish this to happen, you should configure your web browser to refuse cookies.

A general objection to the use of cookies for online marketing purposes can be submitted for a wide range of services—particularly regarding tracking—via the U.S. website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. In addition, you can prevent cookies from being stored by disabling them in your browser settings. Please note that in this case, not all features of this website will be available.

Using SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the website operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser’s address bar.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request

This data cannot be linked to specific individuals. This data is not combined with data from other sources. We reserve the right to review this data at a later date if we become aware of specific indications of unlawful use.

Third-Party Services
This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.

These services provided by the U.S.-based Google LLC use cookies, among other things, which result in data being transferred to Google in the United States; however, we assume that, in this context, no personal tracking takes place solely as a result of using our website.

Google has committed to ensuring an adequate level of data protection in accordance with the U.S.-European and U.S.-Swiss Privacy Shield frameworks.

For more information, please see Google’s Privacy Policy.

Contact form
If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.

Newsletter
If you wish to receive the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not share it with third parties.
After you have given your consent to the storage of your data, email address and its use for sending the newsletter, you can revoke this consent at any time, for example via the “unsubscribe link” in the newsletter.

Comment Feature
For the comment feature on this website, in addition to your comment, information regarding the time the comment was posted, your email address, and—if you are not posting anonymously—the username you selected will be stored.

Storage of IP Addresses
Our comment feature stores the IP addresses of users who post comments. Since we do not review comments on our site before they are published, we need this data to be able to take action against the author in the event of legal violations, such as insults or propaganda.

Subscribing to Comments
As a user of this site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address you provided. You can unsubscribe from this feature at any time by clicking a link in the informational emails.

Rights of the data subject
Right to confirmation
Every data subject has the right to request confirmation from the website operator as to whether personal data concerning them is being processed. If you wish to exercise this right of confirmation, you can contact the data protection officer at any time.

Right to Information
Any individual whose personal data is being processed has the right to receive, at any time and free of charge, information from the operator of this website regarding the data stored about them, as well as a copy of that information. In addition, information may be provided regarding the following:
Purposes of Processing
Categories of Personal Data Processed
Recipients to whom the personal data has been or will be disclosed
if possible, the planned duration of the storage of personal data; or, if this is not possible, the criteria used to determine that duration
the existence of a right to have personal data concerning them rectified or erased, or to have the processing restricted by the controller, or a right to object to such processing
the existence of a right to file a complaint with a supervisory authority
If the personal data is not collected from the data subject: All available information regarding the origin of the data.
In addition, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the transfer.
If you wish to exercise this right to access, you may contact our Data Protection Officer at any time.

Right to Rectification
Any data subject whose personal data is being processed has the right to request the immediate rectification of inaccurate personal data concerning him or her. In addition, the data subject has the right to request that incomplete personal data be completed—including by means of a supplementary statement—taking into account the purposes of the processing.
If you wish to exercise this right to rectification, you may contact our Data Protection Officer at any time.

Right to Erasure (Right to Be Forgotten)
Any data subject whose personal data is being processed has the right to request that the controller of this website immediately erase the personal data concerning them, provided that one of the following grounds applies and the processing is no longer necessary:
The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
The data subject withdraws the consent on which the processing was based, and there is no other legal basis for the processing
The data subject objects to the processing on grounds relating to his or her particular situation, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling
The personal data was processed unlawfully
The erasure of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject
The personal data was collected in connection with information society services offered that are directed specifically at a child
If any of the reasons listed above apply and you wish to request the deletion of personal data stored by the operator of this website, you may contact our Data Protection Officer at any time. The Data Protection Officer for this website will ensure that the deletion request is fulfilled without delay.

Right to Restriction of Processing
Any individual whose personal data is being processed has the right to request that the controller of this website restrict the processing if any of the following conditions are met:
The data subject disputes the accuracy of the personal data for a period of time that allows the controller to verify the accuracy of the personal data
The processing is unlawful; the data subject objects to the erasure of the personal data and requests, instead, that the use of the personal data be restricted
The data controller no longer needs the personal data for the purposes of processing, but the data subject needs it to assert, The data subject has objected to the processing on grounds relating to his or her particular situation, and it has not yet been determined whether the legitimate interests of the controller outweigh those of the data subject
If any of the above conditions apply, you may contact our Data Protection Officer at any time to request that the operator of this website restrict the processing of your personal data. The Data Protection Officer for this website will arrange for the processing to be restricted.

