Version
- Slug: /datenschutz
- Version date: 08 December 2025, work in progress
Table of contents
- Brief overview
- Responsible body
- Data protection officer
- Purposes of processing & legal basis
- Categories of personal data
- Disclosure to third parties / processors
- Data retention / storage period
- Rights of data subjects
- Data transfers to third countries
- Technical and organisational measures (TOM)
- Cookie policy & settings
- Data protection centre (DSAR & consent)
- Contact & complaints
Brief overview
This privacy policy provides information about which personal data we process, for what purposes and what rights data subjects have. The policy applies to the website [domain.ch].
Responsible body
Responsible body within the meaning of the nDSG / GDPR:
[Company AG / GmbH / Sole proprietorship]
Address: [Street No., Postcode, Town, Switzerland]
Email: [datenschutz@beispiel.ch]
Data protection officer
Data protection officer: [First name Last name] (if required)
Contact: [datenschutz@beispiel.ch]
Processing purposes & legal bases
- Contract processing and customer communication — Legal basis: Contract / Art. 6 lit. b GDPR (or corresponding nDSG law)
- Newsletter dispatch — Legal basis: Consent (opt-in)
- Tracking & analysis (e.g. Google Analytics) — Legal basis: Consent or legitimate interest (if permissible)
- Security functions (e.g. login, fraud prevention) — Legal basis: legitimate interest
Categories of personal data
- Contact details (name, e-mail, telephone number)
- Contract data (orders, invoices)
- Usage data (log files, IP address, technical information)
- Marketing data (interests, newsletter status)
Disclosure to third parties / processors
We use service providers as processors (hosting, newsletters, payment processing). Contracts for order processing have been concluded. Recipients: [list, e.g. hosting partners, payment providers, analysis tools].
Data retention / storage period
Data is only stored for as long as necessary for the purposes or as required by law (e.g. accounting data under Swiss Code of Obligations). Specific periods: [e.g. invoices 10 years].
Rights of data subjects
Data subjects have the right to:
- Information
- Correction
- Deletion (if legally possible)
- Restriction of processing
- Objection to processing
- Data portability
Please direct enquiries to: [datenschutz@beispiel.ch]. Deadlines: We respond to enquiries in accordance with nDSG/GDPR within the statutory deadlines.
Data transfers to third countries
If data is processed outside Switzerland/the EU, we will provide information on the countries concerned and the appropriate protective measures (standard contractual clauses, adequacy decisions).
Technical and organisational measures (TOM)
We implement appropriate measures: TLS/HTTPS, access restrictions, role and rights management, regular backups, incident response processes.
Cookie policy & settings
Our website uses cookies in the following categories: necessary, statistics, marketing, personalisation. Non-essential cookies are only set after active consent.
- Cookie settings: Link/modal
/cookiesor consent dashboard. - Expiry/deletion: Information on the duration of individual cookies (e.g. session vs. persistent cookies).
- Revocation: Consent can be revoked at any time in the consent dashboard.
Data protection centre (DSAR & consent)
- Request for information (DSAR): Form
/datenschutz#datenschutz-center— Mandatory information: Name, e-mail, type of request. - Identity verification: If necessary, proof of identity will be requested.
- Consent management: Link to consent dashboard (
/cookies), option to revoke or edit consent.
Contact & complaints
Data protection contact: [datenschutz@beispiel.ch]
Supervisory authority (Switzerland): [Details of the competent authority / cantonal office]
For EU matters: Competent data protection supervisory authority in the respective Member State.