Privacy
1. Controller
The party responsible for the processing of personal data in connection with this website (hereinafter the «Website») is:
Buds & Bits GmbH
Sonnackerweg 25
3510 Konolfingen
Switzerland
CHE-226.107.853
[email protected]
+41 32 508 24 23
If you have any questions regarding data protection, you can contact the above address at any time.
2. Scope and Legal Basis
This privacy policy explains which personal data we process in operating the Website, for what purposes and to what extent. The processing is governed by the Swiss Federal Act on Data Protection (FADP) and its associated ordinance (DPO). Where foreign data protection law additionally applies in an individual case, we observe that law as well.
«Personal data» means any information relating to an identified or identifiable natural person. Data that has been anonymized in such a way that no conclusions can be drawn about a person is not considered personal data.
3. Which Data We Process
When you visit the Website, the following data in particular is processed:
- Server log data: Each time the Website is accessed, data is automatically recorded for technical reasons and stored in server log files (e.g. IP address, date and time of access, page accessed, volume of data transferred, browser and operating system used, referrer URL). This data is used for the technical delivery, security and stability of the Website.
- Data from your inputs: Data that you actively provide to us, for example via contact forms, email or other input fields.
- Usage and tracking data: Data on the use of the Website as well as for measuring reach and conversions (see Section 5).
4. Purposes of Processing
We process personal data in particular to
- provide, securely and stably operate and technically optimize the Website,
- respond to enquiries and communicate with you,
- analyze the use of the Website and measure the effectiveness of our advertising activities (conversion measurement),
- comply with legal obligations and protect our rights.
Insofar as processing requires a justification, we rely on your (express or implied) consent, on the performance of a contract or pre-contractual measures, or on our overriding legitimate interest within the meaning of Art. 31 FADP.
5. Tracking and Conversion Measurement
In order to assess the effectiveness of our advertising and to improve our offerings, we record usage behaviour on the Website and carry out conversion measurement. In doing so, we pass on so-called click IDs to the respective advertising platforms.
Click IDs are technical identifiers that advertising platforms append to advertising links. They allow the respective platform to attribute a click on an advertisement to an action triggered on the Website (e.g. a purchase or a sign-up), without the individual person being identifiable to us.
Justification: We base this processing on our overriding legitimate interest (Art. 31 FADP) in measuring the reach and success of our advertising activities as well as in the efficient design of our online marketing.
Pseudonymization: In this context, personal data is forwarded and stored only in pseudonymized form. Pseudonymized means that the data cannot be attributed to a specific person without the use of additional information – for example by converting directly identifying details (e.g. the email address) into a hash value prior to transmission. No directly identifying plain-text data is forwarded or stored. However, re-identification by the advertising platforms cannot be entirely ruled out in every case; pseudonymized data is therefore still considered personal data.
Opt-out: If you object to tracking (opt-out), no data is forwarded to advertising platforms and no corresponding data is stored as part of the conversion measurement.
6. Cookies and Similar Technologies
The Website may use cookies and comparable technologies (e.g. local storage, pixels). Cookies are small text files stored on your device. Necessary cookies are required for the operation of the Website. We use cookies for analytics and marketing purposes only under the conditions described in Section 5 and in accordance with your settings.
7. Disclosure of Personal Data to Third Parties
We disclose personal data to third parties insofar as this is necessary to provide our services, to carry out the purposes described, or due to legal requirements. Recipients may include in particular:
- IT and hosting service providers that process data on our behalf,
- advertising platforms in the context of conversion measurement (see Section 5, exclusively pseudonymized),
- authorities and courts, insofar as we are legally obliged or entitled to do so.
Processors are contractually obliged to process data only in accordance with our instructions and in compliance with data protection law.
8. Disclosure Abroad
In the context of the aforementioned processing – in particular when using advertising platforms and IT service providers – personal data may be transferred abroad, possibly also to countries without a level of data protection recognized as adequate by the Federal Council. In such cases, we ensure an adequate level of protection through appropriate safeguards, in particular standard contractual clauses or other measures permitted under Art. 16 et seq. FADP. A transfer may also take place where one of the statutory exceptions applies (e.g. your consent).
9. Retention and Deletion
We retain personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations. Server log data is deleted or anonymized after e.g. 6 months. After that, the data is deleted or anonymized.
10. Data Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. However, complete security of data transmission over the internet cannot be guaranteed.
11. Your Rights
Within the scope of applicable data protection law, you have in particular the following rights:
- Access to information on whether and which personal data we process about you (Art. 25 FADP),
- Rectification of inaccurate data,
- Deletion or destruction of data, insofar as no retention obligation precludes this,
- Objection to certain processing as well as withdrawal of any consent given (e.g. via opt-out, see Section 5),
- Release or transfer of data under the statutory conditions.
To exercise your rights, you can contact the party named in Section 1. For the purpose of verifying your identity, we may request proof of identity. You also have the right to lodge a complaint with the competent supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.
12. Changes to This Privacy Policy
We may amend this privacy policy at any time in order to adapt it to changed legal or technical circumstances. The current version published on the Website applies in each case.