Right to Data Portability
Every data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format. In addition, the data subject has the right to have the personal data transmitted directly from one controller to another controller, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.
To exercise your right to data portability, you may contact the data protection officer designated by the operator of this website at any time.
The Right to Object
Any individual whose personal data is being processed has the right to object at any time to the processing of their personal data for reasons arising from their particular situation.
The operator of this website will no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
To exercise your right to object, you may contact this website’s data protection officer directly.
Right to Withdraw Consent Under Data Protection Law
Any individual whose personal data is being processed has the right to withdraw their consent to the processing of personal data at any time.
If you wish to exercise your right to withdraw your consent, you may contact our Data Protection Officer at any time.

Objection to Email Marketing
We hereby object to the use of contact information published in accordance with legal disclosure requirements for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of promotional information, such as via spam emails.

Paid Services
To provide paid services, we collect additional information, such as payment details, in order to fulfill your order. We store this information in our systems until the statutory retention periods have expired.

Copyright
The copyright and all other rights to the content, images, photos, or other files on this website belong exclusively to the operator of this website or to the rights holders named herein. Prior written consent from the copyright holders must be obtained for the reproduction of any files.
Anyone who infringes copyright without the consent of the respective copyright holders may be subject to criminal prosecution and, under certain circumstances, liable for damages.

Disclaimer
All information on our website has been carefully reviewed. We make every effort to ensure that the information we provide is up-to-date, accurate, and complete. However, errors cannot be entirely ruled out, so we cannot guarantee the completeness, accuracy, or timeliness of the information, including journalistic and editorial content. Claims for damages—whether material or non-material—arising from the use or non-use of the information provided, or from the use of incorrect or incomplete information, are generally excluded.
The publisher may modify or delete text at its sole discretion and without prior notice, and is under no obligation to update the content of this website. Use of or access to this website is at the visitor’s own risk. The publisher, its customers, or partners are not responsible for any damages—such as direct, indirect, incidental, or consequential damages—allegedly caused by visiting this website and therefore assume no liability for such damages.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links from this website. The operators of the linked sites are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant under criminal or civil law or that violates public decency.

Instagram
Our website incorporates features from the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content on our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. For more information, please see Instagram’s Privacy Policy: http://instagram.com/about/legal/privacy/

External Payment Service Providers
This website uses third-party payment service providers whose platforms allow users and us to process payment transactions. For example, through
PostFinance (https://www.postfinance.ch/de/detail/rechtliches-barrierefreiheit.html)
Visa (https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html)
Mastercard (https://www.mastercard.ch/de-ch/datenschutz.html)
American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
Bexio AG (https://www.bexio.com/de-CH/datenschutz)
Payrexx AG (https://www.payrexx.ch/site/assets/files/2592/datenschutzerklaerung.pdf)
Apple Pay (https://support.apple.com/de-ch/ht203027)
Stripe (https://stripe.com/ch/privacy)
Klarna (https://www.klarna.com/de/datenschutz/)
Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/)
Giropay (https://www.giropay.de/rechtliches/datenschutzerklaerung), etc.
In connection with the performance of the contract, we engage payment service providers in accordance with the Swiss Data Protection Ordinance and, where necessary, Article 6(1)(b) of the EU GDPR. In addition, we use external payment service providers based on our legitimate interests under the Swiss Data Protection Ordinance and, where necessary, Article 6(1)(f) of the EU GDPR, in order to offer our users effective and secure payment options.
The data processed by the payment service providers includes, among other things, personal information such as name and address; banking information such as account numbers or credit card numbers; passwords, TANs, and checksums; as well as information related to contracts, transaction amounts, and recipients. This information is required to process the transactions. However, the data entered is processed and stored solely by the payment service providers. As the operator, we do not receive any information regarding (bank) accounts or credit cards, but only information confirming the acceptance or rejection of the payment. In some cases, the payment service providers may transmit this data to credit bureaus. The purpose of this transmission is to verify identity and creditworthiness. In this regard, we refer you to the terms and conditions and privacy policies of the payment service providers.
Payment transactions are governed by the terms and conditions and privacy policy of the respective payment service providers, which can be accessed on their respective websites or within the transaction applications. We also refer to these documents for the purpose of providing further information and enabling you to exercise your rights of withdrawal, access, and other data subject rights.

Audio and video conferences
We use audio and video conferencing services to communicate with our users and others. In particular, we can use them to conduct audio and video conferences, virtual meetings, and training sessions such as webinars.

We only use services that guarantee an adequate level of data protection. In addition to this Privacy Policy, the terms and conditions of the services we use—such as terms of use or privacy policies—also apply.

In particular, we use Zoom, a service provided by the U.S.-based company Zoom Video Communications Inc. Zoom also grants users in Switzerland the rights provided under the European General Data Protection Regulation (GDPR). For more information on the nature, scope, and purpose of data processing, please refer to Zoom’s Privacy Policy and the “Legal and Privacy” page on its website.

YouTube
This website incorporates features from the “YouTube” service. “YouTube” is owned by Google Ireland Limited, a company incorporated and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
Your legal agreement with “YouTube” consists of the terms and conditions found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms and conditions constitute a legally binding agreement between you and “YouTube” regarding your use of the services. Google’s Privacy Policy explains how “YouTube” handles and protects your personal information when you use the service.

Vimeo
This website incorporates plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page that features one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the United States. Information about your visit and your IP address is stored there. When you interact with the Vimeo plugins (e.g., by clicking the play button), this information is also transmitted to Vimeo and stored there. For more detailed information on how Vimeo collects and uses your data, please refer to Vimeo’s Privacy Policy.

If you have a Vimeo account and do not want Vimeo to collect data about you through this website and link it to your membership information stored on Vimeo, you must log out of Vimeo before visiting this website.

In addition, Vimeo calls the Google Analytics tracker via an iFrame in which the video is embedded. This is Vimeo’s own tracking system, to which we have no access. You can prevent tracking by Google Analytics by using the opt-out tools that Google provides for certain web browsers. You can also prevent Google Analytics from collecting data generated by Google Analytics and related to your use of the website (including your IP address), as well as prevent Google from processing this data, by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

Online Store / Web Store
We process our customers’ data in accordance with the data protection provisions of the Federal (Data Protection Act, DSG) and the EU GDPR as part of the ordering process in our online store, in order to enable them to select and order the products and services of their choice, as well as to facilitate payment, delivery, and fulfillment.
The data processed includes master data (inventory data), communication data, contract data, and payment data; the individuals affected by this processing include our customers, prospective customers, and other business partners. The processing is carried out for the purpose of providing contractual services in connection with the operation of an online store, billing, delivery, and customer service. In this context, we use session cookies—for example, to store the contents of the shopping cart—and persistent cookies—for example, to store the login status.
Data processing is based on Article 6(1)(b) (fulfillment of order processes) and (c) (legally required archiving) of the GDPR. The data marked as required is necessary for the establishment and fulfillment of the contract. We disclose the data to third parties only in connection with delivery, payment, or as permitted or required by law. The data is processed in third countries only if this is necessary for the performance of the contract (e.g., at the customer’s request for delivery or payment).
Users have the option to create a user account, which allows them, in particular, to view their orders. During the registration process, users are informed of the required information they must provide. User accounts are not public and cannot be indexed by search engines, such as Google. Once users have closed their user accounts, the data associated with those accounts will be deleted, unless retention is required for commercial or tax law reasons in accordance with Article 6(1)(c) of the GDPR. Information in the customer account is retained until it is deleted and subsequently archived in the event of a legal obligation. It is the users’ responsibility to save their data in the event of termination prior to the end of the contract.
As part of the registration and re-registration process, as well as the use of our online services, we store the IP address and the time of each user action. This data is stored based on our legitimate interests and those of the users in protecting against misuse and other unauthorized use. This data is generally not disclosed to third parties, unless such disclosure is necessary to pursue our legal claims or there is a legal obligation to do so pursuant to Article 6(1)(c) of the GDPR.
Data is deleted upon the expiration of statutory warranty obligations and similar obligations; the necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, the data is deleted upon their expiration.

WordPress
Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress enables us to create, manage, and publish content.
When you use our WordPress-based website, various types of data—including your IP address, the date and time of your visit, and information about the browser you are using—may be collected and stored. This data is primarily used for administrative purposes and to ensure the smooth operation of the website.
Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.

Data transfer to the USA
Our website uses tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not considered a safe third country under EU data protection law. US companies are obligated to disclose personal data to security authorities without you, as the data subject, having any legal recourse. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no control over these processing operations.

Changes
We may change this Privacy Policy at any time without prior notice. The most current version published on our website is the one that applies. If this Privacy Policy is part of an agreement with you, we will notify you of any changes via email or by other appropriate means in the event of an update.

Disclaimer
The author assumes no liability for the correctness, accuracy, timeliness, reliability, or completeness of the information.
Claims for damages against the author—whether material or immaterial—arising from access to, use of, or failure to use the published information, from misuse of the connection, or from technical malfunctions are excluded.

All offers are subject to change. The author expressly reserves the right to modify, supplement, or delete parts of the pages or the entire website, or to suspend publication temporarily or permanently, without prior notice.

Source: BrainBox Solutions